This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft File: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft (raw, json) Hash identifier: TiVZ7uE3xs4XeuhieZ3eeLGjZ1A1EHtHBUkdn9cBxik= Subject key identifier: 82:FC:D1:F7:67:AE:FB:7F:E1:ED:FE:C9:9E:8F:9A:F3:7C:10:3E:0B Authority key identifier: DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 Certificate issuer: /CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Certificate serial: 5DD3C123CCFC5784D1310E1A4F44042AF5F743B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft Manifest number: 01DE Signing time: Mon 01 Dec 2025 04:40:45 +0000 Manifest this update: Mon 01 Dec 2025 04:35:45 +0000 Manifest next update: Thu 04 Dec 2025 12:37:45 +0000 Files and hashes: 1: DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl (hash: yGdsNZD9sVkj4vuVZVY/qdv4fJtBraf1N7Y3VRJV04c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 12:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d3:c1:23:cc:fc:57:84:d1:31:0e:1a:4f:44:04:2a:f5:f7:43:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC509E8257EC53E1695B56ABC3E469E56E0E9D19 Validity Not Before: Dec 1 04:35:45 2025 GMT Not After : Dec 4 12:37:45 2025 GMT Subject: CN=82FCD1F767AEFB7FE1EDFEC99E8F9AF37C103E0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:27:4e:e0:af:6e:59:d6:d9:88:9f:63:39: b5:7e:52:12:66:a4:18:f8:1c:f6:e1:45:4d:85:67: e9:ab:47:fe:cf:33:5b:cb:10:e8:4d:89:c0:b0:67: b9:8b:95:41:56:04:9e:7d:97:82:93:b5:f3:e4:3c: eb:90:1e:9b:62:54:53:f9:e8:d8:b5:cc:85:d8:f2: 46:66:24:9a:2e:0f:eb:a8:9d:03:fa:cc:1c:2b:f7: ee:ae:a4:14:d4:04:c0:60:ce:d8:5f:1a:ee:49:fc: de:f1:60:88:e6:32:65:66:e5:01:c8:b7:f8:7e:f4: 43:8b:eb:3a:56:30:83:6c:bf:b0:7f:41:fa:bf:23: f4:1b:21:19:53:d7:b9:dd:c9:d1:98:30:9b:a9:2c: 84:9a:17:c9:56:bd:5e:0a:79:58:d4:94:75:04:7b: a6:8c:c3:7b:e3:63:ed:8c:67:a9:b8:f1:90:4b:07: f7:4f:1a:4d:8d:51:fa:2c:d5:aa:56:ca:44:9f:20: c1:b6:62:db:7f:5a:0a:ee:ef:76:94:c2:13:c6:f3: 02:6a:fa:4b:59:93:d1:ac:81:a3:ba:cd:93:9e:07: 5e:3f:67:cb:ee:ed:c7:eb:8f:07:03:37:b2:ac:c3: 94:fe:5c:f5:99:b9:65:b7:55:a4:6a:0c:9f:09:cc: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FC:D1:F7:67:AE:FB:7F:E1:ED:FE:C9:9E:8F:9A:F3:7C:10:3E:0B X509v3 Authority Key Identifier: keyid:DC:50:9E:82:57:EC:53:E1:69:5B:56:AB:C3:E4:69:E5:6E:0E:9D:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a9302ce-17e9-4039-b3f9-995e78671c24/0/DC509E8257EC53E1695B56ABC3E469E56E0E9D19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:fb:70:05:05:85:7f:97:d1:5e:7a:8a:20:18:84:fa:f2:7a: 