This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft File: 8762A545785B5A6352FB7DA20689CECA8A47432E.mft (raw, json) Hash identifier: KqINP21zLa/+MQ7BAmAbb1prqRL3Di55uXm2bM+MDqc= Subject key identifier: 8F:53:CF:9F:B4:A4:B5:68:DB:BE:18:D9:C1:A3:DC:9C:FF:43:3C:7B Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E Certificate serial: 54876888A5AAEFAA50548D67EF67D9E51C9F861E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft Manifest number: 013B Signing time: Sat 06 Dec 2025 14:22:27 +0000 Manifest this update: Sat 06 Dec 2025 14:17:27 +0000 Manifest next update: Tue 09 Dec 2025 21:02:27 +0000 Files and hashes: 1: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: 85HD3reiEjdkfQdQr7+NqjILaObNFWfX8Cb4+3Rhne0=) 2: 8762A545785B5A6352FB7DA20689CECA8A47432E.crl (hash: DFTFnEVGq7gotYgY2Tp+PMbNAxDcr0Jjdtx3a5gEKok=) 3: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: lji/vTMkb0wOaoJDSAf5I41zHxz28OXK0EJIORWWggo=) 4: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: +NIjwWcX32iENUI6CwGHVjqpRn9w8NoFIe/Bw+4LZl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:87:68:88:a5:aa:ef:aa:50:54:8d:67:ef:67:d9:e5:1c:9f:86:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E Validity Not Before: Dec 6 14:17:27 2025 GMT Not After : Dec 9 21:02:27 2025 GMT Subject: CN=8F53CF9FB4A4B568DBBE18D9C1A3DC9CFF433C7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:5d:56:ef:33:8a:8b:e3:16:99:a7:d1:34: 17:6c:23:e4:98:c5:97:13:b5:55:6f:a6:e5:b9:51: 2d:60:6a:13:84:74:f0:d4:bc:52:6c:6b:58:1a:3f: 8e:2f:22:5f:81:a0:1f:2e:d7:c8:2b:89:b2:fd:d6: 48:ad:35:a1:a2:5d:93:f5:7c:6c:56:39:1d:43:b6: c8:f4:61:eb:e8:2b:3d:03:22:1b:08:26:0a:e5:45: d0:35:f4:02:83:2b:ba:64:cc:20:45:e8:0b:94:21: 41:0d:26:3b:2a:69:52:58:b1:9d:ff:50:62:67:92: ad:2f:8c:0c:8b:6a:46:67:93:c9:f7:08:ce:0d:28: 67:26:36:f8:a5:83:6c:53:40:93:57:6e:00:5d:96: 0f:b5:b4:37:bc:21:2e:8e:29:6f:97:16:67:d1:0e: af:63:b5:74:51:8a:d4:17:71:f9:60:e3:66:a5:ae: dd:51:7e:d3:0a:6c:c0:c4:29:dc:c1:d6:56:d3:ce: 0a:ec:d7:8c:92:ed:2c:01:81:f4:9c:4c:b4:79:92: 71:f8:d5:47:f8:43:77:a5:61:30:e5:88:2e:ee:55: 68:e7:66:65:4f:4a:8a:f5:b2:5d:17:c8:d4:bd:3b: 54:e8:4e:b9:df:38:f2:0b:98:13:02:69:79:6d:e9: 46:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:53:CF:9F:B4:A4:B5:68:DB:BE:18:D9:C1:A3:DC:9C:FF:43:3C:7B X509v3 Authority Key Identifier: keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:8f:97:8f:77:be:53:5a:f5:69:05:4d:6d:38:46:53:1d: