This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: DNVI8FeqC1KCem08O/QnT+BuH1bMiwPTEwEEluRO6JA= Subject key identifier: 12:37:92:4F:38:40:52:8A:C7:58:EF:CA:BB:07:E4:D2:97:12:5D:0F Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 3462E726667B65BA6A048E69B41BA6095EC77C5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 01F2 Signing time: Wed 17 Dec 2025 17:10:03 +0000 Manifest this update: Wed 17 Dec 2025 17:05:03 +0000 Manifest next update: Sat 20 Dec 2025 21:16:03 +0000 Files and hashes: 1: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) 2: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: rBautE+ZmIfcEiTTwj8SdRhxzyjYjDa1z1FbGPQzlqk=) 3: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 4: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) 5: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 21:16:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:62:e7:26:66:7b:65:ba:6a:04:8e:69:b4:1b:a6:09:5e:c7:7c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Dec 17 17:05:03 2025 GMT Not After : Dec 20 21:16:03 2025 GMT Subject: CN=1237924F3840528AC758EFCABB07E4D297125D0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:04:de:05:6e:b6:c7:9a:2e:bd:11:cf:aa:00: 20:af:0b:1d:cb:43:6f:72:ea:30:dc:95:f5:2f:3e: a1:2b:9d:aa:f6:fe:72:aa:63:db:26:a3:ce:92:cb: dd:d8:91:81:ad:51:60:9c:aa:b4:ac:dd:30:1a:67: 3e:59:f6:f0:df:87:6a:b0:e3:ab:d7:b8:1b:d8:9e: 9c:21:45:0b:34:54:9b:0e:2d:2c:f4:6f:c6:71:d6: cf:e3:e7:99:44:55:2a:5b:a6:5f:7f:dc:2b:70:99: 5a:95:5c:cd:a4:dc:ac:f7:6f:24:58:1c:b1:7c:31: 8b:ea:7e:12:fb:0d:3f:53:bb:9c:bd:56:55:2f:d4: 40:b7:d0:c3:f0:d2:33:dd:2e:f5:29:29:79:56:79: cd:ec:c3:d2:be:f9:57:26:16:27:12:ae:5c:19:90: 9c:62:4b:11:9f:a5:d0:93:43:25:6c:e3:75:c7:eb: ff:6c:e6:bc:1c:a0:31:24:2e:10:5b:44:1d:7a:35: 43:75:a9:91:cd:d0:58:b0:c8:1d:9b:21:7a:2c:23: e5:54:e0:25:ad:5a:b3:84:91:52:50:46:ee:bc:4e: a7:5c:7c:8d:ab:0e:ea:71:c1:14:1a:4e:9f:dc:98: dc:13:5f:1b:f3:88:e9:e1:31:70:15:57:66:6c:12: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:92:4F:38:40:52:8A:C7:58:EF:CA:BB:07:E4:D2:97:12:5D:0F X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d1:f9:8d:b9:20:85:40:3e:a7:cc:4b:25:e0:1f:e3:e2:a9: 40:fb:60:bd:7d:59:ff:6d:4e:b2:54:a7:fa:9b:dc:93:c9:ac: 43:71:7d:20:f0:56:71:9e:54:6f:07:a0:42:50:5a:27:8e:a5: 96:1e:b1:50:4e:46:26:d9:09:7f:68:77:15:29:2c:b9:20:48: ae:07:e6:f7:29:76:ea:ad:d7:94:bc:1d:2d:e4:bd:d3:e9:ac: 58:8b:58:3b:a3:cd:5e:ed:68:95:d2:0a:f1:4a:f9:ef:cf:a0: 15:63:3b:9a:ac:d4:a8:ec:9a:f6:d1:c7:9e:33:4a:f2:ff:3d: 7b:3f:cd:e8:f0:72:38:b6:50:85:3f:61:c1:c0:00:71:10:12: 6a:05:dc:c2:d9:1d:d4:e6:10:1b:1e:cd:1c:84:cd:79:3a:48: 4b:6e:84:8b:8d:8c:43:4d:f5:10:6e:f5:39:f8:2c:4a:c4:58: 1f:93:7c:c6:55:ea:51:51:8b:8d:9c:59:82:72:79:68:39:66: 66:9c:c1:22:62:ae:a0:33:6b:ef:f0:0b:bd:2a:3f:68:b7:23: fb:0b:eb:c0:93:72:ae:13:ff:29:ee:fb:d0:72:af:4e:1f:7d: d7:de:4d:62:03:61:8f:7d:0c:52:3a:e9:97:bb:15:19:51:a1: 71:6e:81:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGLnJmZ7ZbpqBI5ptBumCV7HfFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTEyMTcxNzA1MDNaFw0yNTEyMjAyMTE2MDNaMDMxMTAvBgNV BAMTKDEyMzc5MjRGMzg0MDUyOEFDNzU4RUZDQUJCMDdFNEQyOTcxMjVEMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBN4FbrbHmi69Ec+qACCvCx3L Q29y6jDclfUvPqErnar2/nKqY9smo86Sy93YkYGtUWCcqrSs3TAaZz5Z9vDfh2qw 46vXuBvYnpwhRQs0VJsOLSz0b8Zx1s/j55lEVSpbpl9/3CtwmVqVXM2k3Kz3byRY HLF8MYvqfhL7DT9Tu5y9VlUv1EC30MPw0jPdLvUpKXlWec3sw9K++VcmFicSrlwZ kJxiSxGfpdCTQyVs43XH6/9s5rwcoDEkLhBbRB16NUN1qZHN0FiwyB2bIXosI+VU 4CWtWrOEkVJQRu68TqdcfI2rDupxwRQaTp/cmNwTXxvziOnhMXAVV2ZsEvuVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjeSTzhAUorHWO/Kuwfk0pcSXQ8wHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7R+Y25IIVAPqfMSyXgH+PiqUD7YL19Wf9t TrJUp/qb3JPJrENxfSDwVnGeVG8HoEJQWieOpZYesVBORibZCX9odxUpLLkgSK4H 5vcpduqt15S8HS3kvdPprFiLWDujzV7taJXSCvFK+e/PoBVjO5qs1KjsmvbRx54z SvL/PXs/zejwcji2UIU/YcHAAHEQEmoF3MLZHdTmEBsezRyEzXk6SEtuhIuNjENN 9RBu9Tn4LErEWB+TfMZV6lFRi42cWYJyeWg5ZmacwSJirqAza+/wC70qP2i3I/sL 68CTcq4T/ynu+9Byr04ffdfeTWIDYY99DFI66Ze7FRlRoXFugc4= -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:37 2025 by rpki-client