This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: H8l+knNkXHN2YWaDaGo98/17Q7zJUW65Hf7CbOwXvs8= Subject key identifier: 4B:3C:24:78:06:40:75:52:99:23:7B:FF:E4:72:0D:40:3F:41:6A:EC Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 7DB6181EF2AA8DE848F27B6AC65EAB7F06A6D551 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 023B Signing time: Wed 03 Dec 2025 03:42:05 +0000 Manifest this update: Wed 03 Dec 2025 03:37:05 +0000 Manifest next update: Sat 06 Dec 2025 05:16:05 +0000 Files and hashes: 1: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 2: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) 3: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) 4: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: VjausNYSRZRjKArNtAec9Lip49/GkRejFLdZOTvqUeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b6:18:1e:f2:aa:8d:e8:48:f2:7b:6a:c6:5e:ab:7f:06:a6:d5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Dec 3 03:37:05 2025 GMT Not After : Dec 6 05:16:05 2025 GMT Subject: CN=4B3C24780640755299237BFFE4720D403F416AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e0:10:d6:f6:e7:bd:46:81:2a:3f:5a:83:f5: 8b:b7:37:6b:77:26:e4:c8:5b:77:50:05:3a:a0:ba: 95:a4:6f:c3:0e:b1:b2:b3:bd:d8:8d:ea:9f:91:e7: 68:34:86:b6:e1:bc:47:78:c1:82:9b:30:66:5f:74: 67:da:6a:d1:11:9d:03:1b:fd:26:c8:f7:aa:40:5c: 4c:5a:49:8d:38:fa:55:5d:a3:71:96:ef:8c:df:73: 50:ac:5e:06:c2:31:02:a2:c3:7a:2a:a5:5a:dc:f2: 08:67:e3:8c:fe:49:13:8f:8a:54:a4:fb:20:1d:3b: 57:9b:94:73:4e:16:08:7e:3d:36:fd:43:8e:91:ca: dd:b8:55:e7:94:7a:77:1b:b3:3b:f6:f2:00:dc:e0: 04:87:bd:a0:34:72:0e:06:ad:b6:49:51:7b:6b:67: 93:2f:87:f3:9f:77:b3:81:2b:d1:6b:d5:11:24:ad: ae:6a:e0:5f:56:52:84:85:3a:1e:d0:75:47:21:69: d7:22:bd:04:5d:97:89:5f:22:4a:9b:d2:b9:94:a4: 1d:87:a8:75:62:10:47:41:ef:e3:4d:62:91:c4:db: 79:73:9d:69:ba:74:c0:d2:19:20:2d:47:d5:a6:0f: 05:97:5b:ce:f9:70:25:2c:3c:73:34:ca:ea:bb:e7: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3C:24:78:06:40:75:52:99:23:7B:FF:E4:72:0D:40:3F:41:6A:EC X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8e:85:a5:99:64:fc:06:6e:20:f4:bd:55:64:75:da:40:60: d9:e6:9b:cf:41:6d:51:1e:f0:03:4c:a1:5c:ad:e9:a1:eb:10: 53:1d:0b:03:03:49:2b:ff:06:61:d1:12:bc:ba:04:cd:59:5a: c0:de:21:e6:37:e1:5a:d2:57:12:e3:39:8a:82:74:c4:bd:fb: 97:fa:90:da:d1:90:e0:0d:64:2a:8d:40:4b:ae:f0:1e:e7:9e: 33:53:49:54:ba:de:e7:a0:83:0d:81:23:31:f3:96:89:21:65: f9:c1:03:be:19:93:49:f1:fa:9d:f9:fd:24:52:4a:0e:b4:72: f0:8e:c8:c4:29:60:b2:57:e8:19:f8:36:93:ed:f4:90:67:03: 0a:22:e1:c0:47:30:e3:8d:22:a8:d8:95:cc:4f:fd:37:36:09: eb:bc:a2:b8:ea:c1:34:e6:e9:41:d0:87:64:e7:65:2f:79:75: 2c:b4:af:37:7f:a8:39:a0:6a:6d:9d:47:01:80:70:24:0b:c2: 32:d3:3f:6a:9b:29:e0:40:8f:3e:c6:32:cb:6d:0b:a7:69:d6: 3d:d5:a6:40:a4:57:7c:65:b8:7c:fb:14:f1:48:0c:db:e3:3e: 3c:10:33:68:8d:b2:66:e4:9c:28:6c:d3:e2:ba:f5:9d:f3:e7: 09:b8:f3:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbYYHvKqjehI8ntqxl6rfwam1VEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTEyMDMwMzM3MDVaFw0yNTEyMDYwNTE2MDVaMDMxMTAvBgNV BAMTKDRCM0MyNDc4MDY0MDc1NTI5OTIzN0JGRkU0NzIwRDQwM0Y0MTZBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv4BDW9ue9RoEqP1qD9Yu3N2t3 JuTIW3dQBTqgupWkb8MOsbKzvdiN6p+R52g0hrbhvEd4wYKbMGZfdGfaatERnQMb /SbI96pAXExaSY04+lVdo3GW74zfc1CsXgbCMQKiw3oqpVrc8ghn44z+SROPilSk +yAdO1eblHNOFgh+PTb9Q46Ryt24VeeUencbszv28gDc4ASHvaA0cg4GrbZJUXtr Z5Mvh/Ofd7OBK9Fr1REkra5q4F9WUoSFOh7QdUchadcivQRdl4lfIkqb0rmUpB2H qHViEEdB7+NNYpHE23lznWm6dMDSGSAtR9WmDwWXW875cCUsPHM0yuq75+tzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzwkeAZAdVKZI3v/5HINQD9BauwwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeOhaWZZPwGbiD0vVVkddpAYNnmm89BbVEe 8ANMoVyt6aHrEFMdCwMDSSv/BmHREry6BM1ZWsDeIeY34VrSVxLjOYqCdMS9+5f6 kNrRkOANZCqNQEuu8B7nnjNTSVS63ueggw2BIzHzlokhZfnBA74Zk0nx+p35/SRS Sg60cvCOyMQpYLJX6Bn4NpPt9JBnAwoi4cBHMOONIqjYlcxP/Tc2Ceu8orjqwTTm 6UHQh2TnZS95dSy0rzd/qDmgam2dRwGAcCQLwjLTP2qbKeBAjz7GMsttC6dp1j3V pkCkV3xluHz7FPFIDNvjPjwQM2iNsmbknChs0+K69Z3z5wm48+k= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:17 2025 by rpki-client