This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft (raw, json) Hash identifier: 2/tRm75i2kLExhYxulMrQpC3qQAaz0x8TL+xD9bCgTA= Subject key identifier: E7:FC:31:A4:E8:99:2F:94:A9:3F:5E:FF:94:3C:70:DC:39:4B:56:AA Authority key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Certificate issuer: /CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Certificate serial: 6F8E457ABBA66DB9C38736DE01D8DEC4F0CEA1CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft Manifest number: F1 Signing time: Mon 01 Dec 2025 23:32:05 +0000 Manifest this update: Mon 01 Dec 2025 23:27:05 +0000 Manifest next update: Fri 05 Dec 2025 02:46:05 +0000 Files and hashes: 1: 3130332e3136332e3234302e302f32342d3234203d3e20313431383837.roa (hash: +teKINZvaHmO1Q+Kg4FSm38760XvHDKTZ7byNyW4UzY=) 2: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl (hash: 3NPdyJ/m/zqqU9Ft9B2HIGikUKW4KvQhnbPAyIvOxiI=) 3: 3130332e3136332e3234312e302f32342d3234203d3e20313431383837.roa (hash: 0mKtpX4YHjqhZYuwbm2O+wY91w1T7BNCRQPDyuS9qF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8e:45:7a:bb:a6:6d:b9:c3:87:36:de:01:d8:de:c4:f0:ce:a1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Validity Not Before: Dec 1 23:27:05 2025 GMT Not After : Dec 5 02:46:05 2025 GMT Subject: CN=E7FC31A4E8992F94A93F5EFF943C70DC394B56AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:3e:34:1f:c8:d9:ac:4e:31:bc:1f:45:42: 04:83:89:ea:be:3f:f4:32:9a:61:8e:a1:41:c7:89: dc:de:93:69:e6:e7:1b:7f:d4:f7:5c:0f:2c:e8:dc: 98:91:03:18:b1:08:0a:fd:e7:0c:5f:a5:76:9b:a9: aa:0a:31:a8:22:81:86:af:ff:81:63:49:4f:ed:95: c1:e4:61:17:da:2a:50:90:0e:c3:38:c3:5f:fd:c5: b3:a8:06:fb:99:d5:35:0e:7c:0c:47:5d:8f:03:e9: 8f:cc:d8:0f:93:cc:b4:16:ab:01:77:b7:ed:98:d7: df:cf:08:ba:52:3c:28:eb:5b:e4:ef:60:03:5e:06: 33:1b:df:f4:79:2b:33:1e:82:7d:b5:d6:33:c9:e1: e1:dd:47:1e:e6:b4:9c:78:54:7b:08:6b:b7:7d:18: ea:35:cc:ca:24:e9:9a:93:59:b3:4b:e3:12:61:bb: 75:c6:a1:45:53:c6:75:f8:f9:0c:ba:53:fe:d8:69: 07:66:61:97:04:82:97:8a:be:7f:0c:b3:42:b9:a9: 29:3e:1f:3e:7e:43:bb:3e:5d:2e:99:a7:59:67:8e: b7:6d:42:32:3f:ce:ba:23:44:4a:38:41:ad:86:7a: 7d:50:32:d6:6a:9d:a6:05:99:08:e7:1f:eb:38:e8: 0d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:31:A4:E8:99:2F:94:A9:3F:5E:FF:94:3C:70:DC:39:4B:56:AA X509v3 Authority Key Identifier: keyid:DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:82:5f:56:e9:4b:81:98:e9:5f:c2:86:78:28:2c:a8:f2: 