This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: 60RYNnsxv91rZieKr+e4idTYT9Zld+vFIjyciKBk9xo= Subject key identifier: 6A:74:E3:AC:4C:9C:58:78:04:11:DE:26:B2:78:D8:11:C5:E5:00:9F Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 246CB6C1CEB99BC2BE064A81278619202039CA4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 0230 Signing time: Mon 15 Dec 2025 05:32:22 +0000 Manifest this update: Mon 15 Dec 2025 05:27:22 +0000 Manifest next update: Thu 18 Dec 2025 13:10:22 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=) 3: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: 4zq/nW1K5KI1GJEE0mL3Nsd2thY0jfXzs/P2iLzYXT4=) 4: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 13:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:6c:b6:c1:ce:b9:9b:c2:be:06:4a:81:27:86:19:20:20:39:ca:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Dec 15 05:27:22 2025 GMT Not After : Dec 18 13:10:22 2025 GMT Subject: CN=6A74E3AC4C9C58780411DE26B278D811C5E5009F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a0:f3:61:32:cf:f5:71:33:3a:db:26:5c:ce: 92:e9:25:8e:86:a6:3a:d0:fc:dc:0f:af:ee:f0:97: 4e:2a:54:de:e0:17:08:b8:23:64:6f:67:be:6d:75: 74:99:99:9b:dd:68:50:32:10:9a:5b:1a:60:7a:d2: 6b:56:57:43:2a:2c:0d:91:20:17:4c:43:3f:ad:8a: d4:c6:66:0e:80:65:56:ea:ba:95:d4:48:98:a9:6e: 3a:d6:51:77:f9:c6:58:03:50:d1:d7:ec:31:d5:66: 96:41:28:c2:bc:d8:f0:d6:93:fb:21:d5:f3:52:59: ad:95:2a:98:22:d5:4b:eb:24:09:32:cd:69:db:9e: 23:f3:e8:23:97:e1:cf:87:9f:37:6c:75:0a:1d:e2: 81:66:f7:2d:64:0c:da:48:3b:d7:3a:93:c9:b7:1a: ad:03:50:f3:80:54:57:0f:e9:32:e7:7e:eb:dd:e6: bc:fa:94:aa:bb:20:63:17:18:24:9c:5b:83:4f:2d: c1:d1:d0:97:12:fd:51:b8:9c:4c:bb:06:a5:d9:e4: 9c:bf:30:2e:61:e8:03:18:48:5d:8b:3f:98:6d:54: 9c:6d:ca:5a:56:fb:e6:07:55:40:c4:6f:04:23:70: 5c:a6:1f:43:88:02:1a:85:3b:9e:48:54:bc:cc:cf: 12:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:74:E3:AC:4C:9C:58:78:04:11:DE:26:B2:78:D8:11:C5:E5:00:9F X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:2b:9d:ff:6c:11:67:2e:9c:38:fa:dd:bc:ca:32:85:3d:4f: ee:67:4a:6d:84:40:2e:0a:3f:66:34:ef:6f:43:95:8d:56:65: e3:d7:62:cb:44:b2:fa:cf:0c:4c:7f:a9:5b:2f:87:e0:2d:d8: 00:82:77:fc:9a:73:25:9d:44:27:12:73:10:e9:79:38:1e:5a: 96:66:b9:28:09:ca:4d:57:e1:60:3b:b5:7a:ee:f8:67:2c:7a: e0:b7:e0:48:91:d2:46:eb:f3:45:77:66:09:46:9f:58:f1:0e: e4:87:4b:d6:d0:e9:bb:97:b1:f2:d9:aa:21:22:6f:cc:98:0b: 5e:18:66:8a:74:1e:dc:e3:59:80:f0:94:14:05:e5:d8:f2:31: 57:a5:3a:35:d5:5d:7e:01:9e:bd:88:fd:0f:d7:4d:1b:55:ec: 53:45:b8:3d:e8:94:91:d1:fc:8d:4f:0c:8a:5f:32:7b:32:72: 46:f9:15:60:ad:e8:5b:0a:43:db:5e:52:83:9d:9c:37:fb:25: ae:a1:26:b2:06:3a:b6:66:e5:37:11:2b:ac:b9:96:85:28:6c: 8b:6d:51:7a:36:80:1e:90:03:f0:9f:dc:be:8a:18:0e:15:21: b3:be:23:9d:0f:d0:0e:f2:02:c2:40:25:6f:bb:b6:b7:16:45: 9e:6b:e4:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGy2wc65m8K+BkqBJ4YZICA5ykswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTEyMTUwNTI3MjJaFw0yNTEyMTgxMzEwMjJaMDMxMTAvBgNV BAMTKDZBNzRFM0FDNEM5QzU4NzgwNDExREUyNkIyNzhEODExQzVFNTAwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWoPNhMs/1cTM62yZczpLpJY6G pjrQ/NwPr+7wl04qVN7gFwi4I2RvZ75tdXSZmZvdaFAyEJpbGmB60mtWV0MqLA2R IBdMQz+titTGZg6AZVbqupXUSJipbjrWUXf5xlgDUNHX7DHVZpZBKMK82PDWk/sh 1fNSWa2VKpgi1UvrJAkyzWnbniPz6COX4c+HnzdsdQod4oFm9y1kDNpIO9c6k8m3 Gq0DUPOAVFcP6TLnfuvd5rz6lKq7IGMXGCScW4NPLcHR0JcS/VG4nEy7BqXZ5Jy/ MC5h6AMYSF2LP5htVJxtylpW++YHVUDEbwQjcFymH0OIAhqFO55IVLzMzxIrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUanTjrEycWHgEEd4msnjYEcXlAJ8wHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMrnf9sEWcunDj63bzKMoU9T+5nSm2EQC4K P2Y0729DlY1WZePXYstEsvrPDEx/qVsvh+At2ACCd/yacyWdRCcScxDpeTgeWpZm uSgJyk1X4WA7tXru+GcseuC34EiR0kbr80V3ZglGn1jxDuSHS9bQ6buXsfLZqiEi b8yYC14YZop0HtzjWYDwlBQF5djyMVelOjXVXX4Bnr2I/Q/XTRtV7FNFuD3olJHR /I1PDIpfMnsyckb5FWCt6FsKQ9teUoOdnDf7Ja6hJrIGOrZm5TcRK6y5loUobItt UXo2gB6QA/Cf3L6KGA4VIbO+I50P0A7yAsJAJW+7trcWRZ5r5Gs= -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:48 2025 by rpki-client