This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: bhq+8MKS5v2Cw+WBlNKr4gkKlfT44r9NWNa7jhkSRdY= Subject key identifier: 1A:7B:A1:76:5C:DA:32:48:92:FA:14:96:92:7D:D1:E4:65:23:3D:A4 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 4B45B84CA91ABE527B7625F51FA814AC8015DCD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 0535 Signing time: Sat 27 Dec 2025 04:51:51 +0000 Manifest this update: Sat 27 Dec 2025 04:46:51 +0000 Manifest next update: Tue 30 Dec 2025 13:05:51 +0000 Files and hashes: 1: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) 3: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: kejsL3qByOzx4u/6cVqABOmVRcx9xuZtMU90lr5SVQE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 13:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:45:b8:4c:a9:1a:be:52:7b:76:25:f5:1f:a8:14:ac:80:15:dc:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Dec 27 04:46:51 2025 GMT Not After : Dec 30 13:05:51 2025 GMT Subject: CN=1A7BA1765CDA324892FA1496927DD1E465233DA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0b:60:34:5f:25:19:77:ed:d0:ed:87:09:95: fb:17:6c:0c:dd:05:02:92:bd:c3:a6:d0:d4:12:1e: 38:7f:ae:72:16:2b:61:7f:ba:5d:ca:87:37:03:9e: 69:42:af:57:e6:4c:85:ed:3a:a1:bb:b3:96:19:12: 6c:ac:8a:03:9b:da:ba:a5:86:d7:b8:6c:3b:0d:c3: ba:07:b0:3d:5e:f7:0f:e4:00:a0:d7:27:1f:30:2c: 02:8f:ba:a0:0e:ee:2c:18:e8:e0:39:63:19:4a:f2: 26:88:04:4d:20:bf:38:ff:f6:e4:a0:1b:41:1b:fc: 9f:37:e6:b9:3c:61:94:c4:f0:c4:70:f8:64:1f:ff: c9:d4:ff:74:84:f7:5b:e0:44:82:6d:cc:a1:e2:85: fd:11:e0:9b:9e:cc:2b:62:e9:d9:06:2d:bd:81:5c: 8e:f3:0e:1e:d8:ae:52:59:ab:b5:ed:2d:60:1e:dc: cc:58:fe:bc:e5:6b:7e:54:af:0e:65:17:4f:0f:50: 4f:27:43:1d:0f:44:7e:01:08:55:ca:c6:20:6e:d5: 6e:de:a0:64:b6:1b:77:a2:7c:19:b6:d3:f3:13:7a: 6a:7a:eb:4a:7e:22:c3:b4:a3:14:c8:c8:3a:62:1f: 2b:f5:f1:79:a0:6b:75:4a:13:3b:a8:03:25:04:fb: aa:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7B:A1:76:5C:DA:32:48:92:FA:14:96:92:7D:D1:E4:65:23:3D:A4 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:09:18:22:5c:b3:01:4d:86:b2:7a:6a:c6:9c:8b:7a:68: 08:b2:98:12:73:3b:80:41:3e:ff:4e:6f:37:3f:42:d2:ea:98: d8:51:5f:29:b7:60:19:fe:a6:b1:e2:3e:35:12:92:c9:2e:47: 02:50:51:8b:c3:12:1d:8e:66:76:57:14:a8:f5:00:d4:58:1b: 0c:df:32:a4:1b:b2:aa:69:5d:21:22:1a:34:19:bc:1b:47:9b: 9a:fd:1d:02:e7:29:89:1f:88:40:f9:b1:e2:61:e2:d1:c5:92: 28:22:a9:a3:c9:a9:4d:40:82:8c:da:35:ab:6a:f4:81:e7:11: 48:e4:dd:db:90:a1:8c:0f:84:d7:0c:9f:b3:70:62:d3:2d:fc: 4b:8d:39:42:5d:cf:03:0d:23:67:4f:22:0f:30:4b:fd:3f:03: fe:bf:58:1c:8b:41:5a:0d:a9:13:a6:b4:b0:b1:fe:a0:ce:dc: af:da:18:25:26:8e:d3:59:6b:96:fe:1c:37:7d:91:5a:1b:7e: aa:8c:68:eb:89:c1:02:99:14:e0:c0:f9:d6:4f:ca:59:05:8b: 86:7c:4e:83:35:bb:6f:a4:b4:56:09:56:0e:13:74:61:31:75: 98:50:85:57:24:7a:0c:39:58:9c:b0:f9:d9:c7:69:fe:e5:21: bb:64:32:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS0W4TKkavlJ7diX1H6gUrIAV3NIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTEyMjcwNDQ2NTFaFw0yNTEyMzAxMzA1NTFaMDMxMTAvBgNV BAMTKDFBN0JBMTc2NUNEQTMyNDg5MkZBMTQ5NjkyN0REMUU0NjUyMzNEQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkC2A0XyUZd+3Q7YcJlfsXbAzd BQKSvcOm0NQSHjh/rnIWK2F/ul3KhzcDnmlCr1fmTIXtOqG7s5YZEmysigOb2rql hte4bDsNw7oHsD1e9w/kAKDXJx8wLAKPuqAO7iwY6OA5YxlK8iaIBE0gvzj/9uSg G0Eb/J835rk8YZTE8MRw+GQf/8nU/3SE91vgRIJtzKHihf0R4JuezCti6dkGLb2B XI7zDh7YrlJZq7XtLWAe3MxY/rzla35Urw5lF08PUE8nQx0PRH4BCFXKxiBu1W7e oGS2G3eifBm20/MTemp660p+IsO0oxTIyDpiHyv18Xmga3VKEzuoAyUE+6oNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGnuhdlzaMkiS+hSWkn3R5GUjPaQwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlPCRgiXLMBTYayemrGnIt6aAiymBJzO4BB Pv9Obzc/QtLqmNhRXym3YBn+prHiPjUSkskuRwJQUYvDEh2OZnZXFKj1ANRYGwzf MqQbsqppXSEiGjQZvBtHm5r9HQLnKYkfiED5seJh4tHFkigiqaPJqU1AgozaNatq 9IHnEUjk3duQoYwPhNcMn7NwYtMt/EuNOUJdzwMNI2dPIg8wS/0/A/6/WByLQVoN qROmtLCx/qDO3K/aGCUmjtNZa5b+HDd9kVobfqqMaOuJwQKZFODA+dZPylkFi4Z8 ToM1u2+ktFYJVg4TdGExdZhQhVckegw5WJyw+dnHaf7lIbtkMqs= -----END CERTIFICATE-----Generated at Sun Dec 28 23:25:58 2025 by rpki-client