This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft File: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft (raw, json) Hash identifier: CgV448P380racBAO0dryEqLQCZ2/OIg62T6F/Q+S9s8= Subject key identifier: 37:91:6E:CB:9D:77:58:74:3D:1D:E7:49:2D:DC:D4:08:4F:0A:99:42 Authority key identifier: 82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D Certificate issuer: /CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Certificate serial: 7CADCEC3250F726AF4B7FE65D975D0340888800B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft Manifest number: AE Signing time: Wed 17 Dec 2025 15:30:54 +0000 Manifest this update: Wed 17 Dec 2025 15:25:54 +0000 Manifest next update: Sat 20 Dec 2025 16:24:54 +0000 Files and hashes: 1: 82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl (hash: qlUvFzP/H/oDyt/6eTWILhP9+iX335oAigxazaEA0oM=) 2: 3130332e3137322e34332e302f32342d3234203d3e20313432333835.roa (hash: kJKEjz2D3G1RJer7Y7hYkLjIkHGT1MOdybvh9xHf4rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 16:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ad:ce:c3:25:0f:72:6a:f4:b7:fe:65:d9:75:d0:34:08:88:80:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EABF24EF91106C28ACF9483B2EF11B2EA5319D Validity Not Before: Dec 17 15:25:54 2025 GMT Not After : Dec 20 16:24:54 2025 GMT Subject: CN=37916ECB9D7758743D1DE7492DDCD4084F0A9942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:48:b0:88:64:94:13:d0:5b:7d:b0:b4:dc: 2b:2d:e5:c5:d5:0c:dd:e8:39:41:80:e3:33:a0:8a: b0:6d:11:ef:62:43:3c:1e:af:73:56:79:c4:ed:33: 3c:47:0d:90:88:d5:b5:41:9f:5f:5d:3a:8a:17:8a: ba:47:84:a0:75:49:d9:2f:7c:4a:0a:73:75:da:e7: d0:39:91:69:04:ce:59:7f:ba:af:65:04:72:3c:26: e7:94:b7:a2:8b:61:24:af:d6:c8:2a:b2:78:3e:81: 8e:ef:3c:b0:ac:bf:2e:f8:bb:69:69:15:8e:c5:de: 98:9c:ad:b7:87:1c:83:11:62:6e:f6:8d:2d:78:5f: 07:9b:9f:51:e0:2d:db:0f:e5:d2:8d:6a:9c:6e:bb: aa:03:44:3b:ed:9d:5b:94:a2:9d:73:49:df:48:1a: 43:28:86:dd:2e:07:ed:18:dd:90:40:1c:62:e3:98: ff:15:44:13:6d:c7:8b:71:41:ee:19:81:6d:e2:bb: ef:ae:5c:c3:4a:4b:65:22:cf:d3:3f:4b:d3:b3:c5: 13:ea:83:fb:10:8f:ce:dd:d5:10:4c:7b:a3:62:a8: d3:95:2f:46:d4:d2:4b:b9:0b:e1:6e:bc:b5:ab:8c: 32:8e:33:1b:e1:9e:cc:d0:7f:3e:34:59:04:a3:6d: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:6E:CB:9D:77:58:74:3D:1D:E7:49:2D:DC:D4:08:4F:0A:99:42 X509v3 Authority Key Identifier: keyid:82:EA:BF:24:EF:91:10:6C:28:AC:F9:48:3B:2E:F1:1B:2E:A5:31:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e31c69a-b792-40a4-a144-234b5a1dde52/0/82EABF24EF91106C28ACF9483B2EF11B2EA5319D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:a4:a0:cd:77:00:f4:38:75:09:ba:df:b5:3a:15:f2:25:54: