This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: O/dHkDoQYhMJ1v9DrRJCwaqr/znu6ADe4mODhmB9j4o= Subject key identifier: 8F:7F:BA:36:DF:8C:4E:B8:88:19:26:22:F8:36:B1:3B:F5:DC:11:BA Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 683ECC0FF60D565E87FE20A39AA88D046FBD5A2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 86 Signing time: Wed 17 Dec 2025 02:31:18 +0000 Manifest this update: Wed 17 Dec 2025 02:26:18 +0000 Manifest next update: Sat 20 Dec 2025 12:53:18 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: bhbWkEEca0TfKtNY99UtE0KSFlOJY/nUkjk9jey2NMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3e:cc:0f:f6:0d:56:5e:87:fe:20:a3:9a:a8:8d:04:6f:bd:5a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Dec 17 02:26:18 2025 GMT Not After : Dec 20 12:53:18 2025 GMT Subject: CN=8F7FBA36DF8C4EB888192622F836B13BF5DC11BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:3d:69:6e:32:c0:98:c2:6a:e3:67:2e:fb: 58:87:7e:93:7e:6f:9c:c2:e2:30:9d:ec:8d:16:36: 30:c3:a5:98:a9:e6:69:88:8e:44:53:68:08:27:3e: 4b:8a:56:f6:71:c6:02:d8:f6:19:9e:4e:50:b0:08: e4:a6:b0:12:ea:7e:80:9b:9e:f5:c9:fc:ab:5d:af: e7:b0:11:92:c1:da:ec:13:23:35:25:25:07:9c:37: cd:52:8a:1b:d9:c8:29:71:60:0b:d0:bd:46:30:f2: 58:72:73:46:7f:d0:3b:0d:fb:05:40:c8:04:d4:23: 8d:bf:d9:4c:c4:1b:a6:7d:c0:c7:e5:d0:7e:30:18: 63:4f:73:be:28:ed:bb:b2:a6:5e:fc:14:2e:d9:77: db:b4:8d:a1:82:1a:e7:38:f0:37:b1:d8:d9:2f:33: 44:68:fd:76:ae:6b:1f:9f:a7:10:fa:d4:56:94:83: 67:c2:3e:96:80:50:53:b4:f1:17:b7:26:97:bd:de: b6:56:cd:85:cd:c6:ce:11:0f:15:92:30:c8:bd:24: 27:0a:5c:17:56:68:0c:29:e7:02:27:ea:16:d6:a4: b5:50:d2:db:aa:01:e8:cf:b8:75:00:23:b5:06:8d: b0:77:ed:57:3d:3b:2e:e4:e6:df:de:59:cd:b6:fa: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:7F:BA:36:DF:8C:4E:B8:88:19:26:22:F8:36:B1:3B:F5:DC:11:BA X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c5:96:29:15:fb:2f:86:5a:98:8b:35:f2:f4:35:0f:72:28: 65:23:28:9a:02:1f:37:19:5b:4b:40:80:7a:17:c3:f8:15:fb: a2:81:a7:bb:ce:57:8b:3a:47:ae:4e:90:71:95:a7:01:4d:44: 73:de:f6:00:2b:85:7a:37:ce:85:61:54:9d:9a:3e:a4:1f:bd: 1a:3f:3f:b5:68:95:5e:17:5c:bf:25:14:d5:68:f2:73:0b:81: c9:e6:c9:78:50:2a:a2:5e:06:97:f1:1a:5a:13:c3:3b:da:cc: 76:95:40:a4:94:c9:3d:c4:c9:4e:06:69:5e:1c:e9:98:12:cf: 37:ef:7c:74:63:dd:e4:5f:87:4f:ab:48:12:4b:5e:c6:e7:58: f5:8c:56:11:46:5a:cd:ed:65:7e:8d:73:e8:0e:1b:a4:df:21: 67:4c:7f:34:2f:ce:0f:3a:bb:74:39:42:86:33:57:60:4d:da: 09:d9:ac:63:19:2a:ed:e4:2c:09:d5:c2:23:5f:53:41:7a:75: 48:02:6c:e2:19:81:27:23:07:ac:8b:f1:b7:86:46:11:dd:a3: a8:34:8d:81:29:df:65:57:75:88:ca:47:fd:f7:0f:36:4a:bf: 5b:c6:cf:65:8f:cb:e7:55:e8:dd:47:6a:c2:95:2b:90:ab:52: c5:c1:b6:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaD7MD/YNVl6H/iCjmqiNBG+9WiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTEyMTcwMjI2MThaFw0yNTEyMjAxMjUzMThaMDMxMTAvBgNV BAMTKDhGN0ZCQTM2REY4QzRFQjg4ODE5MjYyMkY4MzZCMTNCRjVEQzExQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGAD1pbjLAmMJq42cu+1iHfpN+ b5zC4jCd7I0WNjDDpZip5mmIjkRTaAgnPkuKVvZxxgLY9hmeTlCwCOSmsBLqfoCb nvXJ/Ktdr+ewEZLB2uwTIzUlJQecN81SihvZyClxYAvQvUYw8lhyc0Z/0DsN+wVA yATUI42/2UzEG6Z9wMfl0H4wGGNPc74o7buypl78FC7Zd9u0jaGCGuc48Dex2Nkv M0Ro/Xauax+fpxD61FaUg2fCPpaAUFO08Re3Jpe93rZWzYXNxs4RDxWSMMi9JCcK XBdWaAwp5wIn6hbWpLVQ0tuqAejPuHUAI7UGjbB37Vc9Oy7k5t/eWc22+vtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj3+6Nt+MTriIGSYi+DaxO/XcEbowHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrFlikV+y+GWpiLNfL0NQ9yKGUjKJoCHzcZ W0tAgHoXw/gV+6KBp7vOV4s6R65OkHGVpwFNRHPe9gArhXo3zoVhVJ2aPqQfvRo/ P7VolV4XXL8lFNVo8nMLgcnmyXhQKqJeBpfxGloTwzvazHaVQKSUyT3EyU4GaV4c 6ZgSzzfvfHRj3eRfh0+rSBJLXsbnWPWMVhFGWs3tZX6Nc+gOG6TfIWdMfzQvzg86 u3Q5QoYzV2BN2gnZrGMZKu3kLAnVwiNfU0F6dUgCbOIZgScjB6yL8beGRhHdo6g0 jYEp32VXdYjKR/33DzZKv1vGz2WPy+dV6N1HasKVK5CrUsXBtm0= -----END CERTIFICATE-----Generated at Thu Dec 18 20:35:04 2025 by rpki-client