This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: pACaBVe/WIjBu2u30yVsi7+//H4qeV+3g4XUgcLUt4I= Subject key identifier: 03:C5:9A:B9:EB:F5:3C:14:EE:25:F8:93:9A:BD:AF:B8:C7:5F:D4:B7 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 7E1F4AC8E63662D4F3234FA64A22A111DC16F52E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 0244 Signing time: Tue 02 Dec 2025 08:42:18 +0000 Manifest this update: Tue 02 Dec 2025 08:37:18 +0000 Manifest next update: Fri 05 Dec 2025 16:50:18 +0000 Files and hashes: 1: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: 1eMzDxefoLxZuzgx2NSreT0djoK934rA8RXwLk81Nv8=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:1f:4a:c8:e6:36:62:d4:f3:23:4f:a6:4a:22:a1:11:dc:16:f5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Dec 2 08:37:18 2025 GMT Not After : Dec 5 16:50:18 2025 GMT Subject: CN=03C59AB9EBF53C14EE25F8939ABDAFB8C75FD4B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:76:d5:fb:1f:b3:00:0d:25:1f:bf:b7:f1: 2e:ce:24:19:fa:27:2d:e1:c8:3d:a2:18:27:99:7f: ce:f5:93:f2:f8:cf:b1:7e:6d:21:44:49:77:8a:03: c4:97:f0:66:86:97:94:29:60:3d:84:8e:ec:fa:9f: 07:ee:b4:9f:73:32:76:e2:2c:94:65:c3:9e:5c:9c: 6f:0a:bb:07:f1:4f:e0:40:7b:33:db:f9:7e:b2:12: 32:bc:dd:41:a9:06:66:34:70:84:69:4c:f6:84:be: 49:13:40:56:0a:ca:98:06:8b:17:19:60:76:ed:32: 8c:54:fc:bc:a3:a4:86:99:8f:63:7d:e0:96:46:ab: a8:f1:d6:cd:78:78:a6:ca:08:6d:91:0b:03:a3:ef: 5e:d6:b7:cc:5c:db:92:be:0e:8d:e0:5f:45:00:00: 23:ba:4a:37:8b:e8:66:9c:a1:6d:2a:d0:fa:61:64: 3e:62:dc:8c:19:e1:92:be:82:9a:0e:96:db:76:cb: e0:d0:bf:8e:8e:91:65:89:f0:9d:a7:ec:67:a6:cb: 10:0c:73:b7:db:a6:0c:0c:33:c8:5a:27:f3:2b:fd: b6:44:a6:5b:bd:dd:a9:f1:9c:33:04:a1:c8:13:09: ae:e3:e9:87:75:f1:63:17:a9:ea:b9:29:02:35:ee: fe:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C5:9A:B9:EB:F5:3C:14:EE:25:F8:93:9A:BD:AF:B8:C7:5F:D4:B7 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e5:5b:76:ae:28:6f:58:0c:55:c0:cf:f0:21:46:21:f2:9f: c0:02:5f:b6:e6:25:72:52:d4:12:05:4c:f7:46:fd:ea:db:df: e4:aa:97:9d:3a:ca:83:fb:19:ac:6e:c2:95:11:ef:5f:6c:27: 91:de:4d:49:20:c4:c9:1d:ae:54:fc:d9:83:09:eb:80:90:37: 2c:56:c9:46:0e:4a:ff:23:d8:16:1f:fc:3f:81:55:84:be:f3: 00:9c:14:89:f4:0a:c7:df:a1:4f:d3:20:78:d7:d7:93:d8:68: 75:d7:fa:6f:67:1d:3b:6f:d9:5a:26:01:8e:35:90:fa:98:b9: 7f:1e:08:93:68:4b:7e:d6:6a:14:86:ff:8c:c6:ea:14:88:b9: 81:a7:60:06:9c:1d:67:ba:87:70:4e:a1:8a:06:83:08:69:83: 9e:f3:5f:45:e7:4b:12:f8:78:bf:34:54:90:cf:a9:ec:bf:11: b7:44:b0:17:e1:99:42:2a:31:7d:ed:97:46:d8:0a:3a:88:16: 00:7c:fe:b6:24:2f:3a:0c:e4:ca:4e:15:2f:ba:25:91:c6:76: 85:bb:33:b8:73:96:db:1d:5d:88:13:13:22:40:a7:5a:38:ba: 75:f7:88:a0:5b:4d:c7:02:35:5d:66:ce:5c:6c:31:6b:83:82: ea:6c:e4:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfh9KyOY2YtTzI0+mSiKhEdwW9S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTEyMDIwODM3MThaFw0yNTEyMDUxNjUwMThaMDMxMTAvBgNV BAMTKDAzQzU5QUI5RUJGNTNDMTRFRTI1Rjg5MzlBQkRBRkI4Qzc1RkQ0QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdFXbV+x+zAA0lH7+38S7OJBn6 Jy3hyD2iGCeZf871k/L4z7F+bSFESXeKA8SX8GaGl5QpYD2Ejuz6nwfutJ9zMnbi LJRlw55cnG8KuwfxT+BAezPb+X6yEjK83UGpBmY0cIRpTPaEvkkTQFYKypgGixcZ YHbtMoxU/LyjpIaZj2N94JZGq6jx1s14eKbKCG2RCwOj717Wt8xc25K+Do3gX0UA ACO6SjeL6GacoW0q0PphZD5i3IwZ4ZK+gpoOltt2y+DQv46OkWWJ8J2n7GemyxAM c7fbpgwMM8haJ/Mr/bZEplu93anxnDMEocgTCa7j6Yd18WMXqeq5KQI17v7nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8Wauev1PBTuJfiTmr2vuMdf1LcwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvlW3auKG9YDFXAz/AhRiHyn8ACX7bmJXJS 1BIFTPdG/erb3+Sql506yoP7GaxuwpUR719sJ5HeTUkgxMkdrlT82YMJ64CQNyxW yUYOSv8j2BYf/D+BVYS+8wCcFIn0CsffoU/TIHjX15PYaHXX+m9nHTtv2VomAY41 kPqYuX8eCJNoS37WahSG/4zG6hSIuYGnYAacHWe6h3BOoYoGgwhpg57zX0XnSxL4 eL80VJDPqey/EbdEsBfhmUIqMX3tl0bYCjqIFgB8/rYkLzoM5MpOFS+6JZHGdoW7 M7hzltsdXYgTEyJAp1o4unX3iKBbTccCNV1mzlxsMWuDgups5AI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:15 2025 by rpki-client