This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: nBPBJQZ/IDLZNUD6vnWEy2vU4w1u84qtOhb2BJhA4E8= Subject key identifier: 12:6E:9B:7B:52:49:39:1D:2A:37:D8:9C:34:55:75:7B:1B:C7:F3:EF Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 1E3D2DBA9288C2791FF5E88738A5EA340B8933CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: 0109 Signing time: Tue 02 Dec 2025 04:30:38 +0000 Manifest this update: Tue 02 Dec 2025 04:25:38 +0000 Manifest next update: Fri 05 Dec 2025 16:14:38 +0000 Files and hashes: 1: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 2: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: vVzpNoyMcqTOtAgFjk6b0L//OtGBuR6OsSou+sjl4zY=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:14:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3d:2d:ba:92:88:c2:79:1f:f5:e8:87:38:a5:ea:34:0b:89:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Dec 2 04:25:38 2025 GMT Not After : Dec 5 16:14:38 2025 GMT Subject: CN=126E9B7B5249391D2A37D89C3455757B1BC7F3EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:cb:7d:17:44:b9:90:73:64:ee:ec:c2:ec: 57:3e:49:cf:24:0d:d2:ac:e3:2d:9d:68:98:94:f4: b7:02:cb:14:6f:a6:28:35:8b:ef:d7:d4:57:b7:05: f5:62:e1:48:12:93:fe:a0:a9:4b:8a:c4:cc:af:5f: de:94:3d:36:87:35:5e:ea:eb:76:67:5c:47:e6:15: 77:48:75:06:fa:e7:6d:1a:1d:34:e4:f5:c2:df:2c: b6:c5:d5:3a:b7:3d:55:8b:70:83:d5:80:ce:bb:1e: b2:d9:df:50:86:3d:b1:a5:a7:b9:b2:fa:0b:32:88: 2b:24:d1:b1:7b:8e:d7:1e:ef:84:2e:da:f5:a0:c9: dd:f5:cf:b8:6a:8b:0d:be:8f:7a:4e:e0:92:41:ab: e0:cc:5b:1f:71:d4:9a:67:4f:99:78:71:0c:27:6a: ce:27:7d:5d:93:4c:9a:cf:46:1f:d8:b3:a8:0e:7a: 8a:ed:41:b9:af:bc:ed:0e:d8:4a:50:f2:77:f1:e6: f9:17:c0:2b:59:d5:52:16:4a:c7:99:12:48:cf:40: f6:dc:4a:4a:94:9e:4e:07:05:11:09:aa:00:cd:8e: cb:8c:5c:a1:72:c1:96:71:cd:45:e5:17:ce:3a:65: 82:55:6f:97:7d:a0:8c:5c:03:f2:a2:33:8d:3b:41: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:6E:9B:7B:52:49:39:1D:2A:37:D8:9C:34:55:75:7B:1B:C7:F3:EF X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:be:68:44:71:02:3c:6b:c7:1f:6f:6a:88:05:ce:db:d3:73: 72:d6:6f:fb:38:40:89:85:03:6c:1d:23:45:b5:db:b2:50:84: d2:88:7b:ba:68:23:7d:7e:d7:27:74:57:05:a7:61:b0:63:3f: 88:a6:04:16:06:b5:d6:5b:cb:55:74:1a:56:ca:28:96:8f:b9: 56:73:a7:bf:b0:a7:69:8e:ed:06:51:fe:a4:8a:98:b1:02:26: 78:92:1a:b6:5c:13:fe:96:ab:84:a1:ba:83:ff:56:df:45:ae: 38:8a:15:8e:96:6d:5e:5e:ef:59:76:8a:7e:a1:43:8e:05:ce: f8:b1:19:16:2b:69:47:06:52:15:8e:8f:4f:05:dc:85:3f:1c: 47:f7:f5:5c:a9:ad:5c:84:88:c0:32:23:f2:7d:aa:27:6c:13: c0:7e:4e:63:e1:eb:e8:cc:56:d3:76:82:e7:98:ed:c9:b3:82: 86:75:a2:1b:91:36:c0:01:e8:ba:b1:c1:a8:ba:f6:d0:c0:13: d3:81:cb:62:90:46:48:90:e2:7f:fa:20:6f:62:15:2d:16:fc: cb:7e:d2:84:ea:92:72:95:5a:5c:7b:d5:4e:7a:be:16:0a:ac: 40:94:b0:d7:43:7c:af:4b:93:4c:f5:27:8f:a9:76:26:0b:d0: 82:8d:ee:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHj0tupKIwnkf9eiHOKXqNAuJM8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTEyMDIwNDI1MzhaFw0yNTEyMDUxNjE0MzhaMDMxMTAvBgNV BAMTKDEyNkU5QjdCNTI0OTM5MUQyQTM3RDg5QzM0NTU3NTdCMUJDN0YzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIct9F0S5kHNk7uzC7Fc+Sc8k DdKs4y2daJiU9LcCyxRvpig1i+/X1Fe3BfVi4UgSk/6gqUuKxMyvX96UPTaHNV7q 63ZnXEfmFXdIdQb6520aHTTk9cLfLLbF1Tq3PVWLcIPVgM67HrLZ31CGPbGlp7my +gsyiCsk0bF7jtce74Qu2vWgyd31z7hqiw2+j3pO4JJBq+DMWx9x1JpnT5l4cQwn as4nfV2TTJrPRh/Ys6gOeortQbmvvO0O2EpQ8nfx5vkXwCtZ1VIWSseZEkjPQPbc SkqUnk4HBREJqgDNjsuMXKFywZZxzUXlF846ZYJVb5d9oIxcA/KiM407QQUfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEm6be1JJOR0qN9icNFV1exvH8+8wHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6+aERxAjxrxx9vaogFztvTc3LWb/s4QImF A2wdI0W127JQhNKIe7poI31+1yd0VwWnYbBjP4imBBYGtdZby1V0GlbKKJaPuVZz p7+wp2mO7QZR/qSKmLECJniSGrZcE/6Wq4ShuoP/Vt9FrjiKFY6WbV5e71l2in6h Q44FzvixGRYraUcGUhWOj08F3IU/HEf39VyprVyEiMAyI/J9qidsE8B+TmPh6+jM VtN2gueY7cmzgoZ1ohuRNsAB6Lqxwai69tDAE9OBy2KQRkiQ4n/6IG9iFS0W/Mt+ 0oTqknKVWlx71U56vhYKrECUsNdDfK9Lk0z1J4+pdiYL0IKN7uE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:35 2025 by rpki-client