This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft File: 802B50E70791398C3EA43DDCECAA739EA01A638B.mft (raw, json) Hash identifier: DJoQfZ3CUKqEcyPR1VvrlJCXQPtH6SK4hPNAS81yJqQ= Subject key identifier: C8:72:EF:A2:EA:D9:FF:85:03:85:46:DC:16:DE:2E:E4:18:58:D5:2E Authority key identifier: 80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B Certificate issuer: /CN=802B50E70791398C3EA43DDCECAA739EA01A638B Certificate serial: 26951850E10F2AB295E99947E7F7750155B55BC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft Manifest number: 47 Signing time: Sat 06 Dec 2025 11:31:47 +0000 Manifest this update: Sat 06 Dec 2025 11:26:47 +0000 Manifest next update: Tue 09 Dec 2025 20:26:47 +0000 Files and hashes: 1: 802B50E70791398C3EA43DDCECAA739EA01A638B.crl (hash: Qo9QdDdX7DASAS4b8cZ2VM9cF7Tow5gCppjFPkZ3nJw=) 2: 3130332e3235352e3130392e302f32342d3234203d3e20313530313931.roa (hash: 7lyU4ARZl0iZzxpjuPYTjPexrJrOA5CaL9sS8oYLAAQ=) 3: 3130332e3235352e3130382e302f32342d3234203d3e20313437313530.roa (hash: +fO5TDM3co6TWyHEak4qQLIrEN8/2YmZcoMcyUXp4Tk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:95:18:50:e1:0f:2a:b2:95:e9:99:47:e7:f7:75:01:55:b5:5b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=802B50E70791398C3EA43DDCECAA739EA01A638B Validity Not Before: Dec 6 11:26:47 2025 GMT Not After : Dec 9 20:26:47 2025 GMT Subject: CN=C872EFA2EAD9FF85038546DC16DE2EE41858D52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:df:c5:71:31:a2:29:db:60:18:c4:83:2f: b6:23:70:57:32:db:03:a5:df:df:d3:8e:50:3e:9b: 56:62:97:41:08:c6:81:6a:1e:4e:93:65:99:67:a6: 84:15:e6:31:15:19:cb:2e:56:5e:dd:83:37:e8:8b: f7:e4:b9:6d:f8:c5:8f:65:9d:3d:33:b4:03:9e:56: 75:6d:4b:6e:20:76:ce:1d:cf:37:d4:bc:29:cb:e9: 3c:24:d8:aa:15:ef:d2:04:a5:cf:dc:ac:8e:a4:17: 6d:fa:fe:3e:46:da:8e:8b:e2:af:e2:f5:b1:a9:20: 03:d6:f5:c0:81:63:97:b0:1c:48:dd:ed:fb:89:15: 93:b3:5a:92:59:5a:0a:dc:20:69:2a:4b:24:ee:32: 05:de:70:dc:c4:34:1d:c2:f5:2e:de:00:b3:5a:a2: a6:36:ba:7d:49:bd:7d:c0:75:ad:57:6f:18:37:54: 78:79:cd:b3:a3:fa:24:5b:91:34:1c:47:f8:df:d4: 43:34:7e:ea:75:16:f5:6a:cd:e2:e7:e8:40:d4:c6: 4b:bb:14:0a:77:cf:20:c8:f7:81:c1:e6:bb:4c:3c: 61:01:64:fa:8c:47:62:58:41:4c:d0:42:10:20:f9: 69:60:d0:08:fb:c6:59:55:a4:11:c7:f7:29:d2:ab: 21:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:72:EF:A2:EA:D9:FF:85:03:85:46:DC:16:DE:2E:E4:18:58:D5:2E X509v3 Authority Key Identifier: