This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json)
Hash identifier: r8pBM1jTO7bcZIOFOtSCJlaJhVews69mxT83uuZXExI=
Subject key identifier: 61:5F:A7:31:14:E9:E5:C3:B9:77:06:11:5E:4A:04:FC:77:D9:60:FA
Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Certificate serial: 75E3C743EDFEB1DFE8D0FCF8DD6B8EA22A3A37A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
Manifest number: 018E
Signing time: Wed 03 Dec 2025 05:42:28 +0000
Manifest this update: Wed 03 Dec 2025 05:37:28 +0000
Manifest next update: Sat 06 Dec 2025 15:18:28 +0000
Files and hashes: 1: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=)
2: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: WfU0Tk2GoPmTYIe6sI9V+tQNDdHVs6wXBwkqwpcN+Co=)
3: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=)
4: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl
rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Dec 2025 12:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e3:c7:43:ed:fe:b1:df:e8:d0:fc:f8:dd:6b:8e:a2:2a:3a:37:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD
Validity
Not Before: Dec 3 05:37:28 2025 GMT
Not After : Dec 6 15:18:28 2025 GMT
Subject: CN=615FA73114E9E5C3B97706115E4A04FC77D960FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:bc:d2:f6:11:3b:39:d7:f3:0b:53:60:21:
25:74:c7:1b:3c:52:f0:ea:b6:14:b1:31:99:02:62:
ff:60:b3:e7:11:35:f3:af:8f:c3:c5:f4:fe:c0:7e:
f9:b9:f2:cc:b1:77:64:da:8a:94:e3:e2:0f:3b:c3:
6d:39:b3:61:16:ef:f7:cb:ab:74:05:28:b9:dd:a9:
07:ee:a4:50:b3:3c:6f:82:a5:1e:e3:f9:45:93:62:
34:c0:2b:25:14:50:ef:dd:ae:25:e4:63:82:f9:43:
02:e3:ac:9d:1a:ec:a3:9a:ee:ae:9f:ea:10:5b:b9:
dd:a5:75:af:96:4a:c3:57:ad:84:1f:62:53:2c:a9:
13:f1:b3:2d:52:1d:d0:c7:8a:a4:88:54:c1:20:27:
f6:bb:27:85:87:12:df:32:36:9b:44:42:59:5c:27:
ab:2b:d2:e8:50:b8:3b:36:15:4c:a3:c6:47:d0:33:
9c:93:00:19:1a:43:33:46:c0:ad:dd:c1:31:2b:c8:
0a:df:bf:6c:81:ce:1c:45:98:93:83:78:07:95:a2:
51:ea:e6:99:13:24:b5:cf:41:0e:43:69:dc:9a:db:
11:13:e8:ff:59:e2:04:b3:28:aa:09:1b:67:6d:28:
09:b4:69:66:9d:62:ac:6e:87:6e:0f:e4:79:e7:fc:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5F:A7:31:14:E9:E5:C3:B9:77:06:11:5E:4A:04:FC:77:D9:60:FA
X509v3 Authority Key Identifier:
keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:63:3c:cb:52:1d:e0:5e:a2:67:bc:ea:ff:99:ba:96:f0:19:
22:20:9f:30:4c:b2:20:5c:5a:49:b5:2e:58:38:f5:0e:63:60:
f1:ae:1e:c5:aa:03:66:a7:85:1d:97:e5:ff:6a:f3:32:52:f1:
08:32:ac:36:83:37:16:f6:94:f8:84:f9:57:22:16:ed:1c:23:
14:2b:90:c2:f4:4e:b3:8a:23:2a:b3:79:46:46:48:f1:32:b4:
e6:cd:a8:28:4b:2e:bc:64:d6:5d:c2:d4:8e:ba:a4:d5:83:da:
d6:f2:b8:74:1b:0c:ad:f4:08:f2:94:ca:14:05:5c:c7:76:47:
60:a4:b6:7d:6d:ed:f7:88:59:31:b8:12:bd:c7:7f:cf:3e:09:
a2:6f:73:b3:37:b3:da:60:36:70:c7:e2:13:00:19:33:4d:b1:
c2:e8:1c:a4:8a:b6:a8:51:be:22:86:02:4c:7c:b4:14:68:81:
c8:03:0b:e7:e0:6f:5e:db:ee:33:b4:72:97:a2:fd:78:33:65:
18:60:41:dc:93:b0:1c:ec:2f:62:5c:d3:07:a4:4f:0d:5b:6f:
e4:c8:12:f0:e3:35:93:05:48:1d:ce:89:85:3b:0f:99:37:23:
9b:50:75:45:0b:eb:52:04:55:46:db:ef:e4:67:49:8d:d4:bd:
2e:a0:fa:e6
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdePHQ+3+sd/o0Pz43WuOoio6N6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5
MEU4QjdBRDAeFw0yNTEyMDMwNTM3MjhaFw0yNTEyMDYxNTE4MjhaMDMxMTAvBgNV
BAMTKDYxNUZBNzMxMTRFOUU1QzNCOTc3MDYxMTVFNEEwNEZDNzdEOTYwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpLzS9hE7OdfzC1NgISV0xxs8
UvDqthSxMZkCYv9gs+cRNfOvj8PF9P7Afvm58syxd2TaipTj4g87w205s2EW7/fL
q3QFKLndqQfupFCzPG+CpR7j+UWTYjTAKyUUUO/driXkY4L5QwLjrJ0a7KOa7q6f
6hBbud2lda+WSsNXrYQfYlMsqRPxsy1SHdDHiqSIVMEgJ/a7J4WHEt8yNptEQllc
J6sr0uhQuDs2FUyjxkfQM5yTABkaQzNGwK3dwTEryArfv2yBzhxFmJODeAeVolHq
5pkTJLXPQQ5Dadya2xET6P9Z4gSzKKoJG2dtKAm0aWadYqxuh24P5Hnn/DCpAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUYV+nMRTp5cO5dwYRXkoE/HfZYPowHwYDVR0j
BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC
MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4
QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz
YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF
Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAVjPMtSHeBeome86v+ZupbwGSIgnzBMsiBc
Wkm1Llg49Q5jYPGuHsWqA2anhR2X5f9q8zJS8QgyrDaDNxb2lPiE+VciFu0cIxQr
kML0TrOKIyqzeUZGSPEytObNqChLLrxk1l3C1I66pNWD2tbyuHQbDK30CPKUyhQF
XMd2R2Cktn1t7feIWTG4Er3Hf88+CaJvc7M3s9pgNnDH4hMAGTNNscLoHKSKtqhR
viKGAkx8tBRogcgDC+fgb17b7jO0cpei/XgzZRhgQdyTsBzsL2Jc0wekTw1bb+TI
EvDjNZMFSB3OiYU7D5k3I5tQdUUL61IEVUbb7+RnSY3UvS6g+uY=
-----END CERTIFICATE-----
Generated at Wed Dec 3 13:56:28 2025 by rpki-client