This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: YCh2kFFc+67gOiCraO+177w5twU9/VfToOgSlBpKzrg= Subject key identifier: 9F:C0:AB:B5:F0:E1:08:B1:C6:34:9B:89:A2:B1:72:D1:00:78:84:E0 Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 06E0AFE211E34A33A9C94966C83716394CAF1F15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 01EB Signing time: Mon 01 Dec 2025 19:30:03 +0000 Manifest this update: Mon 01 Dec 2025 19:25:03 +0000 Manifest next update: Fri 05 Dec 2025 05:53:03 +0000 Files and hashes: 1: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: Ho+WDpIWdPyPsP3Naaorv9FAMl2W309RUwIuLL0PC5U=) 2: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 3: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) 4: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) 5: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e0:af:e2:11:e3:4a:33:a9:c9:49:66:c8:37:16:39:4c:af:1f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Dec 1 19:25:03 2025 GMT Not After : Dec 5 05:53:03 2025 GMT Subject: CN=9FC0ABB5F0E108B1C6349B89A2B172D1007884E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:12:70:da:35:a2:c0:74:c5:97:33:cf:56: 3c:e9:5a:59:20:dc:be:b0:11:ab:52:dc:45:8e:82: 75:bb:21:1d:41:b1:8f:92:a4:7d:b6:40:aa:cc:fc: 11:e9:c2:1a:52:9d:81:e4:1b:8a:e5:7a:86:49:7f: b7:dc:22:2b:ba:f6:62:de:62:30:6f:b7:be:9e:6a: 45:0d:5d:17:62:84:49:e9:31:31:12:7d:98:64:0d: 4c:af:e1:1d:70:cd:f4:58:7f:ae:9a:4a:92:6e:a1: 29:c5:34:f5:4b:b6:f7:a2:91:12:d8:48:1d:93:34: 10:56:52:fd:dd:52:83:a5:73:20:9b:8f:47:3c:2c: c3:16:67:68:7a:43:af:d7:73:7a:0f:40:96:dc:b4: 1c:1b:6a:19:4f:28:6d:ff:f4:b4:2b:a5:5b:8c:ea: 9e:51:69:df:34:ac:17:3a:15:70:b1:6d:52:bc:30: e3:1f:24:e0:14:ca:24:ea:5f:22:df:bb:5e:ec:58: d5:8e:23:5a:c6:8b:4c:dd:10:75:8e:08:c2:96:31: 45:f8:8d:11:37:be:1e:1d:9f:a2:63:34:2a:04:e0: f0:b3:2a:6c:6d:55:61:59:74:ac:aa:c3:d3:b3:20: 0a:3f:8c:6b:25:7c:71:14:85:27:1a:b6:8a:9b:7d: 60:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C0:AB:B5:F0:E1:08:B1:C6:34:9B:89:A2:B1:72:D1:00:78:84:E0 X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:73:75:9c:e9:5d:45:bd:bc:e4:a8:55:c0:70:13:6d:a9:25: e7:35:6c:52:3d:5f:10:f5:70:35:5f:a0:2c:86:8c:cc:a0:de: 5b:84:0a:33:3e:b8:2f:23:6e:27:5f:28:a9:a9:8a:1d:86:3d: 7c:62:52:2b:b0:df:ad:f8:04:a4:24:de:38:48:7a:ab:2f:a8: 12:de:19:8f:74:51:b3:22:88:bd:d1:bb:57:93:c3:d5:b5:ed: d1:bf:55:4c:f6:07:44:b6:38:9a:98:ce:56:53:2d:d2:f0:85: 8a:dd:24:48:15:7f:f9:f1:0e:31:b9:95:7a:7a:4d:fc:78:8d: 02:e0:86:97:9a:b2:21:58:23:58:d6:9c:37:27:ae:49:4e:64: 77:09:29:85:3e:c0:20:29:e0:d3:50:dc:f1:3e:b2:75:58:ad: 21:8a:2e:0a:dc:61:b1:8e:97:f6:c3:10:25:61:42:aa:52:bc: 8c:8f:d6:e7:71:9c:cd:5f:bd:4e:03:51:36:68:72:4a:b8:01: 81:dc:e0:19:d1:4b:2b:11:48:72:87:90:68:08:1a:46:af:a5: 93:69:7e:05:4c:56:e1:12:36:e7:a6:2d:1e:48:a1:4c:fd:47: 59:9a:7e:4f:55:9d:43:5e:09:b5:68:7f:0e:5d:4e:4a:ce:a0: bc:37:24:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuCv4hHjSjOpyUlmyDcWOUyvHxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTEyMDExOTI1MDNaFw0yNTEyMDUwNTUzMDNaMDMxMTAvBgNV BAMTKDlGQzBBQkI1RjBFMTA4QjFDNjM0OUI4OUEyQjE3MkQxMDA3ODg0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ORJw2jWiwHTFlzPPVjzpWlkg 3L6wEatS3EWOgnW7IR1BsY+SpH22QKrM/BHpwhpSnYHkG4rleoZJf7fcIiu69mLe YjBvt76eakUNXRdihEnpMTESfZhkDUyv4R1wzfRYf66aSpJuoSnFNPVLtveikRLY SB2TNBBWUv3dUoOlcyCbj0c8LMMWZ2h6Q6/Xc3oPQJbctBwbahlPKG3/9LQrpVuM 6p5Rad80rBc6FXCxbVK8MOMfJOAUyiTqXyLfu17sWNWOI1rGi0zdEHWOCMKWMUX4 jRE3vh4dn6JjNCoE4PCzKmxtVWFZdKyqw9OzIAo/jGslfHEUhScatoqbfWD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8CrtfDhCLHGNJuJorFy0QB4hOAwHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdzdZzpXUW9vOSoVcBwE22pJec1bFI9XxD1 cDVfoCyGjMyg3luECjM+uC8jbidfKKmpih2GPXxiUiuw3634BKQk3jhIeqsvqBLe GY90UbMiiL3Ru1eTw9W17dG/VUz2B0S2OJqYzlZTLdLwhYrdJEgVf/nxDjG5lXp6 Tfx4jQLghpeasiFYI1jWnDcnrklOZHcJKYU+wCAp4NNQ3PE+snVYrSGKLgrcYbGO l/bDECVhQqpSvIyP1udxnM1fvU4DUTZockq4AYHc4BnRSysRSHKHkGgIGkavpZNp fgVMVuESNuemLR5IoUz9R1mafk9VnUNeCbVofw5dTkrOoLw3JIU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:08 2025 by rpki-client