This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: 9qoQlbdEQZ6uYrnLLVeukofhlIvRr/Xnu6GlR5opwk8= Subject key identifier: 3D:51:C6:3C:2D:6E:B4:79:75:AC:A1:D3:46:D5:C6:6B:89:A2:84:0C Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 48B9924B52D71AD7BDE308BFB983282292579E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 01B0 Signing time: Wed 03 Dec 2025 08:51:42 +0000 Manifest this update: Wed 03 Dec 2025 08:46:42 +0000 Manifest next update: Sat 06 Dec 2025 19:19:42 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: Inw2ex56xyiXFEO/4sqlosCTx2no9aIt2Qub0JNQHyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b9:92:4b:52:d7:1a:d7:bd:e3:08:bf:b9:83:28:22:92:57:9e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Dec 3 08:46:42 2025 GMT Not After : Dec 6 19:19:42 2025 GMT Subject: CN=3D51C63C2D6EB47975ACA1D346D5C66B89A2840C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:73:b4:43:9b:b5:98:1b:4e:7b:e5:71:6b:f1: a6:60:21:33:ca:63:73:63:e3:b5:fa:01:c1:ab:45: e9:98:ef:f0:63:c7:45:c9:6a:45:30:ea:45:08:6c: 9c:c6:69:67:bb:55:12:3e:68:71:ad:ac:db:73:08: 1a:41:37:39:f4:3f:de:a5:5f:9e:30:09:a7:ee:2e: 77:f1:15:e4:a7:02:50:77:30:f4:86:eb:fa:ec:6a: 0f:8a:6e:7d:a2:7f:33:44:b2:39:16:df:6a:69:59: fe:23:a1:40:79:9b:00:95:62:a6:79:3f:65:60:09: cc:ab:b2:9f:15:41:d0:1f:07:fd:2d:42:56:01:61: dc:da:a8:a8:2b:7f:1d:09:1a:0e:6a:d1:79:87:fa: 6b:9b:f7:fb:f2:45:41:d0:86:98:ba:d1:1f:5c:08: b0:37:e3:f7:83:1a:e3:0c:a3:74:2b:85:85:8c:79: 65:8f:d9:72:cc:d5:12:79:40:15:61:61:4f:9e:73: fe:86:e2:a4:66:e3:26:30:81:97:e2:4e:0f:9b:4f: e1:89:d2:45:49:01:7c:59:b6:d3:4c:86:5a:b7:59: 53:f1:12:43:89:54:58:18:cc:e5:3e:0f:af:f6:ab: 4c:1c:b7:b8:65:6e:95:af:4f:0b:65:19:26:0c:18: 51:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:51:C6:3C:2D:6E:B4:79:75:AC:A1:D3:46:D5:C6:6B:89:A2:84:0C X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fe:34:59:27:ce:bd:0a:31:03:cd:92:b6:82:1f:64:8c:f1: 92:e4:63:a9:f1:0f:b3:54:a9:a2:c0:56:f4:12:01:34:c2:47: 2f:af:23:4a:69:08:b6:39:9f:eb:77:4f:98:16:36:f4:1a:d5: fa:d3:e4:e0:dd:95:01:16:f5:8b:59:83:39:75:c3:07:7f:48: bf:21:f2:2e:c4:bc:1f:de:a4:c4:e9:1c:44:57:2d:6c:54:dc: 43:fc:50:bc:a2:a8:c4:cc:89:0d:ac:cf:3f:d0:3a:4d:89:52: 00:89:e0:a3:7e:85:81:56:87:21:14:e3:5e:24:fc:de:af:2c: 93:d0:2f:04:b8:40:f9:0c:d6:34:40:c9:2a:65:7c:69:47:9e: b6:b7:6f:e2:04:83:8c:ba:87:2a:05:45:5c:59:b9:ba:f3:9d: da:9c:74:c8:d4:cb:5a:5e:b3:be:cf:82:01:6a:6a:8b:eb:2b: 41:1f:3d:f0:e5:cf:58:93:e1:ac:38:49:3b:a8:cb:86:95:f7: ae:b5:e5:9c:cf:33:9c:b8:80:0e:2c:32:af:b3:2d:fb:2c:5a: 20:4d:0d:e6:c5:1c:85:6b:09:7d:e6:9b:bb:46:2e:fe:b3:80: 32:b4:1f:54:39:b0:9f:b4:e2:8d:50:a1:3a:31:b7:ec:33:ef: dc:b0:07:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLmSS1LXGte94wi/uYMoIpJXnogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTEyMDMwODQ2NDJaFw0yNTEyMDYxOTE5NDJaMDMxMTAvBgNV BAMTKDNENTFDNjNDMkQ2RUI0Nzk3NUFDQTFEMzQ2RDVDNjZCODlBMjg0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCc7RDm7WYG0575XFr8aZgITPK Y3Nj47X6AcGrRemY7/Bjx0XJakUw6kUIbJzGaWe7VRI+aHGtrNtzCBpBNzn0P96l X54wCafuLnfxFeSnAlB3MPSG6/rsag+Kbn2ifzNEsjkW32ppWf4joUB5mwCVYqZ5 P2VgCcyrsp8VQdAfB/0tQlYBYdzaqKgrfx0JGg5q0XmH+mub9/vyRUHQhpi60R9c CLA34/eDGuMMo3QrhYWMeWWP2XLM1RJ5QBVhYU+ec/6G4qRm4yYwgZfiTg+bT+GJ 0kVJAXxZttNMhlq3WVPxEkOJVFgYzOU+D6/2q0wct7hlbpWvTwtlGSYMGFHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPVHGPC1utHl1rKHTRtXGa4mihAwwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/+NFknzr0KMQPNkraCH2SM8ZLkY6nxD7NU qaLAVvQSATTCRy+vI0ppCLY5n+t3T5gWNvQa1frT5ODdlQEW9YtZgzl1wwd/SL8h 8i7EvB/epMTpHERXLWxU3EP8ULyiqMTMiQ2szz/QOk2JUgCJ4KN+hYFWhyEU414k /N6vLJPQLwS4QPkM1jRAySplfGlHnra3b+IEg4y6hyoFRVxZubrzndqcdMjUy1pe s77PggFqaovrK0EfPfDlz1iT4aw4STuoy4aV96615ZzPM5y4gA4sMq+zLfssWiBN DebFHIVrCX3mm7tGLv6zgDK0H1Q5sJ+04o1QoToxt+wz79ywB2E= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:37 2025 by rpki-client