This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: aepkq0DR78B+jgFrawSExd1PJu74blcxmTf7LRpftU8= Subject key identifier: 06:51:E6:96:6C:41:2D:0D:40:76:4D:D5:70:B5:74:A8:EF:03:24:F8 Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 386550C301277204C3D742D9DD3B07E1F8CD17D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 015D Signing time: Sat 06 Dec 2025 16:11:16 +0000 Manifest this update: Sat 06 Dec 2025 16:06:16 +0000 Manifest next update: Tue 09 Dec 2025 21:13:16 +0000 Files and hashes: 1: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=) 2: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: KYg2eP+qnyahabsQS5xdyRs5Ya80Q1XBZpzh8eR7p5s=) 3: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: MF6W3PvE+l2HkOoscFPf8Habv59WgGVtfTbmavXTj5E=) 4: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dY9Wzss484cDHvQy3+/U0nuyLvB8FHOPJZ4fbRc99IE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:65:50:c3:01:27:72:04:c3:d7:42:d9:dd:3b:07:e1:f8:cd:17:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Dec 6 16:06:16 2025 GMT Not After : Dec 9 21:13:16 2025 GMT Subject: CN=0651E6966C412D0D40764DD570B574A8EF0324F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:7f:82:e4:98:43:12:b5:64:20:bd:e5:2d: 69:60:d9:0f:5b:66:7c:c1:75:73:f5:15:aa:b6:8b: 64:70:6d:7a:50:2f:3a:bd:95:59:ce:74:10:95:78: fb:38:05:e3:e2:55:f5:f5:7a:8c:81:16:60:c3:f0: eb:1c:d0:7e:8c:47:3e:9b:99:fc:31:13:00:b9:59: ce:bc:48:44:f1:e5:9a:72:d7:46:77:0f:3a:70:56: f0:ff:96:43:53:c5:b2:c0:50:73:a2:ac:f5:6f:55: 9a:a4:bb:64:24:44:9b:28:f1:fc:6f:a1:7c:f5:5d: c6:c4:eb:be:ad:69:70:da:ec:cd:a6:5d:b5:40:23: 8f:df:65:57:42:5a:67:db:a1:a2:51:b0:51:05:93: 17:d8:21:da:97:94:25:4d:49:40:4d:a5:25:46:5f: 86:c1:ae:9d:69:4f:e9:53:33:bb:a0:87:71:a4:39: 23:67:2d:c9:66:b7:65:fb:b6:32:3f:16:36:5c:2a: 13:61:d7:c9:30:72:ad:f9:ba:66:fc:06:79:13:ac: e6:f0:a1:72:58:78:29:68:74:b0:dc:f6:3c:c6:37: 89:71:f9:75:c6:19:67:9d:bd:de:aa:fc:91:3b:5c: df:14:66:d9:b4:13:ea:c8:db:b6:8e:f7:63:7a:7d: be:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:E6:96:6C:41:2D:0D:40:76:4D:D5:70:B5:74:A8:EF:03:24:F8 X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f4:7d:8e:12:6d:96:86:02:77:22:a5:d1:54:00:e7:f7:86: 47:c2:2e:39:00:3f:c8:98:d2:7c:4f:f1:d9:38:d4:3a:b9:41: 09:30:42:7c:db:e6:b4:fb:24:01:e4:02:df:21:6d:71:22:a0: c0:24:df:95:d9:05:4a:e7:32:d7:ff:3c:3a:a0:25:4b:8a:68: 40:6a:8d:4b:f4:d0:c8:31:b3:ac:5d:85:fd:9c:21:54:bf:22: 30:bc:7c:90:8c:8d:da:6c:75:fd:b9:0d:aa:7e:05:3f:fc:db: e1:11:f3:91:17:82:bd:b9:7b:f1:97:33:ec:e7:43:05:a2:7c: ad:54:5f:95:6c:cf:16:fd:e5:4a:a6:19:3b:e3:10:84:d9:8c: a5:8d:6f:73:30:a4:42:af:59:f5:f4:43:c4:54:13:00:b3:1d: 9a:87:4d:aa:9c:d6:26:ee:8d:9b:15:ef:b0:01:6f:36:e0:ae: d7:f3:7e:22:3c:50:62:d5:2f:a5:fc:1a:8a:90:11:3c:98:e5: b7:2f:97:cc:32:34:b9:98:e5:fa:bd:7d:43:ae:f6:44:fc:90: c5:16:fe:52:f5:44:60:8d:7c:40:db:c5:be:6f:30:4c:a1:f0: e6:e5:95:91:22:66:b6:2f:26:1b:ab:bd:9e:d9:c3:44:8b:1a: eb:b0:ba:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGVQwwEncgTD10LZ3TsH4fjNF9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTEyMDYxNjA2MTZaFw0yNTEyMDkyMTEzMTZaMDMxMTAvBgNV BAMTKDA2NTFFNjk2NkM0MTJEMEQ0MDc2NERENTcwQjU3NEE4RUYwMzI0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCDn+C5JhDErVkIL3lLWlg2Q9b ZnzBdXP1Faq2i2RwbXpQLzq9lVnOdBCVePs4BePiVfX1eoyBFmDD8Osc0H6MRz6b mfwxEwC5Wc68SETx5Zpy10Z3DzpwVvD/lkNTxbLAUHOirPVvVZqku2QkRJso8fxv oXz1XcbE676taXDa7M2mXbVAI4/fZVdCWmfboaJRsFEFkxfYIdqXlCVNSUBNpSVG X4bBrp1pT+lTM7ugh3GkOSNnLclmt2X7tjI/FjZcKhNh18kwcq35umb8BnkTrObw oXJYeClodLDc9jzGN4lx+XXGGWedvd6q/JE7XN8UZtm0E+rI27aO92N6fb61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBlHmlmxBLQ1Adk3VcLV0qO8DJPgwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH0fY4SbZaGAncipdFUAOf3hkfCLjkAP8iY 0nxP8dk41Dq5QQkwQnzb5rT7JAHkAt8hbXEioMAk35XZBUrnMtf/PDqgJUuKaEBq jUv00Mgxs6xdhf2cIVS/IjC8fJCMjdpsdf25Dap+BT/82+ER85EXgr25e/GXM+zn QwWifK1UX5Vszxb95UqmGTvjEITZjKWNb3MwpEKvWfX0Q8RUEwCzHZqHTaqc1ibu jZsV77ABbzbgrtfzfiI8UGLVL6X8GoqQETyY5bcvl8wyNLmY5fq9fUOu9kT8kMUW /lL1RGCNfEDbxb5vMEyh8ObllZEiZrYvJhurvZ7Zw0SLGuuwutk= -----END CERTIFICATE-----Generated at Sun Dec 7 06:40:49 2025 by rpki-client