53:ee:49:39:88:c4:3f:90:1a:9e:bf:04:32:f2:ab:f1:e7:54: 9a:0f:39:7c:23:0f:f9:43:67:43:18:0b:8a:8e:93:e8:4e:99: ce:14:e3:20:d8:f0:42:f7:2e:a4:64:62:41:e3:56:89:4f:7c: 88:f0:8c:91:b6:6c:70:59:24:45:68:77:b9:db:ac:7a:4b:34: 5a:60:c4:3a:65:95:d0:9a:fb:3a:14:2a:d7:4c:4a:25:79:1e: 6b:52:1f:d8:5f:ce:73:ca:2b:c4:be:73:78:30:25:fc:e7:b6: d8:06:9b:48:3f:43:d4:03:ea:45:af:d0:10:18:48:b8:fe:25: 23:7e:85:61:a3:46:6f:05:a5:eb:bf:b4:d0:94:f7:90:d6:c3: 8a:a2:86:13:45:e9:d2:5b:64:9f:93:ca:ae:c0:21:75:32:39: c1:d4:8b:8c:24:e7:56:2d:be:24:98:7c:66:ba:e8:58:b2:9c: 40:64:3c:a4:c6:9f:4e:49:2c:e9:34:85:5b:84:c3:74:62:1e: 3d:75:3e:e3:6d:3d:ef:98:fc:9d:94:a4:dd:ec:f3:36:c0:38: 4a:5e:ff:fd:11:02:de:1b:0d:ca:d3:be:c6:de:75:2a:24:f9: fb:8e:d7:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdPBI8z8V4TRMQ4aT0QEKvX3Q7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2 RTBFOUQxOTAeFw0yNTEyMDEwNDM1NDVaFw0yNTEyMDQxMjM3NDVaMDMxMTAvBgNV BAMTKDgyRkNEMUY3NjdBRUZCN0ZFMUVERkVDOTlFOEY5QUYzN0MxMDNFMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUtSdO4K9uWdbZiJ9jObV+UhJm pBj4HPbhRU2FZ+mrR/7PM1vLEOhNicCwZ7mLlUFWBJ59l4KTtfPkPOuQHptiVFP5 6Ni1zIXY8kZmJJouD+uonQP6zBwr9+6upBTUBMBgzthfGu5J/N7xYIjmMmVm5QHI t/h+9EOL6zpWMINsv7B/Qfq/I/QbIRlT17ndydGYMJupLISaF8lWvV4KeVjUlHUE e6aMw3vjY+2MZ6m48ZBLB/dPGk2NUfos1apWykSfIMG2Ytt/Wgru73aUwhPG8wJq +ktZk9GsgaO6zZOeB14/Z8vu7cfrjwcDN7Ksw5T+XPWZuWW3VaRqDJ8JzEVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgvzR92eu+3/h7f7Jno+a83wQPgswHwYDVR0j BBgwFoAU3FCeglfsU+FpW1arw+Rp5W4OnRkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTkzMDJjZS0xN2U5LTQwMzktYjNmOS05OTVlNzg2NzFjMjQvMC9EQzUwOUU4MjU3 RUM1M0UxNjk1QjU2QUJDM0U0NjlFNTZFMEU5RDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5RTU2RTBF OUQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5MzAyY2UtMTdlOS00MDM5LWIz ZjktOTk1ZTc4NjcxYzI0LzAvREM1MDlFODI1N0VDNTNFMTY5NUI1NkFCQzNFNDY5 RTU2RTBFOUQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/7cAUFhX+X0V56iiAYhPryelPuSTmIxD+Q Gp6/BDLyq/HnVJoPOXwjD/lDZ0MYC4qOk+hOmc4U4yDY8EL3LqRkYkHjVolPfIjw jJG2bHBZJEVod7nbrHpLNFpgxDplldCa+zoUKtdMSiV5HmtSH9hfznPKK8S+c3gw JfznttgGm0g/Q9QD6kWv0BAYSLj+JSN+hWGjRm8Fpeu/tNCU95DWw4qihhNF6dJb ZJ+Tyq7AIXUyOcHUi4wk51YtviSYfGa66FiynEBkPKTGn05JLOk0hVuEw3RiHj11 PuNtPe+Y/J2UpN3s8zbAOEpe//0RAt4bDcrTvsbedSok+fuO11g= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:34 2025 by rpki-client