This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: 1HT7Xa8qlgt8xauQcqgT/S0ayrj5/lm6QvqA7fhscgA= Subject key identifier: 01:51:29:82:A9:19:01:72:39:18:86:95:54:38:A8:5D:19:87:65:16 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 3B9727DAF8B0211F221AEACC8C61096A1BDCF0C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: D5 Signing time: Sat 06 Dec 2025 21:41:01 +0000 Manifest this update: Sat 06 Dec 2025 21:36:01 +0000 Manifest next update: Wed 10 Dec 2025 06:15:01 +0000 Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) 2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: WUzrxr67wOgl1w62hn/wmZC6Q54NWF33S4M5vo3cP/4=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:97:27:da:f8:b0:21:1f:22:1a:ea:cc:8c:61:09:6a:1b:dc:f0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Dec 6 21:36:01 2025 GMT Not After : Dec 10 06:15:01 2025 GMT Subject: CN=01512982A9190172391886955438A85D19876516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:d2:21:67:cc:80:7c:b0:30:ff:b3:f2:46: bf:b2:a9:ee:c0:f2:5e:2a:3c:21:c8:6f:5f:f8:b1: fd:91:c4:61:14:f5:db:b8:08:69:ec:b5:60:4e:97: 6b:50:b6:53:68:ed:06:9a:fd:e7:aa:41:9d:47:a5: 31:a4:f9:66:36:19:20:86:3e:87:d9:3a:17:17:bb: 7f:8e:f7:60:b7:67:2f:f1:75:98:b7:7b:67:c5:b3: cf:c5:41:32:63:26:ad:2b:44:62:a4:ee:1a:24:04: 10:34:35:87:72:ae:52:7f:29:7f:b1:d6:b8:bc:90: 84:01:b5:2b:41:a2:34:57:ab:e5:2a:9a:57:6a:ff: 92:ab:e3:0e:18:be:4a:e5:00:f8:bf:0a:bf:80:a8: c0:72:8a:ed:6f:10:c1:29:2d:13:0b:6e:50:65:f0: 61:62:2a:76:2c:d4:98:b6:b5:b7:e3:84:38:3d:88: d6:d2:e3:dd:cb:d4:88:3e:ed:73:cf:10:07:55:71: 1d:14:e9:a8:06:12:87:ee:ef:83:98:31:06:21:b7: ba:2e:1b:5e:87:d0:2a:50:cc:08:d3:69:6d:e3:42: 18:01:fc:9c:fc:bb:a3:dc:5e:4b:15:6b:a7:0a:fb: 4b:e3:d0:b0:ed:c2:af:b8:5d:ae:b9:1b:bd:ad:42: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:51:29:82:A9:19:01:72:39:18:86:95:54:38:A8:5D:19:87:65:16 X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:89:63:06:b9:89:c0:fa:93:41:8b:4d:d3:2b:af:77:3c:13: 1b:c0:2b:ed:0f:d1:83:9c:fa:27:b9:cf:21:0b:0d:59:5a:6b: cf:72:a2:32:4f:dc:5e:a5:c7:a9:f0:91:cf:a7:f9:09:b6:1f: c3:31:e2:e7:ed:ae:aa:e2:e0:fa:fd:c1:ac:42:1a:02:a4:09: f4:55:9a:d4:f6:90:90:d6:7d:ca:e8:30:f7:17:f3:55:5a:a7: cf:4f:6b:9e:1a:e4:a4:3f:b9:bb:7d:51:75:08:b9:24:a7:4a: 65:9e:b8:09:b4:6e:32:51:16:d1:af:2b:75:73:04:c2:9c:82: ad:42:41:bf:4b:d4:b2:e5:72:83:b3:3f:7f:8e:ba:f8:49:c1: be:08:ea:37:86:f7:d0:7c:01:d0:04:ba:db:48:f4:53:3e:e0: d6:21:66:57:54:f1:52:43:98:d6:ee:1b:1d:e6:6f:28:f5:24: b0:e5:3a:40:2a:77:c5:e8:ea:fa:2d:45:e1:9e:83:2b:63:2c: f9:56:f9:98:a1:d9:10:b7:10:49:05:02:5c:b0:ab:0b:e0:f9: 16:fd:62:ce:67:ee:4c:cf:4f:75:63:b6:83:01:04:e6:96:5d: 62:a8:0e:d4:1d:1b:8c:9f:f9:7c:44:8a:bf:cb:43:26:37:6d: 56:48:91:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5cn2viwIR8iGurMjGEJahvc8MEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTEyMDYyMTM2MDFaFw0yNTEyMTAwNjE1MDFaMDMxMTAvBgNV BAMTKDAxNTEyOTgyQTkxOTAxNzIzOTE4ODY5NTU0MzhBODVEMTk4NzY1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kNIhZ8yAfLAw/7PyRr+yqe7A 8l4qPCHIb1/4sf2RxGEU9du4CGnstWBOl2tQtlNo7Qaa/eeqQZ1HpTGk+WY2GSCG PofZOhcXu3+O92C3Zy/xdZi3e2fFs8/FQTJjJq0rRGKk7hokBBA0NYdyrlJ/KX+x 1ri8kIQBtStBojRXq+Uqmldq/5Kr4w4YvkrlAPi/Cr+AqMByiu1vEMEpLRMLblBl 8GFiKnYs1Ji2tbfjhDg9iNbS493L1Ig+7XPPEAdVcR0U6agGEofu74OYMQYht7ou G16H0CpQzAjTaW3jQhgB/Jz8u6PcXksVa6cK+0vj0LDtwq+4Xa65G72tQpEdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAVEpgqkZAXI5GIaVVDioXRmHZRYwHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+JYwa5icD6k0GLTdMrr3c8ExvAK+0P0YOc +ie5zyELDVlaa89yojJP3F6lx6nwkc+n+Qm2H8Mx4uftrqri4Pr9waxCGgKkCfRV mtT2kJDWfcroMPcX81Vap89Pa54a5KQ/ubt9UXUIuSSnSmWeuAm0bjJRFtGvK3Vz BMKcgq1CQb9L1LLlcoOzP3+OuvhJwb4I6jeG99B8AdAEuttI9FM+4NYhZldU8VJD mNbuGx3mbyj1JLDlOkAqd8Xo6votReGegytjLPlW+Zih2RC3EEkFAlywqwvg+Rb9 Ys5n7kzPT3VjtoMBBOaWXWKoDtQdG4yf+XxEir/LQyY3bVZIkc8= -----END CERTIFICATE-----Generated at Sun Dec 7 12:45:33 2025 by rpki-client