This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: kTb4QhP6MxdJuqvgPCKItCBLefaaeeaVLS3dC99FAgM= Subject key identifier: 56:20:2C:88:D1:2A:BB:A0:BF:1C:2B:43:DD:79:72:A3:7B:66:EA:52 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 7CD89BCB3066161B19DF35660B751DBA74EDB7F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 0200 Signing time: Wed 24 Dec 2025 20:11:46 +0000 Manifest this update: Wed 24 Dec 2025 20:06:46 +0000 Manifest next update: Sat 27 Dec 2025 23:14:46 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: UZpqS6ZWpyPiJrJfDmr8u5XhAa6ty4wHUaxqSMNjm58=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d8:9b:cb:30:66:16:1b:19:df:35:66:0b:75:1d:ba:74:ed:b7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Dec 24 20:06:46 2025 GMT Not After : Dec 27 23:14:46 2025 GMT Subject: CN=56202C88D12ABBA0BF1C2B43DD7972A37B66EA52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:03:40:06:44:94:7f:57:b4:4c:35:ed:d1:7c: c9:69:91:c7:03:92:30:e3:04:88:08:34:86:35:98: b9:29:eb:46:81:3c:25:51:8e:e8:39:46:49:01:49: 87:59:8e:a6:ff:3d:01:df:cc:62:65:f2:b0:86:53: 87:c6:6e:2b:51:29:ec:a1:e4:26:ff:c1:22:2e:33: 84:32:13:9d:c9:d6:25:c8:10:41:a0:f6:54:14:07: 92:58:d6:8f:39:9e:11:d9:23:45:0e:b1:ff:ba:49: d0:c6:ab:1a:5d:7f:e2:43:90:ff:00:5f:a2:3a:37: 1d:c6:64:2d:94:13:f3:78:68:ee:17:2a:62:d9:6b: 4e:59:aa:5c:c5:b6:69:93:e2:ea:7a:19:ba:75:b6: 79:61:fa:27:43:60:18:4a:ab:6d:25:b5:9f:15:88: 44:2e:f2:17:2f:f5:af:86:b0:aa:3f:a7:cc:54:55: 91:89:58:35:90:d5:d8:e9:6b:8a:14:14:db:5d:a9: d7:ce:6d:0c:48:f4:ac:06:d3:31:e6:d9:17:21:a9: 6e:18:e1:b9:14:60:98:c1:7f:ba:41:1d:d8:cd:2b: 18:63:4d:3e:55:ec:4d:31:53:fc:74:ac:64:d0:71: e8:7b:12:eb:e2:c6:c3:57:43:13:08:c6:47:29:10: 00:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:20:2C:88:D1:2A:BB:A0:BF:1C:2B:43:DD:79:72:A3:7B:66:EA:52 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:3c:47:35:6a:51:8d:3f:e4:38:56:ef:32:6a:4d:56:15:e2: 36:47:4a:21:a4:64:97:4f:bf:9f:2a:43:a2:bc:2b:3d:30:2b: 73:aa:4a:18:3f:a2:db:88:89:8b:9f:19:0c:8d:76:3d:04:31: bd:d7:37:99:9b:8b:98:3a:33:62:dc:33:82:cb:06:0f:e8:b2: b9:7f:54:64:89:dd:46:53:b4:61:17:dd:39:09:8b:be:46:ab: f7:4a:f0:a4:0d:ad:80:4a:0c:81:e6:9f:66:ee:03:df:ee:dc: 08:3d:5d:38:61:af:8f:20:a2:d7:2d:63:37:ec:9f:d7:ce:3b: ef:13:fa:3c:f5:89:ee:6d:dd:ee:7a:7d:c4:ab:a1:6b:22:88: 83:7d:73:d1:4c:71:e2:a6:75:fd:14:85:af:f7:0e:43:99:21: ac:3c:af:8a:33:8f:1b:0f:94:7a:68:3a:13:ad:b6:16:31:84: 3a:4e:de:c5:ae:f3:e1:52:f1:33:3d:3b:b0:c4:3a:0f:c9:93: 9d:29:ab:61:76:a0:84:c9:1f:ba:0b:6d:09:2d:22:ef:34:7e: 39:50:4f:af:9f:b0:3f:fa:d6:6a:a2:4b:92:a1:1a:3b:26:dc: 33:b5:0a:9b:9c:42:39:bf:f5:61:91:6f:1d:dc:a7:da:46:27: 21:0c:1e:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNibyzBmFhsZ3zVmC3UdunTtt/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTEyMjQyMDA2NDZaFw0yNTEyMjcyMzE0NDZaMDMxMTAvBgNV BAMTKDU2MjAyQzg4RDEyQUJCQTBCRjFDMkI0M0RENzk3MkEzN0I2NkVBNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7A0AGRJR/V7RMNe3RfMlpkccD kjDjBIgINIY1mLkp60aBPCVRjug5RkkBSYdZjqb/PQHfzGJl8rCGU4fGbitRKeyh 5Cb/wSIuM4QyE53J1iXIEEGg9lQUB5JY1o85nhHZI0UOsf+6SdDGqxpdf+JDkP8A X6I6Nx3GZC2UE/N4aO4XKmLZa05ZqlzFtmmT4up6Gbp1tnlh+idDYBhKq20ltZ8V iEQu8hcv9a+GsKo/p8xUVZGJWDWQ1djpa4oUFNtdqdfObQxI9KwG0zHm2RchqW4Y 4bkUYJjBf7pBHdjNKxhjTT5V7E0xU/x0rGTQceh7EuvixsNXQxMIxkcpEACXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViAsiNEqu6C/HCtD3Xlyo3tm6lIwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALE8RzVqUY0/5DhW7zJqTVYV4jZHSiGkZJdP v58qQ6K8Kz0wK3OqShg/otuIiYufGQyNdj0EMb3XN5mbi5g6M2LcM4LLBg/osrl/ VGSJ3UZTtGEX3TkJi75Gq/dK8KQNrYBKDIHmn2buA9/u3Ag9XThhr48gotctYzfs n9fOO+8T+jz1ie5t3e56fcSroWsiiIN9c9FMceKmdf0Uha/3DkOZIaw8r4ozjxsP lHpoOhOtthYxhDpO3sWu8+FS8TM9O7DEOg/Jk50pq2F2oITJH7oLbQktIu80fjlQ T6+fsD/61mqiS5KhGjsm3DO1CpucQjm/9WGRbx3cp9pGJyEMHps= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:38 2025 by rpki-client