This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: OlSGnf6e/lxjTulTqKgCzuabaFVM6ooNGdS34cnttT0= Subject key identifier: A1:C7:F1:55:23:D4:CE:8C:79:59:AA:70:18:E5:B1:FC:AF:FD:EC:FE Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 17677875D793B40F258444F35C06B2976052BB1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0534 Signing time: Thu 18 Dec 2025 00:20:43 +0000 Manifest this update: Thu 18 Dec 2025 00:15:43 +0000 Manifest next update: Sun 21 Dec 2025 10:42:43 +0000 Files and hashes: 1: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 2: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 3: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 4: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 5: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 6: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 8: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: iEsbdr988Qmvjx5d2Q7Zg6mqj1DluXbQcLzU7+nEqcA=) 9: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:67:78:75:d7:93:b4:0f:25:84:44:f3:5c:06:b2:97:60:52:bb:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Dec 18 00:15:43 2025 GMT Not After : Dec 21 10:42:43 2025 GMT Subject: CN=A1C7F15523D4CE8C7959AA7018E5B1FCAFFDECFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:eb:b2:1b:2d:d6:e7:36:1e:f7:d4:46:45:98: b8:93:a9:ba:1f:74:bf:63:d9:0e:38:a2:90:07:e4: 59:b8:e5:d6:2e:34:0a:d8:2a:a0:eb:b8:26:14:df: 23:46:10:c1:16:c3:25:87:06:07:02:dd:96:18:3f: 88:7c:d1:a7:17:8c:b5:eb:83:e0:f2:4b:c3:fd:2b: db:db:09:13:72:7b:c6:6b:a1:04:f3:ea:79:e0:d7: fd:1d:e6:f5:91:81:e3:9f:1e:6c:c0:b0:29:36:91: ff:03:f5:46:77:8b:49:1a:cd:77:fe:dc:c5:5d:7d: 3a:17:a3:d2:35:bf:8f:11:12:39:30:12:4c:d0:4b: 3e:2c:79:47:d5:b8:d1:db:f0:25:6c:2a:6d:a9:07: 38:81:36:49:b9:30:13:d3:05:9a:f2:5a:4c:60:d6: e9:3c:92:23:d1:45:15:53:75:57:4b:b1:f6:60:7b: 55:a7:57:32:3f:7e:ba:62:f6:d9:d8:87:0e:27:7f: df:58:dd:c1:f2:33:d6:ab:5e:9d:3c:63:8c:24:33: a8:60:7d:2a:cf:cf:ca:34:b4:4f:87:fe:a9:00:c5: 31:81:f0:fe:44:08:17:d6:04:30:a0:eb:b3:a2:e2: ad:e9:34:91:92:9e:48:d0:07:a5:94:e6:1c:c1:df: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C7:F1:55:23:D4:CE:8C:79:59:AA:70:18:E5:B1:FC:AF:FD:EC:FE X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:76:a7:2d:ba:d3:1b:04:f7:6a:cc:9b:cc:4a:59:0a:df:67: e0:06:65:6e:85:a0:00:fb:31:df:03:d6:07:51:ea:68:ef:3b: 5e:cd:44:88:07:ca:65:59:be:67:80:40:82:d8:f4:a4:4d:af: 52:1a:0c:73:32:74:84:52:1e:28:42:32:89:a2:a5:a8:d2:ba: 8e:5b:e0:72:b3:8a:d3:80:51:1b:d1:90:31:1d:f0:a1:8a:14: b0:8a:64:9f:a3:5d:03:24:37:0a:e2:98:cb:e3:42:07:60:f5: 42:18:4c:20:15:f8:8c:d9:de:7d:24:6a:b0:6e:71:fd:be:78: 6e:f8:c3:e4:06:fd:5d:c2:86:4c:3f:6b:22:ad:ed:30:ab:1e: 35:48:04:59:11:07:68:b3:55:4b:56:d1:7f:ce:d4:48:ac:7d: 9a:5f:4e:6b:98:14:bc:86:e4:94:b3:a8:93:d2:b3:1a:a6:96: 76:a6:6c:86:20:aa:0f:30:25:ab:26:66:e6:ed:4a:eb:9f:ff: 08:8e:56:93:e4:5d:cc:51:19:c7:27:46:10:2f:fc:da:b4:14: 3d:53:40:90:06:5f:13:5d:2e:28:ce:ac:e2:e5:71:2d:97:2a: 24:56:2e:a7:fa:d7:c8:0c:37:db:04:5d:48:af:44:c0:23:e0: 79:4b:df:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2d4ddeTtA8lhETzXAayl2BSuxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTEyMTgwMDE1NDNaFw0yNTEyMjExMDQyNDNaMDMxMTAvBgNV BAMTKEExQzdGMTU1MjNENENFOEM3OTU5QUE3MDE4RTVCMUZDQUZGREVDRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt67IbLdbnNh731EZFmLiTqbof dL9j2Q44opAH5Fm45dYuNArYKqDruCYU3yNGEMEWwyWHBgcC3ZYYP4h80acXjLXr g+DyS8P9K9vbCRNye8ZroQTz6nng1/0d5vWRgeOfHmzAsCk2kf8D9UZ3i0kazXf+ 3MVdfToXo9I1v48REjkwEkzQSz4seUfVuNHb8CVsKm2pBziBNkm5MBPTBZryWkxg 1uk8kiPRRRVTdVdLsfZge1WnVzI/frpi9tnYhw4nf99Y3cHyM9arXp08Y4wkM6hg fSrPz8o0tE+H/qkAxTGB8P5ECBfWBDCg67Oi4q3pNJGSnkjQB6WU5hzB365hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUocfxVSPUzox5WapwGOWx/K/97P4wHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKl2py260xsE92rMm8xKWQrfZ+AGZW6FoAD7 Md8D1gdR6mjvO17NRIgHymVZvmeAQILY9KRNr1IaDHMydIRSHihCMomipajSuo5b 4HKzitOAURvRkDEd8KGKFLCKZJ+jXQMkNwrimMvjQgdg9UIYTCAV+IzZ3n0karBu cf2+eG74w+QG/V3Chkw/ayKt7TCrHjVIBFkRB2izVUtW0X/O1EisfZpfTmuYFLyG 5JSzqJPSsxqmlnambIYgqg8wJasmZubtSuuf/wiOVpPkXcxRGccnRhAv/Nq0FD1T QJAGXxNdLijOrOLlcS2XKiRWLqf618gMN9sEXUivRMAj4HlL3zc= -----END CERTIFICATE-----Generated at Fri Dec 19 23:39:27 2025 by rpki-client