This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: gm68Rlrkj6vT4TCIKEFjTI1gHxN3J6h+zQDWwWyP+4k= Subject key identifier: 9A:0C:4C:1C:AD:0D:D9:34:69:50:05:76:97:E4:24:D1:EB:2D:98:BA Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 1057A80A6771E15554587C1A932327F1577E5C06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01CE Signing time: Thu 04 Dec 2025 20:10:51 +0000 Manifest this update: Thu 04 Dec 2025 20:05:51 +0000 Manifest next update: Mon 08 Dec 2025 02:44:51 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: xCJWZxbXj3CkI7DWNtrnjWln6F9P414h+I1d5NuyDkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:44:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:57:a8:0a:67:71:e1:55:54:58:7c:1a:93:23:27:f1:57:7e:5c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Dec 4 20:05:51 2025 GMT Not After : Dec 8 02:44:51 2025 GMT Subject: CN=9A0C4C1CAD0DD9346950057697E424D1EB2D98BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ef:7f:ad:e9:35:51:f3:f2:0a:b1:0d:fc:93: 6c:ae:2a:08:f5:68:6d:c9:07:af:47:72:af:f3:06: 81:36:09:b3:16:32:ef:d6:7b:b0:ca:b9:cc:37:72: 19:18:17:91:b3:21:9d:d5:cb:6c:cb:22:b1:1d:e6: 66:52:f0:d0:f8:95:09:5f:24:ea:c3:1f:39:a5:56: fc:e8:4d:20:8d:1f:8d:b6:99:76:02:1e:6d:b3:15: e1:2c:61:27:8f:45:fc:9c:66:a3:1c:e9:67:c1:ec: 1f:94:05:ce:86:1d:55:56:2e:d3:f8:0b:c5:e0:01: 40:d2:20:5f:cc:34:0e:94:89:b0:e3:76:5f:5d:c9: 6c:1f:8c:bb:75:ab:b6:bc:8e:87:3f:4e:72:1e:09: f2:24:0e:60:09:10:b9:d4:d7:91:63:72:75:66:a8: e1:07:e2:47:f8:a1:a7:79:ef:ec:4f:80:62:c9:83: f8:e4:87:c1:39:ed:c3:ad:86:89:a8:ad:81:4a:1e: 91:74:ac:15:3a:46:e0:f0:0e:be:75:d5:a9:62:b8: 44:df:42:5a:73:22:cc:99:54:ca:47:52:35:18:a1: 32:4d:ed:9a:50:8e:a8:fb:3c:cd:e9:54:8b:c4:33: c7:c4:c5:88:8c:5d:81:01:58:53:00:24:81:36:52: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0C:4C:1C:AD:0D:D9:34:69:50:05:76:97:E4:24:D1:EB:2D:98:BA X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:59:4d:e0:92:a2:b6:2a:db:ef:cc:63:14:fc:d6:c4:43:63: fc:35:5f:03:20:c3:6c:95:2f:54:50:ff:86:d7:16:0f:e4:4f: 5b:cd:06:c9:dd:79:6c:5b:8a:10:b7:42:ce:65:b8:c9:63:04: a9:72:a3:5e:32:4f:91:e7:da:e6:68:43:28:c1:09:33:3c:5b: a6:8a:f0:78:47:c2:14:49:cb:a4:24:70:b4:0d:8b:5d:64:e8: 06:e0:fb:70:1c:f2:44:c0:67:f9:ba:a1:60:f7:25:64:be:ec: cc:49:d1:a3:05:53:0e:02:a5:17:3a:8d:56:84:01:73:20:41: a4:a2:86:4b:a3:ef:80:d8:12:5b:b1:f2:1f:f4:4c:6a:a8:6f: a9:57:05:fe:00:76:35:06:de:74:86:e0:f0:82:5b:f8:75:52: 7d:98:7a:c7:0c:11:d9:d5:9b:66:20:64:70:a0:e2:d5:c8:2d: 47:c6:02:4c:b6:33:4e:a6:a1:08:ac:b3:0a:94:cd:4c:8c:b7: 75:1f:0a:a4:24:56:40:73:97:c4:57:07:fa:08:b6:26:e9:12: 4d:6a:66:40:81:66:90:5d:06:36:31:5a:f9:5d:57:e3:54:3f: ad:d0:10:f7:e2:82:45:a8:43:04:76:80:c8:8f:6f:1d:f5:86: 7b:1f:68:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEFeoCmdx4VVUWHwakyMn8Vd+XAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTEyMDQyMDA1NTFaFw0yNTEyMDgwMjQ0NTFaMDMxMTAvBgNV BAMTKDlBMEM0QzFDQUQwREQ5MzQ2OTUwMDU3Njk3RTQyNEQxRUIyRDk4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC773+t6TVR8/IKsQ38k2yuKgj1 aG3JB69Hcq/zBoE2CbMWMu/We7DKucw3chkYF5GzIZ3Vy2zLIrEd5mZS8ND4lQlf JOrDHzmlVvzoTSCNH422mXYCHm2zFeEsYSePRfycZqMc6WfB7B+UBc6GHVVWLtP4 C8XgAUDSIF/MNA6UibDjdl9dyWwfjLt1q7a8joc/TnIeCfIkDmAJELnU15FjcnVm qOEH4kf4oad57+xPgGLJg/jkh8E57cOthomorYFKHpF0rBU6RuDwDr511aliuETf QlpzIsyZVMpHUjUYoTJN7ZpQjqj7PM3pVIvEM8fExYiMXYEBWFMAJIE2UkQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgxMHK0N2TRpUAV2l+Qk0estmLowHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJZTeCSorYq2+/MYxT81sRDY/w1XwMgw2yV L1RQ/4bXFg/kT1vNBsndeWxbihC3Qs5luMljBKlyo14yT5Hn2uZoQyjBCTM8W6aK 8HhHwhRJy6QkcLQNi11k6Abg+3Ac8kTAZ/m6oWD3JWS+7MxJ0aMFUw4CpRc6jVaE AXMgQaSihkuj74DYElux8h/0TGqob6lXBf4AdjUG3nSG4PCCW/h1Un2YescMEdnV m2YgZHCg4tXILUfGAky2M06moQisswqUzUyMt3UfCqQkVkBzl8RXB/oItibpEk1q ZkCBZpBdBjYxWvldV+NUP63QEPfigkWoQwR2gMiPbx31hnsfaDo= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:25 2025 by rpki-client