This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: Uq+41SVMcGaFxhc2vqHl/3ZM0KetFasu5covimSd5Og= Subject key identifier: 5D:B2:70:34:4D:E0:20:3B:56:EA:E6:D0:05:4C:F3:1B:BE:F6:8B:C4 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 42121C750C3D6DF599CB1D9A116BFC886EF2F6C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 95 Signing time: Wed 03 Dec 2025 08:11:53 +0000 Manifest this update: Wed 03 Dec 2025 08:06:53 +0000 Manifest next update: Sat 06 Dec 2025 18:26:53 +0000 Files and hashes: 1: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: dCpi7ZdE0pWu6TQpOM20SaA29YoWl+h5KlLU7H2EtmI=) 2: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 3: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:12:1c:75:0c:3d:6d:f5:99:cb:1d:9a:11:6b:fc:88:6e:f2:f6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Dec 3 08:06:53 2025 GMT Not After : Dec 6 18:26:53 2025 GMT Subject: CN=5DB270344DE0203B56EAE6D0054CF31BBEF68BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:66:df:dd:3d:cf:ae:bf:87:0b:d6:9c:d5: 06:12:bb:da:b3:61:7f:6f:34:90:a0:d5:72:25:ea: 5e:bd:cd:26:83:58:1e:9c:a2:90:f9:bb:26:a1:ae: ad:38:bd:e7:1f:ef:7f:72:57:e7:7d:8f:8b:c9:ce: 0f:6a:d9:0c:be:0b:a5:7e:69:64:12:64:a9:1a:c3: c0:b3:b5:2d:37:55:7c:46:1e:ee:3f:76:ed:c1:19: df:2a:e5:0a:ae:fb:a7:00:cf:75:4b:92:2c:52:05: 97:ec:15:61:ba:c4:73:03:0e:57:b9:30:69:1e:d8: 85:76:97:75:18:75:4f:e9:59:6a:bc:cf:76:a0:71: 7d:2a:27:b7:ea:d2:dc:b6:83:bf:aa:23:95:90:1f: 8d:fc:0d:c9:5c:2f:b6:05:8f:52:85:c7:0f:58:9c: 24:58:4d:0e:75:1d:ad:a7:e1:8f:f0:3f:01:1a:a1: cc:54:5d:76:12:28:f2:b2:cb:cc:12:ca:5f:34:db: 2e:95:ea:3e:3a:c3:ca:95:e9:eb:08:33:d8:56:df: 27:6f:ab:bc:d9:5f:36:d7:58:14:06:a6:48:1f:52: 81:68:d1:b0:0e:5e:58:f9:c4:aa:f3:3b:ec:d7:91: 7f:d8:f7:20:5f:4c:0d:be:42:c6:01:57:2d:67:7d: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:B2:70:34:4D:E0:20:3B:56:EA:E6:D0:05:4C:F3:1B:BE:F6:8B:C4 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:13:58:b0:e0:6b:30:62:b1:06:a0:a1:3d:23:22:40:e8:4d: 0e:ab:b9:f4:1d:95:47:13:49:02:2d:57:54:ed:1b:cb:74:62: 54:ac:1f:fe:b4:4e:64:61:38:f3:c8:4e:70:be:35:47:40:bb: 4a:eb:ea:ad:0e:d1:43:71:03:cc:a2:a1:ca:4e:42:a2:86:63: fc:54:df:25:83:28:82:d4:ff:44:66:1f:2b:5c:dc:80:1a:d3: 43:5f:27:dc:60:63:f8:7c:89:d9:5e:0a:f3:e4:f5:a0:7f:c7: 8b:e9:02:4b:e4:6b:d8:5a:8d:9a:4d:f7:d1:e5:43:2f:67:1a: 0a:9e:36:08:73:92:b0:b2:72:ff:0c:5e:7d:e9:38:12:3e:f2: 9c:38:19:0d:db:1e:8f:0e:33:bf:eb:e1:fa:7f:28:be:99:39: cc:3d:97:58:0d:2d:bb:a8:2b:04:fa:ab:03:1d:ae:c6:92:4a: 26:25:82:e2:bf:34:7b:54:80:2b:3e:f7:88:5c:01:17:75:38: e1:f8:8d:16:9a:cc:af:cf:6c:ae:1e:0f:8c:2b:27:25:3e:d9: 6c:ca:33:78:1d:e6:b9:fb:59:c3:df:b2:95:07:4f:9f:1c:3d: 14:b9:ac:84:4f:51:86:be:a3:7c:1a:7a:d1:ac:e2:bd:79:ba: 8d:0e:69:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhIcdQw9bfWZyx2aEWv8iG7y9sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTEyMDMwODA2NTNaFw0yNTEyMDYxODI2NTNaMDMxMTAvBgNV BAMTKDVEQjI3MDM0NERFMDIwM0I1NkVBRTZEMDA1NENGMzFCQkVGNjhCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtR2bf3T3Prr+HC9ac1QYSu9qz YX9vNJCg1XIl6l69zSaDWB6copD5uyahrq04vecf739yV+d9j4vJzg9q2Qy+C6V+ aWQSZKkaw8CztS03VXxGHu4/du3BGd8q5Qqu+6cAz3VLkixSBZfsFWG6xHMDDle5 MGke2IV2l3UYdU/pWWq8z3agcX0qJ7fq0ty2g7+qI5WQH438DclcL7YFj1KFxw9Y nCRYTQ51Ha2n4Y/wPwEaocxUXXYSKPKyy8wSyl802y6V6j46w8qV6esIM9hW3ydv q7zZXzbXWBQGpkgfUoFo0bAOXlj5xKrzO+zXkX/Y9yBfTA2+QsYBVy1nfbnDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXbJwNE3gIDtW6ubQBUzzG772i8QwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMTWLDgazBisQagoT0jIkDoTQ6rufQdlUcT SQItV1TtG8t0YlSsH/60TmRhOPPITnC+NUdAu0rr6q0O0UNxA8yiocpOQqKGY/xU 3yWDKILU/0RmHytc3IAa00NfJ9xgY/h8idleCvPk9aB/x4vpAkvka9hajZpN99Hl Qy9nGgqeNghzkrCycv8MXn3pOBI+8pw4GQ3bHo8OM7/r4fp/KL6ZOcw9l1gNLbuo KwT6qwMdrsaSSiYlguK/NHtUgCs+94hcARd1OOH4jRaazK/PbK4eD4wrJyU+2WzK M3gd5rn7WcPfspUHT58cPRS5rIRPUYa+o3waetGs4r15uo0OaT0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:43 2025 by rpki-client