This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: LU7OSJgsH54tDbLBxwaDB2T4ct8fpuiTKBjWVuC88+E= Subject key identifier: B1:EB:C9:CF:FA:DC:B3:20:4F:05:32:03:E9:ED:15:4B:2B:5C:C3:D9 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 1CF70D45889F49C1E1956D1B24AEFAEF3F30D2E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 0241 Signing time: Wed 17 Dec 2025 01:42:05 +0000 Manifest this update: Wed 17 Dec 2025 01:37:05 +0000 Manifest next update: Sat 20 Dec 2025 09:29:05 +0000 Files and hashes: 1: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) 2: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: RD6oIL3moTi76BgqQ1Duu/Gf67mEhXj2VVrSZvbtieI=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f7:0d:45:88:9f:49:c1:e1:95:6d:1b:24:ae:fa:ef:3f:30:d2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Dec 17 01:37:05 2025 GMT Not After : Dec 20 09:29:05 2025 GMT Subject: CN=B1EBC9CFFADCB3204F053203E9ED154B2B5CC3D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:5a:19:9e:a2:04:be:03:30:46:8f:f4:d8: 29:df:28:b3:3c:0c:97:fe:a5:b8:ca:9e:19:47:09: b8:3b:e2:c8:ad:4d:aa:1f:fe:01:f7:7e:30:3a:a8: 03:5c:e3:3d:08:4d:8b:9c:9f:bf:74:19:89:73:bd: a0:e4:67:ea:18:19:f3:3d:ad:d7:d2:f4:fd:f5:77: 95:bc:81:f4:c1:50:c8:ad:a7:61:12:de:46:3c:1f: ce:23:f5:e6:5c:cf:1f:c4:11:d0:72:7f:d6:8c:51: b0:8b:64:6a:87:c8:71:24:fc:a8:e7:82:20:73:9a: 14:32:ae:6d:55:b4:ee:4a:b5:15:c3:f6:5e:f7:42: 04:be:08:27:7b:84:77:fe:c2:ca:32:f8:a0:e4:21: 50:06:4a:6e:da:8f:f1:77:a5:a5:17:87:18:67:26: 87:23:05:b1:8d:b6:b5:26:b2:91:c4:ce:6e:07:fa: d8:ea:99:5f:38:2b:5a:63:89:f8:10:b8:34:ec:a2: bc:9f:a8:61:93:44:1c:58:35:13:7a:88:32:92:1a: 11:81:13:19:ea:39:9a:de:52:e5:08:fb:03:04:df: 8a:22:65:93:f5:3e:94:6a:56:67:a2:eb:f0:c9:e5: f0:2b:34:97:41:c6:fb:9f:69:41:a8:a6:d1:81:16: e6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EB:C9:CF:FA:DC:B3:20:4F:05:32:03:E9:ED:15:4B:2B:5C:C3:D9 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:ec:3d:e7:01:85:17:14:e3:ad:3e:02:3e:32:2f:dc:d5:be: 15:4e:97:9c:34:2f:11:64:cc:42:4d:ac:b8:26:55:a5:37:87: 4e:5d:c1:6e:8a:3e:60:06:b4:69:eb:18:ff:a2:2d:be:42:3e: eb:62:d3:da:b6:d7:9a:31:03:b3:c2:de:33:f8:4f:e6:38:46: 45:02:d7:aa:ab:f7:74:07:7b:38:8a:d8:0f:b1:fa:bd:1a:4c: 10:51:9f:48:45:18:6e:0e:af:c2:e4:2f:64:26:a0:76:02:95: 78:d5:9e:45:c0:20:e5:35:8c:8f:8c:dd:fd:e8:ec:e5:1e:81: 03:27:7b:bd:4d:76:c8:3e:bf:a4:87:e2:fa:e7:16:d8:d4:da: 65:96:68:a4:b9:96:7d:10:01:71:1e:15:1a:d5:49:eb:65:2e: 21:d1:12:7a:d9:78:b9:26:0b:97:d3:90:8c:89:61:8c:03:e0: 83:a6:7e:14:0e:27:52:67:b2:45:81:07:91:7c:8e:d5:9c:86: 1e:b9:f8:c3:79:07:9b:70:e2:1c:fb:75:32:b5:be:06:68:c7: 00:41:57:e9:c5:85:86:01:7e:10:d1:61:f6:1d:fa:d7:87:6f: 32:cd:73:26:66:65:f5:16:31:16:1d:ce:1a:bf:55:b8:bc:1c: 2b:98:dd:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHPcNRYifScHhlW0bJK767z8w0uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTEyMTcwMTM3MDVaFw0yNTEyMjAwOTI5MDVaMDMxMTAvBgNV BAMTKEIxRUJDOUNGRkFEQ0IzMjA0RjA1MzIwM0U5RUQxNTRCMkI1Q0MzRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3VoZnqIEvgMwRo/02CnfKLM8 DJf+pbjKnhlHCbg74sitTaof/gH3fjA6qANc4z0ITYucn790GYlzvaDkZ+oYGfM9 rdfS9P31d5W8gfTBUMitp2ES3kY8H84j9eZczx/EEdByf9aMUbCLZGqHyHEk/Kjn giBzmhQyrm1VtO5KtRXD9l73QgS+CCd7hHf+wsoy+KDkIVAGSm7aj/F3paUXhxhn JocjBbGNtrUmspHEzm4H+tjqmV84K1pjifgQuDTsoryfqGGTRBxYNRN6iDKSGhGB ExnqOZreUuUI+wME34oiZZP1PpRqVmei6/DJ5fArNJdBxvufaUGoptGBFuajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsevJz/rcsyBPBTID6e0VSytcw9kwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7sPecBhRcU460+Aj4yL9zVvhVOl5w0LxFk zEJNrLgmVaU3h05dwW6KPmAGtGnrGP+iLb5CPuti09q215oxA7PC3jP4T+Y4RkUC 16qr93QHeziK2A+x+r0aTBBRn0hFGG4Or8LkL2QmoHYClXjVnkXAIOU1jI+M3f3o 7OUegQMne71Ndsg+v6SH4vrnFtjU2mWWaKS5ln0QAXEeFRrVSetlLiHREnrZeLkm C5fTkIyJYYwD4IOmfhQOJ1JnskWBB5F8jtWchh65+MN5B5tw4hz7dTK1vgZoxwBB V+nFhYYBfhDRYfYd+teHbzLNcyZmZfUWMRYdzhq/Vbi8HCuY3UI= -----END CERTIFICATE-----Generated at Wed Dec 17 16:51:29 2025 by rpki-client