This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft File: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft (raw, json) Hash identifier: VTLkc4GpWHu8qtjVIOO02TeegAWboNZstxsV4b5SsD4= Subject key identifier: E5:91:7C:41:7F:F7:F7:F2:86:87:1D:0D:8F:8F:F3:8F:1F:92:9C:4E Authority key identifier: 87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA Certificate issuer: /CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Certificate serial: 5FEFE92BB0726172932C40CBFD8185383FDB6C85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft Manifest number: 01FB Signing time: Sat 06 Dec 2025 15:12:08 +0000 Manifest this update: Sat 06 Dec 2025 15:07:08 +0000 Manifest next update: Wed 10 Dec 2025 03:08:08 +0000 Files and hashes: 1: 3130332e31372e3137382e302f32342d3234203d3e20313530323236.roa (hash: 6sZc5cLjn8BGU3ndbP5aYFbkGJW/EMEDKLHgtlwJygA=) 2: 8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl (hash: mXn8FRdfVKAIDlTu/2U75XwBz//Gg6+YyzuS1VNIWrc=) 3: 3130332e31372e3137392e302f32342d3234203d3e20313530323236.roa (hash: iULKdZ+8YBgk+IOzMqKF0bAFFPZHjP7Zi+XVSi5s7yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ef:e9:2b:b0:72:61:72:93:2c:40:cb:fd:81:85:38:3f:db:6c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8711D05D82BAFB7BEAB275E079A72DDD554064EA Validity Not Before: Dec 6 15:07:08 2025 GMT Not After : Dec 10 03:08:08 2025 GMT Subject: CN=E5917C417FF7F7F286871D0D8F8FF38F1F929C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:91:4d:e3:3f:d1:61:1c:e0:b1:9d:36:41: a8:8f:4f:8d:ce:9b:91:55:3f:08:40:cd:f5:d9:66: 06:91:dc:5e:53:66:3b:39:d5:06:61:5b:9a:a4:05: 1c:2f:f6:a1:2f:1a:fe:9a:eb:fa:08:a7:9b:15:8d: 81:c9:bc:84:6c:42:07:81:99:da:32:2f:8a:3d:91: ce:76:25:23:b8:c3:28:7b:cc:16:b5:e6:37:04:6a: 49:cc:9b:fd:5c:87:88:bd:39:33:f0:2c:d7:a8:28: c7:dd:1b:ef:2a:0b:37:75:f7:88:d3:e1:08:30:14: 5a:6a:32:31:26:61:a7:c5:ff:5c:44:f8:71:8d:bf: 55:7d:29:5c:c3:e7:e6:af:ed:92:1a:d0:38:9f:42: 8b:48:be:63:3e:d3:5c:b7:7a:4c:09:9e:f3:9b:dc: 29:34:05:be:92:64:f1:7d:ad:d8:59:1a:76:db:cc: 70:7e:9b:8c:18:9d:c3:34:22:79:a1:97:5c:ce:56: ca:ba:cc:ca:fa:51:34:a7:32:d8:f9:d8:37:d5:cc: 0d:33:9c:b4:74:de:83:80:e0:05:26:ab:31:76:cb: cd:e9:52:e5:a2:f0:a1:3f:c7:50:7c:b0:ae:6e:4a: 72:30:0d:43:7d:99:e9:11:0f:49:a8:f6:7a:25:8a: d9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:91:7C:41:7F:F7:F7:F2:86:87:1D:0D:8F:8F:F3:8F:1F:92:9C:4E X509v3 Authority Key Identifier: