This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: UwMJ8VXRvj5yNUKYaI6thOb0HAaKu3MH9z2LuihpuNU= Subject key identifier: B8:D5:8A:5B:AA:F7:6C:9C:C5:F1:5D:59:60:A1:32:B7:2E:84:1C:F3 Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 655D89C56AB9F66AD1DF4C5FB479E784213C3ACE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: E0 Signing time: Tue 02 Dec 2025 09:21:02 +0000 Manifest this update: Tue 02 Dec 2025 09:16:02 +0000 Manifest next update: Fri 05 Dec 2025 09:30:02 +0000 Files and hashes: 1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: OBAMIR6o88w8OfvjKc+CvsxLTJpjUECRIBtfHRF/vnM=) 2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: jTSJ7czAfB5wQPpiJhD81MVoTanxxYSx3UlZT9S3Bpo=) 3: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: ddnEDu4ujzH2U+wrCuFYzTTZ0z5ZKNzjOcLkosVrgEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:30:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5d:89:c5:6a:b9:f6:6a:d1:df:4c:5f:b4:79:e7:84:21:3c:3a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: Dec 2 09:16:02 2025 GMT Not After : Dec 5 09:30:02 2025 GMT Subject: CN=B8D58A5BAAF76C9CC5F15D5960A132B72E841CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:5e:61:ab:4e:e7:65:7b:19:8b:94:4f:69: 62:2c:0f:b2:6f:5f:ef:76:8e:7a:d2:36:54:31:38: 4e:f2:d0:a2:1b:22:07:64:e3:5c:f2:cf:77:bb:2a: 09:90:24:67:cb:e6:40:ac:a3:ff:f7:49:fb:37:29: b8:eb:1d:8f:e5:10:45:1f:fc:13:d0:20:05:0a:dc: d1:8f:d6:d8:74:fa:e8:8e:2d:b9:db:22:c8:49:3f: f8:0c:5b:b3:33:7b:56:7a:3a:a3:f2:6e:53:84:ad: 21:5e:67:0b:d1:f4:45:64:e1:c5:1b:e9:7f:85:ad: c5:a2:35:06:7e:ed:24:4c:5d:b3:e7:51:fb:5c:e4: 6c:a0:b1:44:4b:34:45:8c:fd:1c:d4:c1:eb:0f:e1: 1a:b8:07:72:10:4f:8a:11:73:c8:d3:5e:3f:92:75: 8d:5c:df:d9:73:5c:f8:71:d9:5c:f7:6a:4a:31:d7: ef:64:88:53:a7:16:ed:be:c7:b4:98:c7:1a:25:29: 11:b4:cb:a0:ec:e1:9b:9b:2e:ec:2b:eb:61:8f:70: b5:1e:84:fc:a5:cf:05:19:a9:1e:71:58:1d:b1:e5: c3:d5:a8:5a:3f:2a:92:18:00:7f:ae:06:9c:dc:95: 4f:92:a6:b1:8b:ce:62:1c:2c:a2:d3:20:46:5e:1c: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D5:8A:5B:AA:F7:6C:9C:C5:F1:5D:59:60:A1:32:B7:2E:84:1C:F3 X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:5a:70:32:b5:93:d9:2c:a9:1a:25:aa:b7:4c:e6:bc:89:99: eb:e8:d8:9b:8d:1f:3d:0f:2b:dd:12:38:f0:4e:22:d5:01:c8: 59:f7:b7:93:60:50:06:24:27:f6:6b:a5:65:fd:5e:77:40:11: 95:cf:7f:1a:79:1d:13:1e:a4:b8:97:05:74:6c:fa:ab:43:e0: 7b:d7:7c:29:77:17:78:5c:a9:8f:e9:5d:4c:eb:97:75:5d:fa: 81:c6:81:53:75:5b:bc:70:99:07:f8:59:81:20:75:2c:4b:a5: 7b:42:e4:07:9b:ec:b8:a3:a3:4f:86:50:f5:e1:fc:8c:6f:19: 1f:c0:eb:e6:71:b0:7a:2d:2d:ba:a9:9f:71:99:06:8e:eb:2e: f3:cc:27:9f:25:0c:02:09:25:8d:5b:e0:9d:7e:2f:ab:4a:e4: a6:e7:90:58:3d:3a:d6:dd:c5:d7:f5:7d:9d:05:d7:1d:26:9b: 82:e7:7d:89:87:73:fc:ff:1f:13:05:1f:2d:ac:7d:7a:9a:52: 7f:8f:fb:22:22:c4:d0:32:c5:18:58:2f:21:38:ee:b0:a4:a9: ac:8d:2f:e7:23:7b:82:a8:bc:33:3d:b3:fa:e4:ca:d5:0e:c9: bd:db:73:a8:de:e4:35:0d:de:d2:57:63:75:e5:83:b2:0f:d8: f1:92:35:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZV2JxWq59mrR30xftHnnhCE8Os4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNTEyMDIwOTE2MDJaFw0yNTEyMDUwOTMwMDJaMDMxMTAvBgNV BAMTKEI4RDU4QTVCQUFGNzZDOUNDNUYxNUQ1OTYwQTEzMkI3MkU4NDFDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3l5hq07nZXsZi5RPaWIsD7Jv X+92jnrSNlQxOE7y0KIbIgdk41zyz3e7KgmQJGfL5kCso//3Sfs3KbjrHY/lEEUf /BPQIAUK3NGP1th0+uiOLbnbIshJP/gMW7Mze1Z6OqPyblOErSFeZwvR9EVk4cUb 6X+FrcWiNQZ+7SRMXbPnUftc5GygsURLNEWM/RzUwesP4Rq4B3IQT4oRc8jTXj+S dY1c39lzXPhx2Vz3akox1+9kiFOnFu2+x7SYxxolKRG0y6Ds4ZubLuwr62GPcLUe hPylzwUZqR5xWB2x5cPVqFo/KpIYAH+uBpzclU+SprGLzmIcLKLTIEZeHDvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuNWKW6r3bJzF8V1ZYKEyty6EHPMwHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZacDK1k9ksqRolqrdM5ryJmevo2JuNHz0P K90SOPBOItUByFn3t5NgUAYkJ/ZrpWX9XndAEZXPfxp5HRMepLiXBXRs+qtD4HvX fCl3F3hcqY/pXUzrl3Vd+oHGgVN1W7xwmQf4WYEgdSxLpXtC5Aeb7Lijo0+GUPXh /IxvGR/A6+ZxsHotLbqpn3GZBo7rLvPMJ58lDAIJJY1b4J1+L6tK5KbnkFg9Otbd xdf1fZ0F1x0mm4LnfYmHc/z/HxMFHy2sfXqaUn+P+yIixNAyxRhYLyE47rCkqayN L+cje4KovDM9s/rkytUOyb3bc6je5DUN3tJXY3Xlg7IP2PGSNQU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:51 2025 by rpki-client