This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: Yjg8RGdtD+NikAtCExA986DetYV+f1b/eA+rE4GmEmw= Subject key identifier: 2C:4D:77:C0:38:BB:A9:5B:85:6E:4B:B0:09:23:87:7C:F7:DF:7F:06 Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 08FF0579E3BED20B8B04552586A1F13B4F8BDEC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 052B Signing time: Fri 05 Dec 2025 10:32:17 +0000 Manifest this update: Fri 05 Dec 2025 10:27:17 +0000 Manifest next update: Mon 08 Dec 2025 12:09:17 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: qG8gW3gye9ovCHIiykT4GVQnnsALHRG2r3m+gCxewrU=) 4: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ff:05:79:e3:be:d2:0b:8b:04:55:25:86:a1:f1:3b:4f:8b:de:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Dec 5 10:27:17 2025 GMT Not After : Dec 8 12:09:17 2025 GMT Subject: CN=2C4D77C038BBA95B856E4BB00923877CF7DF7F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:d2:db:c2:d4:77:71:03:60:70:a6:48:be: 29:ad:2a:41:4f:55:91:58:8d:20:70:84:3f:78:9c: bd:74:26:25:cd:d8:0f:c9:7a:8e:b5:56:04:6f:80: d8:c6:d7:b0:9e:cd:87:af:d7:f6:5d:3a:9e:85:f2: 64:af:e6:45:20:48:20:2c:aa:f6:3e:12:ce:17:26: 2b:f5:9f:f3:84:ae:8d:5d:1e:4b:54:97:80:92:f7: 8a:30:25:1c:10:e4:4b:f8:2d:2f:32:e8:c1:62:13: 47:25:87:fb:f9:bb:01:3e:32:9f:5f:e8:6e:2a:77: 3a:c3:2f:fe:b1:7d:48:8d:c6:6b:74:c7:0e:70:28: a0:b5:a1:9c:2b:ff:0d:e7:a5:b0:5d:97:48:dd:b6: 5f:4f:3b:7f:00:7d:32:fb:66:42:38:c1:bd:15:c6: 0e:a0:e3:f1:e3:78:e6:dd:77:0e:c3:a5:18:2f:14: eb:32:c5:99:b4:5f:7d:16:19:6a:13:6b:0a:31:dc: bc:d8:e0:79:81:17:42:52:56:a5:e5:9f:73:a9:33: 07:05:78:a6:4e:f3:f3:6c:d5:0b:10:c3:c9:c4:44: 56:f1:b9:9e:c7:f1:24:73:01:ed:09:af:62:86:e0: 99:1c:4a:90:da:d1:1e:4d:c6:50:3a:d9:13:c5:a1: 0b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4D:77:C0:38:BB:A9:5B:85:6E:4B:B0:09:23:87:7C:F7:DF:7F:06 X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ef:a7:0b:d1:db:a8:dd:be:41:2c:1b:ab:eb:94:e2:48:51: 5b:f4:bf:04:d3:4a:76:6a:64:d8:9d:c9:9c:88:4a:84:15:c2: 91:ce:0f:57:ac:cc:75:4d:21:ba:18:7f:5d:c0:e3:83:18:88: 38:32:4f:ab:5e:36:34:da:cd:10:76:1d:10:1f:2b:0b:07:e8: ae:28:f8:3f:4a:e3:55:34:12:9f:5a:ea:62:8f:a8:bb:90:4f: 5a:e5:aa:3e:cc:ca:e7:12:a8:73:e0:8e:e6:1c:41:b3:05:ea: 21:82:ca:70:fe:6d:1a:e2:52:df:29:0c:0c:c4:fb:3e:f9:a9: 7d:f4:7b:8a:31:0f:42:13:82:c2:51:af:c9:3c:72:cd:1d:7e: 28:be:a0:15:28:d2:1d:6c:43:f7:52:a9:07:7d:42:e6:27:97: 74:68:59:9d:03:ea:67:1a:c6:e5:35:90:de:71:ac:87:e2:d3: 13:18:21:52:12:38:56:39:59:1c:8d:58:ea:28:9e:c3:41:ab: 2c:5c:1b:3c:66:ed:e4:bf:be:04:a5:79:5f:82:9d:5e:c2:0f: ec:a7:d5:37:9a:52:f0:10:04:bf:9d:42:cf:18:8b:07:c2:05: d1:c6:57:04:7b:6f:d3:28:83:a2:85:29:f2:4d:d7:2e:06:01: f6:61:88:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCP8FeeO+0guLBFUlhqHxO0+L3sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTEyMDUxMDI3MTdaFw0yNTEyMDgxMjA5MTdaMDMxMTAvBgNV BAMTKDJDNEQ3N0MwMzhCQkE5NUI4NTZFNEJCMDA5MjM4NzdDRjdERjdGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/9LbwtR3cQNgcKZIvimtKkFP VZFYjSBwhD94nL10JiXN2A/Jeo61VgRvgNjG17CezYev1/ZdOp6F8mSv5kUgSCAs qvY+Es4XJiv1n/OEro1dHktUl4CS94owJRwQ5Ev4LS8y6MFiE0clh/v5uwE+Mp9f 6G4qdzrDL/6xfUiNxmt0xw5wKKC1oZwr/w3npbBdl0jdtl9PO38AfTL7ZkI4wb0V xg6g4/HjeObddw7DpRgvFOsyxZm0X30WGWoTawox3LzY4HmBF0JSVqXln3OpMwcF eKZO8/Ns1QsQw8nERFbxuZ7H8SRzAe0Jr2KG4JkcSpDa0R5NxlA62RPFoQuDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULE13wDi7qVuFbkuwCSOHfPfffwYwHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbvpwvR26jdvkEsG6vrlOJIUVv0vwTTSnZq ZNidyZyISoQVwpHOD1eszHVNIboYf13A44MYiDgyT6teNjTazRB2HRAfKwsH6K4o +D9K41U0Ep9a6mKPqLuQT1rlqj7MyucSqHPgjuYcQbMF6iGCynD+bRriUt8pDAzE +z75qX30e4oxD0ITgsJRr8k8cs0dfii+oBUo0h1sQ/dSqQd9QuYnl3RoWZ0D6mca xuU1kN5xrIfi0xMYIVISOFY5WRyNWOoonsNBqyxcGzxm7eS/vgSleV+CnV7CD+yn 1TeaUvAQBL+dQs8YiwfCBdHGVwR7b9Mog6KFKfJN1y4GAfZhiBE= -----END CERTIFICATE-----Generated at Sat Dec 6 20:47:49 2025 by rpki-client