This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: a3xmW0drq0M7iZjrffBNsFnnulFL4PrS9aEUy8tInZ4= Subject key identifier: CB:6F:9F:F9:AC:E1:98:E9:A6:B2:6D:D5:42:72:1D:77:64:8C:67:2A Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 1F4CE25D1A362B722C53FD4B5B1C42FC46363F63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 01A6 Signing time: Wed 17 Dec 2025 07:01:43 +0000 Manifest this update: Wed 17 Dec 2025 06:56:43 +0000 Manifest next update: Sat 20 Dec 2025 10:51:43 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) 2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: JVF0sx11z1OwT/YovrnCLfK0XPvs1vBHNAEvYcDc5VE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4c:e2:5d:1a:36:2b:72:2c:53:fd:4b:5b:1c:42:fc:46:36:3f:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Dec 17 06:56:43 2025 GMT Not After : Dec 20 10:51:43 2025 GMT Subject: CN=CB6F9FF9ACE198E9A6B26DD542721D77648C672A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:02:b2:37:25:7f:d6:46:6b:04:0e:08:6b: 04:07:95:9f:4a:e0:c9:a7:26:5b:11:9e:1e:2e:02: 51:cb:de:d5:94:6b:89:28:a0:e7:97:ec:1a:88:05: 4f:7e:30:fe:b1:75:80:95:8e:83:03:f4:14:a5:d9: 52:98:a7:99:47:52:dc:0b:db:47:b3:71:7c:c3:3b: 96:63:83:9b:07:90:31:ee:43:44:9c:ac:63:c2:25: 6a:15:e0:e3:4f:20:03:3d:7f:b2:57:a1:87:4e:d1: e5:f2:b9:95:ef:f5:f8:c8:63:d3:56:5c:25:99:9b: 56:8b:5a:bd:f5:01:d0:9c:4b:fa:9b:59:d6:16:3f: 52:ec:f1:6c:70:42:ca:60:2d:89:9e:cc:30:20:8c: 09:70:0b:24:00:e6:30:72:d2:a6:70:4a:f0:94:90: 6c:3c:f5:d1:65:05:16:d2:f7:b3:6e:8e:e5:62:f5: d7:fe:0f:e7:8a:b4:61:a3:9c:33:bc:26:cb:c5:49: 08:53:42:cd:7d:b2:dc:95:19:ce:e2:f3:eb:fd:7a: a0:dd:27:09:9c:12:10:46:71:ec:2a:ee:cd:63:f0: e7:1a:3b:a8:65:5d:82:7f:d1:31:21:7d:59:f5:18: cf:57:65:fc:66:3e:54:56:36:11:32:d1:98:c0:12: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6F:9F:F9:AC:E1:98:E9:A6:B2:6D:D5:42:72:1D:77:64:8C:67:2A X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:58:e3:67:b2:96:23:43:d2:9e:57:08:bb:ee:20:11:3d:20: 34:46:82:77:c9:73:f3:2f:53:0a:8c:32:fe:7a:d1:25:1c:1f: 70:e5:c8:3b:73:48:30:32:67:97:38:56:bb:b2:e7:ce:db:98: 6a:d9:04:e7:d8:c8:44:da:ed:d3:06:17:e7:b9:7a:bb:fe:db: 19:ea:b5:73:38:ba:5a:99:57:83:5c:f0:60:cc:0a:12:ed:90: f8:7f:c3:c8:32:69:f4:53:c4:e1:df:73:b5:a9:a9:7a:48:75: ae:9e:df:e1:dd:c0:87:d0:5e:83:38:c0:f7:45:02:b8:c7:c0: 63:f7:69:f7:78:6e:e5:b8:45:21:3d:1c:1b:99:43:94:5f:af: 46:6c:c0:02:45:b0:86:36:29:dd:0f:df:71:f8:bf:72:53:06: 05:04:97:45:93:11:e0:99:ec:42:00:f3:b0:2c:e9:f7:b4:b0: ae:d2:b5:4a:6f:b6:fa:dd:3f:b0:97:09:d2:d0:95:0d:03:04: 79:21:15:59:be:e2:35:64:34:51:41:8f:2f:5e:2d:7a:06:0a: a3:ea:8e:3c:2e:a2:3a:68:43:02:52:3f:71:c0:f4:e5:f7:39: 81:ba:25:66:fc:97:de:81:6d:c9:c2:41:c1:96:d9:db:2b:ee: 01:27:7a:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0ziXRo2K3IsU/1LWxxC/EY2P2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTEyMTcwNjU2NDNaFw0yNTEyMjAxMDUxNDNaMDMxMTAvBgNV BAMTKENCNkY5RkY5QUNFMTk4RTlBNkIyNkRENTQyNzIxRDc3NjQ4QzY3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCwKyNyV/1kZrBA4IawQHlZ9K 4MmnJlsRnh4uAlHL3tWUa4kooOeX7BqIBU9+MP6xdYCVjoMD9BSl2VKYp5lHUtwL 20ezcXzDO5Zjg5sHkDHuQ0ScrGPCJWoV4ONPIAM9f7JXoYdO0eXyuZXv9fjIY9NW XCWZm1aLWr31AdCcS/qbWdYWP1Ls8WxwQspgLYmezDAgjAlwCyQA5jBy0qZwSvCU kGw89dFlBRbS97NujuVi9df+D+eKtGGjnDO8JsvFSQhTQs19styVGc7i8+v9eqDd JwmcEhBGcewq7s1j8OcaO6hlXYJ/0TEhfVn1GM9XZfxmPlRWNhEy0ZjAEmEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2+f+azhmOmmsm3VQnIdd2SMZyowHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhY42eyliND0p5XCLvuIBE9IDRGgnfJc/Mv UwqMMv560SUcH3DlyDtzSDAyZ5c4Vruy587bmGrZBOfYyETa7dMGF+e5erv+2xnq tXM4ulqZV4Nc8GDMChLtkPh/w8gyafRTxOHfc7WpqXpIda6e3+HdwIfQXoM4wPdF ArjHwGP3afd4buW4RSE9HBuZQ5Rfr0ZswAJFsIY2Kd0P33H4v3JTBgUEl0WTEeCZ 7EIA87As6fe0sK7StUpvtvrdP7CXCdLQlQ0DBHkhFVm+4jVkNFFBjy9eLXoGCqPq jjwuojpoQwJSP3HA9OX3OYG6JWb8l96BbcnCQcGW2dsr7gEnegY= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:52 2025 by rpki-client