This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: aH9tzfhHof5/topwoMLaOkldnXVapnZp0QLtyDsF89k= Subject key identifier: DE:65:39:E5:0C:0B:79:E1:5E:7A:1F:31:62:F9:07:6E:55:FA:2E:37 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 0D852A4E325B89AF6438CCEB13CF446AF853E1E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 0260 Signing time: Sat 20 Dec 2025 01:35:13 +0000 Manifest this update: Sat 20 Dec 2025 01:30:13 +0000 Manifest next update: Tue 23 Dec 2025 02:15:13 +0000 Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: wz5kTlIUb+wgAoXEYCYc7w08zn4dlBOLk3UUJ7NFZUA=) 2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 02:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:85:2a:4e:32:5b:89:af:64:38:cc:eb:13:cf:44:6a:f8:53:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Dec 20 01:30:13 2025 GMT Not After : Dec 23 02:15:13 2025 GMT Subject: CN=DE6539E50C0B79E15E7A1F3162F9076E55FA2E37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:00:0b:26:28:60:d7:c9:76:53:3a:a5:d2: 64:ba:89:3f:ba:f5:d0:10:78:5e:0b:8f:d5:80:13: c4:a9:82:09:83:7d:86:a8:39:f4:31:ad:3e:00:ff: da:5b:80:f4:39:c3:7d:9f:c7:09:7c:4a:a3:79:56: b1:dc:8a:c2:00:5a:8c:92:ad:54:99:0d:da:e8:70: 88:5c:7d:82:73:76:c1:1f:01:fc:d0:b8:e1:be:dc: 83:bc:93:00:e9:d2:7c:07:87:09:5d:a8:32:31:74: d6:42:17:e9:9b:a5:9a:46:2e:68:b3:9e:92:e9:d1: c7:60:ef:06:7f:07:36:b7:cc:3f:11:6a:93:b7:0c: ec:fd:e8:47:03:8b:6a:9e:e3:e6:d9:c5:7e:3a:62: 9f:d1:71:bf:6a:48:f2:7d:a1:b2:fa:19:d5:80:19: 9f:d2:11:8e:fb:26:ac:26:f8:1b:53:81:7b:dc:3d: 36:11:9f:61:77:d2:04:fa:15:f8:87:1b:68:09:a5: ab:28:83:bd:bc:8d:9c:eb:55:83:a8:c9:34:05:e8: 7a:f0:d6:60:66:34:fe:58:71:03:fa:df:00:9b:00: 1f:9f:27:8d:14:2e:55:27:c7:4d:78:de:21:53:02: 6e:1c:ee:58:e0:1b:0e:0a:91:34:b5:21:49:a0:46: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:65:39:E5:0C:0B:79:E1:5E:7A:1F:31:62:F9:07:6E:55:FA:2E:37 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:71:78:53:75:9a:c9:cc:dd:99:06:4b:f6:c4:11:ef:ca:cf: 93:f0:74:8d:95:3b:61:39:4b:36:bc:1e:b5:51:67:1f:27:c8: c2:6e:5f:82:13:17:45:8c:ba:9f:dd:fc:dd:96:a8:36:00:13: e3:02:88:86:4b:e8:80:30:bf:6c:37:a0:45:a3:4b:45:3b:0a: 92:ff:c4:4b:a0:5b:d4:ad:dd:13:1f:cc:63:1a:d4:03:dd:e8: 1a:0e:30:3d:2a:47:85:94:1e:dc:d7:17:c9:b5:5a:39:75:a9: 3f:c7:1f:28:e6:37:1d:cd:a7:50:04:18:6a:98:11:5e:f8:1c: 0e:7e:20:52:4c:16:ad:b3:91:6b:3f:50:28:0b:d7:89:d6:1b: d0:1d:d0:83:38:0b:6d:a7:c3:74:1f:7d:b2:58:41:e8:70:2f: 5a:3a:2b:05:0a:42:fb:d1:28:76:0b:54:34:47:84:20:8d:45: af:68:0c:24:54:f5:5f:9b:6d:01:00:96:52:a7:25:14:a6:94: c9:94:2b:50:fe:7c:12:98:39:3c:8e:62:c6:1d:4a:97:db:f2: ad:a9:0e:92:03:2a:53:d9:78:37:a1:5a:c8:d4:0d:a7:69:6b: 8f:7d:75:dc:93:c7:1c:3f:af:cc:3a:89:f8:34:88:65:4f:a8: 93:b1:fa:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYUqTjJbia9kOMzrE89EavhT4eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTEyMjAwMTMwMTNaFw0yNTEyMjMwMjE1MTNaMDMxMTAvBgNV BAMTKERFNjUzOUU1MEMwQjc5RTE1RTdBMUYzMTYyRjkwNzZFNTVGQTJFMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hAALJihg18l2Uzql0mS6iT+6 9dAQeF4Lj9WAE8SpggmDfYaoOfQxrT4A/9pbgPQ5w32fxwl8SqN5VrHcisIAWoyS rVSZDdrocIhcfYJzdsEfAfzQuOG+3IO8kwDp0nwHhwldqDIxdNZCF+mbpZpGLmiz npLp0cdg7wZ/Bza3zD8RapO3DOz96EcDi2qe4+bZxX46Yp/Rcb9qSPJ9obL6GdWA GZ/SEY77Jqwm+BtTgXvcPTYRn2F30gT6FfiHG2gJpasog728jZzrVYOoyTQF6Hrw 1mBmNP5YcQP63wCbAB+fJ40ULlUnx0143iFTAm4c7ljgGw4KkTS1IUmgRlCNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3mU55QwLeeFeeh8xYvkHblX6LjcwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBxeFN1msnM3ZkGS/bEEe/Kz5PwdI2VO2E5 Sza8HrVRZx8nyMJuX4ITF0WMup/d/N2WqDYAE+MCiIZL6IAwv2w3oEWjS0U7CpL/ xEugW9St3RMfzGMa1APd6BoOMD0qR4WUHtzXF8m1Wjl1qT/HHyjmNx3Np1AEGGqY EV74HA5+IFJMFq2zkWs/UCgL14nWG9Ad0IM4C22nw3QffbJYQehwL1o6KwUKQvvR KHYLVDRHhCCNRa9oDCRU9V+bbQEAllKnJRSmlMmUK1D+fBKYOTyOYsYdSpfb8q2p DpIDKlPZeDehWsjUDadpa499ddyTxxw/r8w6ifg0iGVPqJOx+ks= -----END CERTIFICATE-----Generated at Sun Dec 21 08:35:43 2025 by rpki-client