This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: Zq0WkoFPuAgNIXwFqkXUBTcAan6RrvLaMI5PH9y8MOw= Subject key identifier: D5:0C:93:76:7B:E9:C1:C2:E3:74:59:2C:90:8A:44:0C:F6:BE:FB:93 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 3CB98C4726159D2F11802DD708DC7F582BD20881 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0236 Signing time: Thu 25 Dec 2025 12:20:59 +0000 Manifest this update: Thu 25 Dec 2025 12:15:59 +0000 Manifest next update: Sun 28 Dec 2025 13:18:59 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: kURoBdxmm8eMHzM2Xha1l5DvAxXzk1jZuwVmCmiy6WQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 13:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b9:8c:47:26:15:9d:2f:11:80:2d:d7:08:dc:7f:58:2b:d2:08:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Dec 25 12:15:59 2025 GMT Not After : Dec 28 13:18:59 2025 GMT Subject: CN=D50C93767BE9C1C2E374592C908A440CF6BEFB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:81:19:1c:b5:26:14:c1:27:a3:07:84:5f:8e: 6b:2b:dc:a6:ab:93:0b:c0:5a:76:ed:63:ce:2b:34: f6:cf:b5:1c:fe:7e:85:cd:26:6e:38:f6:72:bc:4c: f7:ae:fa:13:f9:08:dd:21:46:f0:ca:b4:12:2f:96: 40:a5:19:21:9d:6d:51:24:35:44:97:ee:89:d8:cc: 1b:99:6b:ba:fb:91:f2:92:31:06:c8:ae:9e:81:af: 3a:d0:f4:f8:88:69:82:aa:05:ce:5a:19:b0:32:e5: 11:45:6a:ec:86:a7:0a:70:ff:21:02:09:0d:0b:10: 8c:6d:50:51:87:b2:63:00:4c:f3:de:83:d1:ef:9e: bb:df:56:9e:f3:3c:2c:74:84:36:bc:5e:27:df:8b: 3a:14:68:6f:f2:bd:a4:04:4f:a1:74:0e:35:67:83: 39:fb:dd:8c:92:7b:5e:f8:4f:54:af:a9:79:24:57: b6:13:eb:ae:33:fc:50:86:8b:e6:1d:38:e2:08:75: ac:40:cf:9e:eb:6e:5f:f9:df:48:0d:e1:91:aa:98: 43:21:f1:a0:ca:76:39:af:13:fe:0c:4e:c9:da:61: b4:c2:e0:a3:4d:8a:5b:d8:56:2d:6e:3d:f1:86:4e: 6b:7d:a6:6a:fa:93:86:50:6d:0e:20:dc:c8:66:1d: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0C:93:76:7B:E9:C1:C2:E3:74:59:2C:90:8A:44:0C:F6:BE:FB:93 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:8d:f8:c4:6e:b5:3c:5a:48:b4:d4:11:ab:23:21:14:5f:d9: 99:ed:c6:cb:d4:f5:74:2f:9f:36:0d:ae:89:05:f8:74:69:c5: 04:66:aa:15:ef:57:df:de:65:34:18:e8:80:d4:5e:67:28:24: 7e:7a:d5:d7:a5:01:9f:30:d0:39:16:69:07:6c:fe:88:5e:36: d7:63:2f:3b:4c:45:4d:51:4f:51:a0:1c:ab:95:b2:d7:e8:2a: 40:14:f2:c6:e4:62:18:dc:1c:d6:ce:6d:5d:4f:14:ad:f4:44: ea:79:d0:fc:65:2e:21:5d:87:f7:9b:47:67:8f:75:43:36:15: e8:33:27:fb:96:d0:4e:fe:0a:33:4c:cb:3d:97:ca:64:ce:75: 56:1d:62:09:f1:b2:13:0a:5a:2e:a3:8e:e7:ff:4f:0b:1a:5f: 56:65:75:f3:32:4a:fb:52:70:8b:0e:87:29:7a:c0:cb:26:31: 0b:51:3d:50:42:95:7f:4c:e0:c1:62:30:a5:3d:69:80:0b:d7: d1:20:7f:7f:d8:49:ab:33:5f:23:3c:c4:0e:61:0e:2d:1f:4a: 00:44:91:57:79:c1:b0:ed:11:9b:fb:7a:43:93:a8:73:c1:76: 8d:69:d4:df:89:4e:c3:a2:4e:30:2f:b2:e3:cd:2c:dd:0d:f2: 85:8b:ea:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLmMRyYVnS8RgC3XCNx/WCvSCIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTEyMjUxMjE1NTlaFw0yNTEyMjgxMzE4NTlaMDMxMTAvBgNV BAMTKEQ1MEM5Mzc2N0JFOUMxQzJFMzc0NTkyQzkwOEE0NDBDRjZCRUZCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gRkctSYUwSejB4Rfjmsr3Kar kwvAWnbtY84rNPbPtRz+foXNJm449nK8TPeu+hP5CN0hRvDKtBIvlkClGSGdbVEk NUSX7onYzBuZa7r7kfKSMQbIrp6BrzrQ9PiIaYKqBc5aGbAy5RFFauyGpwpw/yEC CQ0LEIxtUFGHsmMATPPeg9HvnrvfVp7zPCx0hDa8XiffizoUaG/yvaQET6F0DjVn gzn73YySe174T1SvqXkkV7YT664z/FCGi+YdOOIIdaxAz57rbl/530gN4ZGqmEMh 8aDKdjmvE/4MTsnaYbTC4KNNilvYVi1uPfGGTmt9pmr6k4ZQbQ4g3MhmHZJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1QyTdnvpwcLjdFkskIpEDPa++5MwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMKN+MRutTxaSLTUEasjIRRf2ZntxsvU9XQv nzYNrokF+HRpxQRmqhXvV9/eZTQY6IDUXmcoJH561delAZ8w0DkWaQds/oheNtdj LztMRU1RT1GgHKuVstfoKkAU8sbkYhjcHNbObV1PFK30ROp50PxlLiFdh/ebR2eP dUM2FegzJ/uW0E7+CjNMyz2XymTOdVYdYgnxshMKWi6jjuf/TwsaX1ZldfMySvtS cIsOhyl6wMsmMQtRPVBClX9M4MFiMKU9aYAL19Egf3/YSaszXyM8xA5hDi0fSgBE kVd5wbDtEZv7ekOTqHPBdo1p1N+JTsOiTjAvsuPNLN0N8oWL6vI= -----END CERTIFICATE-----Generated at Fri Dec 26 11:33:08 2025 by rpki-client