72:07:95:4f:c5:0e:9b:ff:e2:3c:50:1d:6f:f8:ac:3f:29:18: cd:29:dc:e7:6f:19:f6:48:44:95:dd:b6:d7:d9:5e:59:21:d4: b4:bc:7f:36:f6:76:7a:66:1f:7a:40:bb:7a:9e:72:01:ef:96: 0f:6d:70:3c:96:15:dd:b8:4d:70:e3:a4:35:66:08:b9:79:0f: 2a:39:1c:c5:9c:8c:6a:51:28:4d:c9:49:07:e7:a5:bd:2d:2e: 32:5f:c5:de:a5:68:ab:cb:50:94:6e:5b:24:d7:77:ec:82:6e: b6:e4:fc:49:48:74:11:59:75:ac:c1:23:ca:a4:b9:4d:26:0f: b9:1a:51:35:93:98:77:27:d5:ff:5e:4c:e2:5e:c6:06:5e:64: 41:36:8c:89:ae:55:9c:37:66:30:4c:96:9f:db:9b:6a:3b:7a: a2:3f:c3:7b:32:54:96:64:87:b5:43:89:b9:08:a8:52:b9:4c: 8c:c2:2a:5a:97:c7:5d:2d:48:9e:29:51:20:e8:99:a7:f0:07: 09:f3:83:34:a9:1d:91:65:2a:cd:52:3f:6a:e4:4c:8b:40:73: ed:a3:77:7c:23:35:5e:44:57:f7:e8:98:ed:c4:05:3e:36:20: c1:54:04:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb45FerumbbnDhzbeAdjexPDOoc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4 Njk5RkU5QjAeFw0yNTEyMDEyMzI3MDVaFw0yNTEyMDUwMjQ2MDVaMDMxMTAvBgNV BAMTKEU3RkMzMUE0RTg5OTJGOTRBOTNGNUVGRjk0M0M3MERDMzk0QjU2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqz40H8jZrE4xvB9FQgSDieq+ P/QymmGOoUHHidzek2nm5xt/1PdcDyzo3JiRAxixCAr95wxfpXabqaoKMagigYav /4FjSU/tlcHkYRfaKlCQDsM4w1/9xbOoBvuZ1TUOfAxHXY8D6Y/M2A+TzLQWqwF3 t+2Y19/PCLpSPCjrW+TvYANeBjMb3/R5KzMegn211jPJ4eHdRx7mtJx4VHsIa7d9 GOo1zMok6ZqTWbNL4xJhu3XGoUVTxnX4+Qy6U/7YaQdmYZcEgpeKvn8Ms0K5qSk+ Hz5+Q7s+XS6Zp1lnjrdtQjI/zrojREo4Qa2Gen1QMtZqnaYFmQjnH+s46A0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/wxpOiZL5SpP17/lDxw3DlLVqowHwYDVR0j BBgwFoAU2zcF3qwctyEjk7cCGrZxvYaZ/pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMC9EQjM3MDVERUFD MUNCNzIxMjM5M0I3MDIxQUI2NzFCRDg2OTlGRTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcxQkQ4Njk5 RkU5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M1Yjc4NWQtODMwMy00NWM1LTlh NTgtZWMxMjg4NzQwODY2LzAvREIzNzA1REVBQzFDQjcyMTIzOTNCNzAyMUFCNjcx QkQ4Njk5RkU5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADisgl9W6UuBmOlfwoZ4KCyo8nIHlU/FDpv/ 4jxQHW/4rD8pGM0p3OdvGfZIRJXdttfZXlkh1LS8fzb2dnpmH3pAu3qecgHvlg9t cDyWFd24TXDjpDVmCLl5Dyo5HMWcjGpRKE3JSQfnpb0tLjJfxd6laKvLUJRuWyTX d+yCbrbk/ElIdBFZdazBI8qkuU0mD7kaUTWTmHcn1f9eTOJexgZeZEE2jImuVZw3 ZjBMlp/bm2o7eqI/w3syVJZkh7VDibkIqFK5TIzCKlqXx10tSJ4pUSDomafwBwnz gzSpHZFlKs1SP2rkTItAc+2jd3wjNV5EV/fomO3EBT42IMFUBDQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:26 2025 by rpki-client