This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft File: 115880D133393FF2D96A5861679B5166AFDB1248.mft (raw, json) Hash identifier: mnXjv48yPRG2QelN9sCnI56gJOvYooiM58utNx89G6Q= Subject key identifier: 08:AB:31:CA:0B:1E:EB:E8:A3:29:D8:17:C4:A3:F9:AF:22:00:96:BA Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 Certificate issuer: /CN=115880D133393FF2D96A5861679B5166AFDB1248 Certificate serial: 721373E090ACA7830BE0C70B4E9442C75BC24547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft Manifest number: 01E2 Signing time: Fri 05 Dec 2025 22:22:21 +0000 Manifest this update: Fri 05 Dec 2025 22:17:21 +0000 Manifest next update: Tue 09 Dec 2025 09:10:21 +0000 Files and hashes: 1: 115880D133393FF2D96A5861679B5166AFDB1248.crl (hash: WV0tSeAc+NrqtBMc5d0O7lV6eZNuaKxwa7e59Q9epeA=) 2: 3130332e3136312e3133352e302f32342d3234203d3e203438343635.roa (hash: mM1uMrTnIIOB9qV95bnMry0CA1H0myomJNfLWIW9li4=) 3: 3130332e3136312e3133342e302f32332d3233203d3e20313530343635.roa (hash: VvBdfRoXJdspZfeWpUDljLmbCHnzMGWW+ov3JCtu9WA=) 4: 3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (hash: dsbjoyKjKxL4iwUB8V3WadTuSmVRqe7mRaojqe/cx6g=) 5: 3130332e3136312e3133352e302f32342d3234203d3e203539323832.roa (hash: PUB3O8b9f0V9upxUQ1vz/Akmef3nw9nhl+zmK2wYTN8=) 6: 3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (hash: qOgMs8L+7L6hzGSgXrwuDdjZMuQgbmzasXiAjPj9OOI=) 7: 3130332e3136312e3133352e302f32342d3234203d3e20313530343635.roa (hash: 7cjr2Mf8da23M7780NOwEQz2pNcc6LU8HdKHbP3bqXY=) 8: 3130332e3136312e3133342e302f32342d3234203d3e203438343635.roa (hash: ovzcVNQEy/mX6iGBONz7ezsyibr0pRiafYk0E6VSJek=) 9: 3130332e3136312e3133342e302f32342d3234203d3e20313530343635.roa (hash: 1qHo3owsIra2DLunWHCtcR/bz4Z6XiVGZF9DHU6ujCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:13:73:e0:90:ac:a7:83:0b:e0:c7:0b:4e:94:42:c7:5b:c2:45:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248 Validity Not Before: Dec 5 22:17:21 2025 GMT Not After : Dec 9 09:10:21 2025 GMT Subject: CN=08AB31CA0B1EEBE8A329D817C4A3F9AF220096BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:bf:d8:1f:5b:a3:15:87:0b:0c:22:d5:53: 73:99:5a:04:ba:14:18:ec:0a:c7:b5:30:0a:16:51: 86:ae:9b:1e:3a:dc:33:41:3d:c2:1e:0c:42:76:cd: 67:c2:5a:e9:fd:cd:dd:52:6e:73:2e:bd:b4:8d:4b: a1:42:31:18:0e:86:05:85:d2:26:e6:fd:80:b3:b2: c8:9c:39:8a:d2:2d:61:6c:52:4f:85:5c:c9:9d:02: 3c:01:b7:6a:e4:f7:6c:0a:c1:d2:40:7c:15:00:c0: 39:8e:59:c2:b3:36:67:f4:17:33:a9:92:1a:ae:04: 57:b4:7d:c9:f3:70:4f:f0:01:e7:f7:06:36:a3:76: ad:19:6a:22:a8:98:5d:db:a0:04:70:93:46:eb:70: 31:0c:60:9f:22:34:b7:24:30:14:a3:ba:aa:6f:bd: a6:5d:71:4a:13:8e:0a:f4:28:3b:c4:e9:f2:c5:fc: