This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: bpFfQSYGwShp8IOF380FaUFmGoAv0O6uG83N2ucCEcg= Subject key identifier: DA:2B:B3:2D:AE:18:86:A7:D3:70:B2:7A:96:22:2F:A6:04:33:3C:58 Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 7D150D619E2C191AEAC0082EA8B7C087F72954FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 0148 Signing time: Sun 14 Dec 2025 13:41:48 +0000 Manifest this update: Sun 14 Dec 2025 13:36:48 +0000 Manifest next update: Wed 17 Dec 2025 22:29:48 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: LR+7WGPvS5mqGJEhCW8jqNGGLUxhTt4D2uklFRX/HUo=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 08:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:15:0d:61:9e:2c:19:1a:ea:c0:08:2e:a8:b7:c0:87:f7:29:54:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Dec 14 13:36:48 2025 GMT Not After : Dec 17 22:29:48 2025 GMT Subject: CN=DA2BB32DAE1886A7D370B27A96222FA604333C58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:b0:96:65:ec:ce:44:9e:2d:d0:46:3e:a2: e4:1e:0e:db:4b:17:75:21:70:ac:a3:de:15:fd:9e: 49:b7:06:c4:20:54:4d:11:05:ad:7d:48:48:fe:c3: d4:83:8d:ca:a8:13:08:2f:59:b5:e7:b7:4a:5f:f8: 53:e2:bb:96:b0:c0:09:3a:f7:d4:3a:fb:f4:0d:ae: ff:71:65:aa:6b:6c:d5:6e:21:70:aa:5b:cd:b7:08: 8e:43:d8:94:48:2f:e7:2c:ea:04:1e:1a:c1:9e:cd: 76:63:71:97:44:bd:78:9b:c7:2d:6b:88:d1:cf:da: 3a:e6:93:83:fe:c3:8a:41:00:e3:6d:0e:67:ea:c4: b3:3c:a6:20:70:d0:62:63:f9:ec:91:7e:0d:33:e5: 5b:6f:70:e8:f9:a9:21:f8:11:77:3f:f4:04:47:e7: d5:70:8e:56:40:d4:c4:75:16:85:c6:ae:b6:b8:a1: 32:01:fd:a4:2e:9c:1b:48:bc:08:14:9b:6d:f6:3d: 67:45:6d:53:4b:e5:ed:d5:f2:8c:c2:06:c9:cd:8d: 70:a3:6f:ac:d5:1a:5f:9e:3a:bb:d8:c2:00:7d:49: 52:fd:ca:65:65:72:73:ec:eb:df:b3:a8:af:67:55: aa:d4:fe:ea:0b:c9:65:19:e0:32:d5:e3:eb:84:fb: d9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2B:B3:2D:AE:18:86:A7:D3:70:B2:7A:96:22:2F:A6:04:33:3C:58 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:28:34:56:1e:5e:60:3d:40:f1:67:4f:85:a8:77:2a:a6:47: 63:79:af:95:3c:ba:a9:e5:6b:20:47:f4:ab:e1:51:f4:c8:31: 08:86:0f:53:94:d2:fe:c0:b6:fe:47:21:20:d6:32:b6:81:22: ba:c0:f2:6d:9d:6c:33:71:97:52:72:34:50:de:39:5e:28:90: e6:10:c2:fa:f9:7f:84:61:55:98:c3:51:91:3e:92:13:51:f1: 4a:33:56:3e:5f:c4:8a:ae:e2:33:a9:8b:14:14:c7:71:d8:c4: 32:0a:c9:f2:75:4f:8c:6f:f3:79:0d:ac:da:fc:31:fd:9c:1d: 58:fc:13:81:b8:0c:d7:89:6e:4e:24:6a:db:d3:7c:e3:3b:bb: d7:f2:ef:50:93:dc:dc:58:91:03:fc:27:de:59:3c:89:35:77: 6b:e5:d7:1b:95:75:bb:a1:e0:f1:4b:30:40:ec:4d:22:dd:06: 27:0b:b3:ed:4b:0b:1b:67:ec:55:eb:54:62:c4:dd:58:d6:c7: 7c:50:85:1c:7e:4d:36:ef:c5:4f:b0:01:89:fc:ed:7b:b3:7c: e8:bc:8a:45:34:e4:95:74:a2:02:42:10:68:dd:ef:d8:6f:19: e9:1b:d8:00:35:9d:0e:b4:26:9b:42:00:ba:04:4a:d6:c8:67: 4f:2e:e9:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfRUNYZ4sGRrqwAguqLfAh/cpVP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTEyMTQxMzM2NDhaFw0yNTEyMTcyMjI5NDhaMDMxMTAvBgNV BAMTKERBMkJCMzJEQUUxODg2QTdEMzcwQjI3QTk2MjIyRkE2MDQzMzNDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLNrCWZezORJ4t0EY+ouQeDttL F3UhcKyj3hX9nkm3BsQgVE0RBa19SEj+w9SDjcqoEwgvWbXnt0pf+FPiu5awwAk6 99Q6+/QNrv9xZaprbNVuIXCqW823CI5D2JRIL+cs6gQeGsGezXZjcZdEvXibxy1r iNHP2jrmk4P+w4pBAONtDmfqxLM8piBw0GJj+eyRfg0z5VtvcOj5qSH4EXc/9ARH 59VwjlZA1MR1FoXGrra4oTIB/aQunBtIvAgUm232PWdFbVNL5e3V8ozCBsnNjXCj b6zVGl+eOrvYwgB9SVL9ymVlcnPs69+zqK9nVarU/uoLyWUZ4DLV4+uE+9nrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iuzLa4YhqfTcLJ6liIvpgQzPFgwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUoNFYeXmA9QPFnT4WodyqmR2N5r5U8uqnl ayBH9KvhUfTIMQiGD1OU0v7Atv5HISDWMraBIrrA8m2dbDNxl1JyNFDeOV4okOYQ wvr5f4RhVZjDUZE+khNR8UozVj5fxIqu4jOpixQUx3HYxDIKyfJ1T4xv83kNrNr8 Mf2cHVj8E4G4DNeJbk4katvTfOM7u9fy71CT3NxYkQP8J95ZPIk1d2vl1xuVdbuh 4PFLMEDsTSLdBicLs+1LCxtn7FXrVGLE3VjWx3xQhRx+TTbvxU+wAYn87XuzfOi8 ikU05JV0ogJCEGjd79hvGekb2AA1nQ60JptCALoEStbIZ08u6To= -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:49 2025 by rpki-client