This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: esrhZyoC7grK2ijW5L5RHAFj6LKZxUC+acoIdOeD9rA= Subject key identifier: FC:5E:DA:0B:00:7C:34:4C:22:C9:7E:1A:6E:72:18:B1:C7:6C:BE:A7 Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 7F1EA463207BFDC3213231948CBBC885A4280730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: B3 Signing time: Fri 19 Dec 2025 20:12:33 +0000 Manifest this update: Fri 19 Dec 2025 20:07:33 +0000 Manifest next update: Mon 22 Dec 2025 20:45:33 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: Qqyhh99wvN9qzOgai05gzAsYuhy6QSvltygf/7XId1w=) 2: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: QerUauxHQlnp2p3SGXHNVftGVZS35fmaO9v5HN060Cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1e:a4:63:20:7b:fd:c3:21:32:31:94:8c:bb:c8:85:a4:28:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Dec 19 20:07:33 2025 GMT Not After : Dec 22 20:45:33 2025 GMT Subject: CN=FC5EDA0B007C344C22C97E1A6E7218B1C76CBEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e6:74:73:68:05:7c:55:c6:80:1b:40:65:66: 92:af:26:f9:fa:d6:2b:34:c0:6a:c6:bc:c9:a8:83: 35:da:a0:7f:4c:4b:c6:b4:39:80:25:05:5d:f4:1c: 21:54:7a:f4:2c:1d:ac:02:37:8f:93:2c:e1:f7:91: 3c:0c:5e:01:ab:45:66:7f:49:0c:b9:2b:70:98:a4: 26:4d:a3:70:64:99:f9:52:06:58:1b:af:d5:30:4a: 3a:84:af:3f:9e:59:db:e0:f7:fe:19:3e:e7:c8:42: 59:c8:6b:d0:64:52:a5:a5:e8:f7:ea:9b:bc:56:62: 03:3a:8b:fd:df:41:eb:c7:8c:39:71:04:88:82:19: 94:46:a6:7c:18:45:b4:2e:cb:b1:b6:b1:97:76:fd: e0:52:6a:d3:67:4f:9a:c6:0b:5a:03:fe:0d:15:57: 81:fc:77:0c:d2:ff:91:9c:24:89:6a:88:79:87:6e: 67:9c:f0:8f:c7:7d:0c:e0:28:22:5a:88:8f:d9:d8: 32:27:04:79:e1:8f:9a:92:ce:12:0a:e8:85:86:cc: 56:ba:89:a2:50:a6:12:54:8c:45:e8:67:b3:a1:f2: 08:01:30:75:61:b7:8c:da:5b:3c:02:d4:78:c2:11: c8:aa:5c:4d:c1:e0:35:31:19:69:0f:11:fd:ae:3c: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5E:DA:0B:00:7C:34:4C:22:C9:7E:1A:6E:72:18:B1:C7:6C:BE:A7 X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:38:5c:a7:41:ad:a4:db:ee:b9:dc:d7:78:dc:e9:a1:3f:8c: 95:c2:59:69:62:69:96:6c:c2:cc:d4:41:df:4b:79:35:5c:37: 46:71:fb:8a:da:69:c2:98:13:ef:e9:4b:75:af:7f:90:c9:19: 7a:e4:79:9a:73:04:ae:fe:52:cd:05:0b:83:5d:52:e7:73:64: d6:a8:87:3f:89:11:ba:02:25:9f:42:f9:6d:33:77:f1:30:84: c4:bc:46:f5:b2:de:51:4d:09:df:ab:7b:a3:2b:16:dc:51:6c: ba:60:a4:e3:f9:fd:78:68:76:48:8b:ea:f7:18:f5:17:9e:79: 76:a0:32:fc:9e:28:ed:60:fe:a2:df:ae:9e:ab:50:c9:33:ae: 8d:fd:2c:96:21:f1:f2:18:bc:fc:4d:af:9a:21:da:d4:fc:83: a8:27:f5:d7:8d:a5:6d:5a:db:0e:e8:4c:00:44:23:b5:21:79: 88:a8:c6:a1:7c:81:40:c3:b2:48:27:81:dd:1a:6d:e0:5f:48: 21:ae:16:ff:0a:23:02:ad:c5:91:48:f6:27:09:fc:c5:2c:a5: d6:a1:3a:0f:e2:af:71:ff:cb:32:01:70:24:b3:da:8c:30:c4: 25:8d:c3:eb:b8:da:e1:b7:3a:47:cd:15:c3:a7:fe:5c:54:2f: 7e:a7:57:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfx6kYyB7/cMhMjGUjLvIhaQoBzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTEyMTkyMDA3MzNaFw0yNTEyMjIyMDQ1MzNaMDMxMTAvBgNV BAMTKEZDNUVEQTBCMDA3QzM0NEMyMkM5N0UxQTZFNzIxOEIxQzc2Q0JFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg5nRzaAV8VcaAG0BlZpKvJvn6 1is0wGrGvMmogzXaoH9MS8a0OYAlBV30HCFUevQsHawCN4+TLOH3kTwMXgGrRWZ/ SQy5K3CYpCZNo3BkmflSBlgbr9UwSjqErz+eWdvg9/4ZPufIQlnIa9BkUqWl6Pfq m7xWYgM6i/3fQevHjDlxBIiCGZRGpnwYRbQuy7G2sZd2/eBSatNnT5rGC1oD/g0V V4H8dwzS/5GcJIlqiHmHbmec8I/HfQzgKCJaiI/Z2DInBHnhj5qSzhIK6IWGzFa6 iaJQphJUjEXoZ7Oh8ggBMHVht4zaWzwC1HjCEciqXE3B4DUxGWkPEf2uPDy7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/F7aCwB8NEwiyX4abnIYscdsvqcwHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM4XKdBraTb7rnc13jc6aE/jJXCWWliaZZs wszUQd9LeTVcN0Zx+4raacKYE+/pS3Wvf5DJGXrkeZpzBK7+Us0FC4NdUudzZNao hz+JEboCJZ9C+W0zd/EwhMS8RvWy3lFNCd+re6MrFtxRbLpgpOP5/XhodkiL6vcY 9ReeeXagMvyeKO1g/qLfrp6rUMkzro39LJYh8fIYvPxNr5oh2tT8g6gn9deNpW1a 2w7oTABEI7UheYioxqF8gUDDskgngd0abeBfSCGuFv8KIwKtxZFI9icJ/MUspdah Og/ir3H/yzIBcCSz2owwxCWNw+u42uG3OkfNFcOn/lxUL36nV7I= -----END CERTIFICATE-----Generated at Mon Dec 22 00:45:45 2025 by rpki-client