This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft File: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft (raw, json) Hash identifier: yRZ+IiwGXCZYEjnvS2yYnChZqaNn2Q2Ta8OXGLp45VA= Subject key identifier: BD:4A:E0:6E:21:4D:4E:FC:DB:08:A5:3F:E6:BC:55:63:A7:43:8A:1B Authority key identifier: 80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 Certificate issuer: /CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Certificate serial: 280432DB42B550E957B1C31F0C25A8922F2733C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft Manifest number: 0531 Signing time: Thu 04 Dec 2025 23:02:12 +0000 Manifest this update: Thu 04 Dec 2025 22:57:12 +0000 Manifest next update: Mon 08 Dec 2025 09:18:12 +0000 Files and hashes: 1: 3130332e3230382e3230342e302f32322d3234203d3e20313334363531.roa (hash: cp44WBbEQPeVS1mAfPisCHMGvuQWDdPCMl7LdQCGp3k=) 2: 323430343a343738303a313a3a2f34382d3438203d3e203538343935.roa (hash: oWtepmBqBvebT0Z+AytYxvJ+nwN7a/Aha+0+yrTyMss=) 3: 803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl (hash: yXzM9k1khHFUc8BhAA0d61172B0ihse41BIfoDdfF+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:18:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:04:32:db:42:b5:50:e9:57:b1:c3:1f:0c:25:a8:92:2f:27:33:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3 Validity Not Before: Dec 4 22:57:12 2025 GMT Not After : Dec 8 09:18:12 2025 GMT Subject: CN=BD4AE06E214D4EFCDB08A53FE6BC5563A7438A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6e:28:b3:1d:f2:3b:e3:15:d0:4c:ba:25:d4: ad:17:bd:fd:04:8e:9f:f1:13:f7:8f:e3:60:39:db: a9:3c:66:a6:72:fe:07:ea:45:25:5f:0c:0f:bc:ae: af:e7:b9:fd:5a:91:86:55:48:8c:a5:3c:c7:bd:4b: 70:c4:a9:c0:60:9e:a9:9b:28:ee:de:39:66:1c:21: d8:38:4f:43:c6:1c:e1:f9:61:ea:6b:88:3b:ff:68: be:b2:3b:97:e3:13:15:3a:2d:dc:e7:37:3b:46:2c: e8:76:5c:4c:05:fb:fa:9a:f2:4f:8e:28:21:23:03: ba:1b:8d:03:4d:ec:c2:8f:ac:d0:51:43:6e:70:87: bb:33:f7:cd:e4:d6:4a:16:14:1b:a9:07:23:5a:ca: 4e:71:96:07:83:07:1b:c7:d0:78:aa:e5:bf:40:e2: 33:7b:5e:e5:cf:c3:89:e8:b0:df:f6:fe:c8:80:c7: ac:11:d4:83:04:fe:d5:c8:db:70:97:32:41:76:18: 9b:6f:82:ef:34:88:78:ad:f7:5c:80:e0:f9:9c:ea: 29:bd:7f:77:25:91:dc:93:f3:27:58:a6:01:cd:26: 05:8e:f3:37:99:84:ed:55:46:b2:b3:46:32:55:a8: 34:2a:48:66:0e:ad:5f:18:bb:4b:a4:93:1f:22:6d: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4A:E0:6E:21:4D:4E:FC:DB:08:A5:3F:E6:BC:55:63:A7:43:8A:1B X509v3 Authority Key Identifier: