This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: Q4JQWB03Fa8Ox6ynpiPpBP3o0EbNXeN2FgaoAy/aWjc= Subject key identifier: 0D:BA:B5:90:3E:D2:B1:02:26:ED:65:28:78:C6:B9:C6:81:07:A9:D7 Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 37F8865781D5455C4D4035F66E7655F40A5E42D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 0534 Signing time: Thu 18 Dec 2025 08:22:25 +0000 Manifest this update: Thu 18 Dec 2025 08:17:25 +0000 Manifest next update: Sun 21 Dec 2025 13:08:25 +0000 Files and hashes: 1: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 2: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 3: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: lcj7O5h/3hiLvJIWVB8Ej8J2bIUiLSnIXWIZ7ek92xg=) 4: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 5: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 6: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f8:86:57:81:d5:45:5c:4d:40:35:f6:6e:76:55:f4:0a:5e:42:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Dec 18 08:17:25 2025 GMT Not After : Dec 21 13:08:25 2025 GMT Subject: CN=0DBAB5903ED2B10226ED652878C6B9C68107A9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:49:44:a6:2e:b4:5c:01:60:41:98:08:89: 48:ac:ac:f1:78:29:c4:6a:f0:67:f1:86:dc:15:4c: 75:65:c4:f9:a3:ce:00:48:80:42:e9:b0:94:e6:ef: 85:2a:7a:5e:ac:a5:8c:e5:40:8e:86:fe:9a:61:41: 9e:2a:78:fa:05:41:d0:80:1f:e9:88:f9:01:f0:8e: 2a:15:a1:b2:45:1f:91:e5:c2:f9:fd:99:a7:69:50: 36:28:25:3f:8b:c9:ae:ed:d7:b1:47:a1:b7:91:b0: d9:18:9b:58:c5:84:e3:58:58:a4:2e:5b:cc:07:a9: 2a:07:44:12:a5:9b:ca:15:99:31:14:99:5a:49:6b: 39:cb:16:35:e4:dd:e0:b9:13:e4:26:88:e0:e0:e0: 53:68:7d:ae:99:70:76:dc:ee:fb:ac:c0:a1:f0:9e: de:25:25:3a:c2:f2:91:4b:96:5b:0a:ad:95:9c:2c: a4:3b:ef:3c:c2:e4:ba:0b:db:02:38:5f:52:dc:38: bb:65:64:02:8c:1b:11:64:6f:16:0b:90:49:d6:14: dd:d0:fe:44:21:d8:7b:eb:e1:2c:5d:f8:93:05:9b: fe:0f:af:92:ad:42:2e:da:50:3e:a3:a9:23:d8:f1: 8c:45:f7:0f:f7:a6:72:53:f7:c3:61:78:b7:54:c4: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BA:B5:90:3E:D2:B1:02:26:ED:65:28:78:C6:B9:C6:81:07:A9:D7 X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a7:c6:4f:fd:ef:e0:fc:51:a9:b7:e3:16:22:e2:50:08:1a: 9a:d9:5f:80:76:d3:3e:40:94:c8:d8:08:c7:8d:e6:5a:37:1d: 33:b4:a2:9e:a6:65:94:3e:36:c3:99:c4:44:55:22:7c:e3:66: dd:ec:7a:a4:7e:40:5e:de:92:00:99:6d:d8:c6:89:59:ae:e9: 2f:40:c5:5d:9e:86:89:35:cb:b3:5a:9a:78:52:02:b2:ce:c1: c8:54:15:b9:52:6f:85:1f:86:34:ef:62:26:90:b9:98:7e:85: b4:2c:9c:21:6f:25:84:b1:4c:cf:2e:48:b3:8c:63:84:8d:39: 2e:de:3a:43:b3:78:4b:94:4d:fc:1e:3e:48:ed:51:b2:a1:07: 7b:c4:02:4d:9c:d3:20:d0:64:f5:02:b1:a9:ff:02:ed:db:6e: e5:62:f3:cf:75:85:f6:66:0e:de:50:d0:02:b9:dd:a6:2f:ca: 17:5c:d6:9f:54:09:90:8d:9c:a8:67:b0:ec:40:0d:ec:8f:3e: 71:19:dc:9e:85:d8:0d:4d:54:7a:0b:09:87:4e:b6:35:01:3b: be:9f:2b:4c:ae:68:37:c9:67:dd:63:38:33:27:c0:02:55:7e: de:0c:8a:b2:76:b4:d3:80:e4:82:a6:c9:3d:5b:a5:bb:2f:a2: cd:21:0c:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN/iGV4HVRVxNQDX2bnZV9ApeQtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTEyMTgwODE3MjVaFw0yNTEyMjExMzA4MjVaMDMxMTAvBgNV BAMTKDBEQkFCNTkwM0VEMkIxMDIyNkVENjUyODc4QzZCOUM2ODEwN0E5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLyElEpi60XAFgQZgIiUisrPF4 KcRq8GfxhtwVTHVlxPmjzgBIgELpsJTm74Uqel6spYzlQI6G/pphQZ4qePoFQdCA H+mI+QHwjioVobJFH5Hlwvn9madpUDYoJT+Lya7t17FHobeRsNkYm1jFhONYWKQu W8wHqSoHRBKlm8oVmTEUmVpJaznLFjXk3eC5E+QmiODg4FNofa6ZcHbc7vuswKHw nt4lJTrC8pFLllsKrZWcLKQ77zzC5LoL2wI4X1LcOLtlZAKMGxFkbxYLkEnWFN3Q /kQh2Hvr4Sxd+JMFm/4Pr5KtQi7aUD6jqSPY8YxF9w/3pnJT98NheLdUxAvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbq1kD7SsQIm7WUoeMa5xoEHqdcwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKnxk/97+D8Uam34xYi4lAIGprZX4B20z5A lMjYCMeN5lo3HTO0op6mZZQ+NsOZxERVInzjZt3seqR+QF7ekgCZbdjGiVmu6S9A xV2ehok1y7NamnhSArLOwchUFblSb4UfhjTvYiaQuZh+hbQsnCFvJYSxTM8uSLOM Y4SNOS7eOkOzeEuUTfwePkjtUbKhB3vEAk2c0yDQZPUCsan/Au3bbuVi8891hfZm Dt5Q0AK53aYvyhdc1p9UCZCNnKhnsOxADeyPPnEZ3J6F2A1NVHoLCYdOtjUBO76f K0yuaDfJZ91jODMnwAJVft4MirJ2tNOA5IKmyT1bpbsvos0hDKk= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:54 2025 by rpki-client