This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: R5PoNRfRTcDDdi4wFG/KkIYFN+Z57z8/CSk8fWRxhJQ= Subject key identifier: E2:F2:AF:DE:35:3D:B8:48:93:AB:6C:DF:1A:45:B9:D8:CE:63:21:7C Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 6922F96C336C7EC51E2B02D089DF669A9CC98194 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: 0132 Signing time: Sat 20 Dec 2025 06:42:32 +0000 Manifest this update: Sat 20 Dec 2025 06:37:32 +0000 Manifest next update: Tue 23 Dec 2025 14:44:32 +0000 Files and hashes: 1: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: mp1Gq2insXou5CQDB8PwnsBKnqW+iCQyhzzr5styK5Y=) 2: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: VHpWx/ELEtp63dh9v37pcf0dfq0fnpuWymrPIJ3Qc9I=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: 1Y22heZzLW1uLBI2dj0FhbkrNAtQ677tG4XL0MCWVic=) 4: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: JJoDtolcZE+KR7sFSmDxYz3v23eUKolYl+DqisOigZw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:22:f9:6c:33:6c:7e:c5:1e:2b:02:d0:89:df:66:9a:9c:c9:81:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Dec 20 06:37:32 2025 GMT Not After : Dec 23 14:44:32 2025 GMT Subject: CN=E2F2AFDE353DB84893AB6CDF1A45B9D8CE63217C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:a6:3f:7a:30:c5:48:be:f9:1a:4b:5e:3f: ab:d0:02:96:2d:00:d7:4b:e4:1f:3d:e2:39:69:ff: 7d:f2:1b:1f:ac:51:50:c3:f1:5f:4f:c9:ba:fb:36: 24:ae:8d:b8:46:e6:06:a5:42:82:30:21:76:5a:91: b2:e8:73:08:9e:89:49:33:7a:b1:d9:48:d6:0a:75: 2f:fc:cd:ce:e7:3b:2f:09:ee:0f:f2:37:32:a3:2f: f6:8b:10:c0:4b:0b:3c:0f:c1:8f:b2:8d:ca:b6:1a: a9:24:1f:e0:e4:c5:3c:1e:4a:5a:da:6d:15:49:0d: 94:6e:4d:92:36:a3:17:a7:af:f7:9a:13:5d:41:91: 32:ed:b3:d7:ed:e8:1d:0f:c6:8e:cb:ca:b5:09:6b: 78:df:24:b0:83:cd:2e:4e:80:a3:db:88:74:97:91: 84:4e:cd:2c:fa:50:76:43:c2:5b:81:0f:98:6c:92: 9e:bc:ae:ee:b6:b8:f5:f8:22:87:70:a0:b2:08:1c: fc:8f:64:70:3d:e6:c8:46:48:fa:9d:51:d2:8e:ba: cb:7a:19:4a:a5:06:4f:9b:1c:cb:96:db:52:4a:1b: 02:14:fe:c4:3a:53:de:8f:e7:3d:43:b7:fc:2a:a3: 0d:6f:3e:70:ce:b7:c1:bd:67:9e:91:8f:a8:c7:6a: 4e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F2:AF:DE:35:3D:B8:48:93:AB:6C:DF:1A:45:B9:D8:CE:63:21:7C X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:01:8a:98:38:1d:8a:83:0f:6a:29:49:0b:08:1a:57:52:9f: 74:b9:0c:46:74:ef:1d:24:8b:00:9b:14:eb:49:13:a4:20:79: c5:6b:ef:0d:88:9a:ed:00:5b:2d:da:6b:43:c1:74:63:18:07: 1e:9b:4d:f3:48:c1:8f:f7:c2:e7:a1:33:0e:a0:dc:c4:29:94: af:bf:05:2a:49:fa:af:d0:c1:c2:2f:81:04:6e:f2:56:62:e7: 9c:63:4e:6a:08:f3:58:f8:b7:e0:ed:d6:6c:a7:8e:90:1d:66: 18:31:98:5d:67:8d:1a:cf:11:a6:3d:57:b1:f8:59:df:9a:89: df:9f:36:76:84:24:65:fe:ca:2d:d2:74:07:62:f1:a4:4e:57: 44:6a:2b:fc:d4:1b:e1:88:57:4d:b8:27:ea:02:26:2c:75:33: 07:9d:f4:92:75:c4:e0:bf:a3:2a:95:9d:78:36:45:e3:f7:3c: 58:d4:f1:a6:bf:55:be:b3:50:f8:12:d7:5f:a5:2e:0a:e4:e4: e7:b7:9b:b6:1e:c0:e4:4f:4e:f0:00:33:94:ba:cb:f9:fa:3f: c8:94:c5:1f:e1:d6:a8:2a:f7:69:3f:f1:43:ad:01:60:fc:78: 28:8b:0e:96:ba:3e:b1:68:48:10:a1:5b:3f:81:4b:7d:3d:8f: 33:78:b0:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaSL5bDNsfsUeKwLQid9mmpzJgZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTEyMjAwNjM3MzJaFw0yNTEyMjMxNDQ0MzJaMDMxMTAvBgNV BAMTKEUyRjJBRkRFMzUzREI4NDg5M0FCNkNERjFBNDVCOUQ4Q0U2MzIxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+aY/ejDFSL75GkteP6vQApYt ANdL5B894jlp/33yGx+sUVDD8V9Pybr7NiSujbhG5galQoIwIXZakbLocwieiUkz erHZSNYKdS/8zc7nOy8J7g/yNzKjL/aLEMBLCzwPwY+yjcq2GqkkH+DkxTweSlra bRVJDZRuTZI2oxenr/eaE11BkTLts9ft6B0Pxo7LyrUJa3jfJLCDzS5OgKPbiHSX kYROzSz6UHZDwluBD5hskp68ru62uPX4IodwoLIIHPyPZHA95shGSPqdUdKOust6 GUqlBk+bHMuW21JKGwIU/sQ6U96P5z1Dt/wqow1vPnDOt8G9Z56Rj6jHak7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4vKv3jU9uEiTq2zfGkW52M5jIXwwHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIBipg4HYqDD2opSQsIGldSn3S5DEZ07x0k iwCbFOtJE6QgecVr7w2Imu0AWy3aa0PBdGMYBx6bTfNIwY/3wuehMw6g3MQplK+/ BSpJ+q/QwcIvgQRu8lZi55xjTmoI81j4t+Dt1mynjpAdZhgxmF1njRrPEaY9V7H4 Wd+aid+fNnaEJGX+yi3SdAdi8aROV0RqK/zUG+GIV024J+oCJix1Mwed9JJ1xOC/ oyqVnXg2ReP3PFjU8aa/Vb6zUPgS11+lLgrk5Oe3m7YewORPTvAAM5S6y/n6P8iU xR/h1qgq92k/8UOtAWD8eCiLDpa6PrFoSBChWz+BS309jzN4sEk= -----END CERTIFICATE-----Generated at Mon Dec 22 17:14:57 2025 by rpki-client