This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: zhNPSEA5ELHisPjxQGES0XEBeS1yD+rY4T27iN3lYws= Subject key identifier: B9:17:7A:2D:B5:73:5A:D9:1C:B9:2E:85:E1:CA:91:D2:C6:0F:F6:80 Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 3E8147891ADE0503B616CB7C951399051E88A67A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01E5 Signing time: Tue 16 Dec 2025 17:10:44 +0000 Manifest this update: Tue 16 Dec 2025 17:05:44 +0000 Manifest next update: Sat 20 Dec 2025 02:03:44 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: AX/Ex1QZi4cmyMjYj+XUokVuW5vaLYhBUPturxp6XMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:81:47:89:1a:de:05:03:b6:16:cb:7c:95:13:99:05:1e:88:a6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Dec 16 17:05:44 2025 GMT Not After : Dec 20 02:03:44 2025 GMT Subject: CN=B9177A2DB5735AD91CB92E85E1CA91D2C60FF680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:38:a4:97:3d:18:60:1f:5c:3f:bb:8a:e6:eb: 84:d2:10:e7:55:2a:b9:2e:54:1a:52:65:60:61:03: ae:15:6e:a2:41:8e:c9:4b:ed:53:2f:0a:73:8d:2f: b8:a4:cb:b4:20:06:df:6d:37:b6:d8:25:a9:a7:8b: f4:7b:5e:48:e2:c1:95:76:51:9d:57:80:c1:6a:fb: 8e:2e:c5:4b:4a:b7:79:5f:1c:09:ae:94:06:5a:04: 3b:98:b5:6c:5d:dc:8f:3d:7b:d0:00:68:ef:c5:df: 59:df:e4:ae:33:5a:94:47:40:fd:20:f3:6b:21:5f: 49:95:04:59:20:c8:7b:91:cf:dd:8c:62:1f:13:e8: b7:86:fd:90:c5:ad:4d:dd:9e:82:25:9a:5e:27:32: b6:08:e8:ad:6b:c1:9a:b2:5d:00:5a:89:5a:98:19: fb:80:15:d9:a4:4c:b4:56:f9:38:5e:05:65:22:41: fc:d3:90:88:4b:f1:82:57:e8:e4:27:66:8e:2a:e1: 62:d7:61:3f:b1:4c:8a:60:1a:08:83:7f:61:d8:31: 03:68:33:c6:05:2c:10:f2:90:a5:69:b2:ab:7c:66: 02:de:46:25:ef:d4:d3:92:fe:79:7d:fa:11:e2:4b: 19:6c:0d:d2:63:d6:6d:0d:03:61:1b:69:4b:f7:d4: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:17:7A:2D:B5:73:5A:D9:1C:B9:2E:85:E1:CA:91:D2:C6:0F:F6:80 X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:70:81:e8:8c:7f:27:ec:de:db:65:e6:29:06:0b:78:89:c7: ca:fb:bf:63:1f:47:a0:d2:cd:3f:96:6a:78:83:98:b0:6a:ad: 44:f3:22:76:0e:d5:eb:16:0e:f0:c2:e9:1f:fd:42:b4:40:7b: f6:67:e3:d8:ad:bd:dd:aa:f6:e3:fd:7a:4e:7d:94:45:b7:86: 4f:09:ae:f0:b7:8a:ac:19:99:12:07:cc:1d:b6:c3:5f:7a:4f: bc:2b:35:72:a2:de:1d:4c:51:fa:8d:f2:6a:0b:d4:50:35:49: 72:ac:91:16:d9:09:87:7e:3f:02:56:c8:22:0e:fb:1b:09:d6: 64:32:62:96:d3:1a:14:8f:31:c3:80:18:f3:5d:0e:25:31:9c: 0d:5c:4d:17:f6:a3:30:ea:9c:dc:d2:dd:45:3d:ff:dd:5b:7e: fe:e2:71:bc:e2:1a:cf:9e:1d:ca:b6:07:71:5e:64:13:92:88: 12:cd:46:91:5c:08:c9:76:5b:45:60:74:8f:8a:22:20:25:46: b3:e3:ca:47:27:54:17:8a:8d:40:50:68:95:3a:d5:23:54:93: 10:41:f4:9a:25:3e:d7:38:82:f5:50:c1:34:90:5a:c7:0c:2e: 52:8d:42:72:46:65:52:68:a6:4b:f5:41:4f:b5:7e:8d:91:e8: 16:77:75:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPoFHiRreBQO2Fst8lROZBR6IpnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTEyMTYxNzA1NDRaFw0yNTEyMjAwMjAzNDRaMDMxMTAvBgNV BAMTKEI5MTc3QTJEQjU3MzVBRDkxQ0I5MkU4NUUxQ0E5MUQyQzYwRkY2ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOKSXPRhgH1w/u4rm64TSEOdV KrkuVBpSZWBhA64VbqJBjslL7VMvCnONL7iky7QgBt9tN7bYJamni/R7XkjiwZV2 UZ1XgMFq+44uxUtKt3lfHAmulAZaBDuYtWxd3I89e9AAaO/F31nf5K4zWpRHQP0g 82shX0mVBFkgyHuRz92MYh8T6LeG/ZDFrU3dnoIlml4nMrYI6K1rwZqyXQBaiVqY GfuAFdmkTLRW+TheBWUiQfzTkIhL8YJX6OQnZo4q4WLXYT+xTIpgGgiDf2HYMQNo M8YFLBDykKVpsqt8ZgLeRiXv1NOS/nl9+hHiSxlsDdJj1m0NA2EbaUv31Pu1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRd6LbVzWtkcuS6F4cqR0sYP9oAwHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9wgeiMfyfs3ttl5ikGC3iJx8r7v2MfR6DS zT+WaniDmLBqrUTzInYO1esWDvDC6R/9QrRAe/Zn49itvd2q9uP9ek59lEW3hk8J rvC3iqwZmRIHzB22w196T7wrNXKi3h1MUfqN8moL1FA1SXKskRbZCYd+PwJWyCIO +xsJ1mQyYpbTGhSPMcOAGPNdDiUxnA1cTRf2ozDqnNzS3UU9/91bfv7icbziGs+e Hcq2B3FeZBOSiBLNRpFcCMl2W0VgdI+KIiAlRrPjykcnVBeKjUBQaJU61SNUkxBB 9JolPtc4gvVQwTSQWscMLlKNQnJGZVJopkv1QU+1fo2R6BZ3dQc= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:38 2025 by rpki-client