This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: Rvg4uIE64+51scty14Ly+ZOMlNOePXG03+My1VjL3wk= Subject key identifier: C8:74:55:18:4C:F4:2A:85:86:FF:FA:60:64:A1:6D:0E:26:25:50:D8 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 7CD9A3C8DE20DC036DDD3C1F5D1C6BB37D940E85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01FD Signing time: Sat 20 Dec 2025 11:01:01 +0000 Manifest this update: Sat 20 Dec 2025 10:56:01 +0000 Manifest next update: Tue 23 Dec 2025 16:34:01 +0000 Files and hashes: 1: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: TJLrv36Q63hlFZvX7CXRG4SICxo3z5klkalMPpNi7m4=) 2: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: SnMbgMOxWF6U2uyaAr5mP0bLC0JpKov3uB08AyMeVTY=) 3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: /kG2XKRMgpHFqcmwADFIzCUj6H/leetgA+b7DMmSYLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 16:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d9:a3:c8:de:20:dc:03:6d:dd:3c:1f:5d:1c:6b:b3:7d:94:0e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Dec 20 10:56:01 2025 GMT Not After : Dec 23 16:34:01 2025 GMT Subject: CN=C87455184CF42A8586FFFA6064A16D0E262550D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:4d:57:5d:7b:22:d6:99:7f:8b:67:50:b1: 71:ec:63:a6:52:54:11:ee:c8:f1:71:f9:3e:37:2e: 8e:66:ab:e1:93:c7:86:52:26:36:2b:c5:8e:bc:74: 37:23:5c:42:ff:01:2a:95:04:e1:a5:51:e6:d1:0f: da:d8:91:30:40:aa:43:6e:c8:c3:a0:63:57:f0:2d: e3:45:bd:b0:22:80:d1:70:1b:be:bc:8b:72:7a:dc: 7a:ea:fc:03:c3:e3:95:98:4b:fe:3c:7d:f0:6b:4b: c3:57:44:05:24:72:26:40:61:3f:e6:41:ed:cd:50: 71:f6:3c:4d:c8:15:61:7c:24:86:ef:50:d3:59:6b: e3:8e:2e:6b:81:ce:52:11:fc:48:ae:6d:6a:c2:87: c2:10:50:31:70:0a:f8:10:2b:c4:5b:c9:ed:5e:a2: 8e:11:fb:bf:b6:3b:b4:04:df:e4:d6:4b:31:b4:df: 6b:e3:2b:cb:f6:92:82:36:ec:d3:30:0a:b4:b3:bb: 75:cd:ca:a7:82:65:05:4b:d5:6b:ee:16:df:69:59: 63:1e:ed:29:8d:bd:d8:6b:43:74:b9:c4:8b:08:ad: 89:56:e8:fb:ab:32:9f:16:cb:1f:c8:9a:6a:b7:a2: 27:5e:e4:02:53:4a:3b:a6:14:3a:41:d8:ec:20:90: 77:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:74:55:18:4C:F4:2A:85:86:FF:FA:60:64:A1:6D:0E:26:25:50:D8 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:c5:3d:4d:6e:bc:9e:66:78:de:38:13:52:85:19:18:34:d7: 05:65:f9:b1:30:20:ce:a1:38:48:65:72:8b:3d:4b:26:02:a0: 13:61:4f:7e:ac:f4:fe:75:ae:01:48:a8:18:c0:05:7f:00:e7: 20:28:bd:25:ce:52:c3:35:1e:13:88:06:04:4e:8a:b0:3e:e4: 9d:45:fa:79:9e:2d:a1:1c:e5:0b:66:81:77:3b:e9:00:33:4a: 85:62:79:f8:4c:22:13:48:6b:41:22:d7:c9:9d:1b:69:28:43: 15:5a:ef:cc:39:43:8b:be:78:68:d7:a2:bd:c9:9f:8a:83:0c: dc:63:1e:67:3e:09:be:21:27:bc:91:57:c5:bb:35:ea:a3:75: b8:12:ea:a1:63:5a:ea:e4:f1:a6:c1:9d:fe:d1:25:23:ba:40: 3e:b8:a5:42:23:30:26:2d:49:f8:1e:f4:3f:5f:3b:88:61:96: 7d:90:f0:90:11:07:d2:74:ae:51:01:2a:29:3b:1b:cc:a5:b1: 2c:0b:a9:ae:b8:df:66:d3:3f:37:64:15:74:fa:45:2d:ac:27: 8c:e1:53:ab:be:a9:81:2f:e6:9f:62:b2:d4:37:02:b4:48:e3: 1d:75:78:8f:cf:42:42:e6:cf:b8:07:74:ac:58:68:e4:de:2d: 10:b8:e4:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNmjyN4g3ANt3TwfXRxrs32UDoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTEyMjAxMDU2MDFaFw0yNTEyMjMxNjM0MDFaMDMxMTAvBgNV BAMTKEM4NzQ1NTE4NENGNDJBODU4NkZGRkE2MDY0QTE2RDBFMjYyNTUwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxHk1XXXsi1pl/i2dQsXHsY6ZS VBHuyPFx+T43Lo5mq+GTx4ZSJjYrxY68dDcjXEL/ASqVBOGlUebRD9rYkTBAqkNu yMOgY1fwLeNFvbAigNFwG768i3J63Hrq/APD45WYS/48ffBrS8NXRAUkciZAYT/m Qe3NUHH2PE3IFWF8JIbvUNNZa+OOLmuBzlIR/EiubWrCh8IQUDFwCvgQK8Rbye1e oo4R+7+2O7QE3+TWSzG032vjK8v2koI27NMwCrSzu3XNyqeCZQVL1WvuFt9pWWMe 7SmNvdhrQ3S5xIsIrYlW6PurMp8Wyx/Immq3oide5AJTSjumFDpB2OwgkHflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyHRVGEz0KoWG//pgZKFtDiYlUNgwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM7FPU1uvJ5meN44E1KFGRg01wVl+bEwIM6h OEhlcos9SyYCoBNhT36s9P51rgFIqBjABX8A5yAovSXOUsM1HhOIBgROirA+5J1F +nmeLaEc5QtmgXc76QAzSoViefhMIhNIa0Ei18mdG2koQxVa78w5Q4u+eGjXor3J n4qDDNxjHmc+Cb4hJ7yRV8W7NeqjdbgS6qFjWurk8abBnf7RJSO6QD64pUIjMCYt Sfge9D9fO4hhln2Q8JARB9J0rlEBKik7G8ylsSwLqa6432bTPzdkFXT6RS2sJ4zh U6u+qYEv5p9istQ3ArRI4x11eI/PQkLmz7gHdKxYaOTeLRC45Pg= -----END CERTIFICATE-----Generated at Sun Dec 21 21:03:15 2025 by rpki-client