This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: HCQJkGD1YB94CLRCkmDzMoXID7yNf7sUHt+tW6YqYgU= Subject key identifier: 1A:6B:86:93:7D:C7:33:12:55:9F:61:0F:FA:C3:64:DF:7D:B5:B9:C4 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 7FCA36BA82240D83ED7714E0D115BDC8995683BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0137 Signing time: Wed 03 Dec 2025 06:50:00 +0000 Manifest this update: Wed 03 Dec 2025 06:45:00 +0000 Manifest next update: Sat 06 Dec 2025 09:04:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: xala12s6NGlWdt+lWB7nCyXhpdJkrQpRN4xo94j8YNU=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: NWrcp2a0d/LJNf9vBPSuOKIlRPMQiQhLF/4db0z7mUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 09:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ca:36:ba:82:24:0d:83:ed:77:14:e0:d1:15:bd:c8:99:56:83:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Dec 3 06:45:00 2025 GMT Not After : Dec 6 09:04:00 2025 GMT Subject: CN=1A6B86937DC73312559F610FFAC364DF7DB5B9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a3:27:85:98:e6:7f:44:ad:af:b3:c0:04:9c: c2:9e:83:b1:94:92:0e:19:41:aa:e7:2f:c1:4e:1a: a3:5e:e3:78:4b:2f:8e:3f:91:f9:30:a1:f9:4d:fa: d9:8b:b5:85:2b:59:6e:a2:63:89:6c:0a:e2:63:6c: 71:5d:33:e7:90:e0:de:e9:eb:0a:46:23:8c:0c:5e: da:5a:66:41:dd:50:03:45:d8:6d:d6:60:c7:76:33: 17:a2:9a:f7:55:6f:d2:3a:7a:33:68:61:75:bb:d4: 68:7a:1d:b5:aa:d5:2b:1c:8f:d4:68:e8:2f:a5:47: 0d:15:9c:ca:4c:f0:b6:e8:24:70:68:65:32:1b:eb: 26:b8:88:7f:1d:2c:34:be:ca:bd:b3:be:bd:90:5e: b2:b4:ad:43:06:ba:34:e5:23:f1:43:0a:6c:8d:df: c4:dd:32:14:e9:30:7f:63:f5:8f:ba:c6:35:76:d1: 32:6c:e9:a4:5f:f2:92:44:28:79:cc:64:14:2c:52: 1c:0e:89:01:a8:83:c6:5d:21:e9:af:a3:a0:be:75: 50:9c:7d:54:57:94:74:63:78:8e:7f:e4:ca:9d:27: c4:4a:2a:7e:a2:92:d2:5b:a1:d4:ab:91:1a:81:02: 69:8c:82:ab:72:2b:3e:3d:70:5c:8f:f2:67:6b:0e: 98:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6B:86:93:7D:C7:33:12:55:9F:61:0F:FA:C3:64:DF:7D:B5:B9:C4 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f8:26:06:2a:fc:75:76:55:06:28:4d:b4:5e:3c:97:3b:19: 94:98:8e:4d:d8:f8:51:27:00:9c:3d:f3:08:fa:e1:2d:14:17: ed:aa:7e:75:4f:61:fc:56:2c:7d:72:17:c1:81:96:7b:8d:d1: 36:3d:62:f6:ad:ec:c2:86:12:a8:69:91:7d:a9:40:17:25:aa: ba:05:66:34:e3:04:c3:0e:8b:d8:11:07:27:44:b5:d0:c5:e8: b8:c9:d2:4e:de:80:a8:37:ae:36:55:1c:71:58:69:64:a5:84: a3:a2:7b:4f:c3:87:b3:df:fc:ca:b6:f3:d5:a0:49:18:31:47: 2d:ed:b2:91:87:09:38:1a:15:35:07:b4:f8:6d:1f:5d:06:78: 2d:2b:f9:5e:69:fc:f6:4d:9a:ff:f2:bf:cb:dd:51:cd:1b:8b: cd:bb:28:11:8e:8b:68:e4:e0:4f:ce:01:4a:d6:45:cc:33:4c: bb:ac:34:d7:43:85:98:0f:d0:38:2a:e9:79:1b:32:1d:68:a3: 44:da:da:73:33:1b:14:1a:e7:b5:82:ee:cd:00:8c:4d:de:d0: b1:a9:b1:9a:ae:98:a1:ea:1d:7a:27:21:44:a5:ea:5f:fa:a8: f9:dc:f9:0d:51:e5:7e:b2:58:da:80:6f:9b:b3:4d:74:58:70: be:7b:e5:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8o2uoIkDYPtdxTg0RW9yJlWg7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTEyMDMwNjQ1MDBaFw0yNTEyMDYwOTA0MDBaMDMxMTAvBgNV BAMTKDFBNkI4NjkzN0RDNzMzMTI1NTlGNjEwRkZBQzM2NERGN0RCNUI5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSoyeFmOZ/RK2vs8AEnMKeg7GU kg4ZQarnL8FOGqNe43hLL44/kfkwoflN+tmLtYUrWW6iY4lsCuJjbHFdM+eQ4N7p 6wpGI4wMXtpaZkHdUANF2G3WYMd2MxeimvdVb9I6ejNoYXW71Gh6HbWq1Sscj9Ro 6C+lRw0VnMpM8LboJHBoZTIb6ya4iH8dLDS+yr2zvr2QXrK0rUMGujTlI/FDCmyN 38TdMhTpMH9j9Y+6xjV20TJs6aRf8pJEKHnMZBQsUhwOiQGog8ZdIemvo6C+dVCc fVRXlHRjeI5/5MqdJ8RKKn6iktJbodSrkRqBAmmMgqtyKz49cFyP8mdrDph7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGmuGk33HMxJVn2EP+sNk3321ucQwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb4JgYq/HV2VQYoTbRePJc7GZSYjk3Y+FEn AJw98wj64S0UF+2qfnVPYfxWLH1yF8GBlnuN0TY9Yvat7MKGEqhpkX2pQBclqroF ZjTjBMMOi9gRBydEtdDF6LjJ0k7egKg3rjZVHHFYaWSlhKOie0/Dh7Pf/Mq289Wg SRgxRy3tspGHCTgaFTUHtPhtH10GeC0r+V5p/PZNmv/yv8vdUc0bi827KBGOi2jk 4E/OAUrWRcwzTLusNNdDhZgP0Dgq6XkbMh1oo0Ta2nMzGxQa57WC7s0AjE3e0LGp sZqumKHqHXonIUSl6l/6qPnc+Q1R5X6yWNqAb5uzTXRYcL575Rg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:09 2025 by rpki-client