This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: 9Nex5HR+hV5dm8symc82DZfT3WLUAIkIuhmQ3M32evo= Subject key identifier: BC:FE:36:14:7E:84:32:62:1B:DE:B1:6D:E7:EE:BD:F6:9A:4C:8D:B5 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 5A7E53A48F7F8DF75DD9BA59E8A4321FDFA8A865 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: 011C Signing time: Tue 02 Dec 2025 01:10:02 +0000 Manifest this update: Tue 02 Dec 2025 01:05:02 +0000 Manifest next update: Fri 05 Dec 2025 09:21:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: YDGIdS6+Z8Rm5e++rBwJGFbv01rKlLGpJTHrEpjcV04=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7e:53:a4:8f:7f:8d:f7:5d:d9:ba:59:e8:a4:32:1f:df:a8:a8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Dec 2 01:05:02 2025 GMT Not After : Dec 5 09:21:02 2025 GMT Subject: CN=BCFE36147E8432621BDEB16DE7EEBDF69A4C8DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:10:3a:d3:a1:b1:fd:3b:1a:21:8d:cc:f7: 20:73:1e:42:0c:0b:31:7f:a5:a7:d7:67:26:d7:06: 75:e5:6c:e5:cd:3f:ff:0b:0f:c8:60:d4:be:d0:77: fa:6d:d4:d6:ba:97:7e:ed:fb:9e:c9:d8:04:80:d0: c6:2a:15:cd:f6:82:c5:8a:e9:a2:fa:58:fc:e1:f7: 85:1b:e3:a0:b2:68:41:29:01:72:ad:26:e4:ef:97: bc:31:0d:60:24:4d:23:75:3f:81:73:db:81:a2:51: 6c:c6:92:1b:fb:bb:4a:d1:fb:67:63:97:fe:46:c7: 65:d3:b4:26:e9:92:f3:4a:02:61:4f:23:6e:97:3e: 04:b9:af:4f:ca:11:dd:19:4c:1c:db:61:38:e1:60: 02:6f:2c:80:6b:11:a7:b0:66:38:84:e3:10:7f:af: bf:40:e0:18:e2:44:69:68:72:a1:ef:2b:a9:b3:db: 31:84:e8:9b:3c:21:6a:aa:19:e2:79:fd:a6:87:b6: 24:06:3e:77:05:0f:0f:5d:03:c9:e7:98:3c:90:32: 0b:5e:3d:cb:31:21:1a:22:be:4a:62:60:8b:9b:43: 60:af:4d:cb:d3:55:0c:87:bf:bd:88:60:50:93:00: be:fe:34:a5:1c:0a:d4:d8:bb:6a:3e:24:9d:44:f8: 48:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FE:36:14:7E:84:32:62:1B:DE:B1:6D:E7:EE:BD:F6:9A:4C:8D:B5 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:76:35:fa:54:1c:e9:aa:1e:a9:88:66:26:02:ee:26:8f:94: e7:e2:6c:0e:a8:ef:0d:f8:c0:cd:9a:25:6f:0c:3b:ac:7d:9c: f1:20:8e:41:ce:c1:af:82:a7:96:08:0f:d3:65:c7:0d:f7:0e: 4e:ec:f0:bf:68:65:db:85:e8:4c:e2:44:e1:fd:53:65:bb:b5: 76:e8:a4:03:07:42:b4:8c:da:74:c0:d3:66:35:71:75:89:95: fb:5b:62:92:96:33:41:c8:c1:cd:a3:ba:1a:ac:5e:62:71:a7: 22:12:ee:84:8f:e5:54:95:e2:05:56:b4:c2:91:56:bc:4e:c0: cc:3f:61:4e:05:ff:9c:5c:3c:a7:69:f7:03:9b:a3:73:e7:16: 7c:97:7e:b3:4a:a7:4c:8b:ee:9a:87:bc:20:9e:22:2c:58:f2: 89:61:56:87:bc:9f:de:a0:c0:de:7b:53:f0:41:95:e0:4d:e8: 15:5c:3e:57:6f:67:68:fb:bd:08:f0:fd:d6:c1:e4:05:db:d2: 11:ce:a5:d1:cd:65:75:3a:8f:69:e3:93:9a:0d:5a:f0:67:7e: 90:78:b7:2a:40:4c:33:36:bd:b1:f7:0e:bf:87:de:f7:f2:30: f7:ee:2a:f3:57:76:48:24:1d:ba:eb:18:ac:a6:66:aa:b8:eb: 62:7c:0f:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWn5TpI9/jfdd2bpZ6KQyH9+oqGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTEyMDIwMTA1MDJaFw0yNTEyMDUwOTIxMDJaMDMxMTAvBgNV BAMTKEJDRkUzNjE0N0U4NDMyNjIxQkRFQjE2REU3RUVCREY2OUE0QzhEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuRA606Gx/TsaIY3M9yBzHkIM CzF/pafXZybXBnXlbOXNP/8LD8hg1L7Qd/pt1Na6l37t+57J2ASA0MYqFc32gsWK 6aL6WPzh94Ub46CyaEEpAXKtJuTvl7wxDWAkTSN1P4Fz24GiUWzGkhv7u0rR+2dj l/5Gx2XTtCbpkvNKAmFPI26XPgS5r0/KEd0ZTBzbYTjhYAJvLIBrEaewZjiE4xB/ r79A4BjiRGlocqHvK6mz2zGE6Js8IWqqGeJ5/aaHtiQGPncFDw9dA8nnmDyQMgte PcsxIRoivkpiYIubQ2CvTcvTVQyHv72IYFCTAL7+NKUcCtTYu2o+JJ1E+EgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvP42FH6EMmIb3rFt5+699ppMjbUwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJN2NfpUHOmqHqmIZiYC7iaPlOfibA6o7w34 wM2aJW8MO6x9nPEgjkHOwa+Cp5YID9Nlxw33Dk7s8L9oZduF6EziROH9U2W7tXbo pAMHQrSM2nTA02Y1cXWJlftbYpKWM0HIwc2juhqsXmJxpyIS7oSP5VSV4gVWtMKR VrxOwMw/YU4F/5xcPKdp9wObo3PnFnyXfrNKp0yL7pqHvCCeIixY8olhVoe8n96g wN57U/BBleBN6BVcPldvZ2j7vQjw/dbB5AXb0hHOpdHNZXU6j2njk5oNWvBnfpB4 typATDM2vbH3Dr+H3vfyMPfuKvNXdkgkHbrrGKymZqq462J8D8o= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:26 2025 by rpki-client