This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft File: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft (raw, json) Hash identifier: uAfsggVfFe3fEguM1JXbeOn9Ya+hw+jqRNaeU3uuXLM= Subject key identifier: 14:F0:45:AB:C1:F6:76:75:49:2E:05:B0:1B:3B:10:29:96:A2:6D:18 Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 Certificate issuer: /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Certificate serial: 3763D048BA7F6C234092506DECDFC5904F14521D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft Manifest number: 0253 Signing time: Fri 19 Dec 2025 21:03:36 +0000 Manifest this update: Fri 19 Dec 2025 20:58:36 +0000 Manifest next update: Tue 23 Dec 2025 02:12:36 +0000 Files and hashes: 1: 3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (hash: Ok/OluvS5h7lKD3sSNYwAY0KsbjVMJ4hxy4FEh3uKmk=) 2: 83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl (hash: JdfDGKYsH9j+pNv5e1vGyd9G5fpCI1/RjQHOUQmcLl4=) 3: 3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (hash: y57hfH1lBOVunH6wiRrVTULW7uqhPZnP/h9yu/EhF5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:63:d0:48:ba:7f:6c:23:40:92:50:6d:ec:df:c5:90:4f:14:52:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6 Validity Not Before: Dec 19 20:58:36 2025 GMT Not After : Dec 23 02:12:36 2025 GMT Subject: CN=14F045ABC1F67675492E05B01B3B102996A26D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:aa:57:2c:78:b0:5c:72:34:26:b9:e6:dc:5d: da:b5:f0:a9:89:20:fe:11:8f:0a:ec:bc:0d:7a:db: 1e:0a:c8:9c:8a:26:64:db:33:37:15:b5:3c:3c:f2: 62:a2:bc:13:f5:fe:36:2f:7e:52:b3:35:dc:d2:86: 6f:a7:7e:db:b6:cc:74:f8:ae:86:04:b3:38:18:01: 94:fa:2f:3f:05:47:d0:6b:7d:6b:65:19:24:eb:2e: 8a:b3:6f:4e:e5:cf:19:90:ff:c9:2e:1f:99:b7:1c: b8:bf:d5:10:56:d1:a3:ab:7a:77:44:42:c2:37:74: 1b:35:16:44:44:e5:bb:66:65:fe:44:f0:d2:0e:52: 6c:9c:7d:2b:c8:c9:bc:89:3f:52:cb:f6:b5:80:16: 6d:b9:be:30:55:e3:38:7c:60:85:e0:ea:0c:27:0e: b2:b3:04:87:a6:45:9b:97:18:0f:c7:18:e0:f3:5c: 80:1d:41:73:ba:c3:46:7b:15:30:8f:dc:46:14:a8: ac:21:53:3d:64:ec:e1:86:e6:5b:8f:9b:19:c3:f1: 9b:85:a1:ac:93:e2:79:d7:2d:f2:d7:f5:7b:37:27: 9d:21:99:22:b8:b0:0e:11:e1:9c:d3:9b:a5:57:16: 62:53:ab:de:4e:62:8d:f2:29:5d:22:79:19:7b:d6: 98:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:45:AB:C1:F6:76:75:49:2E:05:B0:1B:3B:10:29:96:A2:6D:18 X509v3 Authority Key Identifier: keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:50:c5:a9:f4:1a:6e:41:f5:ec:60:7f:16:01:d7:66:2a:53: 