This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: IhpRUXLxtoNE3V0JdQ2fL0svTU1ZkUKtpnvnCLmvY6E= Subject key identifier: 8B:0B:81:D4:49:6A:0C:67:80:44:1A:0A:EB:42:47:B8:71:A7:4B:23 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 4FACA35EA469178C83560261BDF93813F4E72D9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 0531 Signing time: Thu 18 Dec 2025 12:21:49 +0000 Manifest this update: Thu 18 Dec 2025 12:16:49 +0000 Manifest next update: Sun 21 Dec 2025 21:49:49 +0000 Files and hashes: 1: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: JiauSWezvwsRp1xWaNtg6kg0jumoiJV76DKGX8jaHT0=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 21:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ac:a3:5e:a4:69:17:8c:83:56:02:61:bd:f9:38:13:f4:e7:2d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Dec 18 12:16:49 2025 GMT Not After : Dec 21 21:49:49 2025 GMT Subject: CN=8B0B81D4496A0C6780441A0AEB4247B871A74B23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:01:69:27:a0:76:38:41:22:73:ab:4d:d9: 8c:cb:9a:22:20:9b:16:dc:fc:44:9c:97:5b:89:3b: 64:c7:14:67:8a:a6:bf:7c:90:31:34:71:12:c8:c2: a0:08:e5:b1:b8:9d:54:41:13:9b:2c:53:65:84:71: 89:22:f9:99:f7:b2:c0:f4:f6:59:8a:e7:13:5b:bb: fd:a3:17:33:dd:da:1c:7b:b2:9d:24:99:c8:da:75: 2c:94:47:9e:24:65:a1:6b:e9:80:e5:05:e6:38:c1: 3f:60:85:f9:3a:5d:19:5a:f3:96:14:96:ac:fd:42: 73:62:da:ee:8c:ee:7b:5a:c9:cc:f6:b9:a5:b8:7c: c1:5f:1d:7c:70:54:de:cb:ce:dc:24:22:6c:80:a8: 9e:ef:3a:35:bd:51:19:4b:4e:14:69:a1:78:4d:0b: 31:58:88:b0:1b:9c:44:4a:f2:49:f4:23:97:b7:8c: 72:d2:61:5f:ee:60:63:8f:50:45:5c:f6:9c:11:57: e4:3b:d1:99:71:5a:3b:0d:bb:15:42:71:d4:65:db: 0b:56:59:3d:50:22:af:d3:83:8b:e6:32:b1:d9:31: df:c0:9d:fb:f3:aa:c9:1c:08:16:a3:80:26:58:2a: 55:dc:e3:b5:41:17:12:17:a8:c6:18:9d:fe:37:81: 0f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0B:81:D4:49:6A:0C:67:80:44:1A:0A:EB:42:47:B8:71:A7:4B:23 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d4:ed:60:20:2a:42:c0:85:6c:52:c8:52:a4:18:e8:48:d1: 3c:1a:cd:d9:f9:c5:6e:0e:4b:78:d7:8b:1f:ae:3d:e7:f5:c3: fd:3b:88:ab:94:ef:dc:69:06:c9:cf:9c:af:f6:64:b5:0c:8e: d8:8d:9d:61:f0:1e:6e:54:e7:1c:8a:e7:2f:49:1a:f3:17:57: 96:36:f6:48:53:6e:e6:0e:30:e1:28:68:85:55:2f:60:03:89: 83:6d:74:76:e0:36:49:28:2b:28:76:31:ca:25:0d:84:48:d7: 41:f3:ce:6f:38:dd:3b:c5:a7:e7:cd:8c:e4:83:da:10:e5:d0: 9c:56:78:b7:5b:97:ca:14:79:0e:90:90:41:3b:2d:c6:79:d6: da:05:40:13:00:e7:f7:f0:85:b0:2f:ff:23:43:8f:a1:9f:85: 92:eb:9f:81:f8:61:12:fa:a9:66:49:8e:b4:ba:b0:95:f5:3b: f9:f5:e5:16:c1:7f:4d:1b:cb:15:07:2d:46:95:29:44:e0:4c: d4:cc:a1:e2:21:ee:97:e4:60:bd:19:5d:2f:ee:03:29:dc:77: 36:4e:7b:1d:cf:2a:35:3a:82:c4:8c:c5:23:c0:ae:81:ab:ea: 39:1f:08:6a:5c:a8:9a:6a:7c:a5:ea:92:cf:a6:b7:e4:e5:3c: ac:31:f7:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6yjXqRpF4yDVgJhvfk4E/TnLZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTEyMTgxMjE2NDlaFw0yNTEyMjEyMTQ5NDlaMDMxMTAvBgNV BAMTKDhCMEI4MUQ0NDk2QTBDNjc4MDQ0MUEwQUVCNDI0N0I4NzFBNzRCMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cgFpJ6B2OEEic6tN2YzLmiIg mxbc/EScl1uJO2THFGeKpr98kDE0cRLIwqAI5bG4nVRBE5ssU2WEcYki+Zn3ssD0 9lmK5xNbu/2jFzPd2hx7sp0kmcjadSyUR54kZaFr6YDlBeY4wT9ghfk6XRla85YU lqz9QnNi2u6M7ntaycz2uaW4fMFfHXxwVN7LztwkImyAqJ7vOjW9URlLThRpoXhN CzFYiLAbnERK8kn0I5e3jHLSYV/uYGOPUEVc9pwRV+Q70ZlxWjsNuxVCcdRl2wtW WT1QIq/Tg4vmMrHZMd/AnfvzqskcCBajgCZYKlXc47VBFxIXqMYYnf43gQ9xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwuB1ElqDGeARBoK60JHuHGnSyMwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrU7WAgKkLAhWxSyFKkGOhI0Twazdn5xW4O S3jXix+uPef1w/07iKuU79xpBsnPnK/2ZLUMjtiNnWHwHm5U5xyK5y9JGvMXV5Y2 9khTbuYOMOEoaIVVL2ADiYNtdHbgNkkoKyh2McolDYRI10Hzzm843TvFp+fNjOSD 2hDl0JxWeLdbl8oUeQ6QkEE7LcZ51toFQBMA5/fwhbAv/yNDj6GfhZLrn4H4YRL6 qWZJjrS6sJX1O/n15RbBf00byxUHLUaVKUTgTNTMoeIh7pfkYL0ZXS/uAyncdzZO ex3PKjU6gsSMxSPAroGr6jkfCGpcqJpqfKXqks+mt+TlPKwx9z8= -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:21 2025 by rpki-client