This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: Mh8yYnmvbuC75Z0Yy9SkYCJCvv8lnbXFS6Py7SfDaNI= Subject key identifier: F0:31:CA:BC:A9:9A:F2:A8:63:B8:A7:8B:F0:D7:74:48:26:95:B5:B7 Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 1B0E7774B6061616466B81045002D429464CEB50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: 0125 Signing time: Sat 06 Dec 2025 03:30:50 +0000 Manifest this update: Sat 06 Dec 2025 03:25:50 +0000 Manifest next update: Tue 09 Dec 2025 13:19:50 +0000 Files and hashes: 1: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: na79mMETBRiZMeHVh0kZVNPfC/49+GrHTfx/gU7P7lI=) 2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:19:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0e:77:74:b6:06:16:16:46:6b:81:04:50:02:d4:29:46:4c:eb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Dec 6 03:25:50 2025 GMT Not After : Dec 9 13:19:50 2025 GMT Subject: CN=F031CABCA99AF2A863B8A78BF0D774482695B5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:aa:60:3c:f7:98:40:68:af:ad:53:2d:f5: da:dc:a4:44:be:57:c6:da:f8:7c:76:14:fd:84:64: ad:e6:f5:c8:ff:d5:f4:77:a1:9c:71:c8:6e:7f:af: 0a:b6:06:44:2c:11:ed:ee:2f:a2:25:59:e7:ef:9b: c8:93:96:62:b7:a0:f4:1f:91:1a:02:64:3e:2e:ef: 7e:d8:23:9f:7f:88:8e:1e:78:31:ff:ca:2a:0c:ea: 86:c7:12:17:b5:69:f8:65:57:82:fb:46:3f:42:b7: 3b:73:a4:96:ba:10:b4:93:47:ce:57:97:5b:c1:05: e3:db:0e:da:a8:4e:a3:39:89:90:13:c3:fb:51:02: 9e:5f:b1:b1:d3:d1:89:16:98:d7:e5:d4:ea:d5:ef: c6:2e:02:46:2f:bb:01:09:27:85:b1:99:4e:1e:86: 04:b6:12:80:5e:51:54:76:a4:d9:d9:cc:80:4c:bd: 83:17:44:7f:0e:da:34:5f:7a:6c:a9:40:81:58:12: b4:1a:ad:2e:ec:4a:5c:90:23:fa:25:fb:12:20:bd: 63:c3:20:57:93:3f:ac:21:87:3b:19:f0:b0:83:e2: 6f:d8:5d:26:03:55:d8:9c:bc:73:4e:35:73:fc:b4: f2:ad:f3:86:44:bf:80:32:3d:f3:65:da:12:17:e5: cc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:CA:BC:A9:9A:F2:A8:63:B8:A7:8B:F0:D7:74:48:26:95:B5:B7 X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:26:4c:c0:29:a6:6c:f8:80:84:bb:6e:3d:1b:db:2a:75:88: 08:eb:5e:04:f5:50:1f:6b:09:a5:85:c0:fd:51:74:57:10:ae: 53:a2:96:09:22:1d:03:eb:3f:13:95:dd:88:26:7f:22:b0:b4: 30:c5:51:8d:e5:4f:4c:d7:7d:f3:29:46:37:9b:23:3c:e0:40: 7c:50:24:3a:b5:bb:13:55:d4:31:30:06:97:00:20:ce:dd:50: 7a:f8:97:68:33:54:05:37:77:69:e2:20:ec:5e:7f:51:02:c9: 48:eb:96:47:68:87:70:30:fe:8b:3b:09:a0:8e:21:22:21:df: bd:20:d0:ca:68:f9:2f:cd:d3:e7:5b:d6:c4:4e:73:76:fa:5e: 5f:2e:31:5f:17:db:71:0e:86:2a:f7:e2:ba:d6:45:3e:d8:7d: 1f:78:a3:a2:8f:ee:de:35:5e:12:1e:ca:73:96:5b:09:fc:a9: 9b:86:57:8c:be:2d:20:92:ae:de:7c:28:4a:8b:94:93:2d:f7: c1:ec:13:99:34:6e:bd:8f:6f:cb:70:d8:30:9a:3c:23:56:21: 61:81:26:4e:bd:28:59:f5:0d:d7:9c:fd:df:ca:2b:5c:6d:2b: 0e:a8:b6:98:6b:ad:39:2c:6f:bf:dc:c1:97:0f:f7:a5:c5:de: af:ad:13:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGw53dLYGFhZGa4EEUALUKUZM61AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNTEyMDYwMzI1NTBaFw0yNTEyMDkxMzE5NTBaMDMxMTAvBgNV BAMTKEYwMzFDQUJDQTk5QUYyQTg2M0I4QTc4QkYwRDc3NDQ4MjY5NUI1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWbapgPPeYQGivrVMt9drcpES+ V8ba+Hx2FP2EZK3m9cj/1fR3oZxxyG5/rwq2BkQsEe3uL6IlWefvm8iTlmK3oPQf kRoCZD4u737YI59/iI4eeDH/yioM6obHEhe1afhlV4L7Rj9CtztzpJa6ELSTR85X l1vBBePbDtqoTqM5iZATw/tRAp5fsbHT0YkWmNfl1OrV78YuAkYvuwEJJ4WxmU4e hgS2EoBeUVR2pNnZzIBMvYMXRH8O2jRfemypQIFYErQarS7sSlyQI/ol+xIgvWPD IFeTP6whhzsZ8LCD4m/YXSYDVdicvHNONXP8tPKt84ZEv4AyPfNl2hIX5cw3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8DHKvKma8qhjuKeL8Nd0SCaVtbcwHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkmTMAppmz4gIS7bj0b2yp1iAjrXgT1UB9r CaWFwP1RdFcQrlOilgkiHQPrPxOV3YgmfyKwtDDFUY3lT0zXffMpRjebIzzgQHxQ JDq1uxNV1DEwBpcAIM7dUHr4l2gzVAU3d2niIOxef1ECyUjrlkdoh3Aw/os7CaCO ISIh370g0Mpo+S/N0+db1sROc3b6Xl8uMV8X23EOhir34rrWRT7YfR94o6KP7t41 XhIeynOWWwn8qZuGV4y+LSCSrt58KEqLlJMt98HsE5k0br2Pb8tw2DCaPCNWIWGB Jk69KFn1Ddec/d/KK1xtKw6otphrrTksb7/cwZcP96XF3q+tE9w= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:15 2025 by rpki-client