This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: 3gfxRTWiL/Re6MPqpS0V00FmVG+FlVzsfOm+2cVxP5o= Subject key identifier: 69:19:D2:C0:1D:73:C9:FA:2C:3D:29:59:07:4D:34:BC:05:E9:47:89 Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 4F7FD9CEF509AB2E4A2F42358270D75A1FC1F0CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 3B Signing time: Sat 06 Dec 2025 12:01:32 +0000 Manifest this update: Sat 06 Dec 2025 11:56:32 +0000 Manifest next update: Tue 09 Dec 2025 23:29:32 +0000 Files and hashes: 1: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: EfjX/B/zzesFb1rDx1cnYjVdgBbHeZnhJ2Ug32kvZ8c=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:7f:d9:ce:f5:09:ab:2e:4a:2f:42:35:82:70:d7:5a:1f:c1:f0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Dec 6 11:56:32 2025 GMT Not After : Dec 9 23:29:32 2025 GMT Subject: CN=6919D2C01D73C9FA2C3D2959074D34BC05E94789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ff:98:d2:ce:39:04:82:e8:bb:e5:bc:2c:f0: 0d:bf:76:8f:d8:2a:fd:45:ac:31:db:10:c1:8d:e2: 37:ee:51:e8:4d:47:23:0c:e3:71:8c:2b:1f:74:6b: 22:b6:df:8d:ee:91:ca:53:d8:41:fd:c2:56:7c:8d: 85:d1:d2:9c:5a:af:2a:ba:89:6f:a4:19:69:1c:bf: 73:02:7d:22:b0:e3:e6:64:10:65:e9:4f:01:5a:c4: 12:37:47:c4:dc:bc:8f:36:ac:01:62:83:a4:34:31: 4a:1b:60:6e:91:dc:5e:c2:1a:fe:71:fd:c5:9a:e1: 73:5c:2f:c3:02:18:f8:4d:4f:38:6a:0a:f6:df:8c: cc:a5:c8:91:7f:43:79:4e:9a:96:ca:61:4f:62:47: 73:59:27:5d:09:55:2f:dc:d4:40:86:e6:d5:95:6b: 7b:25:25:48:97:79:ed:b8:d4:84:57:60:92:aa:50: 8c:5a:f2:ee:55:a6:12:f9:db:20:67:60:c0:fb:7b: fd:36:d4:73:ca:ed:91:8e:4f:59:31:ae:44:26:76: bf:c0:1d:2f:58:4b:95:62:aa:63:3f:c8:0d:8f:58: cd:ea:54:d8:6e:8f:e3:7b:3c:7f:12:a3:68:16:1f: 08:f0:da:16:b2:e1:dc:a1:5b:60:ea:87:e6:a9:b1: 22:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:19:D2:C0:1D:73:C9:FA:2C:3D:29:59:07:4D:34:BC:05:E9:47:89 X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:78:0a:68:b7:12:4e:e6:cb:88:87:7e:6a:f0:b7:d3:f3:99: d0:60:0f:55:0b:5c:64:92:ca:08:02:da:21:6b:78:41:48:13: 35:fd:f6:04:0a:93:f6:ec:77:c5:a2:7f:db:8b:f2:10:40:6f: 7d:5b:bd:6f:40:cb:cc:80:9f:f9:20:50:d3:15:13:d5:ae:c0: 2b:bd:de:b2:87:cf:3c:27:a6:f6:13:a5:f8:20:00:3f:9c:e8: a3:54:d5:2c:d5:1e:b2:a0:2e:f5:cb:aa:3a:35:4a:1c:28:b6: 5d:d7:6b:d3:93:31:03:08:b8:40:22:2c:a1:15:c3:4e:ca:8a: ea:f9:b0:a0:d9:77:63:8f:3e:e8:97:25:79:66:40:4f:20:31: 87:e5:15:fd:f1:5d:c8:c9:0b:32:35:b3:de:2a:08:c6:69:f2: a7:31:58:ad:6f:eb:e9:eb:ed:88:5d:a6:91:dc:8b:c5:46:a9: 79:1d:b8:16:14:1d:95:e0:27:dc:77:10:e5:ca:f2:61:dd:58: b9:47:f7:73:4e:f7:e9:c3:ad:71:87:e8:25:ac:0f:99:e1:0c: f5:da:35:a1:21:df:55:e9:e7:c1:59:1c:e4:21:c1:b4:b9:25: 66:e6:00:20:95:c8:1f:43:1b:88:44:79:60:93:35:ca:0f:d5: 60:a9:6f:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3/ZzvUJqy5KL0I1gnDXWh/B8MswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNTEyMDYxMTU2MzJaFw0yNTEyMDkyMzI5MzJaMDMxMTAvBgNV BAMTKDY5MTlEMkMwMUQ3M0M5RkEyQzNEMjk1OTA3NEQzNEJDMDVFOTQ3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr/5jSzjkEgui75bws8A2/do/Y Kv1FrDHbEMGN4jfuUehNRyMM43GMKx90ayK2343ukcpT2EH9wlZ8jYXR0pxaryq6 iW+kGWkcv3MCfSKw4+ZkEGXpTwFaxBI3R8TcvI82rAFig6Q0MUobYG6R3F7CGv5x /cWa4XNcL8MCGPhNTzhqCvbfjMylyJF/Q3lOmpbKYU9iR3NZJ10JVS/c1ECG5tWV a3slJUiXee241IRXYJKqUIxa8u5VphL52yBnYMD7e/021HPK7ZGOT1kxrkQmdr/A HS9YS5ViqmM/yA2PWM3qVNhuj+N7PH8So2gWHwjw2hay4dyhW2Dqh+apsSIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaRnSwB1zyfosPSlZB000vAXpR4kwHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI14Cmi3Ek7my4iHfmrwt9PzmdBgD1ULXGSS yggC2iFreEFIEzX99gQKk/bsd8Wif9uL8hBAb31bvW9Ay8yAn/kgUNMVE9WuwCu9 3rKHzzwnpvYTpfggAD+c6KNU1SzVHrKgLvXLqjo1Shwotl3Xa9OTMQMIuEAiLKEV w07Kiur5sKDZd2OPPuiXJXlmQE8gMYflFf3xXcjJCzI1s94qCMZp8qcxWK1v6+nr 7YhdppHci8VGqXkduBYUHZXgJ9x3EOXK8mHdWLlH93NO9+nDrXGH6CWsD5nhDPXa NaEh31Xp58FZHOQhwbS5JWbmACCVyB9DG4hEeWCTNcoP1WCpb1E= -----END CERTIFICATE-----Generated at Sat Dec 6 22:53:55 2025 by rpki-client