This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: rPQOX2cIPIQoT4yey+2PmjdmJ13SntQvGyBxHVdwKM4= Subject key identifier: E5:19:91:AA:DD:A5:B2:B2:7C:C7:58:C3:C1:46:EF:F9:FC:63:64:EB Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 39DD36DECC9F04FA831CA73AD22E14A3011105BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 014D Signing time: Fri 05 Dec 2025 05:51:09 +0000 Manifest this update: Fri 05 Dec 2025 05:46:09 +0000 Manifest next update: Mon 08 Dec 2025 08:27:09 +0000 Files and hashes: 1: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: Wg8Em8VTzwXUQxfypzwmojNmf8LlUfPlBRI92RYVGkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:dd:36:de:cc:9f:04:fa:83:1c:a7:3a:d2:2e:14:a3:01:11:05:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Dec 5 05:46:09 2025 GMT Not After : Dec 8 08:27:09 2025 GMT Subject: CN=E51991AADDA5B2B27CC758C3C146EFF9FC6364EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:e2:74:93:df:70:02:d4:3f:1f:da:a2:ab: 0d:23:be:fe:4d:97:67:1c:2d:a5:3c:69:4b:ec:65: bf:7b:3f:5b:1a:33:01:58:fc:15:60:e6:2e:92:0a: 7c:54:d5:89:3f:fd:88:a4:e2:3b:f2:af:25:86:f2: 91:76:f9:ca:7f:54:39:4a:a3:eb:23:e2:20:12:47: f3:cb:12:2d:3e:1d:eb:a1:43:7a:83:c3:0e:5f:13: e4:8c:10:75:bc:32:98:19:45:80:25:07:7e:7c:aa: c0:de:f1:7e:12:f2:5f:34:43:b0:cf:c5:25:4e:ef: d3:19:a8:ad:1d:09:46:25:b3:46:72:c1:9a:16:c5: b7:05:a0:a4:4f:da:a5:81:de:53:86:7f:69:e8:bf: 69:eb:6e:e7:2f:cd:96:0d:f6:c8:7e:25:48:36:2e: c1:0e:ea:71:49:b0:db:7c:50:59:05:c8:fa:a2:f4: 88:7a:b1:4a:b8:07:c0:26:a9:32:2f:2d:98:71:f3: 20:06:54:f0:b4:37:34:70:5c:8e:7d:23:43:da:70: 79:7d:49:7c:9b:da:c6:64:90:d9:7a:60:e5:7c:1f: 2b:0a:6c:f6:8b:d8:f8:14:84:a5:c9:ff:8e:88:b1: a5:c8:d1:eb:25:9f:24:3d:83:4c:d2:96:3f:c1:9b: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:19:91:AA:DD:A5:B2:B2:7C:C7:58:C3:C1:46:EF:F9:FC:63:64:EB X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:3e:15:17:31:61:d4:ba:22:1a:c2:d7:f4:08:e6:33:4d:98: cc:ae:2d:75:e5:df:6c:f3:69:c3:c1:ee:fc:b2:d7:c8:f6:8e: e5:88:00:ac:6e:e8:54:43:ee:e7:97:0a:63:53:52:d7:a9:92: f6:7b:78:a8:b9:1f:8e:fe:31:a2:1a:4d:02:28:84:08:54:a1: 23:e9:8e:ba:50:65:62:3e:b5:db:0a:bd:91:ae:3a:02:63:57: c9:d3:f8:d7:cb:3f:ce:f1:29:bc:14:5d:4c:c9:ea:e0:46:95: ba:46:72:cc:8f:09:65:37:8f:b2:9d:89:f7:47:f6:d9:50:08: 62:fa:ed:f6:94:49:e0:d2:55:34:f5:29:37:4a:4f:ac:c8:3b: dc:1c:f1:ff:7a:d6:51:b2:07:f7:3d:f1:61:ea:bd:54:dd:0d: ac:38:23:7b:3c:5e:db:fe:33:25:0c:48:ab:4b:f3:ff:5b:29: a4:24:d5:8f:7d:12:53:4d:4f:3b:19:7a:47:7a:3d:4a:3d:6d: c7:7c:92:68:5c:4c:73:3f:6a:17:48:e3:f3:08:74:d9:a3:be: 22:86:7d:02:bf:fb:cd:bf:d8:0a:2c:87:74:80:88:1a:f7:f3: 21:03:a8:79:37:ca:06:fd:50:74:8f:5b:dd:9c:49:f0:e6:a3: ec:6a:ce:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOd023syfBPqDHKc60i4UowERBbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTEyMDUwNTQ2MDlaFw0yNTEyMDgwODI3MDlaMDMxMTAvBgNV BAMTKEU1MTk5MUFBRERBNUIyQjI3Q0M3NThDM0MxNDZFRkY5RkM2MzY0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo3OJ0k99wAtQ/H9qiqw0jvv5N l2ccLaU8aUvsZb97P1saMwFY/BVg5i6SCnxU1Yk//Yik4jvyryWG8pF2+cp/VDlK o+sj4iASR/PLEi0+HeuhQ3qDww5fE+SMEHW8MpgZRYAlB358qsDe8X4S8l80Q7DP xSVO79MZqK0dCUYls0ZywZoWxbcFoKRP2qWB3lOGf2nov2nrbucvzZYN9sh+JUg2 LsEO6nFJsNt8UFkFyPqi9Ih6sUq4B8AmqTIvLZhx8yAGVPC0NzRwXI59I0PacHl9 SXyb2sZkkNl6YOV8HysKbPaL2PgUhKXJ/46IsaXI0eslnyQ9g0zSlj/Bm/lDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5RmRqt2lsrJ8x1jDwUbv+fxjZOswHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIo+FRcxYdS6IhrC1/QI5jNNmMyuLXXl32zz acPB7vyy18j2juWIAKxu6FRD7ueXCmNTUtepkvZ7eKi5H47+MaIaTQIohAhUoSPp jrpQZWI+tdsKvZGuOgJjV8nT+NfLP87xKbwUXUzJ6uBGlbpGcsyPCWU3j7KdifdH 9tlQCGL67faUSeDSVTT1KTdKT6zIO9wc8f961lGyB/c98WHqvVTdDaw4I3s8Xtv+ MyUMSKtL8/9bKaQk1Y99ElNNTzsZekd6PUo9bcd8kmhcTHM/ahdI4/MIdNmjviKG fQK/+82/2Aosh3SAiBr38yEDqHk3ygb9UHSPW92cSfDmo+xqzms= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:21 2025 by rpki-client