This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: jNEpQ5vuvXvCqzaLknHXbiFcPjWunE0O+nBN1V1Ixn0= Subject key identifier: 4F:81:FA:0C:74:D9:76:D6:5C:E9:B2:D5:D6:E3:B0:32:3F:97:07:40 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 059715196812263502E164C63D78F6412C7AD527 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 9F Signing time: Wed 24 Dec 2025 05:51:54 +0000 Manifest this update: Wed 24 Dec 2025 05:46:54 +0000 Manifest next update: Sat 27 Dec 2025 17:00:54 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: GqPoKCikWixpTyaRkrl7PIpso4FRMb2kN+4gyGItvwo=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 9p0fRZPTZcBitKDv/Ff3qr0g0F27xt5vAwhxIzmdswY=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: 8DLoJvYvm5uyWWMgVS1eP5gI75nzwboOZpWIOC9n3H0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:97:15:19:68:12:26:35:02:e1:64:c6:3d:78:f6:41:2c:7a:d5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Dec 24 05:46:54 2025 GMT Not After : Dec 27 17:00:54 2025 GMT Subject: CN=4F81FA0C74D976D65CE9B2D5D6E3B0323F970740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7b:73:d3:b0:30:6d:8d:f1:f8:9a:d2:35:ad: 64:96:10:00:f2:3a:34:ad:6f:3d:c9:d3:a5:7a:b6: 0f:55:6e:67:21:eb:69:34:20:8b:93:2c:4a:73:c6: 65:cc:38:ff:e5:04:d5:be:c0:f5:51:e3:cb:d3:af: ab:1c:14:c0:b6:2b:93:a7:82:03:fb:e3:b9:11:5c: 5b:ed:6b:2c:39:fe:e7:aa:d2:b4:d2:69:93:16:10: 41:93:f0:6a:1e:a4:d3:66:1f:ac:fa:20:d5:d6:a2: a9:f9:a3:b7:12:ef:df:ee:c6:b1:75:6a:cc:39:a1: 24:40:a7:86:fb:1b:51:fb:70:96:5b:a7:cf:64:80: 31:3f:64:74:c1:80:fd:fa:5c:6a:3b:c8:81:75:a6: 3b:0c:44:20:f3:3b:91:0e:f0:20:5a:c6:63:e9:5f: 5c:14:37:be:e7:5d:66:8e:29:60:70:2e:da:97:a3: 8e:71:4e:68:67:c9:b0:9e:f9:1d:c4:98:46:19:11: ad:29:4d:9f:0a:79:82:fb:c5:56:b5:84:79:1e:47: 85:76:76:f4:e7:dd:c2:06:a6:af:06:2f:3f:a8:15: 7a:c4:be:0a:c4:f1:22:9f:35:00:7d:b6:8f:5b:96: 3f:06:d7:89:04:dc:08:33:59:28:29:c3:d0:5f:87: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:FA:0C:74:D9:76:D6:5C:E9:B2:D5:D6:E3:B0:32:3F:97:07:40 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:37:1a:f5:77:3a:f1:02:11:80:44:ce:a6:09:1b:5c:71:3e: 33:0e:11:9b:15:fb:e0:ed:1e:94:44:db:10:88:09:32:b7:d3: d0:fe:6f:36:2a:c2:db:0f:b4:04:5f:22:70:c1:1c:97:da:39: 7f:ec:5c:23:5c:97:9e:c8:2f:c9:f2:1b:36:e2:7e:01:8f:7e: 40:7c:76:27:ba:d8:68:12:3c:3e:d9:9f:dd:ab:91:59:5f:82: 3b:c1:55:58:e1:b4:0a:cb:e8:ed:17:77:6a:f2:34:13:fe:61: 30:36:4a:b3:cc:70:5e:a7:56:25:ae:fa:59:b1:f8:6a:0d:64: a5:0d:72:f7:59:01:c7:c9:83:3e:da:4f:64:51:15:c6:b0:39: 13:a9:bc:7c:24:b8:b6:35:bd:69:3b:94:f3:97:13:8d:18:14: 5b:6e:fd:52:e9:38:ed:0a:1f:d8:82:31:f4:8b:10:3f:c2:ac: 2b:21:45:3f:77:43:b8:04:d3:81:cf:90:32:e7:58:40:d7:91: ef:76:90:56:a2:2e:09:ff:3f:9a:0c:cf:6e:2e:10:d4:53:8d: bc:37:26:20:5d:0c:c7:b9:c8:d0:96:32:d3:90:89:b2:21:ce: 77:98:b4:41:50:31:6d:27:31:5c:f4:9d:01:36:d9:05:15:83: c7:f0:97:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZcVGWgSJjUC4WTGPXj2QSx61ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTEyMjQwNTQ2NTRaFw0yNTEyMjcxNzAwNTRaMDMxMTAvBgNV BAMTKDRGODFGQTBDNzREOTc2RDY1Q0U5QjJENUQ2RTNCMDMyM0Y5NzA3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDje3PTsDBtjfH4mtI1rWSWEADy OjStbz3J06V6tg9Vbmch62k0IIuTLEpzxmXMOP/lBNW+wPVR48vTr6scFMC2K5On ggP747kRXFvtayw5/ueq0rTSaZMWEEGT8GoepNNmH6z6INXWoqn5o7cS79/uxrF1 asw5oSRAp4b7G1H7cJZbp89kgDE/ZHTBgP36XGo7yIF1pjsMRCDzO5EO8CBaxmPp X1wUN77nXWaOKWBwLtqXo45xTmhnybCe+R3EmEYZEa0pTZ8KeYL7xVa1hHkeR4V2 dvTn3cIGpq8GLz+oFXrEvgrE8SKfNQB9to9blj8G14kE3AgzWSgpw9Bfh6CdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4H6DHTZdtZc6bLV1uOwMj+XB0AwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw3GvV3OvECEYBEzqYJG1xxPjMOEZsV++Dt HpRE2xCICTK309D+bzYqwtsPtARfInDBHJfaOX/sXCNcl57IL8nyGzbifgGPfkB8 die62GgSPD7Zn92rkVlfgjvBVVjhtArL6O0Xd2ryNBP+YTA2SrPMcF6nViWu+lmx +GoNZKUNcvdZAcfJgz7aT2RRFcawOROpvHwkuLY1vWk7lPOXE40YFFtu/VLpOO0K H9iCMfSLED/CrCshRT93Q7gE04HPkDLnWEDXke92kFaiLgn/P5oMz24uENRTjbw3 JiBdDMe5yNCWMtOQibIhzneYtEFQMW0nMVz0nQE22QUVg8fwl7M= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:22 2025 by rpki-client