This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: olquwAzTSxEU1/zAVlNnci+nOD56y/DWOwTeIVqgt8o= Subject key identifier: 15:DC:66:CE:9A:D9:92:99:9E:54:40:79:9F:15:8F:A9:C9:12:60:26 Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 1F02369AD1B6E45045BCCF149C57AEFD6B2D4B05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 0381 Signing time: Sat 20 Dec 2025 09:52:05 +0000 Manifest this update: Sat 20 Dec 2025 09:47:05 +0000 Manifest next update: Tue 23 Dec 2025 11:24:05 +0000 Files and hashes: 1: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) 2: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: c2V2HX0Vu79KZGCcy4xKt2KDPiNezuOWgGsm3gejOEo=) 3: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 11:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:02:36:9a:d1:b6:e4:50:45:bc:cf:14:9c:57:ae:fd:6b:2d:4b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Dec 20 09:47:05 2025 GMT Not After : Dec 23 11:24:05 2025 GMT Subject: CN=15DC66CE9AD992999E5440799F158FA9C9126026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b9:2d:2c:51:73:49:57:26:22:a3:d4:12:dc: 12:68:2e:b3:6b:c7:db:4c:a3:42:42:88:13:22:79: 0a:4f:9c:01:8a:fb:66:fd:ac:b7:c7:20:f9:6b:d8: 6b:f5:cb:b8:82:41:bf:03:d2:92:e1:3d:ce:d0:05: c0:f2:a9:a3:93:8c:c5:fc:b0:04:24:26:2d:2e:98: 03:88:31:b9:35:68:84:89:07:e8:66:5f:45:55:53: 09:7e:be:c9:e2:b0:c7:e9:d7:bf:6c:d0:76:21:58: 33:56:30:10:5a:dd:f4:74:54:67:9a:55:c2:5a:d2: 2e:fc:93:e0:b3:a9:57:9e:5a:70:c1:ab:54:cb:65: a6:06:0d:24:32:21:66:40:e1:3a:b5:e2:c6:68:e6: ae:9f:59:0e:60:e3:cc:b5:1d:7e:0e:11:73:73:71: e7:62:49:51:3b:b5:b5:70:00:b2:d9:44:59:28:e4: e4:98:e4:0e:8d:90:c0:4d:ea:29:1f:56:d4:54:d2: e2:18:a1:40:f7:a6:b9:e4:e6:71:fc:92:f1:2c:07: b2:57:5f:f6:3e:64:b3:30:0d:64:16:ef:f7:12:aa: ed:c9:84:89:17:02:2a:88:00:a8:84:df:7f:7a:89: 53:db:a8:e7:ce:b3:e4:3e:c1:8f:2c:f5:78:d2:35: 4c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DC:66:CE:9A:D9:92:99:9E:54:40:79:9F:15:8F:A9:C9:12:60:26 X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7b:a0:2e:b8:63:ec:f9:69:a4:2a:56:27:51:17:fb:b0:a8: 57:42:f3:39:a6:e7:8b:3a:50:87:87:11:8c:a5:1f:f0:fb:17: 07:01:0a:32:18:9c:35:08:80:b1:e5:58:d2:b5:97:9d:7b:e5: 02:6e:b5:c8:a3:2e:1c:24:47:f3:d0:88:90:47:2d:7e:e4:07: 61:94:2b:62:a8:2f:de:c1:fb:64:26:a5:3c:8d:cb:04:61:91: 54:1a:42:fc:24:20:f0:f3:25:94:1a:cf:ac:4c:a7:a4:5b:ee: f6:e8:bc:a9:91:cc:af:69:ab:da:4c:4c:f2:4c:b8:1f:57:89: 2b:a2:b8:88:c0:a9:06:40:fa:ab:89:4b:be:3c:45:69:d0:c5: 92:1c:e7:27:96:8e:77:c7:9f:16:d6:56:92:d6:8d:70:3c:9b: 51:be:69:66:a4:f8:8d:98:df:78:5d:97:bb:c1:a4:9a:a8:d5: 1a:6f:06:6e:54:f5:54:fc:12:8a:9d:0c:37:fa:52:db:df:20: e3:e6:4e:43:5d:76:6d:97:82:81:02:12:22:12:9f:58:5f:fc: 1f:ea:10:00:c9:af:65:b9:32:e8:ca:21:46:55:8f:5f:87:f8: 26:35:55:4c:c8:59:f3:05:0d:0b:20:0e:3e:e3:17:89:56:d8: 96:f0:4f:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwI2mtG25FBFvM8UnFeu/WstSwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTEyMjAwOTQ3MDVaFw0yNTEyMjMxMTI0MDVaMDMxMTAvBgNV BAMTKDE1REM2NkNFOUFEOTkyOTk5RTU0NDA3OTlGMTU4RkE5QzkxMjYwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcuS0sUXNJVyYio9QS3BJoLrNr x9tMo0JCiBMieQpPnAGK+2b9rLfHIPlr2Gv1y7iCQb8D0pLhPc7QBcDyqaOTjMX8 sAQkJi0umAOIMbk1aISJB+hmX0VVUwl+vsnisMfp179s0HYhWDNWMBBa3fR0VGea VcJa0i78k+CzqVeeWnDBq1TLZaYGDSQyIWZA4Tq14sZo5q6fWQ5g48y1HX4OEXNz cediSVE7tbVwALLZRFko5OSY5A6NkMBN6ikfVtRU0uIYoUD3prnk5nH8kvEsB7JX X/Y+ZLMwDWQW7/cSqu3JhIkXAiqIAKiE3396iVPbqOfOs+Q+wY8s9XjSNUyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFdxmzprZkpmeVEB5nxWPqckSYCYwHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJB7oC64Y+z5aaQqVidRF/uwqFdC8zmm54s6 UIeHEYylH/D7FwcBCjIYnDUIgLHlWNK1l5175QJutcijLhwkR/PQiJBHLX7kB2GU K2KoL97B+2QmpTyNywRhkVQaQvwkIPDzJZQaz6xMp6Rb7vbovKmRzK9pq9pMTPJM uB9XiSuiuIjAqQZA+quJS748RWnQxZIc5yeWjnfHnxbWVpLWjXA8m1G+aWak+I2Y 33hdl7vBpJqo1RpvBm5U9VT8EoqdDDf6UtvfIOPmTkNddm2XgoECEiISn1hf/B/q EADJr2W5MujKIUZVj1+H+CY1VUzIWfMFDQsgDj7jF4lW2JbwT0E= -----END CERTIFICATE-----Generated at Mon Dec 22 06:31:40 2025 by rpki-client