This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: C4BSf/j+/5dfkXnBENHT6XmMA42RRGrk3qmwdqz0Qkw= Subject key identifier: 0A:C0:43:19:00:00:FE:7D:69:48:EE:49:29:93:F1:9F:AA:51:2C:64 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 38C5E5144ACCA64826E0723F7F36F84363BEDDB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01F5 Signing time: Mon 01 Dec 2025 19:41:01 +0000 Manifest this update: Mon 01 Dec 2025 19:36:01 +0000 Manifest next update: Fri 05 Dec 2025 00:57:01 +0000 Files and hashes: 1: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: Y8xAHGm+qO7n2d/0P7W+6Lvmbf6skWmPrjo7Yp2Xexg=) 2: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: /kG2XKRMgpHFqcmwADFIzCUj6H/leetgA+b7DMmSYLk=) 3: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: SnMbgMOxWF6U2uyaAr5mP0bLC0JpKov3uB08AyMeVTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c5:e5:14:4a:cc:a6:48:26:e0:72:3f:7f:36:f8:43:63:be:dd:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Dec 1 19:36:01 2025 GMT Not After : Dec 5 00:57:01 2025 GMT Subject: CN=0AC043190000FE7D6948EE492993F19FAA512C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1d:8e:83:27:86:0c:1d:c4:cd:e4:14:d6:c4: 84:ca:25:37:38:b3:18:06:03:32:ac:03:e9:9b:5b: 32:8a:76:b1:fc:76:15:65:00:36:d3:69:a0:16:87: b3:32:c4:bc:c0:9d:2e:6a:d7:a2:73:cf:12:60:dc: 6d:45:1a:2b:54:3f:75:d0:e7:90:13:43:f1:e2:6e: fd:ad:a5:b8:29:a1:2a:ef:d6:77:9e:4f:f4:0d:51: 5b:bb:51:90:09:4e:a3:18:cc:81:a6:c7:c6:be:9c: b0:93:eb:8b:f5:61:81:2b:44:e8:be:06:f9:76:a0: 01:39:af:1b:1b:e3:ab:fa:5c:fe:0e:17:24:d6:a6: 90:ff:2f:95:50:0f:65:fa:58:d5:73:76:f4:81:93: f1:96:3c:ff:07:82:7e:d2:c9:2f:19:d0:a3:3e:6b: 1c:61:9c:6a:4b:72:44:ba:16:b3:ec:2e:4b:33:a3: 26:2b:10:cf:c8:67:22:44:d5:f2:13:b4:73:d9:63: 85:f8:01:cb:78:42:6c:7d:2c:4b:b4:1a:83:66:62: d2:d8:a0:5e:22:a9:30:f0:db:74:d2:33:07:32:33: f2:86:09:b0:13:c3:c0:f9:14:e5:1f:21:56:d1:c8: 4f:fa:de:48:6b:b4:87:cd:ec:a6:53:b3:df:62:25: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:43:19:00:00:FE:7D:69:48:EE:49:29:93:F1:9F:AA:51:2C:64 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:7a:a6:dc:ee:3a:aa:75:2a:a7:d3:c7:7b:d7:ce:54:8e:c5: 53:5f:9a:a5:5d:17:6b:d8:d1:f0:44:d2:49:b4:20:2a:ed:7d: 40:af:56:5c:b6:52:a1:43:a3:34:00:5d:44:ca:ff:15:12:95: dc:74:ab:b7:1f:6d:c4:0a:fa:05:38:19:92:a5:da:c7:44:fe: 7e:1e:86:fb:7d:fa:59:ba:82:9d:41:0a:dc:33:0b:63:5b:cd: 78:65:65:44:d1:c7:75:3b:f3:64:3d:47:27:9b:35:e8:24:02: f9:a7:38:34:60:21:a2:e8:26:e7:d1:cf:bb:ae:d0:65:59:bd: 1d:3c:21:a9:40:1d:df:95:82:ee:4b:6d:86:32:78:49:27:33: d0:45:98:42:b5:a0:d1:f4:37:ba:3b:27:a4:7d:24:d2:02:56: 41:7e:0e:48:6e:8b:e2:f8:27:99:81:24:9a:ce:86:bc:e6:51: 25:21:de:a0:11:60:c5:ee:72:cb:88:ff:94:0c:61:5d:91:b1: 04:a9:28:c0:90:29:88:f9:b9:bc:1e:96:b6:55:3a:9a:5e:a2: 9c:1d:54:b5:f6:59:f5:5a:17:64:75:a7:26:a4:8d:5e:07:04: 02:84:91:05:64:06:2e:d1:d6:21:67:25:9b:fd:be:04:14:87: b5:84:52:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMXlFErMpkgm4HI/fzb4Q2O+3bcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTEyMDExOTM2MDFaFw0yNTEyMDUwMDU3MDFaMDMxMTAvBgNV BAMTKDBBQzA0MzE5MDAwMEZFN0Q2OTQ4RUU0OTI5OTNGMTlGQUE1MTJDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmHY6DJ4YMHcTN5BTWxITKJTc4 sxgGAzKsA+mbWzKKdrH8dhVlADbTaaAWh7MyxLzAnS5q16JzzxJg3G1FGitUP3XQ 55ATQ/Hibv2tpbgpoSrv1neeT/QNUVu7UZAJTqMYzIGmx8a+nLCT64v1YYErROi+ Bvl2oAE5rxsb46v6XP4OFyTWppD/L5VQD2X6WNVzdvSBk/GWPP8Hgn7SyS8Z0KM+ axxhnGpLckS6FrPsLkszoyYrEM/IZyJE1fITtHPZY4X4Act4Qmx9LEu0GoNmYtLY oF4iqTDw23TSMwcyM/KGCbATw8D5FOUfIVbRyE/63khrtIfN7KZTs99iJdN3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsBDGQAA/n1pSO5JKZPxn6pRLGQwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMd6ptzuOqp1KqfTx3vXzlSOxVNfmqVdF2vY 0fBE0km0ICrtfUCvVly2UqFDozQAXUTK/xUSldx0q7cfbcQK+gU4GZKl2sdE/n4e hvt9+lm6gp1BCtwzC2NbzXhlZUTRx3U782Q9RyebNegkAvmnODRgIaLoJufRz7uu 0GVZvR08IalAHd+Vgu5LbYYyeEknM9BFmEK1oNH0N7o7J6R9JNICVkF+Dkhui+L4 J5mBJJrOhrzmUSUh3qARYMXucsuI/5QMYV2RsQSpKMCQKYj5ubwelrZVOppeopwd VLX2WfVaF2R1pyakjV4HBAKEkQVkBi7R1iFnJZv9vgQUh7WEUoI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:52 2025 by rpki-client