This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: yYMGYqX7BboZpMhBxexUD5AhOVmgVQgBlL4VoIod5Zs= Subject key identifier: 53:AE:45:D2:B7:DB:FB:F5:B0:BE:9F:E0:FD:AB:B5:85:28:0C:79:08 Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 643866DFA80CBFCDD74B8679EBCD38AAB82829D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01D3 Signing time: Sun 07 Dec 2025 01:42:21 +0000 Manifest this update: Sun 07 Dec 2025 01:37:21 +0000 Manifest next update: Wed 10 Dec 2025 12:22:21 +0000 Files and hashes: 1: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=) 3: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: h6zforeucR8Ssjch1dG5ojO4+NPrEJFbcSqwZ0XkaHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:38:66:df:a8:0c:bf:cd:d7:4b:86:79:eb:cd:38:aa:b8:28:29:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Dec 7 01:37:21 2025 GMT Not After : Dec 10 12:22:21 2025 GMT Subject: CN=53AE45D2B7DBFBF5B0BE9FE0FDABB585280C7908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:c1:4f:68:dd:a6:74:5f:2d:23:b4:46:d3: 8f:b2:2a:de:38:55:34:f2:01:68:f1:de:c2:fa:12: a6:cf:d3:ea:44:2e:08:23:0a:a5:72:3d:72:89:42: 7a:82:b5:d0:ca:65:ca:9d:26:ff:a4:41:0e:1b:39: 03:8e:18:b1:8b:b1:00:6e:c4:bf:d9:85:30:2a:12: 5e:db:81:23:69:d4:78:f2:06:a3:c6:a9:82:87:3a: c3:50:02:d5:b1:86:ab:73:ad:61:99:df:8a:30:ec: 2c:69:6e:7e:04:ef:bd:16:65:28:0e:cc:23:5c:70: 00:26:03:72:17:07:b1:aa:db:b5:7a:56:d1:c1:20: b6:ee:69:90:87:be:d9:47:a5:4c:65:cb:13:36:8e: dd:bd:ec:7b:84:cd:62:a5:70:5f:3d:cb:83:e4:9c: e7:9d:c6:af:cb:0a:51:ed:c0:99:cd:7d:47:62:e3: e8:ff:1c:a7:d1:78:02:b8:66:8d:34:45:f6:d5:c6: 7a:0a:95:42:8c:f0:23:5d:83:f9:54:95:db:d7:11: 96:f7:3a:0a:d9:cf:5a:07:7f:81:8c:7f:f9:42:43: d4:6f:2e:dd:25:f5:c5:0f:9e:0e:2f:2b:bb:ab:d1: b1:fa:bd:f7:57:cf:34:49:af:98:f5:98:9f:42:57: d0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AE:45:D2:B7:DB:FB:F5:B0:BE:9F:E0:FD:AB:B5:85:28:0C:79:08 X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:32:9e:09:30:b4:5c:63:3d:5f:68:24:c7:40:50:6f:09:fd: aa:31:82:ff:34:ed:04:63:52:b7:b5:38:bb:eb:6d:30:30:0f: e4:78:e3:a5:b1:3b:b7:4e:0b:73:44:ee:40:7e:da:58:98:dd: e5:68:42:7d:2d:28:4d:79:3f:44:3d:06:06:db:fe:0f:94:b9: d5:f1:23:fb:a5:51:e1:21:2b:06:be:c1:d3:86:73:b8:26:36: 21:00:98:77:11:4e:d1:2d:8b:71:e6:30:15:14:db:40:e1:bf: af:8a:4e:fd:50:a4:0b:8b:29:81:b5:ac:54:0c:89:74:fe:69: 65:fd:89:8b:20:c9:93:9d:b0:19:13:0b:93:01:48:b7:39:f8: df:92:df:5d:b5:17:55:2b:dc:df:ea:f6:79:55:cb:cd:0f:48: ca:23:5c:b1:62:13:f5:6c:2f:48:d2:27:d5:36:cc:fe:58:39: ae:5d:a7:e2:12:0a:8e:ed:0b:47:eb:95:e8:54:90:a7:66:31: 8d:45:25:1b:32:cf:e9:ea:bd:18:cb:a5:0f:01:08:0d:b3:4f: 05:6c:59:88:6e:53:ef:e1:10:e0:40:03:32:42:a5:b1:dd:02: 07:2a:50:d4:81:2d:93:30:0e:a8:2a:7e:a8:cc:6c:8a:ff:df: 28:3a:cf:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZDhm36gMv83XS4Z56804qrgoKdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTEyMDcwMTM3MjFaFw0yNTEyMTAxMjIyMjFaMDMxMTAvBgNV BAMTKDUzQUU0NUQyQjdEQkZCRjVCMEJFOUZFMEZEQUJCNTg1MjgwQzc5MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJV8FPaN2mdF8tI7RG04+yKt44 VTTyAWjx3sL6EqbP0+pELggjCqVyPXKJQnqCtdDKZcqdJv+kQQ4bOQOOGLGLsQBu xL/ZhTAqEl7bgSNp1HjyBqPGqYKHOsNQAtWxhqtzrWGZ34ow7Cxpbn4E770WZSgO zCNccAAmA3IXB7Gq27V6VtHBILbuaZCHvtlHpUxlyxM2jt297HuEzWKlcF89y4Pk nOedxq/LClHtwJnNfUdi4+j/HKfReAK4Zo00RfbVxnoKlUKM8CNdg/lUldvXEZb3 OgrZz1oHf4GMf/lCQ9RvLt0l9cUPng4vK7ur0bH6vfdXzzRJr5j1mJ9CV9DLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU65F0rfb+/Wwvp/g/au1hSgMeQgwHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUyngkwtFxjPV9oJMdAUG8J/aoxgv807QRj Ure1OLvrbTAwD+R446WxO7dOC3NE7kB+2liY3eVoQn0tKE15P0Q9Bgbb/g+UudXx I/ulUeEhKwa+wdOGc7gmNiEAmHcRTtEti3HmMBUU20Dhv6+KTv1QpAuLKYG1rFQM iXT+aWX9iYsgyZOdsBkTC5MBSLc5+N+S3121F1Ur3N/q9nlVy80PSMojXLFiE/Vs L0jSJ9U2zP5YOa5dp+ISCo7tC0frlehUkKdmMY1FJRsyz+nqvRjLpQ8BCA2zTwVs WYhuU+/hEOBAAzJCpbHdAgcqUNSBLZMwDqgqfqjMbIr/3yg6zyM= -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:39 2025 by rpki-client