This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: JcCMFlA2OJgdQsMnpBAq40zJ678MB6N14CGq2QRTU2I= Subject key identifier: BB:86:A7:FE:01:ED:B6:2A:0F:02:30:15:DB:42:6A:22:AB:F6:00:DE Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 2255C55A4641D934211C34227FE77371F900568D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0217 Signing time: Thu 04 Dec 2025 13:12:28 +0000 Manifest this update: Thu 04 Dec 2025 13:07:28 +0000 Manifest next update: Sun 07 Dec 2025 21:25:28 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: R0TvrKskGHZtTeNlLHpth/u8quEPgqTjKZ3dnLLDsKc=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 21:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:55:c5:5a:46:41:d9:34:21:1c:34:22:7f:e7:73:71:f9:00:56:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Dec 4 13:07:28 2025 GMT Not After : Dec 7 21:25:28 2025 GMT Subject: CN=BB86A7FE01EDB62A0F023015DB426A22ABF600DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:11:71:10:53:21:38:89:e5:8f:9b:69:4f:20: c8:da:c5:41:b9:1b:63:f5:44:1c:af:ce:77:52:64: 27:78:7e:fb:0e:a7:47:83:95:8a:f1:5a:62:d0:55: c7:18:2d:cf:ed:7a:83:91:68:f4:a6:13:bf:6a:6c: 19:d7:cc:e3:51:ce:62:39:d3:80:f5:db:ca:26:bb: 15:a4:e3:42:f2:8f:98:c4:df:6d:0f:bf:3f:e4:31: 02:8f:ff:c7:20:90:b6:23:03:13:13:55:d3:c9:79: 16:bd:ec:13:1f:29:1a:10:92:15:e4:98:26:49:61: 58:72:98:e9:a2:f8:c4:f8:58:bc:97:f4:5d:54:9f: 8e:66:73:8c:d1:a2:47:50:bb:90:d7:5e:42:69:e8: 07:50:f7:83:50:12:4e:a0:0a:f0:77:1f:be:87:b1: 85:17:0d:2f:8e:be:80:10:3a:3e:36:ef:7f:d6:35: c1:d6:b7:f8:34:32:ed:4f:45:b6:e5:ed:31:bd:fc: 61:44:7a:f0:28:df:8a:a2:b8:48:a5:35:04:26:7e: c9:22:28:45:34:ce:0c:4c:f9:67:c0:c8:0b:11:25: 08:a0:89:32:70:c4:4c:8c:c9:d6:32:34:85:e1:95: 4d:c9:0f:fa:0a:5a:cf:de:da:1b:bd:fa:1e:9f:09: 7e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:86:A7:FE:01:ED:B6:2A:0F:02:30:15:DB:42:6A:22:AB:F6:00:DE X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:de:c4:ec:10:6a:7c:d7:4b:76:9e:ea:6b:1b:ec:67:08:3a: d6:62:ee:f5:76:9f:b0:92:03:48:a3:72:07:35:3d:69:53:70: 2a:c9:a6:f0:f5:2b:fa:ea:0e:6e:b8:b3:8d:50:0e:c0:1a:9f: dc:19:82:87:9e:cf:cf:9b:e6:ae:60:9e:a5:ab:1d:43:da:57: 8c:09:5d:55:cb:fd:d4:54:0b:a7:13:a1:9b:07:76:66:e5:73: d8:70:a5:ba:4c:67:af:40:08:4d:3a:39:b2:42:b7:44:3c:64: c2:fd:15:d0:93:15:11:d4:5c:f3:59:87:62:98:81:0c:ff:b3: 27:8a:f6:8b:74:96:1b:ee:1a:25:ac:7c:50:fd:22:7a:77:48: 66:23:52:30:88:2f:35:9f:75:e7:d1:7d:48:06:06:2c:9d:ec: be:97:01:47:92:87:f3:fe:4d:dc:9b:15:ed:ad:e5:da:16:a0: fa:c7:51:d0:8b:12:53:a7:5f:55:52:7a:01:95:4a:b9:47:fa: df:0b:6b:57:e8:20:1e:79:b8:24:8b:1c:ef:94:c4:3b:bb:a0: 0b:7f:d8:11:6b:6b:61:01:27:da:05:f2:02:4b:5b:dc:56:83: 0d:fc:05:97:f6:e6:b5:06:17:c1:4b:63:c2:f9:20:50:8f:37: e5:f0:14:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlXFWkZB2TQhHDQif+dzcfkAVo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTEyMDQxMzA3MjhaFw0yNTEyMDcyMTI1MjhaMDMxMTAvBgNV BAMTKEJCODZBN0ZFMDFFREI2MkEwRjAyMzAxNURCNDI2QTIyQUJGNjAwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EXEQUyE4ieWPm2lPIMjaxUG5 G2P1RByvzndSZCd4fvsOp0eDlYrxWmLQVccYLc/teoORaPSmE79qbBnXzONRzmI5 04D128omuxWk40Lyj5jE320Pvz/kMQKP/8cgkLYjAxMTVdPJeRa97BMfKRoQkhXk mCZJYVhymOmi+MT4WLyX9F1Un45mc4zRokdQu5DXXkJp6AdQ94NQEk6gCvB3H76H sYUXDS+OvoAQOj4273/WNcHWt/g0Mu1PRbbl7TG9/GFEevAo34qiuEilNQQmfski KEU0zgxM+WfAyAsRJQigiTJwxEyMydYyNIXhlU3JD/oKWs/e2hu9+h6fCX6lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu4an/gHttioPAjAV20JqIqv2AN4wHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/exOwQanzXS3ae6msb7GcIOtZi7vV2n7CS A0ijcgc1PWlTcCrJpvD1K/rqDm64s41QDsAan9wZgoeez8+b5q5gnqWrHUPaV4wJ XVXL/dRUC6cToZsHdmblc9hwpbpMZ69ACE06ObJCt0Q8ZML9FdCTFRHUXPNZh2KY gQz/syeK9ot0lhvuGiWsfFD9Inp3SGYjUjCILzWfdefRfUgGBiyd7L6XAUeSh/P+ TdybFe2t5doWoPrHUdCLElOnX1VSegGVSrlH+t8La1foIB55uCSLHO+UxDu7oAt/ 2BFra2EBJ9oF8gJLW9xWgw38BZf25rUGF8FLY8L5IFCPN+XwFI8= -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:48 2025 by rpki-client