This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft File: DA3283EBD45CCF7056D92A914183FB7825C66692.mft (raw, json) Hash identifier: CULmAudSIWM5DCKpdolqDZn2SslDdt2ov9/jjoQP74Q= Subject key identifier: B0:57:38:16:97:26:2F:13:F1:90:33:B7:B2:35:5A:F1:B8:7D:34:D7 Authority key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92 Certificate issuer: /CN=DA3283EBD45CCF7056D92A914183FB7825C66692 Certificate serial: 63745944B7B7D575858DF63E242F72752E26123C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft Manifest number: 03A9 Signing time: Wed 03 Dec 2025 04:21:26 +0000 Manifest this update: Wed 03 Dec 2025 04:16:26 +0000 Manifest next update: Sat 06 Dec 2025 09:49:26 +0000 Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: EATIBsyZSn7WKWmqFnQ9A4zCQGUX3rLtKm9XeWUjlEU=) 2: DA3283EBD45CCF7056D92A914183FB7825C66692.crl (hash: UyiGyMZ2GpVk7fOSM9QF8LYiUrrLUnMKyTsU55OC95c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:74:59:44:b7:b7:d5:75:85:8d:f6:3e:24:2f:72:75:2e:26:12:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA3283EBD45CCF7056D92A914183FB7825C66692 Validity Not Before: Dec 3 04:16:26 2025 GMT Not After : Dec 6 09:49:26 2025 GMT Subject: CN=B057381697262F13F19033B7B2355AF1B87D34D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:67:3c:df:9a:e9:b7:67:4b:6d:39:38:f0: 61:81:79:21:88:c8:64:7a:2b:29:ea:8c:66:72:a6: ce:76:18:4a:13:76:1d:7a:3e:39:b4:3f:23:33:38: 6e:52:d7:24:1e:83:14:39:08:77:49:04:c9:ab:4e: a8:ed:5e:cf:57:8b:c1:69:17:2c:f4:49:07:9f:6b: 8e:79:06:f8:c3:03:9e:29:8d:03:3a:b0:28:84:17: ae:d5:b3:39:e4:cb:53:52:ce:44:45:03:ed:d9:90: 42:5a:f4:d1:dc:ee:61:cf:3d:11:5a:61:12:75:5b: 16:72:5a:fa:7e:bf:e3:03:5d:8a:54:b2:d7:7e:60: 09:a6:9c:35:30:71:28:5c:43:39:e7:6d:24:71:f8: ac:8d:2a:38:de:51:a3:16:e6:c3:73:b0:5a:36:3b: 0d:cb:75:df:59:da:fd:29:8e:90:82:37:65:a0:1d: f8:f6:d9:ba:0f:9f:7d:e2:b1:ce:c1:3f:8a:ce:fa: ad:08:de:45:54:1f:d1:ac:5b:ac:02:57:43:e5:f7: 0a:d6:45:18:94:7b:ee:52:6d:12:87:c4:74:78:93: 06:3a:c6:17:a0:4a:13:75:ec:7a:58:52:b1:64:6e: c8:c5:35:35:b5:a4:ec:85:33:55:7b:4b:6c:b3:51: c3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:38:16:97:26:2F:13:F1:90:33:B7:B2:35:5A:F1:B8:7D:34:D7 X509v3 Authority Key Identifier: keyid:DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ee:31:6a:7d:2d:98:db:55:35:f3:fa:42:e0:f4:e6:70:6b: 99:7b:90:b2:e4:6b:82:b7:bd:40:90:03:1c:df:a1:99:b5:33: ac:09:dc:fd:13:74:7e:be:08:3f:87:2c:84:c9:25:0a:17:87: 17:99:a6:77:92:a2:46:d4:9f:7e:c6:56:67:b5:78:f4:ea:56: 49:14:f5:b3:6a:3d:79:74:c7:34:8f:63:e0:33:71:1f:72:9a: b0:30:22:a3:f5:fc:c5:b1:f0:3e:f5:43:82:53:34:56:9f:00: 6a:2f:5e:b8:63:d2:99:19:08:31:78:71:ef:ff:b6:c9:1c:fa: f7:7e:57:03:20:fe:c8:74:60:59:59:f8:df:b5:57:40:9a:bd: ca:9f:5b:92:a9:d2:35:d9:52:fd:3b:a7:df:f4:31:38:56:7a: bd:b0:e0:91:e7:41:92:22:78:06:3c:b1:64:22:01:64:ea:c3: 2d:e2:02:1a:8f:93:ab:4e:f0:1e:ca:14:a4:d1:45:75:73:3f: f7:e0:b7:6a:78:13:40:a4:04:18:03:cd:0b:39:40:10:63:9f: 5a:2d:b3:64:2c:7b:ba:70:dc:04:f6:5b:b3:6b:e6:cc:aa:c4: 22:2c:8e:09:56:08:59:87:01:ad:0d:0c:b2:03:0d:d2:44:3b: 3a:97:7c:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3RZRLe31XWFjfY+JC9ydS4mEjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZCNzgy NUM2NjY5MjAeFw0yNTEyMDMwNDE2MjZaFw0yNTEyMDYwOTQ5MjZaMDMxMTAvBgNV BAMTKEIwNTczODE2OTcyNjJGMTNGMTkwMzNCN0IyMzU1QUYxQjg3RDM0RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QWc835rpt2dLbTk48GGBeSGI yGR6KynqjGZyps52GEoTdh16Pjm0PyMzOG5S1yQegxQ5CHdJBMmrTqjtXs9Xi8Fp Fyz0SQefa455BvjDA54pjQM6sCiEF67Vsznky1NSzkRFA+3ZkEJa9NHc7mHPPRFa YRJ1WxZyWvp+v+MDXYpUstd+YAmmnDUwcShcQznnbSRx+KyNKjjeUaMW5sNzsFo2 Ow3Ldd9Z2v0pjpCCN2WgHfj22boPn33isc7BP4rO+q0I3kVUH9GsW6wCV0Pl9wrW RRiUe+5SbRKHxHR4kwY6xhegShN17HpYUrFkbsjFNTW1pOyFM1V7S2yzUcOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsFc4FpcmLxPxkDO3sjVa8bh9NNcwHwYDVR0j BBgwFoAU2jKD69Rcz3BW2SqRQYP7eCXGZpIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Zjc5YTQwMi1kZTViLTQ5ZTUtYTZmNS1lZWFiYWMwODRmNDEvMC9EQTMyODNFQkQ0 NUNDRjcwNTZEOTJBOTE0MTgzRkI3ODI1QzY2NjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZCNzgyNUM2 NjY5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZC NzgyNUM2NjY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPuMWp9LZjbVTXz+kLg9OZwa5l7kLLka4K3 vUCQAxzfoZm1M6wJ3P0TdH6+CD+HLITJJQoXhxeZpneSokbUn37GVme1ePTqVkkU 9bNqPXl0xzSPY+AzcR9ymrAwIqP1/MWx8D71Q4JTNFafAGovXrhj0pkZCDF4ce// tskc+vd+VwMg/sh0YFlZ+N+1V0CavcqfW5Kp0jXZUv07p9/0MThWer2w4JHnQZIi eAY8sWQiAWTqwy3iAhqPk6tO8B7KFKTRRXVzP/fgt2p4E0CkBBgDzQs5QBBjn1ot s2Qse7pw3AT2W7Nr5syqxCIsjglWCFmHAa0NDLIDDdJEOzqXfPI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client