This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: XvBVtBprwoIkcUbsqO/wKdsYq//oKmJJ0dY9oa7NMiQ= Subject key identifier: 7C:49:B5:40:A1:B1:2A:B1:BB:57:2D:FE:12:8E:1C:FD:2A:E0:76:EF Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 265583A0EC3710C7BC3F379F594117A0618D6780 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04B5 Signing time: Tue 16 Dec 2025 08:11:41 +0000 Manifest this update: Tue 16 Dec 2025 08:06:41 +0000 Manifest next update: Fri 19 Dec 2025 10:06:41 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: kX28j4cDW7BcNT2A97O64NWPClkyQ6tdEUOllaGDoEI=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 10:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:55:83:a0:ec:37:10:c7:bc:3f:37:9f:59:41:17:a0:61:8d:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Dec 16 08:06:41 2025 GMT Not After : Dec 19 10:06:41 2025 GMT Subject: CN=7C49B540A1B12AB1BB572DFE128E1CFD2AE076EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:38:25:5a:d6:6f:e5:b4:ea:58:0c:d6:01:17: 74:0f:9d:b6:e9:7c:0a:11:f6:94:a2:b0:05:26:b6: da:3a:03:c5:7e:83:ae:6c:9a:2d:84:31:61:4b:e6: 6c:e4:ea:59:1c:6c:ff:a2:b5:78:68:f8:e0:ad:b9: 39:dd:ae:34:b6:b0:51:3b:b6:60:28:46:e6:2b:e7: 36:d7:5e:d6:ca:fe:98:85:ea:ff:f0:a5:95:59:4e: 0c:4a:28:43:42:86:a5:5b:36:f3:4e:56:7a:b9:3e: f7:93:88:65:f9:b9:e2:26:64:08:ab:fb:8e:04:b3: c2:da:65:09:c5:5d:1e:50:88:b8:2a:57:23:a3:4f: 28:52:11:22:e1:d1:0b:c5:24:58:2a:85:4a:f2:fb: 44:69:63:e7:34:0f:10:14:da:16:67:46:c0:96:c4: bf:76:ff:37:2c:bd:20:ee:10:03:c9:e1:8b:ec:99: fe:ba:f8:2d:bd:51:3f:35:06:d0:d8:8a:b7:e3:21: cc:f0:cd:66:68:fc:40:6b:15:c2:b4:56:25:22:88: 0d:7a:dd:cf:96:63:fb:bd:bb:04:6e:7b:a2:59:7a: 7a:f9:0f:40:ac:61:c4:93:6e:cc:98:d2:4e:2a:63: 05:ce:17:04:83:a2:88:85:47:da:fb:62:94:c3:9b: 7a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:B5:40:A1:B1:2A:B1:BB:57:2D:FE:12:8E:1C:FD:2A:E0:76:EF X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c2:26:d8:00:e6:dc:88:b9:fa:56:16:dd:0e:84:2c:43:6b: 3b:ac:d2:d5:33:7c:97:52:fd:0f:25:e3:ad:20:f1:3e:25:64: 27:29:51:1f:88:32:ff:d2:41:21:3f:c0:a9:6e:47:6d:5d:79: 09:07:40:13:39:75:a0:35:05:8b:1e:d2:e6:00:01:08:a6:90: 2b:c5:36:26:d7:a4:86:2e:79:fa:cd:4f:1b:2e:fe:2b:82:e3: 45:0b:05:b6:09:28:a3:ec:b3:32:35:f4:17:24:57:51:85:79: e6:5a:a2:81:a9:ab:e1:de:35:be:10:7f:19:31:b5:b5:52:7e: 6c:e7:60:41:6e:52:3a:cc:3a:2c:0e:af:e3:f5:b9:e4:b7:0f: 4d:9d:eb:dd:5d:b3:74:2f:a1:86:08:49:2f:b4:f2:9d:f0:83: a7:30:3b:cc:26:14:d2:79:39:5a:09:4c:d2:00:91:4b:de:6c: 93:bd:c9:c5:c7:c7:e1:27:cd:59:70:b3:63:f3:be:e3:38:13: 4e:ab:19:23:7e:0f:eb:24:94:fc:b1:b7:88:2d:1c:b2:0a:b1: 54:14:e2:a8:d9:91:d9:dd:9e:7b:e7:00:b1:f7:e0:09:bf:73: 31:4d:4f:03:8a:8f:f2:e3:30:6a:4a:f9:7a:a3:6b:92:d9:36: f6:50:3d:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJlWDoOw3EMe8PzefWUEXoGGNZ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTEyMTYwODA2NDFaFw0yNTEyMTkxMDA2NDFaMDMxMTAvBgNV BAMTKDdDNDlCNTQwQTFCMTJBQjFCQjU3MkRGRTEyOEUxQ0ZEMkFFMDc2RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOCVa1m/ltOpYDNYBF3QPnbbp fAoR9pSisAUmtto6A8V+g65smi2EMWFL5mzk6lkcbP+itXho+OCtuTndrjS2sFE7 tmAoRuYr5zbXXtbK/piF6v/wpZVZTgxKKENChqVbNvNOVnq5PveTiGX5ueImZAir +44Es8LaZQnFXR5QiLgqVyOjTyhSESLh0QvFJFgqhUry+0RpY+c0DxAU2hZnRsCW xL92/zcsvSDuEAPJ4Yvsmf66+C29UT81BtDYirfjIczwzWZo/EBrFcK0ViUiiA16 3c+WY/u9uwRue6JZenr5D0CsYcSTbsyY0k4qYwXOFwSDooiFR9r7YpTDm3rfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEm1QKGxKrG7Vy3+Eo4c/Srgdu8wHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHCJtgA5tyIufpWFt0OhCxDazus0tUzfJdS /Q8l460g8T4lZCcpUR+IMv/SQSE/wKluR21deQkHQBM5daA1BYse0uYAAQimkCvF NibXpIYuefrNTxsu/iuC40ULBbYJKKPsszI19BckV1GFeeZaooGpq+HeNb4Qfxkx tbVSfmznYEFuUjrMOiwOr+P1ueS3D02d691ds3QvoYYISS+08p3wg6cwO8wmFNJ5 OVoJTNIAkUvebJO9ycXHx+EnzVlws2PzvuM4E06rGSN+D+sklPyxt4gtHLIKsVQU 4qjZkdndnnvnALH34Am/czFNTwOKj/LjMGpK+Xqja5LZNvZQPdM= -----END CERTIFICATE-----Generated at Thu Dec 18 06:57:34 2025 by rpki-client