This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: 6r8aD5C5HunfhOy9GL/iMVsp/yoKWtRzXZ4eQV+ooPE= Subject key identifier: 81:F7:AF:5E:20:5C:DB:5E:8B:D6:F8:B2:F9:6A:EE:DD:F3:2F:6C:11 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 4D5D37CB380802784EE9BA3731A31484E680C703 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 037D Signing time: Wed 17 Dec 2025 20:00:43 +0000 Manifest this update: Wed 17 Dec 2025 19:55:43 +0000 Manifest next update: Sat 20 Dec 2025 22:08:43 +0000 Files and hashes: 1: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: 6T8l3YMLJk/t+Dst4+Br0RMqW3heoz3I014J4vgzJ54=) 2: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: srBAQJfy8a0mnQ4T5/dKNZU30VzR+202z4VgmppP6JM=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:08:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:5d:37:cb:38:08:02:78:4e:e9:ba:37:31:a3:14:84:e6:80:c7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Dec 17 19:55:43 2025 GMT Not After : Dec 20 22:08:43 2025 GMT Subject: CN=81F7AF5E205CDB5E8BD6F8B2F96AEEDDF32F6C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e0:1b:9f:c1:21:ff:c5:68:4f:ce:78:e0:6a: 3e:a1:cb:2a:97:18:d0:ed:f4:34:d6:70:43:ed:62: 8b:84:8d:78:b3:0d:75:d6:58:89:e5:55:63:59:0a: 38:16:3a:e2:18:02:aa:33:44:c5:0e:45:78:dc:0b: 9a:36:db:42:52:d4:3b:6e:e5:93:ba:0e:28:05:0c: 0f:25:77:4a:50:c9:4d:04:cd:35:86:7d:d1:88:0d: dd:c4:f2:f5:e0:fa:33:74:3b:ab:90:df:d3:dd:80: ff:34:46:af:6f:ea:fe:f3:43:a8:2b:e2:12:22:24: 52:91:e5:95:2b:98:a6:f8:dc:44:3b:fd:12:59:db: af:85:ae:49:f0:79:39:d0:29:1b:28:f7:6e:31:f2: 7c:5a:58:9b:44:2f:3b:98:91:69:58:73:14:12:5c: 01:50:88:b2:09:50:0a:5d:f2:17:df:6c:84:04:58: 97:96:c7:d8:f6:6e:a5:25:39:9f:f6:16:28:87:b7: c5:41:48:ae:cc:eb:61:f2:2b:cb:57:d6:ab:a6:48: 90:de:c8:1e:36:fa:12:22:5b:c4:3b:74:49:3a:e0: 3b:65:4d:74:1a:c5:85:7e:2d:dc:f1:b9:f3:e0:ad: 44:65:d8:d5:a2:d2:ac:8d:6d:3d:e8:c0:3e:d3:01: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F7:AF:5E:20:5C:DB:5E:8B:D6:F8:B2:F9:6A:EE:DD:F3:2F:6C:11 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9a:26:e0:83:3b:cb:3f:09:11:46:d3:fc:11:29:35:66:27: 69:ab:6c:b5:05:53:c3:31:16:11:bd:22:75:ba:36:97:68:38: 8c:fd:b7:7d:8d:5e:16:f6:d5:99:3e:3c:dc:7e:6e:ab:b8:24: 05:81:97:10:3d:ed:54:61:3a:6f:d2:ea:05:51:77:95:68:e7: 28:74:ec:13:0a:67:80:00:88:9d:6e:7a:1e:b5:16:d8:20:db: b0:e1:49:95:ba:57:d4:71:fd:6c:87:e4:f4:9b:e0:07:4a:92: 0f:5d:b4:44:e3:01:16:54:ef:cc:25:29:24:c4:19:29:26:f5: d7:7e:a1:88:dd:21:14:fe:b5:ad:5a:90:41:b1:31:0e:39:14: 1a:89:f7:3b:43:17:49:96:1e:49:90:09:2d:2b:bf:2e:63:9f: df:93:5b:73:ee:53:ac:4a:b0:a4:0a:44:5c:09:53:94:09:a7: bd:f8:d4:51:5f:7e:f3:3d:83:c1:73:74:1c:36:c4:30:f6:c0: dc:ae:72:9c:6b:be:c2:27:d0:a3:fa:85:85:10:35:2e:af:cc: 1d:c7:87:bf:c4:41:9f:7c:49:fa:b8:1c:14:f0:7e:89:7b:58: 41:61:48:cb:5d:50:56:fc:86:66:24:5d:a6:f9:13:6e:44:d7: a3:30:9a:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTV03yzgIAnhO6bo3MaMUhOaAxwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTEyMTcxOTU1NDNaFw0yNTEyMjAyMjA4NDNaMDMxMTAvBgNV BAMTKDgxRjdBRjVFMjA1Q0RCNUU4QkQ2RjhCMkY5NkFFRURERjMyRjZDMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT4BufwSH/xWhPznjgaj6hyyqX GNDt9DTWcEPtYouEjXizDXXWWInlVWNZCjgWOuIYAqozRMUORXjcC5o220JS1Dtu 5ZO6DigFDA8ld0pQyU0EzTWGfdGIDd3E8vXg+jN0O6uQ39PdgP80Rq9v6v7zQ6gr 4hIiJFKR5ZUrmKb43EQ7/RJZ26+FrknweTnQKRso924x8nxaWJtELzuYkWlYcxQS XAFQiLIJUApd8hffbIQEWJeWx9j2bqUlOZ/2FiiHt8VBSK7M62HyK8tX1qumSJDe yB42+hIiW8Q7dEk64DtlTXQaxYV+LdzxufPgrURl2NWi0qyNbT3owD7TAUN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgfevXiBc216L1viy+Wru3fMvbBEwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqaJuCDO8s/CRFG0/wRKTVmJ2mrbLUFU8Mx FhG9InW6NpdoOIz9t32NXhb21Zk+PNx+bqu4JAWBlxA97VRhOm/S6gVRd5Vo5yh0 7BMKZ4AAiJ1ueh61Ftgg27DhSZW6V9Rx/WyH5PSb4AdKkg9dtETjARZU78wlKSTE GSkm9dd+oYjdIRT+ta1akEGxMQ45FBqJ9ztDF0mWHkmQCS0rvy5jn9+TW3PuU6xK sKQKRFwJU5QJp7341FFffvM9g8FzdBw2xDD2wNyucpxrvsIn0KP6hYUQNS6vzB3H h7/EQZ98Sfq4HBTwfol7WEFhSMtdUFb8hmYkXab5E25E16Mwmqk= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:43 2025 by rpki-client