keyid:87:11:D0:5D:82:BA:FB:7B:EA:B2:75:E0:79:A7:2D:DD:55:40:64:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8711D05D82BAFB7BEAB275E079A72DDD554064EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aef837b3-dfd2-42cc-9b79-74b6bafd4e2d/0/8711D05D82BAFB7BEAB275E079A72DDD554064EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:13:fa:9f:0d:f3:3a:f2:36:d7:af:75:0a:c5:ed:7d:dd:9e: 60:e3:d2:cf:32:c6:f6:22:92:2a:ca:60:ba:2d:d7:48:ca:b7: 41:94:2b:95:83:6b:07:26:0e:ca:d1:3b:ab:ad:5d:76:08:36: 69:94:4c:60:67:f3:47:85:16:22:c2:64:52:62:cd:5f:b7:35: c8:92:df:14:02:29:54:4f:a4:30:5c:de:bd:9e:15:e4:b5:41: 67:a9:80:74:07:5d:28:17:fe:df:a3:ae:6f:f2:ae:a8:a1:fe: 5a:b8:9f:9e:b6:37:8f:12:3c:81:f2:02:ea:16:37:ab:e7:b4: 54:1c:a4:ee:48:e3:3b:57:76:d1:30:06:65:a2:ae:15:15:25: 8f:89:95:98:2a:10:72:6b:45:16:a9:46:5e:b8:d5:42:6e:f4: cd:c8:50:6f:28:59:97:0b:2e:8a:88:66:38:28:59:d2:9c:27: 4d:05:0e:09:31:c9:18:78:ee:69:67:38:2b:5d:56:61:ad:51: 5c:5e:99:ef:f0:6f:41:02:2e:9b:aa:05:bf:21:9a:94:83:2e: 36:30:86:94:56:29:09:b3:39:2a:57:e1:ce:80:aa:12:76:37: c1:3b:43:94:75:90:91:68:d3:65:cb:d9:42:8a:13:e7:de:31: 1b:36:f1:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+/pK7ByYXKTLEDL/YGFOD/bbIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1 NTQwNjRFQTAeFw0yNTEyMDYxNTA3MDhaFw0yNTEyMTAwMzA4MDhaMDMxMTAvBgNV BAMTKEU1OTE3QzQxN0ZGN0Y3RjI4Njg3MUQwRDhGOEZGMzhGMUY5MjlDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5JFN4z/RYRzgsZ02QaiPT43O m5FVPwhAzfXZZgaR3F5TZjs51QZhW5qkBRwv9qEvGv6a6/oIp5sVjYHJvIRsQgeB mdoyL4o9kc52JSO4wyh7zBa15jcEaknMm/1ch4i9OTPwLNeoKMfdG+8qCzd194jT 4QgwFFpqMjEmYafF/1xE+HGNv1V9KVzD5+av7ZIa0DifQotIvmM+01y3ekwJnvOb 3Ck0Bb6SZPF9rdhZGnbbzHB+m4wYncM0Inmhl1zOVsq6zMr6UTSnMtj52DfVzA0z nLR03oOA4AUmqzF2y83pUuWi8KE/x1B8sK5uSnIwDUN9mekRD0mo9nolitmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ZF8QX/39/KGhx0Nj4/zjx+SnE4wHwYDVR0j BBgwFoAUhxHQXYK6+3vqsnXgeact3VVAZOowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZWY4MzdiMy1kZmQyLTQyY2MtOWI3OS03NGI2YmFmZDRlMmQvMC84NzExRDA1RDgy QkFGQjdCRUFCMjc1RTA3OUE3MkRERDU1NDA2NEVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJEREQ1NTQw NjRFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVmODM3YjMtZGZkMi00MmNjLTli NzktNzRiNmJhZmQ0ZTJkLzAvODcxMUQwNUQ4MkJBRkI3QkVBQjI3NUUwNzlBNzJE REQ1NTQwNjRFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIT+p8N8zryNtevdQrF7X3dnmDj0s8yxvYi kirKYLot10jKt0GUK5WDawcmDsrRO6utXXYINmmUTGBn80eFFiLCZFJizV+3NciS 3xQCKVRPpDBc3r2eFeS1QWepgHQHXSgX/t+jrm/yrqih/lq4n562N48SPIHyAuoW N6vntFQcpO5I4ztXdtEwBmWirhUVJY+JlZgqEHJrRRapRl641UJu9M3IUG8oWZcL LoqIZjgoWdKcJ00FDgkxyRh47mlnOCtdVmGtUVxeme/wb0ECLpuqBb8hmpSDLjYw hpRWKQmzOSpX4c6AqhJ2N8E7Q5R1kJFo02XL2UKKE+feMRs28Yk= -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:13 2025 by rpki-client