ae:86:35:1d:a4:80:f2:3d:eb:ad:1c:bf:eb:a8:ed:02:dc:77: 12:c6:17:a6:bd:dc:6b:fa:16:f6:3f:c9:27:83:76:ea:4c:4f: 11:24:84:8e:e6:ef:a0:6e:fc:70:bc:84:1a:35:f1:61:51:3b: 50:25:5d:46:e6:64:0a:2d:87:d2:ed:79:6a:fb:3f:7a:c9:ce: a5:13:86:be:e2:34:6e:57:d2:07:b8:37:62:b5:a8:aa:68:a1: 5f:ff:90:f7:49:81:76:48:36:43:c3:ef:97:1a:76:28:de:05: b3:ee:d4:eb:22:c5:c4:2b:93:a9:6b:f3:43:3e:4e:27:8c:6e: d4:59:af:6c:cf:9e:d4:b8:f3:61:ce:6a:59:6e:db:ed:bc:f8: d4:63:67:c8:13:70:38:24:e0:aa:22:38:2c:79:0e:bb:05:5f: cd:90:45:5b:07:a5:e8:dd:d4:85:d0:8d:ff:bb:28:9f:c8:98: 50:37:83:99:e1:eb:e7:47:59:6a:55:38:f4:20:dd:c7:af:bb: 44:65:47:1a:53:29:03:de:01:2d:e9:d3:a6:a4:bb:53:a7:79: 88:15:1c:a7:b5:22:1f:06:36:d0:f8:95:54:c3:27:65:d0:02: 5c:5e:91:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfK3OwyUPcmr0t/5l2XXQNAiIgAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIy RUE1MzE5RDAeFw0yNTEyMTcxNTI1NTRaFw0yNTEyMjAxNjI0NTRaMDMxMTAvBgNV BAMTKDM3OTE2RUNCOUQ3NzU4NzQzRDFERTc0OTJERENENDA4NEYwQTk5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnf0iwiGSUE9BbfbC03Cst5cXV DN3oOUGA4zOgirBtEe9iQzwer3NWecTtMzxHDZCI1bVBn19dOooXirpHhKB1Sdkv fEoKc3Xa59A5kWkEzll/uq9lBHI8JueUt6KLYSSv1sgqsng+gY7vPLCsvy74u2lp FY7F3picrbeHHIMRYm72jS14Xwebn1HgLdsP5dKNapxuu6oDRDvtnVuUop1zSd9I GkMoht0uB+0Y3ZBAHGLjmP8VRBNtx4txQe4ZgW3iu++uXMNKS2Uiz9M/S9OzxRPq g/sQj87d1RBMe6NiqNOVL0bU0ku5C+FuvLWrjDKOMxvhnszQfz40WQSjbeJBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN5Fuy513WHQ9HedJLdzUCE8KmUIwHwYDVR0j BBgwFoAUguq/JO+REGworPlIOy7xGy6lMZ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTMxYzY5YS1iNzkyLTQwYTQtYTE0NC0yMzRiNWExZGRlNTIvMC84MkVBQkYyNEVG OTExMDZDMjhBQ0Y5NDgzQjJFRjExQjJFQTUzMTlELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYxMUIyRUE1 MzE5RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUzMWM2OWEtYjc5Mi00MGE0LWEx NDQtMjM0YjVhMWRkZTUyLzAvODJFQUJGMjRFRjkxMTA2QzI4QUNGOTQ4M0IyRUYx MUIyRUE1MzE5RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD6koM13APQ4dQm637U6FfIlVK6GNR2kgPI9 660cv+uo7QLcdxLGF6a93Gv6FvY/ySeDdupMTxEkhI7m76Bu/HC8hBo18WFRO1Al XUbmZAoth9LteWr7P3rJzqUThr7iNG5X0ge4N2K1qKpooV//kPdJgXZINkPD75ca dijeBbPu1OsixcQrk6lr80M+TieMbtRZr2zPntS482HOallu2+28+NRjZ8gTcDgk 4KoiOCx5DrsFX82QRVsHpejd1IXQjf+7KJ/ImFA3g5nh6+dHWWpVOPQg3cevu0Rl RxpTKQPeAS3p06aku1OneYgVHKe1Ih8GNtD4lVTDJ2XQAlxekb4= -----END CERTIFICATE-----Generated at Fri Dec 19 07:19:02 2025 by rpki-client