This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: re3cyglvvLzH5kGfTo5Fi74McabswAyPFO6WuLyaF/g= Subject key identifier: FC:CC:44:27:75:ED:05:69:C1:39:C4:86:EB:8E:A7:60:D8:7E:7C:A0 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 3A3D3300B6EBF98002B0CC5B191E00FDD46513B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0357 Signing time: Sat 06 Dec 2025 08:51:07 +0000 Manifest this update: Sat 06 Dec 2025 08:46:07 +0000 Manifest next update: Tue 09 Dec 2025 17:29:07 +0000 Files and hashes: 1: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: 2cQffzqC/LTT2qaFLS6ojUSJrkID5gvmfjefSKsOu4w=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3d:33:00:b6:eb:f9:80:02:b0:cc:5b:19:1e:00:fd:d4:65:13:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Dec 6 08:46:07 2025 GMT Not After : Dec 9 17:29:07 2025 GMT Subject: CN=FCCC442775ED0569C139C486EB8EA760D87E7CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:74:b1:3f:b4:51:a5:95:ef:fa:11:60:58: 19:a0:5f:42:18:b1:d1:a5:2d:c4:02:e2:65:58:44: 69:8b:40:68:c0:6f:3f:5b:59:7a:b6:94:8f:1c:b4: fa:34:87:53:ab:33:b4:df:9b:e4:2f:59:4f:5b:60: dc:3e:3b:62:14:ab:1d:a6:42:9a:cb:6a:37:cd:84: 34:5f:6b:ad:3a:df:30:74:83:4a:a7:7d:4c:56:ca: 8f:db:7e:44:e6:90:1f:43:3f:51:94:45:09:69:30: cb:4b:67:4f:95:a9:b4:a1:fe:f7:c6:df:ca:b2:75: 41:7e:ac:72:58:ac:bc:50:5d:8c:75:d8:f3:f9:4e: 63:38:ce:e6:3e:e5:b3:01:27:8e:89:7d:89:10:9a: 22:48:90:61:72:d8:1a:d7:1e:97:1b:42:35:78:1f: a7:97:8f:1e:ee:df:05:10:bb:c1:22:47:b5:38:24: dc:f1:d3:62:81:34:83:b2:d5:99:2c:41:f4:c6:7a: 03:07:42:a0:10:da:ad:7c:b6:d6:0f:ae:25:b3:2f: cb:7d:b3:eb:dc:51:04:e7:8f:73:91:6c:b7:2f:0a: 32:4e:02:da:66:bb:fa:13:13:df:ae:58:a8:5a:8d: ab:84:15:ab:48:97:9d:71:58:56:ea:c0:2b:ab:26: 75:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:CC:44:27:75:ED:05:69:C1:39:C4:86:EB:8E:A7:60:D8:7E:7C:A0 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:fd:7c:cb:3a:98:50:69:00:d0:55:17:c5:58:37:9b:9f:a8: 56:35:69:b6:b6:b6:a0:02:e4:3c:96:99:41:b3:18:84:9a:02: 66:58:29:eb:68:a1:49:d0:f8:3e:c9:1c:75:15:27:f1:87:3c: 03:26:fc:c4:1f:b9:24:ce:43:31:9a:0f:a7:81:c0:80:09:8b: 87:2f:71:a8:1c:31:24:fb:90:87:88:f5:dd:58:52:34:88:aa: 92:00:9b:54:61:3f:59:3f:79:8e:6e:41:33:5b:7b:05:73:4c: 38:9a:bd:07:25:7c:4b:ff:0b:95:de:6e:c4:32:0b:62:55:93: ac:fd:c1:0b:d7:f6:b5:82:44:82:09:7f:68:ea:dc:b1:a3:54: 60:cb:eb:1d:c1:b6:f4:df:b0:e7:70:19:d4:2e:4c:91:95:e1: fe:d9:f7:3f:76:19:97:ec:97:85:a4:a3:24:c2:da:0b:fd:17: d3:4c:94:2d:14:b6:56:2d:e5:41:31:db:83:83:ec:96:ed:2d: 8b:40:a3:76:ff:f9:57:c9:cf:4c:81:18:3f:c1:15:50:42:4a: 50:ad:a0:2f:34:63:b0:52:b3:3c:4d:e0:26:c6:59:bd:60:b6: f1:9f:ba:0f:2c:e9:61:e2:cf:fc:27:e9:59:0b:d0:32:0b:bb: c0:f3:3d:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOj0zALbr+YACsMxbGR4A/dRlE7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTEyMDYwODQ2MDdaFw0yNTEyMDkxNzI5MDdaMDMxMTAvBgNV BAMTKEZDQ0M0NDI3NzVFRDA1NjlDMTM5QzQ4NkVCOEVBNzYwRDg3RTdDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHwXSxP7RRpZXv+hFgWBmgX0IY sdGlLcQC4mVYRGmLQGjAbz9bWXq2lI8ctPo0h1OrM7Tfm+QvWU9bYNw+O2IUqx2m QprLajfNhDRfa6063zB0g0qnfUxWyo/bfkTmkB9DP1GURQlpMMtLZ0+VqbSh/vfG 38qydUF+rHJYrLxQXYx12PP5TmM4zuY+5bMBJ46JfYkQmiJIkGFy2BrXHpcbQjV4 H6eXjx7u3wUQu8EiR7U4JNzx02KBNIOy1ZksQfTGegMHQqAQ2q18ttYPriWzL8t9 s+vcUQTnj3ORbLcvCjJOAtpmu/oTE9+uWKhajauEFatIl51xWFbqwCurJnXzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/MxEJ3XtBWnBOcSG646nYNh+fKAwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMr9fMs6mFBpANBVF8VYN5ufqFY1aba2tqAC 5DyWmUGzGISaAmZYKetooUnQ+D7JHHUVJ/GHPAMm/MQfuSTOQzGaD6eBwIAJi4cv cagcMST7kIeI9d1YUjSIqpIAm1RhP1k/eY5uQTNbewVzTDiavQclfEv/C5XebsQy C2JVk6z9wQvX9rWCRIIJf2jq3LGjVGDL6x3BtvTfsOdwGdQuTJGV4f7Z9z92GZfs l4WkoyTC2gv9F9NMlC0UtlYt5UEx24OD7JbtLYtAo3b/+VfJz0yBGD/BFVBCSlCt oC80Y7BSszxN4CbGWb1gtvGfug8s6WHiz/wn6VkL0DILu8DzPb0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:48 2025 by rpki-client