keyid:80:3C:9F:F1:02:83:6C:EC:8C:EC:49:F0:1F:CF:AA:0E:92:E2:6A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27727c3e-9c1a-46de-a2b8-c88b90399f3d/0/803C9FF102836CEC8CEC49F01FCFAA0E92E26AF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:4d:02:67:88:32:cc:e5:2d:b1:e1:6f:d2:c8:44:f1:f7:6b: 4f:6f:fe:e0:69:e0:38:eb:77:b1:dd:6c:cf:26:60:17:27:72: 61:34:0d:21:a5:16:d0:d7:d9:d6:44:17:6c:0d:f2:d5:0a:d4: c2:7d:ef:96:72:d7:f5:66:b0:21:97:b4:e5:e1:63:b1:12:d8: 03:dd:d4:2c:e9:34:6f:2e:79:c2:d9:a4:2b:88:b6:2b:22:a3: 08:63:ed:4d:14:a4:cb:76:df:5b:67:48:95:de:7d:97:e9:f3: d4:53:90:97:1a:69:69:d9:38:8c:fc:e6:2d:67:81:48:ca:dc: 08:ff:24:ae:1f:80:22:75:82:67:67:14:69:28:82:9c:35:8b: 3f:3d:f4:89:cc:9d:90:f1:c0:ef:da:6a:86:db:59:50:af:02: c0:c3:e2:3c:b6:80:7b:04:e6:9b:56:83:71:d3:56:97:4a:6e: 4c:2c:45:f4:f8:a4:e6:cd:99:8b:6e:e0:21:20:8f:b9:66:be: 53:e6:9a:b8:99:c4:a2:0a:75:fd:be:0a:22:13:45:cb:d4:44: 93:01:da:3b:58:f4:71:a1:ab:46:f4:49:64:80:37:32:58:71: 51:91:16:88:b3:f4:c9:6f:68:25:3f:59:94:8a:5f:2e:46:83: 44:2e:12:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAQy20K1UOlXscMfDCWoki8nM8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5 MkUyNkFGMzAeFw0yNTEyMDQyMjU3MTJaFw0yNTEyMDgwOTE4MTJaMDMxMTAvBgNV BAMTKEJENEFFMDZFMjE0RDRFRkNEQjA4QTUzRkU2QkM1NTYzQTc0MzhBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbiizHfI74xXQTLol1K0Xvf0E jp/xE/eP42A526k8ZqZy/gfqRSVfDA+8rq/nuf1akYZVSIylPMe9S3DEqcBgnqmb KO7eOWYcIdg4T0PGHOH5YepriDv/aL6yO5fjExU6LdznNztGLOh2XEwF+/qa8k+O KCEjA7objQNN7MKPrNBRQ25wh7sz983k1koWFBupByNayk5xlgeDBxvH0Hiq5b9A 4jN7XuXPw4nosN/2/siAx6wR1IME/tXI23CXMkF2GJtvgu80iHit91yA4Pmc6im9 f3clkdyT8ydYpgHNJgWO8zeZhO1VRrKzRjJVqDQqSGYOrV8Yu0ukkx8ibY4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvUrgbiFNTvzbCKU/5rxVY6dDihswHwYDVR0j BBgwFoAUgDyf8QKDbOyM7EnwH8+qDpLiavMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzcyN2MzZS05YzFhLTQ2ZGUtYTJiOC1jODhiOTAzOTlmM2QvMC84MDNDOUZGMTAy ODM2Q0VDOENFQzQ5RjAxRkNGQUEwRTkyRTI2QUYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFBMEU5MkUy NkFGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjc3MjdjM2UtOWMxYS00NmRlLWEy YjgtYzg4YjkwMzk5ZjNkLzAvODAzQzlGRjEwMjgzNkNFQzhDRUM0OUYwMUZDRkFB MEU5MkUyNkFGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO5NAmeIMszlLbHhb9LIRPH3a09v/uBp4Djr d7HdbM8mYBcncmE0DSGlFtDX2dZEF2wN8tUK1MJ975Zy1/VmsCGXtOXhY7ES2APd 1CzpNG8uecLZpCuItisiowhj7U0UpMt231tnSJXefZfp89RTkJcaaWnZOIz85i1n gUjK3Aj/JK4fgCJ1gmdnFGkogpw1iz899InMnZDxwO/aaobbWVCvAsDD4jy2gHsE 5ptWg3HTVpdKbkwsRfT4pObNmYtu4CEgj7lmvlPmmriZxKIKdf2+CiITRcvURJMB 2jtY9HGhq0b0SWSANzJYcVGRFoiz9MlvaCU/WZSKXy5Gg0QuEu4= -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:54 2025 by rpki-client