This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: DYNzkK0f0ppJTZDzeUSgjDX7ujEE4ymrpuOmLJuXMWo= Subject key identifier: CA:E7:86:D4:DE:D3:47:CB:C9:3C:D1:FB:D0:6B:E0:A5:95:24:AF:CB Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 134BB95AAF99971A808F1034F4D7BF3C5B4FB2D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 022B Signing time: Sun 07 Dec 2025 00:11:33 +0000 Manifest this update: Sun 07 Dec 2025 00:06:33 +0000 Manifest next update: Wed 10 Dec 2025 09:10:33 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: 0edTrqJSYiK7aRY9+ECmZ023NIu39CnAYrlU1g3+Nro=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4b:b9:5a:af:99:97:1a:80:8f:10:34:f4:d7:bf:3c:5b:4f:b2:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Dec 7 00:06:33 2025 GMT Not After : Dec 10 09:10:33 2025 GMT Subject: CN=CAE786D4DED347CBC93CD1FBD06BE0A59524AFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:5c:24:02:26:72:6d:3f:cb:9f:9c:02:c0: 08:31:5e:f5:89:e3:e6:6b:f8:93:62:25:b3:1d:f4: 7e:b3:9a:8b:a8:19:6d:97:22:1d:59:45:c6:79:37: 69:b6:b8:2f:1c:7f:40:03:f0:f4:2c:6c:16:2a:72: ea:26:a5:cf:8b:ec:8c:fd:35:22:4d:ea:b2:90:2f: 27:e0:80:ee:89:77:3a:fa:a6:0f:ec:f0:3b:59:54: b6:73:32:90:7d:c9:15:10:bb:ca:2a:88:bd:e3:f6: cb:f4:dc:b2:1d:97:b4:9d:78:e8:a3:a7:a7:d4:0f: d3:7a:a7:08:2f:07:e3:40:26:9a:52:a2:dd:79:c8: 8e:40:a8:42:cf:2b:c9:31:8a:b8:3d:15:9e:cd:45: a7:7d:7b:f6:cc:b2:f7:2a:cc:1f:46:52:77:f1:a0: 71:bd:5e:cc:23:f7:2c:14:93:46:13:ef:27:b7:54: 6a:fa:ca:92:7a:d5:39:ce:88:ec:c1:34:98:00:4a: 46:5d:20:22:a6:8a:06:e9:48:7e:a7:1a:4f:eb:6e: dc:3a:c6:26:e7:d8:cc:c3:9f:76:87:a1:ad:f5:78: ea:fd:fc:e3:54:65:98:f0:52:31:ef:97:d8:0e:47: 1e:54:79:4a:8e:9e:65:69:64:a5:42:98:79:14:3c: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E7:86:D4:DE:D3:47:CB:C9:3C:D1:FB:D0:6B:E0:A5:95:24:AF:CB X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:b0:ce:16:d4:93:d1:92:66:70:e7:b8:8b:ff:b2:2d:76: ae:cd:82:d4:c1:d9:14:9e:cf:33:2f:44:5d:b3:28:fd:d5:01: d4:3a:c3:c9:52:91:35:7d:dc:82:a5:95:d8:2f:7d:70:f0:f5: 1e:22:8a:68:3c:49:87:db:99:48:13:86:a5:63:bd:cc:79:af: 65:eb:da:29:83:4d:ab:84:d3:5d:8b:fe:87:d2:0c:b7:d5:9c: 3b:ea:c1:a4:59:56:00:a1:29:ce:e6:ad:26:26:cb:11:44:2f: 3b:d0:fc:55:a9:e5:15:d8:29:48:ff:6f:a1:4d:de:56:8f:eb: 27:87:c7:a1:40:61:10:2c:07:b1:96:5b:ef:89:b6:aa:db:75: c7:4f:03:fa:a3:8e:14:0c:f7:04:43:a5:3f:88:31:32:50:23: bc:11:82:e5:98:fb:de:e0:73:39:64:0a:b7:0c:eb:3a:fc:1c: 11:70:b6:5f:4c:06:81:58:aa:74:52:d4:11:cd:05:c7:0d:8b: 0d:38:73:df:3d:0c:c8:70:5b:25:fa:d3:12:d9:20:42:32:02: 36:b5:39:f8:cb:00:71:7d:e0:10:21:2c:de:b9:95:7e:fe:50: 69:60:81:95:c0:16:a5:2b:18:b0:f1:03:3a:4b:52:f7:57:3c: d1:1a:73:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0u5Wq+ZlxqAjxA09Ne/PFtPstcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTEyMDcwMDA2MzNaFw0yNTEyMTAwOTEwMzNaMDMxMTAvBgNV BAMTKENBRTc4NkQ0REVEMzQ3Q0JDOTNDRDFGQkQwNkJFMEE1OTUyNEFGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr81wkAiZybT/Ln5wCwAgxXvWJ 4+Zr+JNiJbMd9H6zmouoGW2XIh1ZRcZ5N2m2uC8cf0AD8PQsbBYqcuompc+L7Iz9 NSJN6rKQLyfggO6Jdzr6pg/s8DtZVLZzMpB9yRUQu8oqiL3j9sv03LIdl7SdeOij p6fUD9N6pwgvB+NAJppSot15yI5AqELPK8kxirg9FZ7NRad9e/bMsvcqzB9GUnfx oHG9Xswj9ywUk0YT7ye3VGr6ypJ61TnOiOzBNJgASkZdICKmigbpSH6nGk/rbtw6 xibn2MzDn3aHoa31eOr9/ONUZZjwUjHvl9gORx5UeUqOnmVpZKVCmHkUPPHlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyueG1N7TR8vJPNH70GvgpZUkr8swHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIysM4W1JPRkmZw57iL/7Itdq7NgtTB2RSe zzMvRF2zKP3VAdQ6w8lSkTV93IKlldgvfXDw9R4iimg8SYfbmUgThqVjvcx5r2Xr 2imDTauE012L/ofSDLfVnDvqwaRZVgChKc7mrSYmyxFELzvQ/FWp5RXYKUj/b6FN 3laP6yeHx6FAYRAsB7GWW++JtqrbdcdPA/qjjhQM9wRDpT+IMTJQI7wRguWY+97g czlkCrcM6zr8HBFwtl9MBoFYqnRS1BHNBccNiw04c989DMhwWyX60xLZIEIyAja1 OfjLAHF94BAhLN65lX7+UGlggZXAFqUrGLDxAzpLUvdXPNEac5g= -----END CERTIFICATE-----Generated at Sun Dec 7 02:17:15 2025 by rpki-client