This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: wpgUc8kciXdfZ+mKby2pQadnW8NUh7oVZx7FBK+WpIk= Subject key identifier: 90:21:CC:6F:6D:2D:65:E0:EC:8C:06:1F:07:9A:C0:48:56:AE:E2:19 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 45580CB292E24951158DB4082B54309FB4EEE893 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 052A Signing time: Sat 06 Dec 2025 07:21:00 +0000 Manifest this update: Sat 06 Dec 2025 07:16:00 +0000 Manifest next update: Tue 09 Dec 2025 11:18:00 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) 3: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: hNJnX7gXTo6hjdjpyLExKG8Uq6ZpD1709bjQqOSm1cA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 11:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:58:0c:b2:92:e2:49:51:15:8d:b4:08:2b:54:30:9f:b4:ee:e8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Dec 6 07:16:00 2025 GMT Not After : Dec 9 11:18:00 2025 GMT Subject: CN=9021CC6F6D2D65E0EC8C061F079AC04856AEE219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:20:71:bc:38:3c:11:c0:5c:22:69:58:d7: 7a:8e:8b:82:af:8c:84:7f:5b:9d:98:3a:6c:23:f1: 67:73:c3:b2:65:86:1e:76:b1:57:41:42:10:9b:f5: 21:81:c6:03:ff:a2:53:27:49:dc:b8:00:ad:40:a0: a6:6c:0f:b1:ad:5d:84:0b:25:43:96:ac:4c:ab:84: 2d:b0:b0:f1:05:b3:f3:bb:b6:a1:ba:01:6b:2e:d4: b1:ad:db:27:01:0d:1e:2a:e2:ad:5a:c9:88:f4:c6: 0f:ec:ab:17:e6:20:cc:1f:b6:67:22:9d:37:c6:33: 6e:6a:b3:fe:0a:92:52:69:d8:cf:32:da:5b:2b:7a: fb:3d:1a:03:43:16:75:7b:2d:45:01:68:7d:41:b2: f7:63:32:89:81:14:a7:21:fe:a0:a7:ad:c4:59:43: 7a:cc:31:42:06:e6:cd:61:d9:d3:58:ee:d2:54:94: 73:4a:53:39:a0:ef:da:e1:7b:c5:40:35:12:1a:30: 76:dc:6d:d4:ed:c8:ef:97:05:da:43:26:00:6b:a2: a7:70:58:b5:7c:36:d7:0b:96:f8:7b:61:e6:f2:9d: 32:dc:72:1f:33:42:21:b1:d2:f3:50:d7:bb:d3:b7: 57:22:6a:b1:de:4c:a8:39:82:6b:6a:9b:ce:c0:0e: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:21:CC:6F:6D:2D:65:E0:EC:8C:06:1F:07:9A:C0:48:56:AE:E2:19 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:01:46:60:50:54:a1:5d:1e:5b:a3:51:6a:be:e3:0e:27:87: ea:59:69:eb:e0:3a:c1:05:7b:65:fb:15:6d:96:35:e1:5b:0e: 3e:0f:cd:ef:d9:e1:62:c6:ee:6a:f7:bf:ff:cf:c2:99:48:62: fb:31:eb:a8:34:93:88:04:8a:ed:8b:2a:2f:6b:26:e4:67:45: 60:0a:86:a9:ea:6b:15:f2:30:e0:90:aa:ac:d3:b2:2e:c1:f2: 80:7a:a2:87:5f:b4:f0:a0:8f:8a:b8:62:4b:24:7d:b7:61:f5: af:a9:eb:b2:59:ed:b5:a1:27:c5:d7:90:91:21:cf:84:1b:a6: 31:0e:ce:1a:4a:2c:07:9e:33:a8:a8:f1:52:4d:5e:00:6e:59: af:83:1b:6d:9b:a9:95:26:9a:62:a4:63:1e:2e:64:05:eb:22: 50:a0:de:c8:30:85:d6:ca:5c:e2:e8:14:61:23:0a:b2:b1:a6: 6c:ce:41:e5:1e:a7:a6:63:db:6e:e7:2c:12:22:c1:1d:32:34: 9c:39:7d:bc:f2:ff:2f:de:30:ef:65:e7:20:df:9e:7a:92:cc: 08:b8:8a:34:00:23:8d:bf:d2:ee:41:cb:c8:f1:5b:c7:65:ed: 9d:26:af:e7:66:e3:3a:0e:be:40:08:f3:4d:98:20:77:65:fd: 80:bf:94:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVgMspLiSVEVjbQIK1Qwn7Tu6JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTEyMDYwNzE2MDBaFw0yNTEyMDkxMTE4MDBaMDMxMTAvBgNV BAMTKDkwMjFDQzZGNkQyRDY1RTBFQzhDMDYxRjA3OUFDMDQ4NTZBRUUyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFICBxvDg8EcBcImlY13qOi4Kv jIR/W52YOmwj8Wdzw7Jlhh52sVdBQhCb9SGBxgP/olMnSdy4AK1AoKZsD7GtXYQL JUOWrEyrhC2wsPEFs/O7tqG6AWsu1LGt2ycBDR4q4q1ayYj0xg/sqxfmIMwftmci nTfGM25qs/4KklJp2M8y2lsrevs9GgNDFnV7LUUBaH1BsvdjMomBFKch/qCnrcRZ Q3rMMUIG5s1h2dNY7tJUlHNKUzmg79rhe8VANRIaMHbcbdTtyO+XBdpDJgBroqdw WLV8NtcLlvh7YebynTLcch8zQiGx0vNQ17vTt1ciarHeTKg5gmtqm87ADsRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkCHMb20tZeDsjAYfB5rASFau4hkwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIBRmBQVKFdHlujUWq+4w4nh+pZaevgOsEF e2X7FW2WNeFbDj4Pze/Z4WLG7mr3v//PwplIYvsx66g0k4gEiu2LKi9rJuRnRWAK hqnqaxXyMOCQqqzTsi7B8oB6oodftPCgj4q4Ykskfbdh9a+p67JZ7bWhJ8XXkJEh z4QbpjEOzhpKLAeeM6io8VJNXgBuWa+DG22bqZUmmmKkYx4uZAXrIlCg3sgwhdbK XOLoFGEjCrKxpmzOQeUep6Zj227nLBIiwR0yNJw5fbzy/y/eMO9l5yDfnnqSzAi4 ijQAI42/0u5By8jxW8dl7Z0mr+dm4zoOvkAI802YIHdl/YC/lNU= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:31 2025 by rpki-client