This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: OmuqZc091i6pogtc1J4AK4Wb4+VAYrsxMQemJaqrg2I= Subject key identifier: 94:C2:31:74:37:22:45:77:01:A4:4E:AE:B3:72:F9:99:11:A1:1F:E6 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 5F7E94EDE80CC3957A139F636F1D8CEF5A917038 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: D5 Signing time: Sun 07 Dec 2025 15:02:01 +0000 Manifest this update: Sun 07 Dec 2025 14:57:01 +0000 Manifest next update: Thu 11 Dec 2025 02:52:01 +0000 Files and hashes: 1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) 2: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) 3: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: bHKLVPgCP2zAJHhNf2Lhw8kgH/lODn/WbIDAXZ/3VUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7e:94:ed:e8:0c:c3:95:7a:13:9f:63:6f:1d:8c:ef:5a:91:70:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Dec 7 14:57:01 2025 GMT Not After : Dec 11 02:52:01 2025 GMT Subject: CN=94C231743722457701A44EAEB372F99911A11FE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:1f:ef:b0:f8:67:23:d8:3e:e7:2a:b7:57: 8c:80:78:1c:d0:05:be:5a:a7:c2:ba:07:4e:09:a8: 83:71:53:5a:96:fd:38:36:e7:6e:96:b8:4e:ae:64: 92:14:9b:fb:a5:33:44:db:2c:23:ba:d6:a1:eb:e7: f3:76:d3:72:62:85:e5:ac:8f:3f:5f:57:87:9f:1f: f9:92:c0:4b:68:e0:97:02:e2:f2:d0:be:8a:91:63: f6:86:4d:f2:aa:40:06:e1:49:67:21:0c:24:90:dd: d7:8c:77:b5:51:db:51:3b:a2:47:9c:ed:c7:d7:1a: b9:a5:18:55:4d:60:2b:ac:66:41:e8:55:bf:0f:01: 18:6a:55:50:05:89:90:bd:b5:fe:80:38:c8:cb:24: f6:32:d1:43:c2:5d:55:cb:ea:fe:64:f7:47:69:43: 60:ae:05:65:89:5e:34:0f:f6:64:b3:a3:66:7a:f9: 48:ac:99:dc:d0:9a:37:e5:71:8e:cb:39:a9:54:c4: 09:51:02:1a:89:ba:ae:07:38:49:df:5d:2f:50:d7: ce:06:bc:d0:4e:e3:b3:ff:e1:c2:53:47:48:ca:90: 1b:01:22:d5:ea:98:e0:4a:fa:5f:d3:f1:ee:c1:0d: 83:87:bb:b7:05:81:92:58:1a:55:02:e9:ab:d2:5b: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C2:31:74:37:22:45:77:01:A4:4E:AE:B3:72:F9:99:11:A1:1F:E6 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:38:bb:33:2a:89:57:d9:63:38:9c:73:23:2f:f2:08:2e:6b: 61:36:ba:a5:0f:77:5f:e3:a4:8a:1b:41:d3:17:5c:c4:94:0b: a2:db:e4:bd:08:0d:12:f7:78:45:44:52:1c:29:0c:f8:69:2e: 2b:f9:e6:b9:8a:af:57:f4:3c:16:f6:eb:82:f2:92:fc:bd:4e: 45:af:70:4e:57:60:cb:a1:fb:8a:99:bd:f3:b5:51:15:1e:c8: cd:d1:89:b2:6b:2b:ea:91:a2:19:09:5e:a5:e7:1e:f4:ca:1c: fc:bc:e8:cc:07:7c:51:c7:25:1f:09:71:66:08:56:1e:1e:81: 79:68:d5:5e:36:77:dd:2a:f5:87:9c:44:55:09:7a:51:51:4c: 02:10:9e:ea:cc:7a:29:9d:09:d7:b8:1e:53:1f:7d:1b:b2:f8: 64:0e:65:33:4c:d3:9f:b3:a1:14:e8:4e:10:31:8d:17:17:a6: b9:fb:f3:6b:9f:1f:ec:6e:ef:fd:4e:f1:ec:ee:8f:c4:cc:0e: 8e:42:91:4d:fd:80:ad:3d:05:dd:0e:50:fc:73:74:e3:ab:c7: ec:49:83:de:88:b9:e4:d7:59:fc:a6:09:ec:9d:b8:38:65:b8: cc:bc:32:bc:a5:f8:82:71:f5:66:a8:28:7f:3a:80:ec:24:c3: 9d:64:3d:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX36U7egMw5V6E59jbx2M71qRcDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTEyMDcxNDU3MDFaFw0yNTEyMTEwMjUyMDFaMDMxMTAvBgNV BAMTKDk0QzIzMTc0MzcyMjQ1NzcwMUE0NEVBRUIzNzJGOTk5MTFBMTFGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kR/vsPhnI9g+5yq3V4yAeBzQ Bb5ap8K6B04JqINxU1qW/Tg2526WuE6uZJIUm/ulM0TbLCO61qHr5/N203JiheWs jz9fV4efH/mSwEto4JcC4vLQvoqRY/aGTfKqQAbhSWchDCSQ3deMd7VR21E7okec 7cfXGrmlGFVNYCusZkHoVb8PARhqVVAFiZC9tf6AOMjLJPYy0UPCXVXL6v5k90dp Q2CuBWWJXjQP9mSzo2Z6+UismdzQmjflcY7LOalUxAlRAhqJuq4HOEnfXS9Q184G vNBO47P/4cJTR0jKkBsBItXqmOBK+l/T8e7BDYOHu7cFgZJYGlUC6avSWxo3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlMIxdDciRXcBpE6us3L5mRGhH+YwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAU4uzMqiVfZYziccyMv8ggua2E2uqUPd1/j pIobQdMXXMSUC6Lb5L0IDRL3eEVEUhwpDPhpLiv55rmKr1f0PBb264Lykvy9TkWv cE5XYMuh+4qZvfO1URUeyM3RibJrK+qRohkJXqXnHvTKHPy86MwHfFHHJR8JcWYI Vh4egXlo1V42d90q9YecRFUJelFRTAIQnurMeimdCde4HlMffRuy+GQOZTNM05+z oRToThAxjRcXprn782ufH+xu7/1O8ezuj8TMDo5CkU39gK09Bd0OUPxzdOOrx+xJ g96IueTXWfymCeyduDhluMy8Mryl+IJx9WaoKH86gOwkw51kPTM= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:47 2025 by rpki-client