This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: tzAG3EFAT/C+u9mb3n9EkppqiIfd+cnCNgdNofZcoQ0= Subject key identifier: E6:E6:DC:7A:22:5D:15:6E:CB:EC:7A:B6:5B:C1:31:42:DE:89:5D:8B Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 07EDE9A46FD65CC77C21957456F634E3D0047A65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 01A6 Signing time: Fri 05 Dec 2025 12:32:16 +0000 Manifest this update: Fri 05 Dec 2025 12:27:16 +0000 Manifest next update: Mon 08 Dec 2025 18:58:16 +0000 Files and hashes: 1: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: uCM5MSZTgh124Nr/RUH1X4sl+DothojfMI/C1zBdkco=) 2: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) 3: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ed:e9:a4:6f:d6:5c:c7:7c:21:95:74:56:f6:34:e3:d0:04:7a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Dec 5 12:27:16 2025 GMT Not After : Dec 8 18:58:16 2025 GMT Subject: CN=E6E6DC7A225D156ECBEC7AB65BC13142DE895D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6a:7a:e5:8f:66:aa:f5:8c:ee:ee:63:42:c8: 50:b5:48:f9:f4:54:af:a7:96:cf:8d:0c:15:62:09: c0:01:69:b9:30:db:a9:7a:93:72:e8:e0:2c:db:c4: 51:19:c7:c3:5b:3d:6c:2f:6f:71:dc:e7:76:6c:70: f3:e7:32:cc:2b:c6:a4:d9:81:e3:ed:f3:86:61:f5: 7d:a2:9c:f2:bc:81:91:0f:05:a7:21:7a:3d:8d:b2: 62:14:90:4e:85:84:59:b1:f9:24:cf:6a:94:8b:16: 8b:f9:dc:7a:7f:02:1c:0e:98:3d:b9:f7:9a:da:9f: 6a:e3:9c:5d:b3:d0:36:2d:e2:eb:ac:02:f3:98:21: cb:fd:f4:b4:75:66:3c:ef:52:ec:a6:6f:34:c1:fd: c0:e5:1c:dc:fb:49:5d:03:92:e7:33:a0:21:3d:3d: 44:66:33:11:24:b0:a2:bf:94:b7:1c:ae:5f:d0:b3: 55:65:6b:b8:89:20:e0:3e:6f:7e:78:e0:60:c8:f3: fd:a5:4d:60:ef:92:2c:d8:3c:62:0a:7e:36:3d:42: c6:7c:44:1d:0e:3a:14:bf:4f:d0:d7:83:5e:9f:67: 42:7f:07:1e:25:e6:11:19:2c:62:b1:f1:f9:6a:e8: c0:8c:e0:b8:c0:73:1c:20:97:c8:04:00:c4:87:80: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:E6:DC:7A:22:5D:15:6E:CB:EC:7A:B6:5B:C1:31:42:DE:89:5D:8B X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:18:9f:cb:de:1f:33:e6:87:7f:72:62:a8:df:c1:7c:9e:2e: a1:83:e9:6f:e1:54:1b:af:12:76:e4:af:6f:77:a7:6c:81:16: 8d:0a:bb:8d:17:5f:f5:9f:9c:ba:0f:12:f1:6b:ba:28:8e:e7: 58:f6:78:1b:8d:98:63:61:51:37:3d:45:53:5b:21:c0:ec:dd: 0b:6f:8d:ce:5b:b3:aa:b2:56:da:5e:eb:80:02:39:68:12:76: e6:07:a0:3a:87:ef:dd:15:01:d3:f9:79:0e:fe:f7:23:d7:69: 20:0e:42:8b:8b:01:f1:16:f9:6d:97:cb:1b:42:6f:2c:67:dc: c3:34:a3:40:28:96:a9:e7:bc:74:ba:39:f2:b0:fc:32:e8:83: e3:31:ce:a2:b9:73:fe:39:ca:e6:40:b7:8e:d0:80:10:b5:98: 01:27:f8:e4:d1:18:24:2f:f4:2d:da:23:66:67:60:fe:bd:22: 32:71:bb:00:09:7a:27:1a:bd:5e:29:a5:b9:07:5c:8e:fc:08: 88:2f:86:b1:c4:3a:21:16:3e:81:89:7f:f6:d3:d1:8e:0e:dd: d1:07:37:db:c2:b6:a8:73:af:12:73:8b:d9:a8:05:6f:70:1e: b7:bd:2d:57:c5:31:96:6e:c0:c0:57:3f:cd:bf:86:f9:dc:7e: 9c:d5:d5:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+3ppG/WXMd8IZV0VvY049AEemUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTEyMDUxMjI3MTZaFw0yNTEyMDgxODU4MTZaMDMxMTAvBgNV BAMTKEU2RTZEQzdBMjI1RDE1NkVDQkVDN0FCNjVCQzEzMTQyREU4OTVEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPanrlj2aq9Yzu7mNCyFC1SPn0 VK+nls+NDBViCcABabkw26l6k3Lo4CzbxFEZx8NbPWwvb3Hc53ZscPPnMswrxqTZ gePt84Zh9X2inPK8gZEPBachej2NsmIUkE6FhFmx+STPapSLFov53Hp/AhwOmD25 95ran2rjnF2z0DYt4uusAvOYIcv99LR1ZjzvUuymbzTB/cDlHNz7SV0DkuczoCE9 PURmMxEksKK/lLccrl/Qs1Vla7iJIOA+b3544GDI8/2lTWDvkizYPGIKfjY9QsZ8 RB0OOhS/T9DXg16fZ0J/Bx4l5hEZLGKx8flq6MCM4LjAcxwgl8gEAMSHgEnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ubceiJdFW7L7Hq2W8ExQt6JXYswHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkYn8veHzPmh39yYqjfwXyeLqGD6W/hVBuv Enbkr293p2yBFo0Ku40XX/WfnLoPEvFruiiO51j2eBuNmGNhUTc9RVNbIcDs3Qtv jc5bs6qyVtpe64ACOWgSduYHoDqH790VAdP5eQ7+9yPXaSAOQouLAfEW+W2XyxtC byxn3MM0o0AolqnnvHS6OfKw/DLog+MxzqK5c/45yuZAt47QgBC1mAEn+OTRGCQv 9C3aI2ZnYP69IjJxuwAJeicavV4ppbkHXI78CIgvhrHEOiEWPoGJf/bT0Y4O3dEH N9vCtqhzrxJzi9moBW9wHre9LVfFMZZuwMBXP82/hvncfpzV1Tk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:34 2025 by rpki-client