This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: nR+pfrMCQpPNEEdNC7N3LfWI7e2HCTg4GP6bEv9Q5ks= Subject key identifier: 40:9D:44:A1:70:9A:04:D9:75:62:60:BB:C2:87:DF:F2:79:07:01:9B Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 172561D57E0A99CBD2D08810058DB2E887DE57C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 01E4 Signing time: Wed 03 Dec 2025 05:41:32 +0000 Manifest this update: Wed 03 Dec 2025 05:36:32 +0000 Manifest next update: Sat 06 Dec 2025 08:29:32 +0000 Files and hashes: 1: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: WbgcAemfUr/WaWV4NJzSBFx+o8EoJ/udbhhfWwBxR6I=) 2: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: hf9gM1HXUJjVzWjtkgF+O1IN5rCBWgKtWF4yw73LE1s=) 3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: wXTznUQArBkuy9DW6FChuphpm7A6SXPjvzN1WzF38y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:25:61:d5:7e:0a:99:cb:d2:d0:88:10:05:8d:b2:e8:87:de:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Dec 3 05:36:32 2025 GMT Not After : Dec 6 08:29:32 2025 GMT Subject: CN=409D44A1709A04D9756260BBC287DFF27907019B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:75:77:2f:f9:df:8d:b4:b4:0e:38:f1:ee: 2d:d8:f7:88:48:a2:0a:c0:1a:9e:b7:0c:5d:78:0d: 90:fa:dd:bb:b9:85:79:05:59:2b:49:32:17:b7:20: 1e:a0:00:79:e5:63:bc:5f:2c:11:bd:b3:eb:09:0b: 32:70:b7:ad:63:88:3e:13:0c:3e:ec:1a:1b:5e:52: 59:5e:13:87:b9:44:0b:38:a6:87:8b:f8:6d:e0:2c: 26:cf:7f:62:7f:66:43:99:20:4e:66:b0:fc:8a:77: ff:f4:9b:55:51:23:d3:8e:66:b0:51:fa:25:02:c2: ba:f8:b0:8e:a7:14:a8:a2:55:1a:90:af:75:e0:51: db:35:c7:46:6e:2f:9b:34:83:a6:a9:5c:ba:da:81: cb:5f:1b:37:3f:a1:12:c6:c5:c3:b3:5d:1b:8c:c2: 87:fb:1b:0b:eb:b6:43:bb:8f:3d:44:cf:a6:4f:9d: 0d:b2:99:e5:21:87:f1:36:a2:95:3a:5e:ae:ad:cb: 82:44:77:a2:7b:d3:3d:00:e3:50:e4:de:33:95:c1: e3:62:37:0b:4a:f0:32:33:48:43:95:c0:a9:40:6e: 8a:4a:e8:8b:ce:1b:48:26:38:28:d6:f4:a4:0c:ce: d1:6f:6f:cc:ed:ec:ea:9b:c1:67:c0:aa:43:0d:f1: cc:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9D:44:A1:70:9A:04:D9:75:62:60:BB:C2:87:DF:F2:79:07:01:9B X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:df:37:d0:b2:d8:38:e7:3d:a4:31:5e:45:be:80:d3:29:56: 5f:8b:d7:fb:bf:b1:41:6b:bd:63:bc:ce:97:8f:ce:6a:c4:58: 79:0e:bb:8a:cf:22:35:9b:e3:37:f4:43:c3:cd:6b:df:c6:88: 80:35:a4:8f:87:56:ab:bf:ae:7f:cd:66:f5:cb:93:54:ec:a4: eb:25:57:8f:a6:ea:25:73:0d:92:60:41:aa:3b:8f:b3:bf:2a: 4a:51:9c:ae:c4:4a:0c:0b:44:0f:3e:9d:6a:dc:14:f6:07:d2: 90:02:7f:ba:cb:6f:58:e4:cb:2b:00:da:fe:17:76:17:16:a1: 16:86:fc:bd:1c:76:c9:10:05:fa:f8:6a:06:59:ee:af:44:6e: 1d:08:f1:19:6d:b3:6f:02:37:3c:b1:3f:c4:0d:82:a0:b2:b5: b0:c5:f1:bc:87:37:14:df:80:38:3b:9c:9d:98:17:69:b3:73: ec:4d:4d:c4:ec:c2:13:ab:a9:27:be:1f:31:bc:ba:96:8d:81: c8:57:55:48:a4:84:8a:1b:82:45:ff:8f:00:27:47:52:86:3c: c0:0c:f2:7f:31:12:06:81:76:2f:84:9a:2e:a6:0f:d8:be:8a: a2:0c:8f:d2:37:d5:70:73:80:7b:7c:b9:58:25:07:b0:28:d4: 8d:33:dd:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyVh1X4KmcvS0IgQBY2y6IfeV8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTEyMDMwNTM2MzJaFw0yNTEyMDYwODI5MzJaMDMxMTAvBgNV BAMTKDQwOUQ0NEExNzA5QTA0RDk3NTYyNjBCQkMyODdERkYyNzkwNzAxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeR3V3L/nfjbS0Djjx7i3Y94hI ogrAGp63DF14DZD63bu5hXkFWStJMhe3IB6gAHnlY7xfLBG9s+sJCzJwt61jiD4T DD7sGhteUlleE4e5RAs4poeL+G3gLCbPf2J/ZkOZIE5msPyKd//0m1VRI9OOZrBR +iUCwrr4sI6nFKiiVRqQr3XgUds1x0ZuL5s0g6apXLragctfGzc/oRLGxcOzXRuM wof7GwvrtkO7jz1Ez6ZPnQ2ymeUhh/E2opU6Xq6ty4JEd6J70z0A41Dk3jOVweNi NwtK8DIzSEOVwKlAbopK6IvOG0gmOCjW9KQMztFvb8zt7OqbwWfAqkMN8czRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJ1EoXCaBNl1YmC7woff8nkHAZswHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzfN9Cy2DjnPaQxXkW+gNMpVl+L1/u/sUFr vWO8zpePzmrEWHkOu4rPIjWb4zf0Q8PNa9/GiIA1pI+HVqu/rn/NZvXLk1TspOsl V4+m6iVzDZJgQao7j7O/KkpRnK7ESgwLRA8+nWrcFPYH0pACf7rLb1jkyysA2v4X dhcWoRaG/L0cdskQBfr4agZZ7q9Ebh0I8Rlts28CNzyxP8QNgqCytbDF8byHNxTf gDg7nJ2YF2mzc+xNTcTswhOrqSe+HzG8upaNgchXVUikhIobgkX/jwAnR1KGPMAM 8n8xEgaBdi+Emi6mD9i+iqIMj9I31XBzgHt8uVglB7Ao1I0z3ak= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:38 2025 by rpki-client