keyid:80:2B:50:E7:07:91:39:8C:3E:A4:3D:DC:EC:AA:73:9E:A0:1A:63:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/802B50E70791398C3EA43DDCECAA739EA01A638B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa11e6d7-57a1-4936-b7a7-de093525cb27/0/802B50E70791398C3EA43DDCECAA739EA01A638B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7c:c0:20:ec:3e:25:58:37:5e:75:58:71:3e:64:36:f7:a4: d4:92:a6:5d:ac:01:73:10:cb:26:6b:50:49:7d:08:3f:9e:8d: 24:40:1e:dc:c0:d2:bf:d6:a1:f5:cc:11:c0:a4:2a:9f:4d:67: be:58:bb:7d:a0:89:87:5c:f1:4e:61:29:99:81:f0:d3:50:62: 89:d7:6e:e7:bc:61:11:c8:74:90:96:79:33:f3:d3:15:f1:72: 18:7e:c1:e7:ff:8a:33:93:21:ca:ad:9d:0f:1d:e1:00:fa:99: e4:fd:fc:a3:c9:0b:0f:44:bc:a7:80:ec:26:15:28:e5:a8:ef: af:1c:a2:bc:a6:33:49:6a:d6:5e:54:db:56:e6:9d:02:ed:29: 75:90:cd:31:c0:11:7b:8c:fb:c8:e7:35:e0:c0:08:80:be:62: 70:ea:17:4b:2d:8f:24:4c:1a:58:58:73:ae:6a:df:7b:26:93: 9d:a1:b4:1a:8f:8c:5e:eb:a1:90:16:85:65:6e:79:e3:7c:43: 75:ed:be:ea:8c:dc:1a:02:5f:0c:c1:e1:44:c2:cf:fe:ca:3b: 02:74:a4:bd:96:a2:f0:a8:74:8e:77:80:50:bc:29:d4:9d:9e: 3c:1a:37:ea:84:a3:e9:ed:15:1f:45:1e:9c:09:b9:06:f2:6b: 52:79:f0:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJpUYUOEPKrKV6ZlH5/d1AVW1W8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVB MDFBNjM4QjAeFw0yNTEyMDYxMTI2NDdaFw0yNTEyMDkyMDI2NDdaMDMxMTAvBgNV BAMTKEM4NzJFRkEyRUFEOUZGODUwMzg1NDZEQzE2REUyRUU0MTg1OEQ1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7t/FcTGiKdtgGMSDL7YjcFcy 2wOl39/TjlA+m1Zil0EIxoFqHk6TZZlnpoQV5jEVGcsuVl7dgzfoi/fkuW34xY9l nT0ztAOeVnVtS24gds4dzzfUvCnL6Twk2KoV79IEpc/crI6kF236/j5G2o6L4q/i 9bGpIAPW9cCBY5ewHEjd7fuJFZOzWpJZWgrcIGkqSyTuMgXecNzENB3C9S7eALNa oqY2un1JvX3Ada1Xbxg3VHh5zbOj+iRbkTQcR/jf1EM0fup1FvVqzeLn6EDUxku7 FAp3zyDI94HB5rtMPGEBZPqMR2JYQUzQQhAg+Wlg0Aj7xllVpBHH9ynSqyFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyHLvourZ/4UDhUbcFt4u5BhY1S4wHwYDVR0j BBgwFoAUgCtQ5weROYw+pD3c7KpznqAaY4swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTExZTZkNy01N2ExLTQ5MzYtYjdhNy1kZTA5MzUyNWNiMjcvMC84MDJCNTBFNzA3 OTEzOThDM0VBNDNERENFQ0FBNzM5RUEwMUE2MzhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTczOUVBMDFB NjM4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWExMWU2ZDctNTdhMS00OTM2LWI3 YTctZGUwOTM1MjVjYjI3LzAvODAyQjUwRTcwNzkxMzk4QzNFQTQzRERDRUNBQTcz OUVBMDFBNjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx8wCDsPiVYN151WHE+ZDb3pNSSpl2sAXMQ yyZrUEl9CD+ejSRAHtzA0r/WofXMEcCkKp9NZ75Yu32giYdc8U5hKZmB8NNQYonX bue8YRHIdJCWeTPz0xXxchh+wef/ijOTIcqtnQ8d4QD6meT9/KPJCw9EvKeA7CYV KOWo768corymM0lq1l5U21bmnQLtKXWQzTHAEXuM+8jnNeDACIC+YnDqF0stjyRM GlhYc65q33smk52htBqPjF7roZAWhWVueeN8Q3XtvuqM3BoCXwzB4UTCz/7KOwJ0 pL2WovCodI53gFC8KdSdnjwaN+qEo+ntFR9FHpwJuQbya1J58Lg= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:23 2025 by rpki-client