This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: RNjDqjz9NbWrE4hHP8Lt5jh5kKzoiA4VIqwm20NSDNI= Subject key identifier: 70:C6:BC:90:10:1D:6D:ED:9A:9B:68:D8:37:48:0A:04:A3:69:21:96 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 1D5F3AAD75B1C5D85E87E5378C25705FA991B4CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04AF Signing time: Tue 02 Dec 2025 10:11:43 +0000 Manifest this update: Tue 02 Dec 2025 10:06:43 +0000 Manifest next update: Fri 05 Dec 2025 21:46:43 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: addt/FEwtFNK9nvTv6lzteIVB/c4cBHgKtOCuGwH60U=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:46:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5f:3a:ad:75:b1:c5:d8:5e:87:e5:37:8c:25:70:5f:a9:91:b4:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Dec 2 10:06:43 2025 GMT Not After : Dec 5 21:46:43 2025 GMT Subject: CN=70C6BC90101D6DED9A9B68D837480A04A3692196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:89:d4:96:a2:27:0b:9f:44:e9:de:19:a0:1a: 9e:45:0a:1b:c4:42:59:28:fd:fe:0c:3e:3c:fd:72: 99:1c:1b:7f:15:47:e8:e0:e9:76:17:c9:80:6d:99: 5f:7f:5c:a1:0f:74:f8:04:4d:1b:0d:12:76:0e:05: af:6b:36:e1:d2:85:29:f7:21:3f:43:99:ca:5d:5f: c4:ed:d6:d0:81:dc:fa:7f:80:7a:9d:0a:c9:3f:79: 0b:91:87:5d:e0:9a:48:e5:36:5e:59:49:a4:d0:8a: a7:e3:ce:10:09:d0:2d:75:d9:c4:50:c4:65:e6:c5: 72:fd:e8:ac:94:16:9a:4c:99:94:dc:13:98:9e:c9: 59:0c:44:cf:a3:89:26:46:4b:ec:ac:85:09:c4:d7: 5d:65:ef:43:59:ea:9f:85:8f:56:a1:b1:93:c2:6f: fd:ed:f4:e4:93:b7:9f:63:9e:4a:3d:4e:c1:2a:47: 28:92:e9:03:df:c9:ed:0b:dd:7d:93:5e:27:a8:eb: 29:ac:ed:17:7d:04:1a:15:19:d8:90:12:7e:8f:58: 81:85:71:24:c4:6e:13:03:ad:9e:29:dd:7f:59:46: a9:4f:c8:4d:a0:af:3f:5c:31:09:c5:0f:44:e6:04: 35:63:83:eb:85:a0:0e:fc:95:c8:2c:34:5d:76:72: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C6:BC:90:10:1D:6D:ED:9A:9B:68:D8:37:48:0A:04:A3:69:21:96 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9c:c8:01:a2:09:0c:a3:dc:93:61:f8:4f:78:46:3b:54:ca: 50:79:b0:84:5b:d6:04:04:8c:93:90:22:2c:f2:05:10:a5:33: a8:ea:75:e3:3a:7a:aa:19:d6:70:f1:76:c5:28:cd:14:d5:af: 05:8d:f7:55:7f:a0:b5:28:1d:fe:7d:09:f8:3e:08:07:20:2e: fb:20:1c:de:14:3f:2a:73:7c:29:18:99:09:2f:86:04:29:e7: f3:bb:56:bd:c5:60:64:e2:5b:91:e4:89:c7:83:b8:ca:71:f5: 84:63:7b:f9:8a:00:60:24:d6:53:8a:d0:f7:b3:09:d6:fb:8a: 87:06:2e:a9:fe:c1:7f:19:bf:6b:4b:9b:c3:8e:7f:27:20:c3: 7b:c8:17:38:15:6f:35:cf:b4:cf:79:73:50:b0:e7:96:1d:6f: d3:07:c9:c7:de:78:22:d4:76:3b:f2:fb:fe:e0:d1:f0:8e:2a: 21:96:c8:45:11:3e:07:ce:0b:20:b7:cb:4a:24:9e:16:bf:96: 18:60:96:db:58:a6:b2:c5:f1:ea:aa:e3:91:4c:70:e1:a8:9b: 3d:37:99:ce:7c:54:9f:88:87:14:cb:ce:24:5c:82:5d:a0:ed: 31:54:7b:b9:a5:4f:94:ae:50:04:d5:43:98:f2:ea:00:d5:47: 20:93:02:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHV86rXWxxdheh+U3jCVwX6mRtMwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTEyMDIxMDA2NDNaFw0yNTEyMDUyMTQ2NDNaMDMxMTAvBgNV BAMTKDcwQzZCQzkwMTAxRDZERUQ5QTlCNjhEODM3NDgwQTA0QTM2OTIxOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTidSWoicLn0Tp3hmgGp5FChvE Qlko/f4MPjz9cpkcG38VR+jg6XYXyYBtmV9/XKEPdPgETRsNEnYOBa9rNuHShSn3 IT9DmcpdX8Tt1tCB3Pp/gHqdCsk/eQuRh13gmkjlNl5ZSaTQiqfjzhAJ0C112cRQ xGXmxXL96KyUFppMmZTcE5ieyVkMRM+jiSZGS+yshQnE111l70NZ6p+Fj1ahsZPC b/3t9OSTt59jnko9TsEqRyiS6QPfye0L3X2TXieo6yms7Rd9BBoVGdiQEn6PWIGF cSTEbhMDrZ4p3X9ZRqlPyE2grz9cMQnFD0TmBDVjg+uFoA78lcgsNF12cmdlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMa8kBAdbe2am2jYN0gKBKNpIZYwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+cyAGiCQyj3JNh+E94RjtUylB5sIRb1gQE jJOQIizyBRClM6jqdeM6eqoZ1nDxdsUozRTVrwWN91V/oLUoHf59Cfg+CAcgLvsg HN4UPypzfCkYmQkvhgQp5/O7Vr3FYGTiW5HkiceDuMpx9YRje/mKAGAk1lOK0Pez Cdb7iocGLqn+wX8Zv2tLm8OOfycgw3vIFzgVbzXPtM95c1Cw55Ydb9MHycfeeCLU djvy+/7g0fCOKiGWyEURPgfOCyC3y0oknha/lhhglttYprLF8eqq45FMcOGomz03 mc58VJ+IhxTLziRcgl2g7TFUe7mlT5SuUATVQ5jy6gDVRyCTAu4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:48 2025 by rpki-client