da:98:ea:bb:62:ec:2b:02:f7:42:17:25:59:60:0e: e9:b8:53:bf:26:c0:16:25:96:de:b6:ab:1f:8c:7c: b1:a0:39:eb:cb:ba:4d:56:4b:df:ee:a7:c1:b3:87: 6c:51:8d:4b:3f:51:6d:96:a8:95:7d:e2:7b:6b:08: 5b:35:0c:8b:29:31:b1:8e:bc:98:b2:c2:8c:bc:9f: a7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:AB:31:CA:0B:1E:EB:E8:A3:29:D8:17:C4:A3:F9:AF:22:00:96:BA X509v3 Authority Key Identifier: keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4f:f7:fe:74:20:dd:3d:06:6e:2a:87:da:b1:9e:7c:f7:74: 0a:78:8b:21:92:6c:1e:32:58:61:e9:a9:28:13:9c:10:3f:f7: 30:93:96:40:d4:dc:2f:26:86:9d:2f:78:3c:15:4d:be:39:be: 84:bf:97:a7:f9:b8:04:32:ad:e0:62:4e:a6:46:5b:a3:65:32: f7:40:ce:04:4c:4b:9a:c9:60:b6:31:01:cb:64:d7:d0:29:c6: 1f:79:72:e5:a1:56:0e:36:6f:12:ef:56:77:ae:a8:60:2f:96: 45:db:ca:6d:f1:ce:a0:79:c8:02:63:80:87:d9:3d:b7:18:fb: 14:b5:15:9d:44:a3:a7:5a:9f:3b:e8:f0:a3:3c:31:1f:01:09: ac:b8:0f:d1:5c:c5:a9:45:cc:33:7c:f6:1d:62:c8:4b:7e:b2: da:21:87:a2:a7:64:24:5d:db:7d:63:ad:03:5c:45:40:d4:c5: ca:80:20:4c:69:2b:1a:d4:4e:dc:cd:56:4b:6b:d4:6c:4c:27: 9a:bd:ca:3c:08:0a:b0:ec:8c:0f:e1:1c:bd:a0:75:b8:93:34: 80:0d:1b:e7:c7:9e:9a:6b:aa:1d:db:b1:17:52:b0:ec:37:5f: 0f:0b:c3:8a:64:8b:dd:00:e2:9c:87:e7:75:b6:51:02:e6:c2: ed:07:74:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchNz4JCsp4ML4McLTpRCx1vCRUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB RkRCMTI0ODAeFw0yNTEyMDUyMjE3MjFaFw0yNTEyMDkwOTEwMjFaMDMxMTAvBgNV BAMTKDA4QUIzMUNBMEIxRUVCRThBMzI5RDgxN0M0QTNGOUFGMjIwMDk2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7tb/YH1ujFYcLDCLVU3OZWgS6 FBjsCse1MAoWUYaumx463DNBPcIeDEJ2zWfCWun9zd1SbnMuvbSNS6FCMRgOhgWF 0ibm/YCzssicOYrSLWFsUk+FXMmdAjwBt2rk92wKwdJAfBUAwDmOWcKzNmf0FzOp khquBFe0fcnzcE/wAef3Bjajdq0ZaiKomF3boARwk0brcDEMYJ8iNLckMBSjuqpv vaZdcUoTjgr0KDvE6fLF/NqY6rti7CsC90IXJVlgDum4U78mwBYllt62qx+MfLGg OevLuk1WS9/up8Gzh2xRjUs/UW2WqJV94ntrCFs1DIspMbGOvJiywoy8n6dlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCKsxygse6+ijKdgXxKP5ryIAlrowHwYDVR0j BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODE1NjgwMWYtYTY3Yi00M2RkLThm NjItYjdiMGQ2MDMxN2FmLzAvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUx NjZBRkRCMTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFP9/50IN09Bm4qh9qxnnz3dAp4iyGSbB4y WGHpqSgTnBA/9zCTlkDU3C8mhp0veDwVTb45voS/l6f5uAQyreBiTqZGW6NlMvdA zgRMS5rJYLYxActk19Apxh95cuWhVg42bxLvVneuqGAvlkXbym3xzqB5yAJjgIfZ PbcY+xS1FZ1Eo6danzvo8KM8MR8BCay4D9FcxalFzDN89h1iyEt+stohh6KnZCRd 231jrQNcRUDUxcqAIExpKxrUTtzNVktr1GxMJ5q9yjwICrDsjA/hHL2gdbiTNIAN G+fHnpprqh3bsRdSsOw3Xw8Lw4pki90A4pyH53W2UQLmwu0HdIc= -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:38 2025 by rpki-client