This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: R2mcWQYLVUuHWqmhPiQr2gJOkuZWyg6bhWMf2Kl2TwI= Subject key identifier: BB:7A:D5:B4:91:B4:F6:BC:DC:9C:98:EA:85:25:3A:2E:42:CC:BC:C3 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 223ED1DB3DC7ED428599A9032C4E819397A0EA71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: 0123 Signing time: Thu 18 Dec 2025 04:40:03 +0000 Manifest this update: Thu 18 Dec 2025 04:35:03 +0000 Manifest next update: Sun 21 Dec 2025 07:15:03 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) 2: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: 6CQL3Ubqcc4XUx6hgkAk9jKlW0OklG4nrXEA+8uDoAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:15:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3e:d1:db:3d:c7:ed:42:85:99:a9:03:2c:4e:81:93:97:a0:ea:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Dec 18 04:35:03 2025 GMT Not After : Dec 21 07:15:03 2025 GMT Subject: CN=BB7AD5B491B4F6BCDC9C98EA85253A2E42CCBCC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:b3:04:04:3f:ee:85:64:ff:05:ba:7e:ce: e1:eb:d0:a2:60:92:a0:90:63:ba:30:32:09:85:42: 40:7c:c9:18:75:9f:41:5e:21:02:b8:48:13:dc:11: 11:3f:58:58:ea:b0:c2:26:55:3f:ac:d8:fe:a6:6e: c3:51:49:da:42:6e:be:e2:fd:b5:f4:69:70:83:52: 13:29:ab:aa:c4:1e:3f:5e:37:ce:68:96:2d:09:9d: f7:37:a2:01:ca:7b:1a:aa:7d:a1:13:27:71:06:07: 0e:a5:a6:1b:f0:92:46:43:62:00:90:d7:7a:26:04: b2:b7:c0:04:7e:bf:e4:f9:16:ec:68:fb:fa:4e:7c: b0:42:ca:4c:8d:ff:87:cf:99:47:b7:00:1b:66:56: cb:bf:2c:5f:42:18:b4:83:13:69:33:a4:1e:19:ed: 0a:3f:db:a2:98:cb:15:85:bb:65:95:39:a2:c5:76: 06:62:9d:2e:05:e4:2f:41:fa:62:96:8b:b2:71:94: ac:ce:6e:3a:64:98:0b:7f:81:f4:8d:13:5f:4f:8b: fe:61:ce:73:d2:9d:0a:16:03:d3:df:a1:14:d1:47: ef:d3:de:05:3a:e4:d3:5c:f9:d4:a8:c1:d2:69:41: 4a:e7:d5:4a:ff:a4:12:a4:63:9c:24:98:1f:c9:80: 71:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7A:D5:B4:91:B4:F6:BC:DC:9C:98:EA:85:25:3A:2E:42:CC:BC:C3 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:91:c5:29:19:06:3f:a5:d9:eb:40:4e:30:fa:2d:ae:5e:59: cf:98:11:17:29:0c:5e:72:c4:ed:39:86:23:a4:e1:83:2a:20: 42:d5:0b:bc:31:d7:b3:90:b2:d5:69:6b:d8:7e:83:41:6d:dc: 75:51:db:d9:c9:8e:71:80:cd:a8:15:35:8a:5f:09:8b:ee:cc: bd:17:e8:d4:be:04:a8:3d:0f:8f:7e:25:51:91:ad:38:a7:ff: 27:d2:36:82:ac:f4:12:e0:a2:75:e0:de:4d:1b:be:66:e3:fb: 03:02:aa:a1:76:44:4c:47:b4:44:72:ed:b8:a6:51:59:bd:74: 2c:2d:d9:d9:5b:47:14:4f:fe:f9:7f:be:2d:7c:09:92:b0:c0: 76:78:a7:ad:4d:04:48:be:c2:04:ea:e6:53:0c:62:f5:9d:00: 1c:7b:eb:78:63:8d:9f:6a:46:a2:95:d6:ba:d2:70:82:7b:61: ac:f1:c2:14:c6:27:c8:d0:73:59:50:cb:ec:d1:9b:9c:2e:38: b6:2e:ec:a8:6d:7a:20:d7:6f:97:81:81:b4:28:2c:58:f6:bb: d7:a2:dd:fe:cc:ef:f9:aa:3a:a1:8f:2a:ec:f5:2d:c8:6d:83: 51:68:6c:5d:4c:3d:46:17:0e:bc:b8:57:d2:f1:5a:a6:c8:be: 59:50:36:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIj7R2z3H7UKFmakDLE6Bk5eg6nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTEyMTgwNDM1MDNaFw0yNTEyMjEwNzE1MDNaMDMxMTAvBgNV BAMTKEJCN0FENUI0OTFCNEY2QkNEQzlDOThFQTg1MjUzQTJFNDJDQ0JDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj0rMEBD/uhWT/Bbp+zuHr0KJg kqCQY7owMgmFQkB8yRh1n0FeIQK4SBPcERE/WFjqsMImVT+s2P6mbsNRSdpCbr7i /bX0aXCDUhMpq6rEHj9eN85oli0Jnfc3ogHKexqqfaETJ3EGBw6lphvwkkZDYgCQ 13omBLK3wAR+v+T5Fuxo+/pOfLBCykyN/4fPmUe3ABtmVsu/LF9CGLSDE2kzpB4Z 7Qo/26KYyxWFu2WVOaLFdgZinS4F5C9B+mKWi7JxlKzObjpkmAt/gfSNE19Pi/5h znPSnQoWA9PfoRTRR+/T3gU65NNc+dSowdJpQUrn1Ur/pBKkY5wkmB/JgHG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu3rVtJG09rzcnJjqhSU6LkLMvMMwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABuRxSkZBj+l2etATjD6La5eWc+YERcpDF5y xO05hiOk4YMqIELVC7wx17OQstVpa9h+g0Ft3HVR29nJjnGAzagVNYpfCYvuzL0X 6NS+BKg9D49+JVGRrTin/yfSNoKs9BLgonXg3k0bvmbj+wMCqqF2RExHtERy7bim UVm9dCwt2dlbRxRP/vl/vi18CZKwwHZ4p61NBEi+wgTq5lMMYvWdABx763hjjZ9q RqKV1rrScIJ7YazxwhTGJ8jQc1lQy+zRm5wuOLYu7KhteiDXb5eBgbQoLFj2u9ei 3f7M7/mqOqGPKuz1Lchtg1FobF1MPUYXDry4V9LxWqbIvllQNh8= -----END CERTIFICATE-----Generated at Fri Dec 19 10:00:17 2025 by rpki-client