This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: gLF65C/6I0RXGssivKrjVOOUqYKWxNuxzqkRLw6TLdI= Subject key identifier: 31:67:AF:A2:5D:F3:42:0A:63:19:13:03:7F:66:EA:BD:95:5F:47:FA Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 5D50F8F5363E8F78BC8AEC71F13CABE02F36BC88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 041B Signing time: Fri 05 Dec 2025 20:02:09 +0000 Manifest this update: Fri 05 Dec 2025 19:57:09 +0000 Manifest next update: Mon 08 Dec 2025 21:01:09 +0000 Files and hashes: 1: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 2: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 3: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: FBD76sinJx5uxanUn4UzxIvS1v5xL74v7w7ifQCBb3Y=) 4: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 5: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:50:f8:f5:36:3e:8f:78:bc:8a:ec:71:f1:3c:ab:e0:2f:36:bc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Dec 5 19:57:09 2025 GMT Not After : Dec 8 21:01:09 2025 GMT Subject: CN=3167AFA25DF3420A631913037F66EABD955F47FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:c8:5f:58:c3:6d:eb:9d:ca:ed:16:04:14: 25:d7:48:e1:7a:6c:41:a5:d0:69:0a:b2:70:2f:1c: c8:9c:18:94:6a:e9:13:36:9d:65:85:19:f0:45:0e: 0d:f9:ee:2c:b1:bc:fd:c7:48:83:41:04:88:55:a7: d9:81:13:f7:1f:6b:d8:57:2d:e1:fe:05:58:9e:17: a2:96:c2:9d:34:62:61:d1:90:81:04:94:59:ec:2a: 6b:86:97:f7:c8:4a:ab:56:19:23:53:5e:9a:43:39: ba:ea:84:4f:bd:99:13:df:37:d1:9b:25:0a:a9:a7: ff:3e:f1:8a:6d:c9:f4:4f:cb:49:38:3e:5b:74:1c: 97:a0:4c:74:54:dc:d0:21:22:bc:6d:68:58:3b:4f: 03:b8:29:9a:c7:7d:a5:6a:39:34:66:35:34:ae:d7: da:ee:09:98:69:cd:be:81:c3:58:95:d5:79:6f:79: 70:49:72:ad:a0:68:f4:87:c0:a2:78:db:dc:b7:d9: d0:80:fe:c0:5e:25:0b:b1:fe:87:74:ff:88:c3:0c: 74:e7:7f:84:48:76:7d:29:76:44:75:a0:5d:b1:79: cb:a0:98:15:c2:6a:31:ff:ef:a7:9e:c0:cc:37:dd: ad:75:59:6b:4e:27:08:a9:44:96:c4:a2:ff:c1:73: 9c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:67:AF:A2:5D:F3:42:0A:63:19:13:03:7F:66:EA:BD:95:5F:47:FA X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:63:25:2b:97:ef:53:1a:b2:bf:79:83:61:9d:a6:47:9a:09: 8d:34:14:4b:b3:a4:66:5e:ac:e8:36:55:0d:39:71:2b:a8:eb: 00:9c:df:c0:39:c6:77:7a:1b:07:ba:4a:fa:b9:f6:b8:b5:31: f1:f9:2a:c4:1a:46:5d:58:3d:99:24:96:f7:97:71:14:e9:f1: 53:a0:4b:35:e1:4b:8d:d7:c1:69:39:13:6c:60:eb:8c:82:8f: 70:ff:30:56:bb:42:97:25:5c:a4:b5:e8:ca:b5:c0:d8:64:1b: c2:a6:93:61:4b:b7:6e:45:15:73:40:b6:63:50:6c:dc:de:74: c2:a2:3c:b7:ea:83:6e:a5:13:cd:3d:3e:23:3f:d7:16:14:62: db:d4:f7:23:1d:02:12:a6:f5:4d:7f:44:ef:51:c2:49:76:62: 00:79:c7:a9:fa:85:a8:88:7f:a6:98:0a:fd:1a:33:7c:27:6c: c4:86:8a:8f:68:bd:bf:0b:89:2c:9c:a0:38:5d:90:5b:9d:2a: 8e:62:f0:11:ad:70:3b:97:13:e1:a3:6a:14:e6:5a:b8:d6:90: 54:a2:2d:d2:7f:09:91:56:c8:bb:97:3e:e4:ee:4b:4d:de:92: 4c:f4:f6:c9:cc:0d:0f:c8:e9:04:57:34:23:b2:0f:47:4c:cd: 40:94:c3:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVD49TY+j3i8iuxx8Tyr4C82vIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTEyMDUxOTU3MDlaFw0yNTEyMDgyMTAxMDlaMDMxMTAvBgNV BAMTKDMxNjdBRkEyNURGMzQyMEE2MzE5MTMwMzdGNjZFQUJEOTU1RjQ3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUshfWMNt653K7RYEFCXXSOF6 bEGl0GkKsnAvHMicGJRq6RM2nWWFGfBFDg357iyxvP3HSINBBIhVp9mBE/cfa9hX LeH+BVieF6KWwp00YmHRkIEElFnsKmuGl/fISqtWGSNTXppDObrqhE+9mRPfN9Gb JQqpp/8+8YptyfRPy0k4Plt0HJegTHRU3NAhIrxtaFg7TwO4KZrHfaVqOTRmNTSu 19ruCZhpzb6Bw1iV1XlveXBJcq2gaPSHwKJ429y32dCA/sBeJQux/od0/4jDDHTn f4RIdn0pdkR1oF2xecugmBXCajH/76eewMw33a11WWtOJwipRJbEov/Bc5zjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMWevol3zQgpjGRMDf2bqvZVfR/owHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZjJSuX71Masr95g2GdpkeaCY00FEuzpGZe rOg2VQ05cSuo6wCc38A5xnd6Gwe6Svq59ri1MfH5KsQaRl1YPZkklveXcRTp8VOg SzXhS43XwWk5E2xg64yCj3D/MFa7QpclXKS16Mq1wNhkG8Kmk2FLt25FFXNAtmNQ bNzedMKiPLfqg26lE809PiM/1xYUYtvU9yMdAhKm9U1/RO9Rwkl2YgB5x6n6haiI f6aYCv0aM3wnbMSGio9ovb8LiSycoDhdkFudKo5i8BGtcDuXE+GjahTmWrjWkFSi LdJ/CZFWyLuXPuTuS03ekkz09snMDQ/I6QRXNCOyD0dMzUCUw8o= -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:22 2025 by rpki-client