This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: ydWfPC7P1GfsbWUZT+4Xye2KAJ/4ddPpMzjxssF1qBI= Subject key identifier: A5:7A:81:E2:E5:2C:71:B8:E7:E4:CE:BA:3E:BC:9E:07:97:56:85:1D Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 79C51F1E333C9E877F03D8BABFAD84033A1DB927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0233 Signing time: Thu 18 Dec 2025 13:00:57 +0000 Manifest this update: Thu 18 Dec 2025 12:55:57 +0000 Manifest next update: Mon 22 Dec 2025 00:07:57 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: PCJYgjg5znXYTWRJBDOwpI7aT0ZdfA9JxfRijjhtJkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c5:1f:1e:33:3c:9e:87:7f:03:d8:ba:bf:ad:84:03:3a:1d:b9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Dec 18 12:55:57 2025 GMT Not After : Dec 22 00:07:57 2025 GMT Subject: CN=A57A81E2E52C71B8E7E4CEBA3EBC9E079756851D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:49:20:22:d6:4d:d4:3a:86:5c:de:d9:1a:2b: db:0e:2a:b7:9b:da:ca:94:aa:d4:9f:13:20:47:84: b8:6a:41:85:15:87:b6:0b:05:d5:20:ec:47:bf:d5: 7f:fb:ba:9b:df:e8:9d:c6:d5:91:81:10:d5:e6:69: 89:fa:d8:d9:d6:76:24:88:42:29:9a:ef:c5:41:20: f8:3c:f6:a7:71:5b:69:8c:e8:30:cb:fa:ed:b0:84: b5:81:b9:db:38:d9:51:50:f1:b1:1c:f9:36:81:09: 52:ac:76:3d:37:96:d3:00:e8:41:e3:db:c2:ba:80: 3b:31:66:db:3f:f9:5a:b8:e5:fd:85:5c:fd:fa:c3: b4:0b:b1:6e:5b:f4:96:f7:88:70:99:39:ce:7d:58: a0:f6:20:2d:f2:43:bc:96:a6:07:4c:28:b6:fd:e4: df:a3:6b:8c:42:35:3e:5d:d7:cf:12:fb:aa:28:f7: d1:9d:bc:d6:d9:e2:1e:fa:23:54:7d:eb:21:78:7f: 82:7e:21:b3:e0:57:20:6f:15:b3:f5:7e:65:a9:45: 56:c1:cc:b9:8d:d7:13:38:8c:59:4c:d4:b9:57:ef: c2:ac:8d:f0:32:41:76:d2:82:f8:54:d4:40:37:45: 6b:34:3b:88:0f:54:5d:a9:6c:30:bd:17:22:64:e3: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:81:E2:E5:2C:71:B8:E7:E4:CE:BA:3E:BC:9E:07:97:56:85:1D X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:83:84:c0:9e:9a:1c:bd:50:f9:62:2a:9d:03:a5:7d:fa:01: 55:91:56:96:fd:4d:7e:3b:d5:46:63:10:a7:76:0d:06:d8:15: 44:89:53:70:95:cc:f1:a8:c2:63:74:20:bd:77:bf:36:1a:9a: fc:98:c0:ae:a1:59:c2:e8:53:c2:68:36:29:be:d8:64:1b:a4: 6d:32:f3:d5:b3:d8:32:a5:c3:32:b6:25:a0:2f:ab:cf:bb:54: 1a:9d:f8:e4:da:00:9b:db:2b:f7:6a:fd:d5:d6:71:6a:bb:c9: 71:78:cb:7e:08:0f:4c:d2:c4:ba:72:4f:34:3f:8a:15:b1:dc: 03:ff:0a:41:16:80:fa:d5:eb:17:79:4f:5a:4f:ed:d4:d8:a2: 57:e7:76:3b:3c:01:0e:7c:6f:ad:45:3d:f3:a0:5b:e2:39:1d: cd:cf:9c:c2:31:b3:bd:d6:5b:f6:fe:88:9d:73:f3:5b:5a:58: 3a:de:7d:b3:35:1c:11:f1:cd:d3:ac:04:6b:06:f4:9c:9f:c2: 18:c1:6f:f6:e8:25:7d:fe:db:60:8b:84:b8:11:41:5a:4c:78: 21:b0:98:7f:6d:c8:e4:da:e1:c9:da:b3:eb:4c:2a:9d:6b:84: a1:fb:23:66:cc:e6:d1:20:8d:5d:37:3a:c8:39:4c:70:dc:1c: b4:5c:d8:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecUfHjM8nod/A9i6v62EAzoduScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTEyMTgxMjU1NTdaFw0yNTEyMjIwMDA3NTdaMDMxMTAvBgNV BAMTKEE1N0E4MUUyRTUyQzcxQjhFN0U0Q0VCQTNFQkM5RTA3OTc1Njg1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSSAi1k3UOoZc3tkaK9sOKreb 2sqUqtSfEyBHhLhqQYUVh7YLBdUg7Ee/1X/7upvf6J3G1ZGBENXmaYn62NnWdiSI Qima78VBIPg89qdxW2mM6DDL+u2whLWBuds42VFQ8bEc+TaBCVKsdj03ltMA6EHj 28K6gDsxZts/+Vq45f2FXP36w7QLsW5b9Jb3iHCZOc59WKD2IC3yQ7yWpgdMKLb9 5N+ja4xCNT5d188S+6oo99GdvNbZ4h76I1R96yF4f4J+IbPgVyBvFbP1fmWpRVbB zLmN1xM4jFlM1LlX78KsjfAyQXbSgvhU1EA3RWs0O4gPVF2pbDC9FyJk4+lFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpXqB4uUscbjn5M66PryeB5dWhR0wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALaDhMCemhy9UPliKp0DpX36AVWRVpb9TX47 1UZjEKd2DQbYFUSJU3CVzPGowmN0IL13vzYamvyYwK6hWcLoU8JoNim+2GQbpG0y 89Wz2DKlwzK2JaAvq8+7VBqd+OTaAJvbK/dq/dXWcWq7yXF4y34ID0zSxLpyTzQ/ ihWx3AP/CkEWgPrV6xd5T1pP7dTYolfndjs8AQ58b61FPfOgW+I5Hc3PnMIxs73W W/b+iJ1z81taWDrefbM1HBHxzdOsBGsG9JyfwhjBb/boJX3+22CLhLgRQVpMeCGw mH9tyOTa4cnas+tMKp1rhKH7I2bM5tEgjV03Osg5THDcHLRc2FE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:50 2025 by rpki-client