This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: oq2RQv7KBD1RVDd/b6+tWHlxtYPkH2rrLX8+QFrbKE4= Subject key identifier: 3B:52:3F:8C:B0:30:B9:20:1D:4E:52:6B:D2:DC:04:44:5F:DC:82:DE Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 2C354411438762826CC0DE7E709E8C0DFD504F40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: DB Signing time: Thu 18 Dec 2025 00:50:46 +0000 Manifest this update: Thu 18 Dec 2025 00:45:46 +0000 Manifest next update: Sun 21 Dec 2025 01:46:46 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: Q6G2pSVIBGgfICQk/6rh1Z1sFCy//uNh6GGvqRVG9Nw=) 2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: 57dIAPUwMdZxI+c7wf2A40+QYr5Ub5qktjc7riasoBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:44:11:43:87:62:82:6c:c0:de:7e:70:9e:8c:0d:fd:50:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Dec 18 00:45:46 2025 GMT Not After : Dec 21 01:46:46 2025 GMT Subject: CN=3B523F8CB030B9201D4E526BD2DC04445FDC82DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:18:5b:c4:78:de:f6:f4:c1:c7:72:8c:85: 23:99:18:59:f7:20:b1:cc:28:4f:83:ed:e5:a1:8c: e9:3a:fc:fa:1c:46:eb:69:8c:2a:8a:cb:31:08:4b: 79:16:23:11:82:ac:bc:55:e6:5b:98:9f:42:53:90: 20:1f:93:fc:98:9c:65:8f:a4:01:9d:a6:07:31:13: 8f:f3:9a:8a:7c:e9:b8:d4:a1:8a:98:9a:bd:47:87: 29:52:98:a8:1b:e2:53:34:7d:d4:fc:e1:8b:63:34: 33:81:6e:1d:eb:eb:f2:d6:b1:1d:08:47:f7:f5:58: 55:bb:1e:8b:42:c2:c9:33:9d:16:dd:79:55:fe:e9: 85:0f:d2:71:b3:ed:fd:37:0a:a8:dd:7d:ef:f3:98: df:c4:b9:cb:e8:f6:f8:09:7a:a0:cc:50:c1:45:c3: fe:c9:60:e7:b5:79:db:14:e0:17:6e:a1:5f:8f:79: b6:ea:4c:33:3f:66:09:5e:ce:14:24:cb:c2:a2:d3: d3:72:eb:88:aa:3b:f8:89:67:b4:2f:ea:8a:ff:8c: b5:3c:5d:17:d4:e6:02:8f:be:cb:6a:74:ad:ee:b8: 3f:dd:54:86:8c:c7:d8:c3:ee:41:21:ff:55:be:15: 80:4e:bc:f6:97:4e:b7:c1:19:37:cb:ae:bc:e3:5c: 6d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:52:3F:8C:B0:30:B9:20:1D:4E:52:6B:D2:DC:04:44:5F:DC:82:DE X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b8:ed:26:60:07:cc:2a:98:c5:b6:cf:e0:16:4b:84:1e:09: fe:b9:10:bb:9e:80:22:2d:58:26:82:4c:8b:c6:35:46:2b:48: 0d:97:43:26:a0:e5:e4:e2:75:f7:f3:6b:af:ff:2f:fd:4c:8d: a0:a0:9c:1b:d9:b1:96:6a:85:2f:37:e8:4b:a3:19:5a:70:36: 05:a9:fd:e9:d3:e4:bd:a9:30:c0:c0:a8:85:a1:45:72:be:a4: 2f:a2:40:9c:50:5a:c5:33:de:0e:46:c8:ff:62:6b:6e:1f:06: b9:44:a4:bf:f2:c6:9c:13:fa:dd:01:19:fc:59:07:65:7d:13: 13:a2:76:02:f7:cb:a7:0a:f9:cc:c4:d2:0c:99:e0:73:f1:d6: 13:6f:75:00:08:33:87:c0:7a:05:9a:9a:2f:ad:e2:24:4e:5b: 81:cd:84:e7:ce:1e:9d:eb:71:3d:b2:91:18:24:49:c3:30:c7: 12:c0:99:eb:a0:52:79:e5:2b:6f:a5:9c:00:84:2d:0c:de:be: bc:e4:2e:2b:82:8c:e2:4b:bb:d6:16:3f:7c:06:42:18:ed:79: 8f:dd:bb:b9:47:fc:f1:42:6b:68:84:78:1b:bc:09:e0:3d:d7: 75:04:72:4a:2a:48:cf:d8:cc:05:f3:56:6a:f6:1d:a0:1c:19: d8:f7:6b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDVEEUOHYoJswN5+cJ6MDf1QT0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNTEyMTgwMDQ1NDZaFw0yNTEyMjEwMTQ2NDZaMDMxMTAvBgNV BAMTKDNCNTIzRjhDQjAzMEI5MjAxRDRFNTI2QkQyREMwNDQ0NUZEQzgyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvRhbxHje9vTBx3KMhSOZGFn3 ILHMKE+D7eWhjOk6/PocRutpjCqKyzEIS3kWIxGCrLxV5luYn0JTkCAfk/yYnGWP pAGdpgcxE4/zmop86bjUoYqYmr1HhylSmKgb4lM0fdT84YtjNDOBbh3r6/LWsR0I R/f1WFW7HotCwskznRbdeVX+6YUP0nGz7f03Cqjdfe/zmN/Eucvo9vgJeqDMUMFF w/7JYOe1edsU4BduoV+PebbqTDM/ZglezhQky8Ki09Ny64iqO/iJZ7Qv6or/jLU8 XRfU5gKPvstqdK3uuD/dVIaMx9jD7kEh/1W+FYBOvPaXTrfBGTfLrrzjXG39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO1I/jLAwuSAdTlJr0twERF/cgt4wHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC47SZgB8wqmMW2z+AWS4QeCf65ELuegCIt WCaCTIvGNUYrSA2XQyag5eTidffza6//L/1MjaCgnBvZsZZqhS836EujGVpwNgWp /enT5L2pMMDAqIWhRXK+pC+iQJxQWsUz3g5GyP9ia24fBrlEpL/yxpwT+t0BGfxZ B2V9ExOidgL3y6cK+czE0gyZ4HPx1hNvdQAIM4fAegWami+t4iROW4HNhOfOHp3r cT2ykRgkScMwxxLAmeugUnnlK2+lnACELQzevrzkLiuCjOJLu9YWP3wGQhjteY/d u7lH/PFCa2iEeBu8CeA913UEckoqSM/YzAXzVmr2HaAcGdj3a60= -----END CERTIFICATE-----Generated at Fri Dec 19 11:22:48 2025 by rpki-client