This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: LKy7gmvqhT00M7G9qCleCrZoWY9/KB7wz95VBvIWiHo= Subject key identifier: 79:D6:A9:A1:7F:50:7E:04:B2:0C:48:12:0E:A3:08:35:78:B0:5E:A7 Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 4DE658CAA6B6616B7D337BBAF52269A95BBB7025 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 0273 Signing time: Sat 20 Dec 2025 07:22:35 +0000 Manifest this update: Sat 20 Dec 2025 07:17:35 +0000 Manifest next update: Tue 23 Dec 2025 18:04:35 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: uOWkmL9/f5MzGBDcDUNdOW/wD6nrHPImLE+3fB19mqY=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: 2lTJuwgktOu4lo9SNeOCA4rDFu8XBUgqcawUv+9j6hA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 18:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e6:58:ca:a6:b6:61:6b:7d:33:7b:ba:f5:22:69:a9:5b:bb:70:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Dec 20 07:17:35 2025 GMT Not After : Dec 23 18:04:35 2025 GMT Subject: CN=79D6A9A17F507E04B20C48120EA3083578B05EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:98:79:62:8b:0b:96:76:c4:67:a1:09:9b:f3: 63:31:dd:9d:99:5a:67:91:35:8e:91:ba:5a:df:c6: 37:c0:f1:56:ee:2a:3b:bb:b9:f4:60:c4:20:e7:09: a2:13:ff:28:d5:3d:41:e8:b8:ff:8e:04:9d:1e:ad: d9:46:b0:25:18:f3:9d:31:85:73:36:aa:55:5f:ec: 88:2b:f6:82:30:38:20:bc:aa:57:24:3e:d7:d7:67: 7f:c3:27:d0:41:30:ce:e3:35:64:30:91:1f:ca:dd: 90:a0:da:af:98:22:4b:f7:d8:99:cf:ed:68:6b:16: bc:31:75:c1:07:69:ef:f0:57:5d:05:83:f2:8a:d3: 3e:14:83:f5:b6:f6:eb:a0:68:e5:f6:bb:71:fc:67: ba:99:d9:ce:8d:5e:bf:cf:b2:5f:aa:b1:24:13:bc: ed:da:04:10:21:33:82:52:80:ee:d6:40:42:d9:07: ed:e4:82:0b:61:7b:41:eb:e5:4b:cc:4e:20:98:17: 7a:c7:a7:75:25:08:5c:f8:ed:4a:2b:8c:8d:34:0b: ee:ad:45:a9:ad:f2:c3:8c:e5:d3:13:74:6f:bb:90: 82:a6:84:e7:c0:a6:1d:c7:0a:8e:b2:aa:fb:54:65: 1e:19:f8:c0:4f:4e:b9:fd:40:a1:ba:74:36:44:cf: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D6:A9:A1:7F:50:7E:04:B2:0C:48:12:0E:A3:08:35:78:B0:5E:A7 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5b:3d:24:9d:38:c7:d2:dc:59:d8:1c:38:0e:09:f7:fb:ca: d1:84:74:49:9f:37:58:9a:f5:a4:6c:1e:12:1c:38:ee:79:bb: f5:02:1f:c3:5d:23:fe:51:99:fe:53:1c:54:cc:8f:fa:06:c1: 37:9c:fe:bc:73:6c:44:2b:42:78:86:dc:f2:83:74:01:e8:19: 94:9a:de:e8:3a:26:e6:8f:06:d4:99:99:59:5a:81:83:ab:b8: 77:37:39:3f:88:10:79:10:80:e4:39:20:6a:a3:3c:b5:98:aa: d3:ba:39:11:be:f1:92:a9:26:84:95:d6:2a:88:4f:dd:e9:3e: d3:fd:5a:ee:ad:ac:82:dd:ec:7e:2c:32:2d:76:d0:1d:1f:0d: d9:b3:14:ed:2b:2f:e9:ff:27:68:ee:bd:ff:23:b0:b6:9b:64: 06:33:a6:57:fe:d1:8e:a0:59:37:10:bf:36:29:2c:51:24:a6: 2d:21:2f:10:57:be:56:aa:c5:19:58:0e:c3:58:73:e2:63:35: a0:ee:97:01:2f:50:35:3b:ae:5f:6d:ff:bf:72:b0:e2:5a:77: 2d:38:6a:07:b5:20:c3:13:11:b3:1e:fe:79:2d:b0:9e:ee:db: cb:45:25:20:2c:69:62:ca:11:f4:f5:df:63:32:5e:7b:f0:b0: 68:dd:99:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeZYyqa2YWt9M3u69SJpqVu7cCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTEyMjAwNzE3MzVaFw0yNTEyMjMxODA0MzVaMDMxMTAvBgNV BAMTKDc5RDZBOUExN0Y1MDdFMDRCMjBDNDgxMjBFQTMwODM1NzhCMDVFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmHliiwuWdsRnoQmb82Mx3Z2Z WmeRNY6RulrfxjfA8VbuKju7ufRgxCDnCaIT/yjVPUHouP+OBJ0erdlGsCUY850x hXM2qlVf7Igr9oIwOCC8qlckPtfXZ3/DJ9BBMM7jNWQwkR/K3ZCg2q+YIkv32JnP 7WhrFrwxdcEHae/wV10Fg/KK0z4Ug/W29uugaOX2u3H8Z7qZ2c6NXr/Psl+qsSQT vO3aBBAhM4JSgO7WQELZB+3kggthe0Hr5UvMTiCYF3rHp3UlCFz47UorjI00C+6t Ramt8sOM5dMTdG+7kIKmhOfAph3HCo6yqvtUZR4Z+MBPTrn9QKG6dDZEz0i/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedapoX9QfgSyDEgSDqMINXiwXqcwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxbPSSdOMfS3FnYHDgOCff7ytGEdEmfN1ia 9aRsHhIcOO55u/UCH8NdI/5Rmf5THFTMj/oGwTec/rxzbEQrQniG3PKDdAHoGZSa 3ug6JuaPBtSZmVlagYOruHc3OT+IEHkQgOQ5IGqjPLWYqtO6ORG+8ZKpJoSV1iqI T93pPtP9Wu6trILd7H4sMi120B0fDdmzFO0rL+n/J2juvf8jsLabZAYzplf+0Y6g WTcQvzYpLFEkpi0hLxBXvlaqxRlYDsNYc+JjNaDulwEvUDU7rl9t/79ysOJady04 age1IMMTEbMe/nktsJ7u28tFJSAsaWLKEfT132MyXnvwsGjdmUw= -----END CERTIFICATE-----Generated at Sun Dec 21 22:59:33 2025 by rpki-client