This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: VgYp7zOPz58nSW2QG/RTwjVUyoxwVMnlnt9qUv+tcAg= Subject key identifier: 68:58:11:1B:A7:B7:30:9A:0C:CB:70:79:4B:28:17:1B:11:00:32:09 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 05D13A9FB1B9B8F112ADAA3F9D8CE075D6D7A624 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 025F Signing time: Wed 17 Dec 2025 23:02:33 +0000 Manifest this update: Wed 17 Dec 2025 22:57:33 +0000 Manifest next update: Sun 21 Dec 2025 01:25:33 +0000 Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: ffvU8KCJVYwcJpHPrv8wVEu+OuBMePSjym9LRTdYEAI=) 2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: HSvccbcXy7k9kPjMD6mXV/KFzh471F30ZXh1rABYDjw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:25:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d1:3a:9f:b1:b9:b8:f1:12:ad:aa:3f:9d:8c:e0:75:d6:d7:a6:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Dec 17 22:57:33 2025 GMT Not After : Dec 21 01:25:33 2025 GMT Subject: CN=6858111BA7B7309A0CCB70794B28171B11003209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:37:db:80:93:40:71:39:0e:37:c5:00:6e: 7c:e4:c5:d1:3a:d6:49:55:13:60:88:a9:11:1f:9b: 22:d9:3b:42:2e:94:82:f6:ba:52:e3:9d:64:f0:cf: a5:2c:47:03:f1:19:38:ec:99:f1:6b:d5:72:c0:7a: 32:79:f8:fd:81:8a:99:0b:80:54:3e:c0:b7:9a:7a: 7d:bf:9a:5f:e2:a7:cd:1f:bf:92:f8:88:2b:e3:60: 27:e7:4d:84:ba:fd:6f:e1:2f:50:8f:81:b6:80:e1: e2:2f:77:0e:52:af:a1:3f:a9:7b:3d:53:75:b8:d8: 92:bb:d1:44:02:64:dd:ad:0b:d2:9e:35:3b:f1:44: 5f:6a:97:07:62:77:a7:da:72:46:f4:7b:79:6b:d3: 75:64:4d:ca:48:78:0b:a6:f1:ba:cf:b2:f6:4d:68: db:0e:e4:bf:e7:be:96:9a:90:67:72:43:90:9c:a3: 2a:24:b7:96:20:e9:e9:c3:96:47:07:b5:20:df:ae: b5:b3:fe:f1:35:5c:7c:ca:54:e7:bc:04:00:87:c1: 54:bf:2a:38:86:30:13:61:c2:0d:65:1c:ad:54:7a: e6:dd:25:a6:77:36:9e:c4:53:9e:8d:c3:38:0d:d4: 33:28:fe:1d:19:9c:81:60:fe:31:34:6c:e6:0e:dd: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:58:11:1B:A7:B7:30:9A:0C:CB:70:79:4B:28:17:1B:11:00:32:09 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:90:57:b9:05:80:f0:09:f7:c2:da:39:54:76:55:63:a4:a4: f2:78:4d:95:96:1d:6a:74:5c:43:cf:ce:33:86:d9:f0:6e:77: 86:52:9d:7e:fd:0c:cc:8c:1d:a4:8c:a1:53:4f:53:2d:f0:a1: 6e:c9:2b:74:95:5e:8c:07:2e:d6:9b:66:34:44:d6:ff:bd:3a: d7:3a:a7:36:f3:b2:f3:1f:e9:91:76:94:98:b2:55:01:28:12: a5:f5:3c:8d:70:5d:dd:60:06:b7:bf:61:b0:80:d0:b0:ba:e0: 7b:a8:5c:a4:92:56:0f:08:d2:c6:f2:4a:87:2d:98:fd:23:98: 14:d4:91:fc:90:d0:68:22:5c:c6:0e:48:32:17:23:e5:7c:f3: 80:43:c2:7d:17:88:91:b1:95:24:04:68:20:0d:6d:70:b2:ec: 0d:bb:03:90:1f:10:22:c7:a2:f9:bf:dd:82:0b:0e:fa:da:5b: c1:0c:15:dd:12:8c:21:45:7e:58:ac:5e:52:9f:10:5d:2b:2f: 73:74:2a:13:c9:37:60:63:52:27:4e:25:87:73:4c:95:7d:53: 5e:04:c8:a7:a4:c8:43:52:e0:73:c2:99:7d:7f:5a:7d:68:13: 0a:d2:c3:3b:b4:54:7b:67:46:84:5b:7e:be:bc:29:86:36:ad: 59:ee:72:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBdE6n7G5uPESrao/nYzgddbXpiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTEyMTcyMjU3MzNaFw0yNTEyMjEwMTI1MzNaMDMxMTAvBgNV BAMTKDY4NTgxMTFCQTdCNzMwOUEwQ0NCNzA3OTRCMjgxNzFCMTEwMDMyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViTfbgJNAcTkON8UAbnzkxdE6 1klVE2CIqREfmyLZO0IulIL2ulLjnWTwz6UsRwPxGTjsmfFr1XLAejJ5+P2BipkL gFQ+wLeaen2/ml/ip80fv5L4iCvjYCfnTYS6/W/hL1CPgbaA4eIvdw5Sr6E/qXs9 U3W42JK70UQCZN2tC9KeNTvxRF9qlwdid6fackb0e3lr03VkTcpIeAum8brPsvZN aNsO5L/nvpaakGdyQ5Ccoyokt5Yg6enDlkcHtSDfrrWz/vE1XHzKVOe8BACHwVS/ KjiGMBNhwg1lHK1UeubdJaZ3Np7EU56NwzgN1DMo/h0ZnIFg/jE0bOYO3SmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaFgRG6e3MJoMy3B5SygXGxEAMgkwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyQV7kFgPAJ98LaOVR2VWOkpPJ4TZWWHWp0 XEPPzjOG2fBud4ZSnX79DMyMHaSMoVNPUy3woW7JK3SVXowHLtabZjRE1v+9Otc6 pzbzsvMf6ZF2lJiyVQEoEqX1PI1wXd1gBre/YbCA0LC64HuoXKSSVg8I0sbySoct mP0jmBTUkfyQ0GgiXMYOSDIXI+V884BDwn0XiJGxlSQEaCANbXCy7A27A5AfECLH ovm/3YILDvraW8EMFd0SjCFFflisXlKfEF0rL3N0KhPJN2BjUidOJYdzTJV9U14E yKekyENS4HPCmX1/Wn1oEwrSwzu0VHtnRoRbfr68KYY2rVnucuw= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:11 2025 by rpki-client