This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: BMmCfEcy+xCW1yeCOoBycZ7+B04Bwb+StwSlWfvT6dY= Subject key identifier: 89:78:A7:1F:4B:DD:39:D4:E7:FF:66:6F:9C:06:5B:82:39:72:59:39 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 585FED7520A9A79960A71D686447888B23D86D41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01B7 Signing time: Fri 19 Dec 2025 00:42:16 +0000 Manifest this update: Fri 19 Dec 2025 00:37:16 +0000 Manifest next update: Mon 22 Dec 2025 06:51:16 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: cmtVeeh2bO6TK35bubEab9cttXh/Uhg5+rX5dMcJhJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:ed:75:20:a9:a7:99:60:a7:1d:68:64:47:88:8b:23:d8:6d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Dec 19 00:37:16 2025 GMT Not After : Dec 22 06:51:16 2025 GMT Subject: CN=8978A71F4BDD39D4E7FF666F9C065B8239725939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:79:a2:f7:47:9d:0c:b9:49:1a:bd:ae:2a: 11:ee:e6:06:b2:ab:49:c8:e2:37:e7:6c:e5:6c:d3: 00:07:01:be:43:c9:85:e2:71:a1:26:4b:1a:39:49: ec:4e:31:5f:c2:4c:c4:74:1f:94:df:17:15:06:a7: e1:f6:86:8f:ce:20:72:40:95:de:5c:fc:39:cb:df: 6d:18:ac:2f:c8:91:f8:68:37:b5:f8:c8:9f:46:20: 88:15:2d:a7:18:06:fc:8d:52:18:12:e8:e9:72:fa: 39:ce:89:88:ab:cc:e6:cf:e4:a6:83:8b:ae:c2:bc: 27:e3:a9:b0:11:95:62:bf:cf:6f:6e:ac:e9:62:a7: ea:4a:9a:a8:48:a3:ca:3d:92:28:b1:2b:ce:5d:1c: 27:59:ac:b0:9e:93:ed:d2:33:71:99:34:be:34:60: dc:ca:5d:81:58:6d:e1:91:42:f3:8f:d8:f1:5e:d5: 83:17:02:85:e0:ad:47:f7:98:97:f3:b2:ff:84:63: 02:0f:65:a9:fa:cf:70:be:85:13:61:f1:72:1e:e2: 97:7b:ec:c5:c7:1c:ed:3e:26:9b:7f:0a:16:3c:85: 8a:05:41:53:46:09:68:4d:e4:ae:fc:78:7c:c3:49: 83:3c:13:5e:dd:69:a9:de:e2:82:04:46:47:9f:cb: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:A7:1F:4B:DD:39:D4:E7:FF:66:6F:9C:06:5B:82:39:72:59:39 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ea:8d:46:bc:70:36:f4:6d:3e:3e:53:71:b8:e8:30:9b:f7: c3:8a:cd:44:7a:91:d2:e5:23:ee:ff:b5:80:3c:fc:c9:06:0e: e8:85:57:ff:28:a7:30:6f:06:89:ef:e3:ae:5e:20:64:07:5b: 3c:74:e6:39:08:d9:2e:bd:40:24:b1:ed:be:f7:aa:7b:fa:1d: 6e:6c:38:90:23:7f:a6:35:bb:e5:ec:3b:df:55:5e:3a:30:ba: 1b:f7:7e:4f:8c:a7:e4:cb:d9:34:74:05:6b:de:22:85:e3:d5: 54:b0:bd:e2:e3:0c:29:5e:1b:3d:68:2a:fa:88:62:87:6f:cf: a6:af:35:00:82:04:7a:40:4b:d6:a7:67:9f:a9:bb:87:57:f7: c8:0d:95:fd:53:25:7b:9b:7f:f2:3f:17:6a:ad:29:a9:2e:a3: 6f:c4:73:03:64:21:3e:0d:c6:4b:37:cd:ba:f7:37:0b:5e:8b: b6:80:87:45:d2:e9:6a:05:a3:ad:41:62:3e:f8:b0:21:b4:12: b5:73:a6:8e:6e:0a:ca:c9:7d:fd:4b:42:88:f7:4f:c9:dd:52: e1:0a:2c:48:56:ed:38:16:7b:f5:46:2f:c7:31:4c:02:b1:14: c0:10:37:b2:03:9c:51:57:53:ac:bf:42:1d:02:95:e2:51:9d: 53:b0:14:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWF/tdSCpp5lgpx1oZEeIiyPYbUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTEyMTkwMDM3MTZaFw0yNTEyMjIwNjUxMTZaMDMxMTAvBgNV BAMTKDg5NzhBNzFGNEJERDM5RDRFN0ZGNjY2RjlDMDY1QjgyMzk3MjU5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatXmi90edDLlJGr2uKhHu5gay q0nI4jfnbOVs0wAHAb5DyYXicaEmSxo5SexOMV/CTMR0H5TfFxUGp+H2ho/OIHJA ld5c/DnL320YrC/IkfhoN7X4yJ9GIIgVLacYBvyNUhgS6Oly+jnOiYirzObP5KaD i67CvCfjqbARlWK/z29urOlip+pKmqhIo8o9kiixK85dHCdZrLCek+3SM3GZNL40 YNzKXYFYbeGRQvOP2PFe1YMXAoXgrUf3mJfzsv+EYwIPZan6z3C+hRNh8XIe4pd7 7MXHHO0+Jpt/ChY8hYoFQVNGCWhN5K78eHzDSYM8E17daane4oIERkefy57BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiXinH0vdOdTn/2ZvnAZbgjlyWTkwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/qjUa8cDb0bT4+U3G46DCb98OKzUR6kdLl I+7/tYA8/MkGDuiFV/8opzBvBonv465eIGQHWzx05jkI2S69QCSx7b73qnv6HW5s OJAjf6Y1u+XsO99VXjowuhv3fk+Mp+TL2TR0BWveIoXj1VSwveLjDCleGz1oKvqI Yodvz6avNQCCBHpAS9anZ5+pu4dX98gNlf1TJXubf/I/F2qtKakuo2/EcwNkIT4N xks3zbr3Nwtei7aAh0XS6WoFo61BYj74sCG0ErVzpo5uCsrJff1LQoj3T8ndUuEK LEhW7TgWe/VGL8cxTAKxFMAQN7IDnFFXU6y/Qh0CleJRnVOwFM4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:35 2025 by rpki-client