This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: zH4cN9p8aLNo9RssqD7ux8mk2pOcWNSAs5P7n1l+CJQ= Subject key identifier: C9:7F:67:42:F9:2D:1A:A0:16:34:BD:CB:4F:B3:FA:C5:8D:F9:9F:27 Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 3BF79A905BA04A322CA43A3ECADE5CADE99C9EB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 0149 Signing time: Tue 16 Dec 2025 22:31:51 +0000 Manifest this update: Tue 16 Dec 2025 22:26:51 +0000 Manifest next update: Sat 20 Dec 2025 09:26:51 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=) 2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: ++NIWLkJshuK/ezwrET+syea6OABLduww2SGSIZE1SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f7:9a:90:5b:a0:4a:32:2c:a4:3a:3e:ca:de:5c:ad:e9:9c:9e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Dec 16 22:26:51 2025 GMT Not After : Dec 20 09:26:51 2025 GMT Subject: CN=C97F6742F92D1AA01634BDCB4FB3FAC58DF99F27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e0:dc:c2:c5:f2:2c:13:ac:4e:ac:5b:b7:be: 00:03:2b:35:93:ae:77:04:7f:83:98:9c:64:ec:7c: 06:56:97:bb:c4:47:ea:d9:5e:ce:8c:c6:4b:b3:5f: 2b:b3:0a:b2:53:d5:0c:75:7e:f5:ff:da:9e:52:3c: 68:de:e4:31:cf:b3:ca:d0:b8:9a:78:e3:4d:8b:64: 86:3e:19:a5:b6:fa:14:1e:16:9a:1c:8a:a0:eb:da: 61:f8:be:22:10:1d:4d:e8:9d:45:5b:b3:02:bf:94: 5e:4d:5c:ba:f8:d1:92:00:dd:bc:75:cc:9b:03:f1: 4a:9a:19:4e:b2:55:c3:d9:d7:ce:a6:43:dc:b4:ed: 67:96:6f:d2:3c:e9:99:e5:c7:ef:2b:a7:d4:fe:24: 4b:ff:f8:af:b6:94:f9:f5:20:e9:0e:84:83:3c:43: 9c:fd:54:1b:db:0c:80:8d:b2:8b:38:ee:6f:83:e0: e7:11:8d:ca:0c:20:c2:28:21:8a:44:8c:ff:1a:13: 86:4c:17:59:7b:b2:7b:7d:2b:34:ed:02:cf:c5:cb: e1:7e:aa:2b:e5:5b:70:fd:f9:8b:a9:45:5e:44:6b: e1:65:3b:7b:f8:36:03:d1:ff:7d:c8:5a:80:da:32: f9:6b:89:5d:fa:b5:d7:ba:4e:d9:35:69:73:6f:0b: d5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7F:67:42:F9:2D:1A:A0:16:34:BD:CB:4F:B3:FA:C5:8D:F9:9F:27 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:43:05:84:74:16:6e:7c:20:cc:14:58:71:d3:11:91:09:ea: 49:c8:ff:4b:54:81:8f:7c:5a:91:10:be:eb:40:4b:e5:39:71: e7:2c:0e:da:78:f5:7f:ad:71:6e:67:ec:ed:7e:27:5a:fd:00: fb:d4:24:05:ec:a1:ea:85:7e:b6:5c:e5:2c:c7:12:7e:3d:2d: 5f:35:af:76:da:6f:ff:8a:c4:e8:1f:4a:ef:d2:12:ea:e2:73: ce:c5:f9:2f:47:43:7d:f9:02:bf:86:42:85:e4:9c:53:89:db: 41:a5:34:d2:b8:d5:53:3c:7e:87:73:4f:29:47:81:5a:c4:6e: 87:cb:c0:49:bb:af:cb:71:0b:42:4c:dc:8b:70:1c:9e:60:74: 76:e4:d6:22:b7:9a:d5:e6:a9:f2:9d:b0:f8:a6:a4:d7:1d:19: c3:39:b6:fd:3d:23:12:4d:1b:8a:d5:2e:69:3f:11:a9:12:9b: a6:12:bf:d4:dd:70:30:49:17:8e:7d:42:85:ce:bc:6c:a7:6e: 8c:6a:2e:6c:de:f4:ca:b1:32:66:3d:fd:41:bc:db:3a:7d:9c: 7c:3a:ea:54:51:43:3d:72:f8:5a:e1:6d:95:7f:27:c7:5c:6f: a9:7e:59:6b:6f:85:52:ff:13:b5:38:44:52:f1:61:a3:d5:94: 4f:97:f2:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/eakFugSjIspDo+yt5cremcnrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTEyMTYyMjI2NTFaFw0yNTEyMjAwOTI2NTFaMDMxMTAvBgNV BAMTKEM5N0Y2NzQyRjkyRDFBQTAxNjM0QkRDQjRGQjNGQUM1OERGOTlGMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl4NzCxfIsE6xOrFu3vgADKzWT rncEf4OYnGTsfAZWl7vER+rZXs6MxkuzXyuzCrJT1Qx1fvX/2p5SPGje5DHPs8rQ uJp4402LZIY+GaW2+hQeFpociqDr2mH4viIQHU3onUVbswK/lF5NXLr40ZIA3bx1 zJsD8UqaGU6yVcPZ186mQ9y07WeWb9I86Znlx+8rp9T+JEv/+K+2lPn1IOkOhIM8 Q5z9VBvbDICNsos47m+D4OcRjcoMIMIoIYpEjP8aE4ZMF1l7snt9KzTtAs/Fy+F+ qivlW3D9+YupRV5Ea+FlO3v4NgPR/33IWoDaMvlriV36tde6Ttk1aXNvC9UVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyX9nQvktGqAWNL3LT7P6xY35nycwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdDBYR0Fm58IMwUWHHTEZEJ6knI/0tUgY98 WpEQvutAS+U5cecsDtp49X+tcW5n7O1+J1r9APvUJAXsoeqFfrZc5SzHEn49LV81 r3bab/+KxOgfSu/SEuric87F+S9HQ335Ar+GQoXknFOJ20GlNNK41VM8fodzTylH gVrEbofLwEm7r8txC0JM3ItwHJ5gdHbk1iK3mtXmqfKdsPimpNcdGcM5tv09IxJN G4rVLmk/EakSm6YSv9TdcDBJF459QoXOvGynboxqLmze9MqxMmY9/UG82zp9nHw6 6lRRQz1y+FrhbZV/J8dcb6l+WWtvhVL/E7U4RFLxYaPVlE+X8p4= -----END CERTIFICATE-----Generated at Fri Dec 19 21:15:17 2025 by rpki-client