This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: u9zez8jytKp9vnnMEb8XBr6FGs9eHnZpbKOL60pWx1I= Subject key identifier: 46:BA:A0:A3:01:89:CC:E7:D5:E8:D9:30:78:6F:B0:CC:69:88:59:E3 Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 0A33370F3403824E7632F9671B166BC87F6E8ECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 01F5 Signing time: Wed 24 Dec 2025 03:50:13 +0000 Manifest this update: Wed 24 Dec 2025 03:45:13 +0000 Manifest next update: Sat 27 Dec 2025 08:39:13 +0000 Files and hashes: 1: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) 2: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: c3GVMhoVUMdxiuOAuUAOYi6oiM9MVfiJutLqPuwZyYI=) 3: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 4: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) 5: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:33:37:0f:34:03:82:4e:76:32:f9:67:1b:16:6b:c8:7f:6e:8e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Dec 24 03:45:13 2025 GMT Not After : Dec 27 08:39:13 2025 GMT Subject: CN=46BAA0A30189CCE7D5E8D930786FB0CC698859E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:4a:07:b3:ef:d9:ff:61:c4:66:7b:ff:7d: c8:cd:ea:39:53:c9:8a:bb:04:ea:3b:b3:8e:8e:60: fe:c8:6e:e5:27:54:fc:5e:64:e5:37:e2:d4:e9:12: 56:c0:3b:5e:46:77:ac:c9:a3:ea:68:6d:6d:1f:8c: d5:72:6f:94:bd:9a:90:48:3d:f9:5c:53:0b:27:ce: be:ad:a1:0e:d4:05:20:72:d0:6b:9f:e3:c0:a8:43: c9:47:af:01:43:63:27:e2:11:cb:33:05:b5:f0:ab: 02:05:7e:ae:94:0c:bf:10:93:5f:fc:9a:aa:e8:fa: 16:c3:87:c3:84:c5:be:dd:3f:16:06:d4:a1:9e:37: e6:f6:f9:5c:71:f6:78:82:d4:b4:da:fc:f6:b1:7e: 99:be:22:d3:56:07:f5:a9:69:b3:3f:c8:75:ae:d1: 7f:aa:f1:f1:aa:40:00:d6:26:fd:6c:ee:e2:b8:81: cf:5f:6d:15:c8:e1:d1:1d:f1:a4:f9:3b:05:14:cc: df:53:4d:ee:e0:13:a1:85:db:79:1b:c3:55:e9:bf: 7b:9d:25:33:e3:e5:d8:9a:8c:46:a0:7c:0e:72:57: 40:81:95:4b:29:6a:e4:29:94:4d:17:29:b0:31:58: 33:5a:02:5b:2e:bd:b0:b2:b3:04:80:47:33:6b:2f: 8f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BA:A0:A3:01:89:CC:E7:D5:E8:D9:30:78:6F:B0:CC:69:88:59:E3 X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:95:1d:78:27:7e:4f:e6:fd:6a:ec:80:08:13:15:04:c6:08: 21:73:fe:00:03:71:5a:7a:0e:3c:7d:fe:f8:e1:60:b1:e4:d4: df:bd:67:2a:7e:0e:db:42:7b:65:5f:bd:a1:04:93:55:ee:90: 9d:54:5a:b4:57:63:81:bc:e8:97:38:82:88:24:36:0f:f4:61: b0:df:60:ea:6f:1d:16:ce:1a:c4:fb:65:10:db:e1:78:2a:a3: c4:76:4b:af:20:f7:08:51:f4:fd:81:1a:29:f4:d6:77:c5:db: d2:55:df:2e:86:c2:41:98:45:dc:b4:f4:e5:7e:34:8e:c7:3e: d6:99:45:cd:d4:cd:59:d7:5c:bd:41:73:95:be:bd:20:eb:49: 26:05:03:02:a1:fa:f2:bd:13:cc:1f:c2:bf:eb:e7:36:0c:03: c9:91:f6:cc:82:40:7e:fe:da:75:25:71:e9:8b:8f:f5:ba:24: 6d:0a:a7:1c:73:1f:c7:c1:51:f3:09:d0:bb:e8:94:69:32:86: c7:85:a9:19:05:64:bb:02:b8:74:37:d7:3a:86:e5:29:39:f6: 70:3e:d7:ea:24:36:30:3e:d6:90:40:84:04:a7:7c:62:e8:02: 05:f7:96:f4:db:b5:95:1f:27:c6:30:22:35:9a:a9:21:3e:47: 78:c6:99:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjM3DzQDgk52MvlnGxZryH9ujsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTEyMjQwMzQ1MTNaFw0yNTEyMjcwODM5MTNaMDMxMTAvBgNV BAMTKDQ2QkFBMEEzMDE4OUNDRTdENUU4RDkzMDc4NkZCMENDNjk4ODU5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QEoHs+/Z/2HEZnv/fcjN6jlT yYq7BOo7s46OYP7IbuUnVPxeZOU34tTpElbAO15Gd6zJo+pobW0fjNVyb5S9mpBI PflcUwsnzr6toQ7UBSBy0Guf48CoQ8lHrwFDYyfiEcszBbXwqwIFfq6UDL8Qk1/8 mqro+hbDh8OExb7dPxYG1KGeN+b2+Vxx9niC1LTa/Paxfpm+ItNWB/WpabM/yHWu 0X+q8fGqQADWJv1s7uK4gc9fbRXI4dEd8aT5OwUUzN9TTe7gE6GF23kbw1Xpv3ud JTPj5diajEagfA5yV0CBlUspauQplE0XKbAxWDNaAlsuvbCyswSARzNrL49HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURrqgowGJzOfV6NkweG+wzGmIWeMwHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISVHXgnfk/m/WrsgAgTFQTGCCFz/gADcVp6 Djx9/vjhYLHk1N+9Zyp+DttCe2VfvaEEk1XukJ1UWrRXY4G86Jc4gogkNg/0YbDf YOpvHRbOGsT7ZRDb4Xgqo8R2S68g9whR9P2BGin01nfF29JV3y6GwkGYRdy09OV+ NI7HPtaZRc3UzVnXXL1Bc5W+vSDrSSYFAwKh+vK9E8wfwr/r5zYMA8mR9syCQH7+ 2nUlcemLj/W6JG0KpxxzH8fBUfMJ0LvolGkyhseFqRkFZLsCuHQ31zqG5Sk59nA+ 1+okNjA+1pBAhASnfGLoAgX3lvTbtZUfJ8YwIjWaqSE+R3jGmQc= -----END CERTIFICATE-----Generated at Wed Dec 24 21:52:17 2025 by rpki-client