This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: VG2A7zFFU4mDR0RDOXtIshxP3xcgJr/LQtcHFV4j7YE= Subject key identifier: 4D:8D:47:8D:3B:18:09:5E:66:49:63:3F:E5:3F:92:B2:3B:4D:7D:17 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 1687C812C38129C09531C4D5EC210F3654D3DE39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0290 Signing time: Mon 01 Dec 2025 18:51:11 +0000 Manifest this update: Mon 01 Dec 2025 18:46:11 +0000 Manifest next update: Fri 05 Dec 2025 04:40:11 +0000 Files and hashes: 1: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: fVQJJ2/FTINFqYmPIXIT/x7AoAIx4NvEVs35ZHYmEGE=) 2: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: 5tgjuzU09jqsB8+Ds22MwULKYbCeu3hfy4yQgPpxaYw=) 3: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PhBm6FHQzLYkuyoWbZnBV9HiHTGNLsKA9LefOpfbYek=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:87:c8:12:c3:81:29:c0:95:31:c4:d5:ec:21:0f:36:54:d3:de:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Dec 1 18:46:11 2025 GMT Not After : Dec 5 04:40:11 2025 GMT Subject: CN=4D8D478D3B18095E6649633FE53F92B23B4D7D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:77:d1:48:16:b2:23:32:ab:fc:e2:37:56:ff: cc:fb:5a:f3:89:fe:87:8d:fb:e6:1d:ab:7e:eb:fe: 18:08:da:b8:18:29:66:1d:52:05:a2:ce:af:53:fd: 71:c4:e2:9a:06:c1:8b:ac:0f:d3:24:2f:f6:8a:87: d2:fb:7b:4c:7f:18:21:02:67:2e:83:73:82:8f:6e: c9:f5:fa:de:2a:bb:e1:4c:bd:5a:86:87:2f:f0:95: ec:67:3b:00:eb:ec:47:82:b9:e6:52:27:2a:0d:e3: c8:85:07:51:72:44:71:a1:0f:2b:da:57:99:21:d7: d3:44:b7:4b:d6:0a:58:1e:fe:9b:60:0b:6e:ea:be: 96:e0:44:bd:c3:e2:06:52:32:b4:e7:da:5c:d1:e0: 7f:a5:be:af:d4:f0:cf:ec:e3:d7:98:20:fa:f0:a5: 45:a5:ba:d7:65:19:1c:ea:36:d9:6f:8d:15:40:59: 28:40:16:03:aa:74:c5:5e:72:35:9f:38:42:4c:ed: ad:bb:a2:30:10:a4:1a:a7:5b:52:a6:10:7a:77:da: 0a:ef:11:a1:71:91:4a:a5:ed:4c:63:fc:d1:e2:f2: 77:e9:ca:1b:23:8a:13:1b:1a:20:97:21:7c:1e:d7: 75:ee:ac:b6:83:e5:4e:7b:04:4b:48:2e:6b:97:e3: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8D:47:8D:3B:18:09:5E:66:49:63:3F:E5:3F:92:B2:3B:4D:7D:17 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:b8:85:cd:37:4d:ee:3b:c8:9e:96:43:db:2c:ca:f8:c0:52: 40:58:d0:15:c3:30:29:d0:44:e2:85:ec:41:a4:2e:49:ff:41: 11:59:ec:65:e6:c0:72:6a:60:51:10:6e:b6:57:94:5a:6a:07: 2f:b3:91:68:df:21:03:93:be:81:ec:76:3e:a9:cd:0a:a9:c1: 22:bb:d6:05:e7:b2:90:a5:f4:35:21:b5:45:02:09:93:eb:a4: 6c:42:57:ce:19:33:a2:90:39:c2:d2:06:c9:aa:5c:16:16:5c: a6:eb:2c:2b:3d:7f:2d:3e:f1:c7:05:9f:41:90:96:27:f1:29: 63:ee:5e:cf:a7:a6:55:bb:a3:b6:ed:3a:14:ee:96:08:89:1a: b9:1b:59:60:18:40:e2:15:29:57:12:78:73:6d:88:c8:69:52: e5:e4:eb:ad:09:eb:81:47:33:fc:02:d0:1b:de:d5:49:68:b8: 61:9a:ce:2a:b0:11:f0:2b:31:e2:8f:66:81:de:3a:80:8b:d8: d5:ca:88:77:83:6a:d9:19:d5:93:b3:04:13:5a:8f:54:9c:7e: 89:82:b8:e7:fc:8a:16:62:6d:f7:75:8c:a1:ef:38:59:45:12: 3b:24:b4:a1:58:0a:8c:3a:80:cf:9b:d9:24:0f:c8:54:04:13: 54:ec:d1:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFofIEsOBKcCVMcTV7CEPNlTT3jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTEyMDExODQ2MTFaFw0yNTEyMDUwNDQwMTFaMDMxMTAvBgNV BAMTKDREOEQ0NzhEM0IxODA5NUU2NjQ5NjMzRkU1M0Y5MkIyM0I0RDdEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOd9FIFrIjMqv84jdW/8z7WvOJ /oeN++Ydq37r/hgI2rgYKWYdUgWizq9T/XHE4poGwYusD9MkL/aKh9L7e0x/GCEC Zy6Dc4KPbsn1+t4qu+FMvVqGhy/wlexnOwDr7EeCueZSJyoN48iFB1FyRHGhDyva V5kh19NEt0vWClge/ptgC27qvpbgRL3D4gZSMrTn2lzR4H+lvq/U8M/s49eYIPrw pUWlutdlGRzqNtlvjRVAWShAFgOqdMVecjWfOEJM7a27ojAQpBqnW1KmEHp32grv EaFxkUql7Uxj/NHi8nfpyhsjihMbGiCXIXwe13XurLaD5U57BEtILmuX49/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTY1HjTsYCV5mSWM/5T+SsjtNfRcwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS4hc03Te47yJ6WQ9ssyvjAUkBY0BXDMCnQ ROKF7EGkLkn/QRFZ7GXmwHJqYFEQbrZXlFpqBy+zkWjfIQOTvoHsdj6pzQqpwSK7 1gXnspCl9DUhtUUCCZPrpGxCV84ZM6KQOcLSBsmqXBYWXKbrLCs9fy0+8ccFn0GQ lifxKWPuXs+nplW7o7btOhTulgiJGrkbWWAYQOIVKVcSeHNtiMhpUuXk660J64FH M/wC0Bve1UlouGGaziqwEfArMeKPZoHeOoCL2NXKiHeDatkZ1ZOzBBNaj1ScfomC uOf8ihZibfd1jKHvOFlFEjsktKFYCow6gM+b2SQPyFQEE1Ts0fI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:22 2025 by rpki-client