This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: 7UMThnEyUVOksWvCL/JRR/TbWDK3NoOW1BNTKhMkDrs= Subject key identifier: 1F:F8:89:B0:BE:1D:C8:D4:53:0D:FE:EF:5C:CB:84:E4:57:D8:14:5A Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 451970727CAC618D9D006BF6083C640B952E1079 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: AD Signing time: Fri 05 Dec 2025 22:51:44 +0000 Manifest this update: Fri 05 Dec 2025 22:46:44 +0000 Manifest next update: Tue 09 Dec 2025 06:48:44 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: Qqyhh99wvN9qzOgai05gzAsYuhy6QSvltygf/7XId1w=) 2: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: Qq/xl2Sv9oCkx2dbciw0u6vxLMTN5acC4f6P+yWnhYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:19:70:72:7c:ac:61:8d:9d:00:6b:f6:08:3c:64:0b:95:2e:10:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Dec 5 22:46:44 2025 GMT Not After : Dec 9 06:48:44 2025 GMT Subject: CN=1FF889B0BE1DC8D4530DFEEF5CCB84E457D8145A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:83:f0:ff:85:37:c6:0d:68:cc:ed:72:d8: cd:bf:93:5a:26:f9:56:ca:99:4c:69:95:e5:9c:29: f9:bf:7f:f8:43:41:d5:ef:e7:06:4e:7f:a2:c9:91: 40:a2:22:fc:d3:7c:a4:dc:24:91:03:44:f9:e6:5c: 9a:66:b7:33:05:f4:16:11:95:67:e9:fd:c2:85:b9: 87:3e:49:3e:37:ab:8c:fb:ee:4f:64:1c:6f:aa:e6: e5:a0:99:f4:54:f4:ba:97:6d:a4:b3:6b:6c:87:48: 90:31:5c:34:b1:17:29:61:d8:e4:c2:de:06:dd:2e: 88:de:a0:15:30:49:eb:d3:6c:f0:f3:80:1f:02:dd: 51:ba:a9:45:6c:8d:1b:51:37:6e:a6:69:7c:dc:4f: 13:31:5e:1e:65:d3:2a:af:17:64:d5:a3:57:65:a2: ea:cb:23:43:c7:1d:56:1b:8a:25:9d:b6:2d:a6:01: 9f:ac:b0:6f:62:71:33:8e:84:f3:b7:b8:33:d2:13: 28:5e:89:fd:a7:e2:50:c7:a4:c0:69:95:e7:36:65: a1:dc:ec:78:d0:2b:c8:56:0b:73:06:17:8f:2a:fc: 71:c0:7d:38:06:98:13:cb:61:06:cd:ae:66:24:63: d0:10:7b:f0:a0:43:e0:57:90:4d:3d:a0:a0:f9:3b: 34:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F8:89:B0:BE:1D:C8:D4:53:0D:FE:EF:5C:CB:84:E4:57:D8:14:5A X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:7f:c5:3f:ea:ad:7a:e2:82:80:40:92:76:8c:15:0c:92:f4: ca:03:c5:b9:97:bc:01:b3:23:1b:86:f1:4c:e0:fe:dc:8c:71: 19:19:af:f3:07:e9:7c:34:45:84:f3:34:f0:90:f0:d0:bc:47: bf:d3:34:6a:de:56:2b:bd:1e:34:93:e5:3f:88:d9:0a:00:74: 7c:50:81:b4:ce:52:2d:66:ca:23:53:ea:1f:2f:68:f0:b3:5d: 3d:c6:d5:95:b2:ac:d1:88:ea:dd:b7:59:4a:cd:e2:28:49:a8: 78:ec:ee:59:8e:de:c0:63:e8:40:dc:9d:74:4d:82:8e:41:07: f3:9e:73:e1:87:0e:13:11:09:12:b8:cd:23:1b:40:0c:12:90: 14:2b:54:fd:a2:33:c3:e0:49:f7:ab:ef:aa:d2:b0:91:68:f1: fc:4e:52:5d:5c:d9:72:d9:fb:aa:e0:11:2e:91:27:34:b7:b3: 29:ba:ee:66:65:fc:c6:a3:75:12:d1:e5:fa:19:6e:28:a1:e7: 2c:48:ba:8a:7f:0a:63:5b:84:bb:43:a7:0c:2c:d3:54:70:d9: 1b:62:d9:16:fa:df:2a:89:a5:b2:d5:72:f2:1e:71:da:c5:94: 83:88:9b:ec:bc:10:d7:64:f2:f3:2f:62:0c:87:16:a6:fb:9a: e8:f8:10:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRlwcnysYY2dAGv2CDxkC5UuEHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTEyMDUyMjQ2NDRaFw0yNTEyMDkwNjQ4NDRaMDMxMTAvBgNV BAMTKDFGRjg4OUIwQkUxREM4RDQ1MzBERkVFRjVDQ0I4NEU0NTdEODE0NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoIPw/4U3xg1ozO1y2M2/k1om +VbKmUxpleWcKfm/f/hDQdXv5wZOf6LJkUCiIvzTfKTcJJEDRPnmXJpmtzMF9BYR lWfp/cKFuYc+ST43q4z77k9kHG+q5uWgmfRU9LqXbaSza2yHSJAxXDSxFylh2OTC 3gbdLojeoBUwSevTbPDzgB8C3VG6qUVsjRtRN26maXzcTxMxXh5l0yqvF2TVo1dl ourLI0PHHVYbiiWdti2mAZ+ssG9icTOOhPO3uDPSEyheif2n4lDHpMBplec2ZaHc 7HjQK8hWC3MGF48q/HHAfTgGmBPLYQbNrmYkY9AQe/CgQ+BXkE09oKD5OzSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH/iJsL4dyNRTDf7vXMuE5FfYFFowHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJ/xT/qrXrigoBAknaMFQyS9MoDxbmXvAGz IxuG8Uzg/tyMcRkZr/MH6Xw0RYTzNPCQ8NC8R7/TNGreViu9HjST5T+I2QoAdHxQ gbTOUi1myiNT6h8vaPCzXT3G1ZWyrNGI6t23WUrN4ihJqHjs7lmO3sBj6EDcnXRN go5BB/Oec+GHDhMRCRK4zSMbQAwSkBQrVP2iM8PgSfer76rSsJFo8fxOUl1c2XLZ +6rgES6RJzS3sym67mZl/MajdRLR5foZbiih5yxIuop/CmNbhLtDpwws01Rw2Rti 2Rb63yqJpbLVcvIecdrFlIOIm+y8ENdk8vMvYgyHFqb7muj4EO4= -----END CERTIFICATE-----Generated at Sun Dec 7 18:52:33 2025 by rpki-client