This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: HDNE8IgXkXm630xhMe49E3+sqC9et7yJUkfKGe1pU8s= Subject key identifier: 07:33:9C:50:62:8F:DB:A5:1D:78:C0:D5:06:B9:47:2C:7D:4C:16:F8 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 09A96B4868BB993490AB4A532F98C016E81953DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 0231 Signing time: Wed 17 Dec 2025 13:12:21 +0000 Manifest this update: Wed 17 Dec 2025 13:07:21 +0000 Manifest next update: Sun 21 Dec 2025 00:04:21 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 3: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: Hs46hrKiL8P6DIDn+21Y5+XBkNmqE7ac15IuXoSMTJo=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a9:6b:48:68:bb:99:34:90:ab:4a:53:2f:98:c0:16:e8:19:53:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Dec 17 13:07:21 2025 GMT Not After : Dec 21 00:04:21 2025 GMT Subject: CN=07339C50628FDBA51D78C0D506B9472C7D4C16F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b8:d9:b8:01:a3:5d:c5:4f:39:d0:ab:86:01: e7:e6:b6:9d:a3:a9:76:38:71:64:bc:76:8f:9c:4a: eb:e1:67:79:91:17:08:ce:be:05:81:16:d9:4b:da: 26:9c:04:70:6d:f0:08:dd:b1:2e:70:fb:e6:ab:94: 77:5a:d5:72:36:3a:51:38:9e:05:c5:50:77:2e:6f: 80:98:ad:77:86:74:61:c5:77:f7:3c:bc:07:fb:1a: 12:e3:aa:f0:3a:dc:eb:68:96:32:b4:0a:6a:19:f5: 5a:78:e0:ae:7e:68:1d:43:88:32:db:69:b7:e8:5d: d9:31:61:99:c1:70:64:03:ff:50:c7:ed:e8:a3:3d: f0:c5:b7:49:f5:7b:6c:8e:80:64:32:f6:c9:3e:06: 21:5d:8e:15:b9:22:f6:16:e6:91:92:20:ad:b7:36: 15:aa:6f:33:6f:8a:fb:51:54:21:14:6b:63:dc:2d: 57:c4:b9:b9:32:6e:44:ae:5a:67:e4:42:1a:9b:30: 08:44:b3:8e:9f:3a:0d:49:86:fe:8b:47:ec:87:7a: 98:7f:e6:a4:30:72:ae:4b:96:7a:cb:84:a0:04:96: 91:65:ae:ac:fe:24:29:5f:74:88:36:15:c3:f6:d2: cb:e6:61:f3:3c:ba:33:77:52:f7:cf:49:23:0b:f8: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:33:9C:50:62:8F:DB:A5:1D:78:C0:D5:06:B9:47:2C:7D:4C:16:F8 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:74:ea:8d:30:cd:f3:58:06:c6:33:5b:23:4c:d7:6f:57:b4: 97:70:16:6d:b1:c1:a9:f2:6b:69:e8:13:2e:e9:16:65:7b:fb: c8:07:1d:ab:09:a1:64:db:14:b7:18:21:03:d0:c3:ae:98:4b: 7e:fe:ff:37:a7:49:c3:75:02:ea:2a:90:9f:f3:f2:d2:74:d4: 9f:dd:2a:cf:96:c0:05:6c:a5:34:45:40:9c:19:18:3c:da:16: 6e:99:4b:b2:d9:23:79:6f:10:7c:f3:23:dc:15:f8:83:c1:52: e1:b3:af:3c:24:35:86:f5:ca:6c:9e:bf:02:ff:eb:5d:0d:05: 37:ef:a6:6f:e7:5c:de:9f:83:73:d6:5c:3e:64:e6:83:16:4e: 0d:48:b0:f2:78:9b:87:04:2b:fc:cf:8e:fc:e8:e6:d5:bb:45: c3:d5:2f:f6:a0:7d:4a:c2:3c:49:dc:4d:e9:c0:f3:95:85:c7: 21:43:29:2e:07:20:54:fa:0b:c4:1a:d5:cf:da:24:5d:db:d6: f3:7c:41:ff:b4:f0:5b:b5:59:cf:c7:21:50:92:f7:d4:d1:af: 79:3f:22:17:83:8e:29:89:08:23:06:31:c0:e7:bb:e4:ea:72: 64:38:e8:b0:c7:46:33:68:ce:73:f7:ac:b5:0c:a6:e7:67:0a: 6d:4a:6e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCalrSGi7mTSQq0pTL5jAFugZU98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTEyMTcxMzA3MjFaFw0yNTEyMjEwMDA0MjFaMDMxMTAvBgNV BAMTKDA3MzM5QzUwNjI4RkRCQTUxRDc4QzBENTA2Qjk0NzJDN0Q0QzE2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbuNm4AaNdxU850KuGAefmtp2j qXY4cWS8do+cSuvhZ3mRFwjOvgWBFtlL2iacBHBt8AjdsS5w++arlHda1XI2OlE4 ngXFUHcub4CYrXeGdGHFd/c8vAf7GhLjqvA63OtoljK0CmoZ9Vp44K5+aB1DiDLb abfoXdkxYZnBcGQD/1DH7eijPfDFt0n1e2yOgGQy9sk+BiFdjhW5IvYW5pGSIK23 NhWqbzNvivtRVCEUa2PcLVfEubkybkSuWmfkQhqbMAhEs46fOg1Jhv6LR+yHeph/ 5qQwcq5LlnrLhKAElpFlrqz+JClfdIg2FcP20svmYfM8ujN3UvfPSSML+AHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBzOcUGKP26UdeMDVBrlHLH1MFvgwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK506o0wzfNYBsYzWyNM129XtJdwFm2xwany a2noEy7pFmV7+8gHHasJoWTbFLcYIQPQw66YS37+/zenScN1AuoqkJ/z8tJ01J/d Ks+WwAVspTRFQJwZGDzaFm6ZS7LZI3lvEHzzI9wV+IPBUuGzrzwkNYb1ymyevwL/ 610NBTfvpm/nXN6fg3PWXD5k5oMWTg1IsPJ4m4cEK/zPjvzo5tW7RcPVL/agfUrC PEncTenA85WFxyFDKS4HIFT6C8Qa1c/aJF3b1vN8Qf+08Fu1Wc/HIVCS99TRr3k/ IheDjimJCCMGMcDnu+TqcmQ46LDHRjNoznP3rLUMpudnCm1Kbv4= -----END CERTIFICATE-----Generated at Sat Dec 20 20:26:09 2025 by rpki-client