87:17:67:90:15:03:64:d5:f5:02:ab:08:e1:a2:89:77:9c:37: 48:f7:38:c6:d6:a7:28:20:58:8f:f9:20:6e:4d:6f:23:a5:95: b1:0d:42:43:35:c3:4a:d3:12:f9:7c:80:a5:89:28:e5:22:d0: 4f:b1:29:fe:ff:7e:2d:14:a8:3f:ae:5d:de:fe:9d:48:e3:43: 0f:33:18:bf:81:3f:a6:c1:7f:14:48:15:63:72:f7:e4:18:a5: 27:74:e2:f8:25:a7:6a:66:6f:c8:c7:2e:ac:fd:7e:43:f1:0f: 21:59:f7:37:9d:a8:3a:58:e3:74:26:8c:01:a8:57:5b:b6:0d: 4b:13:da:f6:87:1a:ee:21:43:33:a6:65:83:65:9d:8e:4d:f9: e8:49:db:00:38:3c:c9:5d:50:d3:cf:56:43:62:37:6b:ff:55: fa:10:fb:12:9e:b7:ac:c0:75:89:03:c0:19:e0:83:9d:4e:6e: da:f8:d8:2c:b1:60:0d:ee:bf:3b:97:62:5d:79:9c:cd:50:df: ca:5b:f5:bf:c7:77:03:8a:f9:01:0b:d8:8b:ec:d3:3b:b0:16: d4:d2:40:da:e3:6f:e9:c5:02:14:77:bb:f5:a4:36:ee:bd:c7: a2:58:c1:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2PQSLp/bCNAklBt7N/FkE8UUh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVF MEVDMjJGNjAeFw0yNTEyMTkyMDU4MzZaFw0yNTEyMjMwMjEyMzZaMDMxMTAvBgNV BAMTKDE0RjA0NUFCQzFGNjc2NzU0OTJFMDVCMDFCM0IxMDI5OTZBMjZEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqlcseLBccjQmuebcXdq18KmJ IP4RjwrsvA162x4KyJyKJmTbMzcVtTw88mKivBP1/jYvflKzNdzShm+nftu2zHT4 roYEszgYAZT6Lz8FR9BrfWtlGSTrLoqzb07lzxmQ/8kuH5m3HLi/1RBW0aOrendE QsI3dBs1FkRE5btmZf5E8NIOUmycfSvIybyJP1LL9rWAFm25vjBV4zh8YIXg6gwn DrKzBIemRZuXGA/HGODzXIAdQXO6w0Z7FTCP3EYUqKwhUz1k7OGG5luPmxnD8ZuF oayT4nnXLfLX9Xs3J50hmSK4sA4R4ZzTm6VXFmJTq95OYo3yKV0ieRl71pjHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFPBFq8H2dnVJLgWwGzsQKZaibRgwHwYDVR0j BBgwFoAUg5BqsYpJ7Bet2EHyBy/cVeDsIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWIzYzAzZC0yZTJlLTQ4OTctODY5Yi0yMWNlNDg2MDE2MTkvMC84MzkwNkFCMThB NDlFQzE3QUREODQxRjIwNzJGREM1NUUwRUMyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRDNTVFMEVD MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFiM2MwM2QtMmUyZS00ODk3LTg2 OWItMjFjZTQ4NjAxNjE5LzAvODM5MDZBQjE4QTQ5RUMxN0FERDg0MUYyMDcyRkRD NTVFMEVDMjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9Qxan0Gm5B9exgfxYB12YqU4cXZ5AVA2TV 9QKrCOGiiXecN0j3OMbWpyggWI/5IG5NbyOllbENQkM1w0rTEvl8gKWJKOUi0E+x Kf7/fi0UqD+uXd7+nUjjQw8zGL+BP6bBfxRIFWNy9+QYpSd04vglp2pmb8jHLqz9 fkPxDyFZ9zedqDpY43QmjAGoV1u2DUsT2vaHGu4hQzOmZYNlnY5N+ehJ2wA4PMld UNPPVkNiN2v/VfoQ+xKet6zAdYkDwBngg51Obtr42CyxYA3uvzuXYl15nM1Q38pb 9b/HdwOK+QEL2Ivs0zuwFtTSQNrjb+nFAhR3u/WkNu69x6JYwWM= -----END CERTIFICATE-----Generated at Sat Dec 20 20:28:42 2025 by rpki-client