This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: DI9RRf0/kQrjA/LLzLE4uGj/RUtT6xS0yBffoCOcs/s= Subject key identifier: 56:4D:A4:60:79:7C:30:5E:B3:23:7C:6D:77:7B:CA:0C:02:C0:41:DC Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 67E04002D4B7F34BA8AB195F84D24B7B1102C730 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 052D Signing time: Tue 02 Dec 2025 18:02:26 +0000 Manifest this update: Tue 02 Dec 2025 17:57:26 +0000 Manifest next update: Sat 06 Dec 2025 01:12:26 +0000 Files and hashes: 1: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 2: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 3: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 4: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: 08phtwTlxXbi08M/Tz6dpFPUrmhhrJUNig9lXlSB6js=) 5: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 6: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e0:40:02:d4:b7:f3:4b:a8:ab:19:5f:84:d2:4b:7b:11:02:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Dec 2 17:57:26 2025 GMT Not After : Dec 6 01:12:26 2025 GMT Subject: CN=564DA460797C305EB3237C6D777BCA0C02C041DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:ed:a5:e2:66:9e:f9:25:aa:40:f5:9a:05: 98:f3:a5:8d:3d:a0:4a:43:76:cb:be:12:ac:b1:d4: d9:87:3d:5e:8a:8a:f3:20:ad:23:63:c7:50:80:a8: 83:2b:23:4b:93:0c:5d:98:83:aa:72:ef:07:d5:53: 2f:ae:11:52:42:f3:5f:1c:5f:03:0a:54:a3:80:b8: 20:4b:9b:75:c0:3f:60:45:3b:2a:58:fb:2e:cb:ed: ba:f8:ba:c4:0f:6a:3d:65:e4:01:e5:40:29:a3:a4: 66:f9:5c:d7:b9:0a:45:a0:50:55:2f:a1:97:4c:b5: 56:4f:6c:ef:31:12:05:28:c6:8b:f3:11:fe:a7:0d: 6c:ce:5f:63:7b:a4:fa:15:19:f7:e8:cb:4b:73:25: 18:e7:0b:eb:c4:b9:ed:d1:2a:ad:2e:b1:c2:29:75: e3:27:cc:5c:8d:1b:9f:f9:dc:28:78:dd:dc:83:66: bf:3e:8a:87:83:4f:4a:fa:b5:63:58:7e:f7:15:47: 76:fd:82:80:cb:60:c2:15:3e:52:a0:59:b4:66:8f: 53:e0:cd:63:42:82:24:b5:fa:35:62:95:33:10:c4: 8d:1b:40:3d:ab:7a:86:10:25:06:c7:23:a6:54:f0: 1c:ad:2c:7b:54:66:b6:5e:fe:d4:6b:d5:a5:fd:b0: 0d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4D:A4:60:79:7C:30:5E:B3:23:7C:6D:77:7B:CA:0C:02:C0:41:DC X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:44:14:27:80:63:5c:49:b0:5b:74:86:79:32:8a:f9:02:3d: 57:4d:1a:70:35:bb:80:fd:43:d4:3b:92:0e:1c:da:18:a3:7a: 9b:5e:d2:50:cb:6d:e2:8a:36:d5:b7:57:87:a2:32:29:f8:1b: 56:5e:be:11:f4:5f:aa:6c:1d:73:3d:03:e0:48:4e:f2:12:dd: 16:8c:7f:16:f7:cb:f3:24:99:01:78:8c:7e:f4:03:48:64:ff: f5:f6:8d:1b:70:21:a6:23:9b:3f:a8:b5:d7:3b:b9:30:11:65: 03:d1:82:28:09:fb:e8:98:d0:6f:c8:b1:1c:7f:c7:2b:5a:f8: 74:3e:16:0f:9c:ec:2d:40:2e:fc:66:21:f5:0f:a9:bf:55:e6: e2:d3:f9:83:9c:42:a2:99:27:06:e0:bd:69:d4:e1:f7:9d:4d: 41:8a:6c:1d:eb:22:b4:86:b9:80:46:62:eb:e8:26:cf:c8:2f: 4d:ef:04:78:d3:05:a9:d5:a6:4e:bd:3d:96:06:9a:cb:e9:e4: b8:96:d2:aa:68:91:a7:9d:4a:9d:12:1f:08:fb:d4:25:61:0c: 3b:37:a4:b9:ba:0c:90:6f:16:13:55:c7:6c:bf:0f:4e:94:35: 60:5f:86:09:b7:bf:5a:d0:fe:67:3e:c9:a6:98:19:f2:1c:3e: 7b:a9:2d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+BAAtS380uoqxlfhNJLexECxzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTEyMDIxNzU3MjZaFw0yNTEyMDYwMTEyMjZaMDMxMTAvBgNV BAMTKDU2NERBNDYwNzk3QzMwNUVCMzIzN0M2RDc3N0JDQTBDMDJDMDQxREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSz+2l4mae+SWqQPWaBZjzpY09 oEpDdsu+Eqyx1NmHPV6KivMgrSNjx1CAqIMrI0uTDF2Yg6py7wfVUy+uEVJC818c XwMKVKOAuCBLm3XAP2BFOypY+y7L7br4usQPaj1l5AHlQCmjpGb5XNe5CkWgUFUv oZdMtVZPbO8xEgUoxovzEf6nDWzOX2N7pPoVGffoy0tzJRjnC+vEue3RKq0uscIp deMnzFyNG5/53Ch43dyDZr8+ioeDT0r6tWNYfvcVR3b9goDLYMIVPlKgWbRmj1Pg zWNCgiS1+jVilTMQxI0bQD2reoYQJQbHI6ZU8BytLHtUZrZe/tRr1aX9sA3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVk2kYHl8MF6zI3xtd3vKDALAQdwwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBEFCeAY1xJsFt0hnkyivkCPVdNGnA1u4D9 Q9Q7kg4c2hijepte0lDLbeKKNtW3V4eiMin4G1ZevhH0X6psHXM9A+BITvIS3RaM fxb3y/MkmQF4jH70A0hk//X2jRtwIaYjmz+otdc7uTARZQPRgigJ++iY0G/IsRx/ xyta+HQ+Fg+c7C1ALvxmIfUPqb9V5uLT+YOcQqKZJwbgvWnU4fedTUGKbB3rIrSG uYBGYuvoJs/IL03vBHjTBanVpk69PZYGmsvp5LiW0qpokaedSp0SHwj71CVhDDs3 pLm6DJBvFhNVx2y/D06UNWBfhgm3v1rQ/mc+yaaYGfIcPnupLeE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:05 2025 by rpki-client