This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: Mjn3kzbFX0SIEyF7BN46BB1Ws0nkjpE40eQmdhGQ8wA= Subject key identifier: 00:16:6E:AE:3B:27:2D:0A:9B:B7:88:8B:CF:A7:04:D7:28:A9:53:CA Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 0DB9BDA9A87A00225D85054723F0989534F964C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 026B Signing time: Tue 02 Dec 2025 23:22:01 +0000 Manifest this update: Tue 02 Dec 2025 23:17:01 +0000 Manifest next update: Sat 06 Dec 2025 01:08:01 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: laUJhdNErtk135xCHgTImTc5iGZoNDk1y/crQ9h83mA=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:08:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:b9:bd:a9:a8:7a:00:22:5d:85:05:47:23:f0:98:95:34:f9:64:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Dec 2 23:17:01 2025 GMT Not After : Dec 6 01:08:01 2025 GMT Subject: CN=00166EAE3B272D0A9BB7888BCFA704D728A953CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:14:f2:fb:5a:8f:96:7a:46:44:ea:4a:75: 5d:43:04:3b:cc:97:20:40:3f:85:f1:4c:19:03:bc: 17:31:f8:2b:6b:b9:1e:c7:1f:12:17:16:ce:56:99: 15:72:ee:c9:7d:74:00:17:fc:f5:e4:0f:54:3b:7a: 41:72:65:6a:d1:85:dd:29:e7:42:b5:9e:bc:98:25: 73:53:96:f7:e0:78:15:7d:7d:c2:1e:8b:de:57:22: 70:1e:46:34:f8:e2:c0:91:50:88:1c:2c:ec:d1:1c: 82:e4:ef:f7:11:24:c6:03:1f:bf:ee:a4:68:13:71: 8c:3b:6c:0f:f3:e1:40:f2:00:8f:b7:8b:3c:95:b1: b7:e3:95:6a:16:c2:ad:e6:9b:56:4c:c1:5d:80:07: 41:31:90:7d:23:e0:92:fe:ef:e3:48:85:a8:76:7b: 47:a2:37:14:f2:69:db:1a:c2:0c:2d:16:18:01:7f: 2e:ca:f7:1a:76:ef:37:38:66:8b:29:84:62:21:32: 83:24:e5:5c:c7:8a:8c:a8:81:ea:34:2e:e4:59:58: 49:0e:d4:5c:a3:6a:d5:e6:41:77:08:64:4e:78:d3: b0:3f:50:22:5f:a2:da:e0:40:fe:1a:5e:7d:b0:ef: 36:23:af:84:62:b9:96:80:f5:14:4b:74:1b:06:60: 31:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:16:6E:AE:3B:27:2D:0A:9B:B7:88:8B:CF:A7:04:D7:28:A9:53:CA X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:16:df:54:40:9d:78:6e:e8:8a:6b:35:55:4a:66:0d:b4:b8: a9:ce:2d:4f:c7:4e:04:17:80:fe:65:be:30:01:38:a3:b9:9a: eb:b1:73:72:e6:0c:10:01:b4:bf:6d:a8:9c:31:80:de:cc:68: 18:a1:eb:58:4b:84:a9:50:19:ab:0e:1a:ad:9f:c2:6b:e8:c5: 3f:ce:65:d7:53:ce:13:6e:90:16:6d:09:14:3d:00:a1:c1:37: 23:d3:d8:44:fd:09:3d:3f:5c:b3:20:11:49:6e:55:11:8e:60: 8b:bd:e6:fd:6c:6b:62:4c:24:bb:2f:c9:e6:b6:a0:1e:c3:2a: 9b:5a:a4:25:71:b2:42:98:e5:39:9e:85:76:25:7c:e4:18:1c: df:7d:50:00:54:f3:f7:5f:59:96:cc:fc:13:d5:b9:91:70:15: 65:6e:e5:1e:30:50:7b:29:8b:03:37:1f:df:f3:17:e6:85:02: 95:29:f5:60:dd:ac:a0:6d:52:22:5f:be:92:32:3c:7e:e9:f8: b4:a8:bd:64:c6:a9:1e:8d:d0:5a:71:55:81:95:00:75:b9:db: 61:f1:53:f5:bd:6d:81:83:54:59:35:6f:1e:a4:27:10:1b:4f: 1b:d9:b8:61:78:c3:31:87:a6:4b:24:40:f0:c7:05:78:50:cb: aa:61:42:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbm9qah6ACJdhQVHI/CYlTT5ZMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTEyMDIyMzE3MDFaFw0yNTEyMDYwMTA4MDFaMDMxMTAvBgNV BAMTKDAwMTY2RUFFM0IyNzJEMEE5QkI3ODg4QkNGQTcwNEQ3MjhBOTUzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMxTy+1qPlnpGROpKdV1DBDvM lyBAP4XxTBkDvBcx+CtruR7HHxIXFs5WmRVy7sl9dAAX/PXkD1Q7ekFyZWrRhd0p 50K1nryYJXNTlvfgeBV9fcIei95XInAeRjT44sCRUIgcLOzRHILk7/cRJMYDH7/u pGgTcYw7bA/z4UDyAI+3izyVsbfjlWoWwq3mm1ZMwV2AB0ExkH0j4JL+7+NIhah2 e0eiNxTyadsawgwtFhgBfy7K9xp27zc4ZosphGIhMoMk5VzHioyogeo0LuRZWEkO 1FyjatXmQXcIZE5407A/UCJfotrgQP4aXn2w7zYjr4RiuZaA9RRLdBsGYDG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUABZurjsnLQqbt4iLz6cE1yipU8owHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8W31RAnXhu6IprNVVKZg20uKnOLU/HTgQX gP5lvjABOKO5muuxc3LmDBABtL9tqJwxgN7MaBih61hLhKlQGasOGq2fwmvoxT/O ZddTzhNukBZtCRQ9AKHBNyPT2ET9CT0/XLMgEUluVRGOYIu95v1sa2JMJLsvyea2 oB7DKptapCVxskKY5TmehXYlfOQYHN99UABU8/dfWZbM/BPVuZFwFWVu5R4wUHsp iwM3H9/zF+aFApUp9WDdrKBtUiJfvpIyPH7p+LSovWTGqR6N0FpxVYGVAHW522Hx U/W9bYGDVFk1bx6kJxAbTxvZuGF4wzGHpkskQPDHBXhQy6phQq4= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:50 2025 by rpki-client