This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: NXLq+p7GDSPFXOA7BBBFf/19uC99aJu33TIJy/xPsFw= Subject key identifier: 1C:24:6F:0E:61:B4:94:58:67:4B:9C:F6:CA:B7:20:3A:29:9A:21:89 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 652FC56D7358594D6184634AB309FE043CD85F2F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0297 Signing time: Thu 18 Dec 2025 09:01:13 +0000 Manifest this update: Thu 18 Dec 2025 08:56:13 +0000 Manifest next update: Sun 21 Dec 2025 13:52:13 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 2: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: acBjHWqL79C90AB746SG2Vn1YbSlnUrTDf3kMECNXCo=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2f:c5:6d:73:58:59:4d:61:84:63:4a:b3:09:fe:04:3c:d8:5f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Dec 18 08:56:13 2025 GMT Not After : Dec 21 13:52:13 2025 GMT Subject: CN=1C246F0E61B49458674B9CF6CAB7203A299A2189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6a:33:1b:94:7c:4a:68:97:b9:d8:a4:ab:c8: 5d:bb:24:58:aa:82:ab:e8:24:fc:78:a9:bc:6b:17: 00:22:e9:27:fd:21:4d:e1:0f:d5:0a:cc:9a:42:a3: 2f:59:0a:69:03:ca:16:ab:af:7d:9d:c8:50:0d:34: 2f:44:4a:01:b0:67:18:22:7a:7f:5b:99:7c:d2:52: df:96:95:5a:70:94:da:05:39:ec:66:0e:1f:d2:aa: 91:ff:72:b7:19:72:e1:de:02:9a:13:cb:61:a6:e8: bb:9f:2b:8a:a8:16:81:ad:eb:35:62:c8:14:e6:6c: a9:5e:73:49:a8:a8:24:45:9a:83:f5:a2:bd:09:f4: 5e:68:4d:11:10:58:19:92:7c:c5:b9:1c:9e:23:2c: 92:2a:36:d8:eb:ac:80:b0:16:d3:a3:c1:e8:f4:2d: 26:45:0e:c2:ab:29:94:65:89:63:04:b4:f6:2c:89: 20:8d:f1:26:ee:8d:25:eb:cd:5e:c5:39:69:ac:25: e5:34:90:96:f3:26:06:bd:fd:bc:f6:7e:93:be:4c: 9f:8c:48:39:15:29:14:6a:9d:32:78:92:26:d5:ac: 2f:56:e4:c4:9a:05:6d:be:4f:bf:56:59:13:64:92: ab:91:83:8e:b1:d3:0d:44:3f:ac:9d:36:b9:02:e2: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:24:6F:0E:61:B4:94:58:67:4B:9C:F6:CA:B7:20:3A:29:9A:21:89 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6f:6f:61:6c:9a:2e:98:32:eb:44:46:23:9a:f4:89:b6:ca: 28:28:9a:2e:d6:c5:55:71:a5:ff:fd:f3:18:13:2d:75:63:54: 59:b9:12:75:ed:e5:54:a9:5f:a3:08:d8:65:01:1e:08:93:86: e4:6e:d7:4b:fa:36:d1:39:e1:0a:1c:a4:19:13:03:50:be:68: b9:dc:04:ed:a6:07:82:cd:7c:e1:3a:28:f4:29:b3:40:80:e7: 62:a4:42:82:c8:7f:e2:fb:63:db:19:5a:88:1e:92:03:3b:5a: ef:f8:a0:ca:2a:9b:f3:f7:9e:aa:66:ca:fd:3a:70:75:b2:8d: 52:92:67:f0:e4:ab:b8:18:56:13:8f:23:c6:1c:d0:33:61:80: 48:6b:9c:28:08:35:69:a1:4f:ea:b4:53:69:83:14:f0:5d:87: c2:6d:e4:19:0a:35:ad:06:a0:b3:6a:ac:8d:bc:78:5f:a7:15: 13:58:1b:11:7b:54:9c:87:c4:a4:79:64:81:d8:4f:ae:dc:1d: 83:e9:bf:fd:75:4a:66:3b:2b:50:96:ec:35:7a:5e:cc:90:44: 12:fe:5f:e2:97:ce:fd:ec:b2:4c:60:80:c2:33:64:66:64:94: c8:86:b7:5a:80:54:8c:2f:79:04:cd:40:67:2f:0a:69:41:c5: 06:4e:e5:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS/FbXNYWU1hhGNKswn+BDzYXy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTEyMTgwODU2MTNaFw0yNTEyMjExMzUyMTNaMDMxMTAvBgNV BAMTKDFDMjQ2RjBFNjFCNDk0NTg2NzRCOUNGNkNBQjcyMDNBMjk5QTIxODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXajMblHxKaJe52KSryF27JFiq gqvoJPx4qbxrFwAi6Sf9IU3hD9UKzJpCoy9ZCmkDyharr32dyFANNC9ESgGwZxgi en9bmXzSUt+WlVpwlNoFOexmDh/SqpH/crcZcuHeApoTy2Gm6LufK4qoFoGt6zVi yBTmbKlec0moqCRFmoP1or0J9F5oTREQWBmSfMW5HJ4jLJIqNtjrrICwFtOjwej0 LSZFDsKrKZRliWMEtPYsiSCN8SbujSXrzV7FOWmsJeU0kJbzJga9/bz2fpO+TJ+M SDkVKRRqnTJ4kibVrC9W5MSaBW2+T79WWRNkkquRg46x0w1EP6ydNrkC4sv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCRvDmG0lFhnS5z2yrcgOimaIYkwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVvb2Fsmi6YMutERiOa9Im2yigomi7WxVVx pf/98xgTLXVjVFm5EnXt5VSpX6MI2GUBHgiThuRu10v6NtE54QocpBkTA1C+aLnc BO2mB4LNfOE6KPQps0CA52KkQoLIf+L7Y9sZWogekgM7Wu/4oMoqm/P3nqpmyv06 cHWyjVKSZ/Dkq7gYVhOPI8Yc0DNhgEhrnCgINWmhT+q0U2mDFPBdh8Jt5BkKNa0G oLNqrI28eF+nFRNYGxF7VJyHxKR5ZIHYT67cHYPpv/11SmY7K1CW7DV6XsyQRBL+ X+KXzv3sskxggMIzZGZklMiGt1qAVIwveQTNQGcvCmlBxQZO5Rc= -----END CERTIFICATE-----Generated at Thu Dec 18 23:39:59 2025 by rpki-client