This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: 2ZiDuZzHeIu6IRbu8uk6GSYQrBk8ow43z1WtUeKIME0= Subject key identifier: 85:63:1F:38:DF:EF:F2:BA:E3:D6:B1:9D:D2:70:7D:78:02:DB:2C:E0 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 590F27C99ABB1D59925CE24702DBC29953F3EDE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 14:31:29 +0000 Manifest this update: Tue 02 Dec 2025 14:26:29 +0000 Manifest next update: Fri 05 Dec 2025 23:02:29 +0000 Files and hashes: 1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: anE1POdxANqIeAt7WksexZ8rkqNuF9f08bss+CKaWy4=) 2: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:0f:27:c9:9a:bb:1d:59:92:5c:e2:47:02:db:c2:99:53:f3:ed:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Dec 2 14:26:29 2025 GMT Not After : Dec 5 23:02:29 2025 GMT Subject: CN=85631F38DFEFF2BAE3D6B19DD2707D7802DB2CE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:1a:34:e5:df:be:88:89:01:fd:b5:7d:ff:8b: 6d:99:cf:02:d3:f4:07:2f:cc:08:d4:ac:b9:aa:50: cb:1d:e9:a5:22:15:9d:18:2e:1e:0a:26:56:02:5a: 40:ee:eb:c4:5f:5b:9f:e8:48:63:8f:fa:fc:a0:19: 67:b3:e4:b1:5d:04:92:28:f4:74:03:33:c9:aa:cd: e1:5d:b0:ee:48:98:0e:fe:13:f7:fc:f9:8e:59:4b: 3b:2d:7f:8a:f3:42:aa:6a:50:c9:b8:26:b5:e8:b0: 34:a6:b0:bf:ee:40:a3:8f:17:5d:c3:5f:74:9d:4f: c1:18:2a:30:59:9f:df:63:db:83:77:73:ca:17:ed: 9b:0b:3d:4c:89:57:12:d2:60:6b:7e:e0:86:cc:1d: d6:56:30:8f:ee:2c:71:93:f0:6b:04:7f:c9:85:08: 9e:c0:72:31:3b:60:39:90:33:fd:dd:f3:16:22:45: b3:3c:a5:8c:9a:06:c4:90:03:c8:2a:55:25:21:8d: 31:bb:b2:6e:e6:b4:59:22:75:b3:30:eb:6f:89:a7: 75:fa:74:eb:ff:aa:25:9b:4c:ec:92:29:4a:bc:7a: 4d:49:93:76:93:ca:34:92:c5:84:df:13:70:b7:2a: fa:8e:be:b9:d7:03:66:77:21:4f:41:17:26:c3:42: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:63:1F:38:DF:EF:F2:BA:E3:D6:B1:9D:D2:70:7D:78:02:DB:2C:E0 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:22:0e:03:6b:19:6d:cc:ed:66:0f:ca:03:73:52:a5:59:30: 51:46:27:d5:bc:89:c5:fc:2c:a1:c9:1f:7f:f8:00:b2:59:0b: 60:c7:0a:6f:fd:84:6b:e0:bd:d9:ea:b8:a9:bb:bb:f3:8f:84: 5e:e5:9f:eb:7b:1f:2d:ba:1b:b1:d9:07:6d:c3:4a:5c:56:0f: 44:bf:80:d0:00:eb:e0:33:62:a0:1a:6c:12:fd:97:12:94:5c: ee:69:c4:33:84:30:43:cd:47:1a:56:53:2d:03:b0:ea:92:68: 1f:81:5c:bc:18:1d:bd:56:8e:c5:c6:04:09:66:ba:50:ae:2b: 23:e5:20:7c:df:e0:a6:9b:85:cb:23:1b:7c:ce:15:5f:d5:d9: 27:a6:57:d5:c4:cd:6f:de:54:d2:7d:ca:cb:51:59:e1:2e:32: 67:6d:6b:5b:87:4c:fd:72:27:81:6e:40:e6:87:c3:e6:88:b6: 40:4c:69:8d:ab:3b:c7:63:58:5a:b0:c4:87:d2:51:e4:d5:62: 99:3d:10:c3:36:46:dd:f6:4c:7f:6b:60:2a:7e:95:45:3e:dc: 45:f4:69:1e:4d:57:43:10:74:89:ff:6c:c9:14:29:49:8a:d5: 17:8b:66:4d:02:c6:d9:a0:f0:bf:0a:f9:9e:a2:81:f2:71:35: 0e:d0:26:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQ8nyZq7HVmSXOJHAtvCmVPz7ecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTEyMDIxNDI2MjlaFw0yNTEyMDUyMzAyMjlaMDMxMTAvBgNV BAMTKDg1NjMxRjM4REZFRkYyQkFFM0Q2QjE5REQyNzA3RDc4MDJEQjJDRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlGjTl376IiQH9tX3/i22ZzwLT 9AcvzAjUrLmqUMsd6aUiFZ0YLh4KJlYCWkDu68RfW5/oSGOP+vygGWez5LFdBJIo 9HQDM8mqzeFdsO5ImA7+E/f8+Y5ZSzstf4rzQqpqUMm4JrXosDSmsL/uQKOPF13D X3SdT8EYKjBZn99j24N3c8oX7ZsLPUyJVxLSYGt+4IbMHdZWMI/uLHGT8GsEf8mF CJ7AcjE7YDmQM/3d8xYiRbM8pYyaBsSQA8gqVSUhjTG7sm7mtFkidbMw62+Jp3X6 dOv/qiWbTOySKUq8ek1Jk3aTyjSSxYTfE3C3KvqOvrnXA2Z3IU9BFybDQuixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhWMfON/v8rrj1rGd0nB9eALbLOAwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4iDgNrGW3M7WYPygNzUqVZMFFGJ9W8icX8 LKHJH3/4ALJZC2DHCm/9hGvgvdnquKm7u/OPhF7ln+t7Hy26G7HZB23DSlxWD0S/ gNAA6+AzYqAabBL9lxKUXO5pxDOEMEPNRxpWUy0DsOqSaB+BXLwYHb1WjsXGBAlm ulCuKyPlIHzf4KabhcsjG3zOFV/V2SemV9XEzW/eVNJ9ystRWeEuMmdta1uHTP1y J4FuQOaHw+aItkBMaY2rO8djWFqwxIfSUeTVYpk9EMM2Rt32TH9rYCp+lUU+3EX0 aR5NV0MQdIn/bMkUKUmK1ReLZk0Cxtmg8L8K+Z6igfJxNQ7QJvI= -----END CERTIFICATE-----Generated at Wed Dec 3 15:30:37 2025 by rpki-client