This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: sv5TpEt09cIK3QTAbFMi0oPzzHWpGsp8ZmH1pHx/o7E= Subject key identifier: 79:B4:BD:9F:91:78:B9:54:19:58:B2:F3:74:77:DD:A4:8B:A3:A6:DD Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 701A1BA489D37578BC5D302E96ACD37AC49807EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 052E Signing time: Mon 15 Dec 2025 00:51:00 +0000 Manifest this update: Mon 15 Dec 2025 00:46:00 +0000 Manifest next update: Thu 18 Dec 2025 12:26:00 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: fkLWJuIVBh9i2lavHjkaJAnbACgP05etKEZh3GCIvFo=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) 3: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 12:26:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:1b:a4:89:d3:75:78:bc:5d:30:2e:96:ac:d3:7a:c4:98:07:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Dec 15 00:46:00 2025 GMT Not After : Dec 18 12:26:00 2025 GMT Subject: CN=79B4BD9F9178B9541958B2F37477DDA48BA3A6DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:53:5d:63:91:29:4d:1d:53:ea:8f:51:ad: e8:4d:c8:c8:d9:da:c6:be:b4:a7:e2:40:9c:6b:99: c8:26:bf:93:19:58:b8:0e:83:e6:15:d5:30:40:c7: fd:ef:27:5f:3f:ec:8f:64:81:0d:3d:65:71:d0:fc: 65:c4:0d:95:c2:6a:ff:3a:06:5a:b8:38:ae:ad:db: 48:cb:01:e1:dc:d8:bb:a3:8d:3b:92:80:e0:ae:f6: 7a:32:ef:cb:67:32:2b:1d:fd:11:f1:2f:ff:3b:5a: 9f:86:f9:18:67:55:24:1c:9d:2d:4b:d4:a0:c3:3f: 2b:63:0f:3f:e4:4b:1b:bb:5f:be:03:99:54:fa:61: f1:d6:65:98:c3:31:14:9d:ab:4a:1b:19:34:1b:6b: 7c:33:cb:e5:ce:c7:07:f4:fc:20:b0:33:56:fa:45: 02:68:4a:f5:09:e2:4d:38:c4:87:f5:64:3c:dd:6b: 8d:7f:6e:d9:1f:df:f1:fe:3b:59:12:84:36:30:fd: 28:15:73:36:4e:e4:69:33:49:00:50:43:2a:7b:cd: 55:4a:fb:b0:8e:fd:24:c2:b6:45:6b:ae:07:0c:1b: b5:43:d0:6a:f5:81:ca:fb:30:6e:cf:e6:f7:17:78: f7:78:8d:4b:c3:12:f8:10:7b:6f:8f:64:e6:69:4f: 40:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B4:BD:9F:91:78:B9:54:19:58:B2:F3:74:77:DD:A4:8B:A3:A6:DD X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:84:e8:2d:53:f4:6d:f8:84:92:12:0c:a2:0d:66:dc:9f:2c: 51:b5:14:ae:97:25:f1:13:b8:2b:a0:48:ff:d9:c6:cb:fe:ec: 9e:ad:4d:2e:cd:1a:6c:99:19:a2:c2:b5:fb:52:7e:bb:76:1d: e8:27:b1:11:e2:67:82:87:f0:12:a7:43:80:2d:1b:63:c7:07: 59:72:4f:41:3a:f6:15:8e:b4:c1:96:9c:c5:93:28:f6:99:c5: e8:22:c1:54:89:6e:81:3e:58:ee:b8:ca:05:6e:d8:50:d6:bc: 51:68:57:e1:04:0c:ea:1a:95:b1:75:0c:dc:4e:0d:71:0b:6a: a1:08:10:8d:52:c4:fe:f2:ff:ae:11:58:5c:b4:87:04:cb:57: ea:54:3b:b9:e0:36:cf:f0:d1:ff:31:7d:bd:58:f1:d4:7d:7d: a5:f5:7c:1b:e4:46:3c:c6:c4:19:0a:37:ce:16:7c:ee:04:59: 09:6f:61:85:22:ca:b1:43:f8:d0:b2:bb:93:cc:2f:b3:a8:71: 1c:8a:0d:38:5e:f8:f8:47:c2:38:64:45:df:a4:88:44:a8:9a: 34:e6:02:82:8e:98:70:d2:34:6f:de:67:5f:2b:af:ad:c3:dd: e7:4f:3f:cc:c4:0d:a1:fa:bb:75:0f:c5:f7:2f:ab:e0:b8:dd: f6:e3:e2:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBobpInTdXi8XTAulqzTesSYB+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTEyMTUwMDQ2MDBaFw0yNTEyMTgxMjI2MDBaMDMxMTAvBgNV BAMTKDc5QjRCRDlGOTE3OEI5NTQxOTU4QjJGMzc0NzdEREE0OEJBM0E2REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr1NdY5EpTR1T6o9RrehNyMjZ 2sa+tKfiQJxrmcgmv5MZWLgOg+YV1TBAx/3vJ18/7I9kgQ09ZXHQ/GXEDZXCav86 Blq4OK6t20jLAeHc2LujjTuSgOCu9noy78tnMisd/RHxL/87Wp+G+RhnVSQcnS1L 1KDDPytjDz/kSxu7X74DmVT6YfHWZZjDMRSdq0obGTQba3wzy+XOxwf0/CCwM1b6 RQJoSvUJ4k04xIf1ZDzda41/btkf3/H+O1kShDYw/SgVczZO5GkzSQBQQyp7zVVK +7CO/STCtkVrrgcMG7VD0Gr1gcr7MG7P5vcXePd4jUvDEvgQe2+PZOZpT0BbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebS9n5F4uVQZWLLzdHfdpIujpt0wHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWE6C1T9G34hJISDKINZtyfLFG1FK6XJfET uCugSP/Zxsv+7J6tTS7NGmyZGaLCtftSfrt2HegnsRHiZ4KH8BKnQ4AtG2PHB1ly T0E69hWOtMGWnMWTKPaZxegiwVSJboE+WO64ygVu2FDWvFFoV+EEDOoalbF1DNxO DXELaqEIEI1SxP7y/64RWFy0hwTLV+pUO7ngNs/w0f8xfb1Y8dR9faX1fBvkRjzG xBkKN84WfO4EWQlvYYUiyrFD+NCyu5PML7OocRyKDThe+PhHwjhkRd+kiESomjTm AoKOmHDSNG/eZ18rr63D3edPP8zEDaH6u3UPxfcvq+C43fbj4pY= -----END CERTIFICATE-----Generated at Mon Dec 15 15:35:38 2025 by rpki-client