d5:74:39:e1:df:a0:00:c2:f6:c8:03:88:40:c8:7f:c8:8b:c8: 36:a3:7c:58:a4:ef:0c:10:e4:e2:cd:05:79:bb:db:2c:30:a6: 10:ea:f0:26:ef:71:52:19:4c:74:82:38:a3:21:79:b5:a1:68: 3b:70:51:12:66:73:f9:2c:cc:9d:54:4a:6b:d8:9b:9d:2e:cc: d3:a2:41:59:8e:a5:09:1f:e1:1f:64:1d:23:6d:7b:4d:9d:4f: c3:96:e4:55:72:23:25:d2:38:8e:86:db:64:56:28:51:cc:f7: e4:eb:ab:c0:06:05:50:fd:b9:89:cb:e9:12:83:e3:1b:55:2d: 6b:21:a8:08:34:83:92:bf:29:aa:74:a8:41:01:37:cc:38:cd: ca:40:bc:8e:9e:17:f4:ff:e5:2e:cb:ef:27:c4:48:27:89:28: 59:d5:f8:96:85:70:93:de:21:24:ed:99:cc:c9:ca:7f:cc:6a: f4:ab:b0:99:70:dc:cb:ef:4f:20:9c:07:2c:cf:eb:ac:01:4e: 1e:b9:6f:4d:39:81:ce:32:90:fa:01:f5:ad:4b:ea:55:02:82: d9:16:70:5b:58:fd:92:e9:03:bc:4d:ae:4f:3a:87:84:1c:cb: 82:1c:90:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVIdoiKWq76pQVI1n72fZ5Ryfhh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4 QTQ3NDMyRTAeFw0yNTEyMDYxNDE3MjdaFw0yNTEyMDkyMTAyMjdaMDMxMTAvBgNV BAMTKDhGNTNDRjlGQjRBNEI1NjhEQkJFMThEOUMxQTNEQzlDRkY0MzNDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL11W7zOKi+MWmafRNBdsI+SY xZcTtVVvpuW5US1gahOEdPDUvFJsa1gaP44vIl+BoB8u18gribL91kitNaGiXZP1 fGxWOR1Dtsj0YevoKz0DIhsIJgrlRdA19AKDK7pkzCBF6AuUIUENJjsqaVJYsZ3/ UGJnkq0vjAyLakZnk8n3CM4NKGcmNvilg2xTQJNXbgBdlg+1tDe8IS6OKW+XFmfR Dq9jtXRRitQXcflg42alrt1RftMKbMDEKdzB1lbTzgrs14yS7SwBgfScTLR5knH4 1Uf4Q3elYTDliC7uVWjnZmVPSor1sl0XyNS9O1ToTrnfOPILmBMCaXlt6UZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1PPn7SktWjbvhjZwaPcnP9DPHswHwYDVR0j BBgwFoAUh2KlRXhbWmNS+32iBonOyopHQy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzI4YjQ3Ni02MjI0LTRlMDEtYjE4Ni04MGJjZWM5YmMwZTMvMC84NzYyQTU0NTc4 NUI1QTYzNTJGQjdEQTIwNjg5Q0VDQThBNDc0MzJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4QTQ3 NDMyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx ODYtODBiY2VjOWJjMGUzLzAvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNF Q0E4QTQ3NDMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXLj5ePd75TWvVpBU1tOEZTHdV0OeHfoADC 9sgDiEDIf8iLyDajfFik7wwQ5OLNBXm72ywwphDq8CbvcVIZTHSCOKMhebWhaDtw URJmc/kszJ1USmvYm50uzNOiQVmOpQkf4R9kHSNte02dT8OW5FVyIyXSOI6G22RW KFHM9+Trq8AGBVD9uYnL6RKD4xtVLWshqAg0g5K/Kap0qEEBN8w4zcpAvI6eF/T/ 5S7L7yfESCeJKFnV+JaFcJPeISTtmczJyn/MavSrsJlw3MvvTyCcByzP66wBTh65 b005gc4ykPoB9a1L6lUCgtkWcFtY/ZLpA7xNrk86h4Qcy4IckOQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:03:00 2025 by rpki-client