This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
File: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json)
Hash identifier: syTafQO2DVkI97WS5crsQZOsuwXek6pZ0rBeCYTaZpo=
Subject key identifier: 05:46:28:28:DE:98:2D:44:28:F0:50:25:C3:9A:6F:11:4F:CA:39:3D
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial: 20D205F520C3452CB3EE48E928D895B4518E1B5C
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
Manifest number: 0236
Signing time: Tue 16 Dec 2025 11:51:00 +0000
Manifest this update: Tue 16 Dec 2025 11:46:00 +0000
Manifest next update: Fri 19 Dec 2025 20:12:00 +0000
Files and hashes: 1: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=)
2: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=)
3: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: lEADDciE7WBSbNP5koTkRL7uI/ZWk2oPkXCMKNkGcIk=)
4: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=)
5: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=)
6: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=)
7: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: ov8mTxysBfKB49F8VOvh3Huj6S60dY93AQe/+n5tsMc=)
8: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: L5FJzSA7UF0etrEzdyXzSIKfg/zWDr97YNsJ6d4+WfE=)
9: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=)
10: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=)
11: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=)
12: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Dec 2025 20:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:d2:05:f5:20:c3:45:2c:b3:ee:48:e9:28:d8:95:b4:51:8e:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Validity
Not Before: Dec 16 11:46:00 2025 GMT
Not After : Dec 19 20:12:00 2025 GMT
Subject: CN=05462828DE982D4428F05025C39A6F114FCA393D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:6a:c4:33:43:6a:e3:ea:ea:42:19:1e:b9:
6e:09:37:34:ce:0f:ef:ce:90:05:e8:87:d7:e2:01:
e0:20:12:d0:bc:69:d9:2e:a7:52:20:58:51:f4:d3:
5e:f8:b0:9a:08:fd:ec:8b:cd:03:0e:38:db:05:c8:
cf:f0:0f:7a:43:28:8e:26:4b:b3:4f:3b:1d:97:f9:
1a:d7:b3:77:66:ef:ef:0c:f2:3c:72:ff:f1:cb:52:
b7:59:a3:87:65:56:57:64:83:04:f4:33:5a:17:fa:
40:07:9c:38:bb:7d:3c:55:37:fe:62:29:9a:ab:e7:
1e:de:ff:6d:46:77:80:52:41:95:41:ad:4c:9f:57:
48:69:95:34:b5:0f:b3:92:a9:f3:fd:7f:c1:0b:90:
6b:3f:c7:2e:04:91:ce:d0:3c:1c:a1:f6:9f:76:9b:
34:a2:59:ba:fa:a0:cf:f4:c7:5a:41:cc:c6:dd:dc:
26:37:f5:c7:0e:7a:14:eb:6b:b9:25:e6:83:c9:41:
ff:09:0c:c1:23:b7:60:5f:50:66:e0:9e:7e:38:27:
b3:72:ab:d4:3d:4e:37:e6:b1:06:41:e3:6d:2a:e1:
41:81:45:9a:9e:ee:0c:78:3b:49:0b:79:f6:1a:d9:
40:d6:b7:29:b6:b4:44:79:69:6b:84:02:7f:02:d4:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:46:28:28:DE:98:2D:44:28:F0:50:25:C3:9A:6F:11:4F:CA:39:3D
X509v3 Authority Key Identifier:
keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:b6:5a:76:47:87:5f:ec:43:81:fb:1d:16:b8:38:2a:df:
d8:9d:e8:6c:9b:c8:e0:ab:a6:18:5b:d6:3d:b9:bc:48:97:47:
62:b1:99:54:48:58:3d:eb:3c:74:ab:c5:60:26:08:09:3b:1e:
37:3d:22:0c:a8:b8:d8:f5:5b:07:f5:69:b5:ac:42:a4:0f:d3:
b3:0d:bc:65:1a:d6:ee:b3:b6:40:78:8a:cb:ad:ec:8c:c6:4a:
c5:44:68:04:91:41:bb:75:74:2d:60:ac:5c:8d:68:c0:15:20:
7a:b7:e8:ca:5c:1f:3f:e1:82:fe:91:b9:28:42:dd:84:57:9e:
63:69:08:a4:f5:a7:7f:1b:c2:b3:85:4a:01:e7:f9:45:b1:39:
8f:1b:32:93:ca:dc:7a:5f:ae:24:f9:95:66:d2:25:0c:af:27:
b4:c0:33:e5:c1:84:ce:ad:cb:bc:9b:b2:58:d0:82:11:93:75:
75:86:cc:1b:54:f4:30:85:26:31:8b:75:c7:16:0b:18:2c:13:
a6:99:b3:2c:eb:0b:c7:fd:d1:5a:1f:f7:47:25:b4:bc:f3:d3:
e0:f6:15:30:ed:58:1f:f0:3f:44:60:c5:eb:c5:3f:ab:d6:d1:
32:2b:8b:c8:29:03:ab:e8:65:67:a0:c3:51:61:5f:9c:18:fd:
82:46:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 15:14:16 2025 by rpki-client