This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: IJ9XR/NzMXjoH+RSCRq127gjQEuB+G7WavmmBfncUO4= Subject key identifier: BC:72:8C:75:AD:43:8B:41:75:DD:A7:4A:AC:C8:47:F3:23:39:24:8E Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 2D98E2064D641C0E14C70EEBA5D3322A85088BE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 019F Signing time: Mon 01 Dec 2025 05:11:44 +0000 Manifest this update: Mon 01 Dec 2025 05:06:44 +0000 Manifest next update: Thu 04 Dec 2025 16:58:44 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: 0BAzYN9U+9Li2vCdjpB+6eW7pIxwKeCioVa0SpatK7c=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:98:e2:06:4d:64:1c:0e:14:c7:0e:eb:a5:d3:32:2a:85:08:8b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Dec 1 05:06:44 2025 GMT Not After : Dec 4 16:58:44 2025 GMT Subject: CN=BC728C75AD438B4175DDA74AACC847F32339248E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:56:ca:b8:9d:5e:cf:ab:15:c4:ec:f5:d7:2c: a6:bb:e9:1a:da:3d:9c:7a:ea:df:93:33:4b:14:90: bb:9e:10:68:65:a4:b1:0e:c8:ff:91:20:1a:89:d4: 6c:0a:78:13:db:dc:b6:ab:15:b4:f7:40:4a:58:8e: bf:97:6d:a3:38:51:c7:39:9f:0e:42:9f:ba:96:19: 56:61:aa:31:80:49:2e:46:4c:4e:b6:0c:09:eb:4b: fe:09:ba:1c:ce:9c:7c:56:6c:e2:49:02:dc:02:c4: 0d:ef:e4:04:79:0d:7d:d9:4e:f2:2e:bf:be:66:d0: e8:a2:f8:3a:d3:41:68:5d:28:f8:5c:a8:1d:28:15: c8:8e:00:9e:b0:b0:61:83:c2:a2:1e:41:ed:e0:79: 99:c9:ac:4f:19:92:9e:68:eb:4b:a2:04:0a:f7:74: b4:9b:e3:57:f3:99:ce:7f:83:b0:3d:00:c1:da:41: 45:6e:45:be:33:47:20:f4:af:bf:87:6f:54:51:84: 88:83:c9:35:1e:36:27:33:93:37:d9:99:10:03:01: 98:14:14:d6:18:16:f4:f5:37:9b:7b:64:9a:b7:10: 9c:98:cd:0e:72:0a:2b:0a:45:1b:0f:13:6b:d7:c9: 96:95:ec:0c:32:1a:03:1c:2d:5b:7d:c7:1d:b4:3d: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:72:8C:75:AD:43:8B:41:75:DD:A7:4A:AC:C8:47:F3:23:39:24:8E X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:c7:f1:f6:ad:5b:49:2c:5d:64:ae:c2:df:50:a9:28:41:1e: 7a:a5:92:c7:66:b4:56:4f:b4:55:a8:8d:b5:93:48:5e:68:0b: 3d:15:67:5d:53:f7:59:b9:15:ec:c0:af:9c:7e:96:02:5c:0e: 84:c1:c8:4c:5a:24:37:19:4e:47:62:67:39:84:c1:fe:f4:97: e7:43:e4:e5:ca:3e:6f:16:43:82:1a:33:28:52:22:b0:7e:0d: 4f:36:07:ed:f2:c5:06:b8:95:bb:76:49:a8:fe:26:9c:e2:01: 40:db:cd:3f:a6:26:60:7b:b5:e2:5f:c8:c3:ef:0d:4b:ec:38: e3:da:0e:13:90:8f:08:96:99:52:13:bf:a4:cf:fd:fb:fd:6a: f6:24:bd:a7:d1:9e:cc:6b:22:38:3e:5a:68:f0:ac:39:e2:d6: a3:1c:5e:07:47:3c:86:02:45:0c:50:a7:7f:3e:e6:8b:f4:d2: 0b:bf:e1:7a:1a:e6:aa:44:bd:c3:b0:b2:0d:63:b2:56:66:5e: f2:00:a0:f0:7a:81:c5:48:9f:29:5b:13:08:06:a0:ad:04:6c: a0:ae:1a:a0:ea:b0:d8:0f:d9:4a:4e:4a:e9:90:28:39:e8:a5: de:d3:c2:b4:e1:fa:39:f6:30:7b:9e:ba:8f:a7:e3:ce:32:06: 81:cf:5d:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZjiBk1kHA4Uxw7rpdMyKoUIi+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTEyMDEwNTA2NDRaFw0yNTEyMDQxNjU4NDRaMDMxMTAvBgNV BAMTKEJDNzI4Qzc1QUQ0MzhCNDE3NUREQTc0QUFDQzg0N0YzMjMzOTI0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeVsq4nV7PqxXE7PXXLKa76Rra PZx66t+TM0sUkLueEGhlpLEOyP+RIBqJ1GwKeBPb3LarFbT3QEpYjr+XbaM4Ucc5 nw5Cn7qWGVZhqjGASS5GTE62DAnrS/4JuhzOnHxWbOJJAtwCxA3v5AR5DX3ZTvIu v75m0Oii+DrTQWhdKPhcqB0oFciOAJ6wsGGDwqIeQe3geZnJrE8Zkp5o60uiBAr3 dLSb41fzmc5/g7A9AMHaQUVuRb4zRyD0r7+Hb1RRhIiDyTUeNiczkzfZmRADAZgU FNYYFvT1N5t7ZJq3EJyYzQ5yCisKRRsPE2vXyZaV7AwyGgMcLVt9xx20PdjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHKMda1Di0F13adKrMhH8yM5JI4wHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3H8fatW0ksXWSuwt9QqShBHnqlksdmtFZP tFWojbWTSF5oCz0VZ11T91m5FezAr5x+lgJcDoTByExaJDcZTkdiZzmEwf70l+dD 5OXKPm8WQ4IaMyhSIrB+DU82B+3yxQa4lbt2Saj+JpziAUDbzT+mJmB7teJfyMPv DUvsOOPaDhOQjwiWmVITv6TP/fv9avYkvafRnsxrIjg+WmjwrDni1qMcXgdHPIYC RQxQp38+5ov00gu/4Xoa5qpEvcOwsg1jslZmXvIAoPB6gcVInylbEwgGoK0EbKCu GqDqsNgP2UpOSumQKDnopd7TwrTh+jn2MHueuo+n484yBoHPXfM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:46 2025 by rpki-client