This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: vqmuh2rdEKYJVkl7OP1l+X04VSc52/oHzWuTVxUFP0w= Subject key identifier: E7:D9:57:07:25:89:3C:F4:E2:66:E2:6E:0D:0D:35:22:8D:8E:C6:9A Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 1BDBBBE537FDBF3C8BD9943D435B1A14E826D71A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 0197 Signing time: Thu 18 Dec 2025 10:30:39 +0000 Manifest this update: Thu 18 Dec 2025 10:25:39 +0000 Manifest next update: Sun 21 Dec 2025 22:10:39 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: Z4dxgiWmxHXI4RFRop+LAXmmR6lv4wf5C/gmYdsPUp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:db:bb:e5:37:fd:bf:3c:8b:d9:94:3d:43:5b:1a:14:e8:26:d7:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Dec 18 10:25:39 2025 GMT Not After : Dec 21 22:10:39 2025 GMT Subject: CN=E7D9570725893CF4E266E26E0D0D35228D8EC69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f4:67:c8:dd:d5:72:6f:92:1d:b6:7a:82:6e: 5d:79:9d:99:4a:10:fd:f6:fe:c6:c0:6b:90:59:56: 3f:f3:1e:72:f6:bc:c2:c5:0b:87:7d:1f:f5:d0:29: 1f:9b:80:db:a8:38:af:37:36:a8:13:ab:25:c2:fd: 94:16:11:b8:e9:f4:f9:98:cd:93:36:70:d6:b2:03: bf:9a:38:f1:97:9b:1d:d7:94:fa:1d:d5:12:08:db: f5:52:4a:90:92:6f:4a:32:dd:bb:34:a7:cb:8e:5f: 11:14:52:0c:ee:79:09:bf:77:8e:dd:97:bd:7e:a0: 8a:7a:da:ac:7f:fd:ef:29:e6:a3:7d:2b:72:c2:4c: c9:82:23:d2:26:83:fa:8d:ad:64:dd:a6:7f:60:5a: 72:5d:29:4b:94:1c:08:48:50:1b:2f:c3:ae:8d:ed: 98:32:0e:de:d1:84:34:ad:b9:d3:cd:2a:a1:aa:e9: 73:f2:50:73:2e:2c:1b:67:54:85:86:cf:38:08:98: 5f:f2:2f:81:30:33:e0:aa:fc:8a:e9:94:51:68:80: 9e:38:4e:ac:95:95:2d:e5:c7:d4:7c:13:a9:a9:ee: ab:ee:69:57:73:35:fc:fd:e3:53:e6:40:e0:f4:fa: e3:4d:ba:9b:1f:2e:1b:c8:e5:5f:5b:c7:8b:d4:0b: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D9:57:07:25:89:3C:F4:E2:66:E2:6E:0D:0D:35:22:8D:8E:C6:9A X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:4c:a1:18:3a:28:5a:da:f2:d4:3f:b7:32:40:4d:dd:3f:7b: 16:30:13:c2:8f:27:41:cd:a1:af:15:48:bf:e1:92:9f:f4:8c: 4e:45:85:3b:e2:b0:ad:94:6d:f7:c6:da:eb:58:76:7b:c2:37: 27:43:39:83:ea:ce:c0:d0:36:78:ea:34:61:dc:f5:69:aa:35: 7c:22:1d:ae:a2:82:86:5c:9b:48:68:7a:03:a3:0b:0c:1f:20: 47:0a:7e:83:92:c2:7c:a1:82:2f:03:3e:70:51:92:3d:c9:3f: d6:49:89:b3:d2:59:43:44:44:ea:ea:fd:c4:cb:d2:32:34:09: a6:4d:a3:43:e6:b4:82:2c:1a:c1:b3:d1:cc:4f:f3:01:30:9f: 08:90:65:d8:2c:d9:db:f9:1d:18:4d:03:94:77:87:01:fd:af: 0e:9f:dd:14:21:e5:66:93:25:ce:6d:8f:1c:26:e1:52:a2:87: 98:32:df:a3:98:9e:11:48:a6:94:41:66:a6:16:45:8a:a1:6c: 98:cd:2a:00:43:8a:e1:c0:50:f4:83:d4:2b:9c:fe:ac:8f:aa: 8f:f3:7a:aa:77:6a:4e:ed:cf:0e:6e:0f:bc:4e:f7:9a:25:f5: 7d:7c:8f:bf:4c:d4:e9:de:4d:69:4f:04:c6:85:28:7c:31:f7: 9a:02:a7:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9u75Tf9vzyL2ZQ9Q1saFOgm1xowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTEyMTgxMDI1MzlaFw0yNTEyMjEyMjEwMzlaMDMxMTAvBgNV BAMTKEU3RDk1NzA3MjU4OTNDRjRFMjY2RTI2RTBEMEQzNTIyOEQ4RUM2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw9GfI3dVyb5IdtnqCbl15nZlK EP32/sbAa5BZVj/zHnL2vMLFC4d9H/XQKR+bgNuoOK83NqgTqyXC/ZQWEbjp9PmY zZM2cNayA7+aOPGXmx3XlPod1RII2/VSSpCSb0oy3bs0p8uOXxEUUgzueQm/d47d l71+oIp62qx//e8p5qN9K3LCTMmCI9Img/qNrWTdpn9gWnJdKUuUHAhIUBsvw66N 7ZgyDt7RhDStudPNKqGq6XPyUHMuLBtnVIWGzzgImF/yL4EwM+Cq/IrplFFogJ44 TqyVlS3lx9R8E6mp7qvuaVdzNfz941PmQOD0+uNNupsfLhvI5V9bx4vUC535AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU59lXByWJPPTiZuJuDQ01Io2OxpowHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNMoRg6KFra8tQ/tzJATd0/exYwE8KPJ0HN oa8VSL/hkp/0jE5FhTvisK2UbffG2utYdnvCNydDOYPqzsDQNnjqNGHc9WmqNXwi Ha6igoZcm0hoegOjCwwfIEcKfoOSwnyhgi8DPnBRkj3JP9ZJibPSWUNEROrq/cTL 0jI0CaZNo0PmtIIsGsGz0cxP8wEwnwiQZdgs2dv5HRhNA5R3hwH9rw6f3RQh5WaT Jc5tjxwm4VKih5gy36OYnhFIppRBZqYWRYqhbJjNKgBDiuHAUPSD1Cuc/qyPqo/z eqp3ak7tzw5uD7xO95ol9X18j79M1OneTWlPBMaFKHwx95oCp1g= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:37 2025 by rpki-client