This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: bGIBywpNJ08pm5H028PyJKQwu55yHldAd6qYv2pt8Oo= Subject key identifier: E0:43:38:88:A0:5F:CD:A5:42:C0:12:54:6F:DD:C8:AE:1F:80:8C:D0 Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 34129921D000DAFABD269A3DA7A894E30F3A69A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: FA Signing time: Mon 22 Dec 2025 06:12:08 +0000 Manifest this update: Mon 22 Dec 2025 06:07:07 +0000 Manifest next update: Thu 25 Dec 2025 14:30:07 +0000 Files and hashes: 1: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: QMKaaSyXaBT6SWmar4p18FGO90OMI6XG44wDdUESFNM=) 2: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) 3: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:12:99:21:d0:00:da:fa:bd:26:9a:3d:a7:a8:94:e3:0f:3a:69:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Dec 22 06:07:07 2025 GMT Not After : Dec 25 14:30:07 2025 GMT Subject: CN=E0433888A05FCDA542C012546FDDC8AE1F808CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:2c:01:d6:f8:4b:69:b9:7a:6e:50:e3:ae: d6:c3:5a:cf:aa:b9:59:94:05:4c:b8:9b:a3:66:24: 6f:98:c6:e7:cb:d4:49:1f:da:2b:1b:53:b2:55:9b: c3:11:2e:76:51:b3:ce:19:76:5c:51:43:8b:8c:2d: 8b:42:5a:5c:8a:c7:24:95:fe:e2:d1:f9:6d:db:38: ee:e1:3a:b5:c3:bb:2c:14:4a:38:7d:cb:65:62:ed: 00:c8:44:b3:bc:bb:f0:6b:96:eb:cb:35:07:b8:df: 28:ea:5f:23:24:2a:84:6e:fc:a1:8e:83:26:75:6b: ad:a1:08:e8:d0:ab:5b:b7:49:b5:56:bf:da:71:e8: 3f:d1:be:d1:8d:cc:a8:74:79:4d:c0:bb:ac:b6:ab: 9c:2e:ab:ba:50:29:5c:b8:86:47:d2:60:84:6d:26: 61:ce:f7:2c:c0:e3:d4:d4:24:a9:20:68:87:53:45: 6a:63:b7:ea:4a:b0:38:ba:73:ec:c8:b3:32:db:05: fe:3a:fa:82:28:b9:2c:f0:41:5e:b9:72:f9:b4:cd: ce:a7:d0:be:f3:58:14:88:62:87:54:5e:aa:7a:b1: 41:44:8c:98:60:bd:f2:7f:34:5f:b9:c9:71:a6:cd: 86:2a:05:8a:bf:c5:4f:75:2a:84:9e:e4:40:01:2b: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:43:38:88:A0:5F:CD:A5:42:C0:12:54:6F:DD:C8:AE:1F:80:8C:D0 X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e6:1d:ba:ff:59:4b:03:62:44:b8:b8:f0:b8:96:6d:4f:8d: 65:32:09:05:b6:7c:f3:f4:59:9a:2c:0c:09:7a:02:3e:a5:ba: 6f:ad:4c:ac:29:a3:97:49:26:59:97:58:7f:3e:66:b8:0d:79: ec:df:af:ae:55:28:fb:89:af:4c:1f:c5:ac:6a:62:aa:70:05: b2:1c:f2:1d:37:91:a7:f6:5f:2a:e9:35:c7:b7:50:a6:c8:d4: 9a:3a:b9:28:0a:1f:fa:15:97:3c:df:b7:c2:57:90:27:af:dd: 24:d6:b4:70:97:08:e5:06:8e:18:ff:a1:12:86:f9:03:5a:71: 28:4c:4c:91:a9:fa:0a:b1:65:bf:4f:97:0b:1e:8e:f6:43:11: 6f:d6:03:d6:8b:2d:7b:6e:ea:1f:99:81:58:ae:f6:b9:de:25: b1:93:d7:9d:0e:82:54:a9:94:5f:54:a0:d0:64:2b:d7:eb:9e: 67:27:19:b8:7b:7a:ef:2f:ea:50:4a:ff:2e:23:74:d8:23:c0: d1:f3:a9:48:0e:7c:e9:fb:f7:d4:38:92:cf:09:13:08:6a:b9: 24:2b:60:2a:4d:b4:98:30:87:7e:61:df:12:ab:49:85:9a:6c: cc:a8:c2:e5:45:ba:2e:e8:0f:10:31:00:55:d9:da:99:21:d0: ef:07:77:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNBKZIdAA2vq9Jpo9p6iU4w86aaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTEyMjIwNjA3MDdaFw0yNTEyMjUxNDMwMDdaMDMxMTAvBgNV BAMTKEUwNDMzODg4QTA1RkNEQTU0MkMwMTI1NDZGRERDOEFFMUY4MDhDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODiwB1vhLabl6blDjrtbDWs+q uVmUBUy4m6NmJG+YxufL1Ekf2isbU7JVm8MRLnZRs84ZdlxRQ4uMLYtCWlyKxySV /uLR+W3bOO7hOrXDuywUSjh9y2Vi7QDIRLO8u/BrluvLNQe43yjqXyMkKoRu/KGO gyZ1a62hCOjQq1u3SbVWv9px6D/RvtGNzKh0eU3Au6y2q5wuq7pQKVy4hkfSYIRt JmHO9yzA49TUJKkgaIdTRWpjt+pKsDi6c+zIszLbBf46+oIouSzwQV65cvm0zc6n 0L7zWBSIYodUXqp6sUFEjJhgvfJ/NF+5yXGmzYYqBYq/xU91KoSe5EABK96bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4EM4iKBfzaVCwBJUb93Irh+AjNAwHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvmHbr/WUsDYkS4uPC4lm1PjWUyCQW2fPP0 WZosDAl6Aj6lum+tTKwpo5dJJlmXWH8+ZrgNeezfr65VKPuJr0wfxaxqYqpwBbIc 8h03kaf2XyrpNce3UKbI1Jo6uSgKH/oVlzzft8JXkCev3STWtHCXCOUGjhj/oRKG +QNacShMTJGp+gqxZb9PlwsejvZDEW/WA9aLLXtu6h+ZgViu9rneJbGT150OglSp lF9UoNBkK9frnmcnGbh7eu8v6lBK/y4jdNgjwNHzqUgOfOn799Q4ks8JEwhquSQr YCpNtJgwh35h3xKrSYWabMyowuVFui7oDxAxAFXZ2pkh0O8Hdw8= -----END CERTIFICATE-----Generated at Tue Dec 23 06:50:02 2025 by rpki-client