This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: dgyqg7JgzqvCbu6R6aCQk0pUubk78RrozkXAKLB1PP8= Subject key identifier: 3B:15:C7:6D:38:90:1F:7D:C4:22:B3:9B:19:B9:0A:44:39:73:A6:1B Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 3236FD70B756E19D10AE860243956AC849336F83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 0286 Signing time: Thu 04 Dec 2025 23:50:47 +0000 Manifest this update: Thu 04 Dec 2025 23:45:47 +0000 Manifest next update: Mon 08 Dec 2025 05:38:47 +0000 Files and hashes: 1: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: ZjHRq84yhKeqL5qXRoZjl7vsU+7JDO70mpeC70QQZYk=) 2: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:36:fd:70:b7:56:e1:9d:10:ae:86:02:43:95:6a:c8:49:33:6f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Dec 4 23:45:47 2025 GMT Not After : Dec 8 05:38:47 2025 GMT Subject: CN=3B15C76D38901F7DC422B39B19B90A443973A61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:eb:fb:8e:10:62:aa:50:d8:84:cc:5b:e0: 6e:06:48:2e:08:1a:83:2e:e9:c0:22:ad:a1:2e:96: 25:ee:6a:dd:98:b5:a2:fd:d8:ad:24:16:86:d9:89: c2:7c:b8:27:40:19:66:81:c6:86:90:7d:b2:55:96: 5f:64:af:cd:8d:28:35:85:a4:64:05:b5:57:ab:cd: c2:e9:d4:8b:b2:f0:56:1f:a7:b3:7c:2e:4b:5a:94: 49:56:26:0f:fd:5c:d1:3d:d1:12:2b:d4:02:ef:9e: 9f:2e:cf:92:cb:96:c8:b9:36:4c:9b:3f:cb:cd:24: 0b:1f:ad:9c:45:ea:87:1a:1b:03:ca:c0:b2:d3:d2: 7a:46:e1:b3:2a:9a:e7:df:c1:80:39:2e:45:e8:c9: 01:ed:85:4c:68:c3:11:b9:a3:f5:bf:0f:fb:4d:3f: 69:2f:63:b1:9a:f4:8c:be:f6:8e:57:1d:76:04:fc: 6e:86:5c:c6:fd:9c:40:cf:bf:07:18:19:f1:b9:a2: a7:75:2d:f0:0d:0d:03:52:bb:fa:bc:50:ec:6b:ed: 80:95:a3:b6:54:c2:5e:56:e7:3b:e4:d3:42:5f:c5: 29:b2:6d:c3:da:97:29:65:99:d8:72:47:1c:a5:83: 33:6e:c4:b1:03:6b:5c:cf:f5:f8:ef:3d:55:53:71: 2c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:15:C7:6D:38:90:1F:7D:C4:22:B3:9B:19:B9:0A:44:39:73:A6:1B X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:14:69:7a:fb:ca:f6:47:0c:59:98:be:21:59:88:01:8c:36: e5:c4:ff:b2:f4:bb:d3:e8:da:c8:01:d5:88:c2:6f:0f:16:ae: a4:3b:40:d1:15:bb:2e:ec:bd:d7:99:77:4b:1e:00:e7:36:81: 24:ca:77:b8:a4:87:55:10:85:12:d3:51:20:43:aa:11:e3:45: cc:3f:9e:77:ef:7c:35:6b:2a:60:ba:ac:a9:7f:4f:ec:11:c1: ee:8a:68:71:39:ca:a1:f9:ca:da:cd:3d:12:10:2c:5b:0c:9a: 68:ec:58:45:29:45:c4:08:e7:bb:db:73:83:9a:ed:3e:8b:c4: 55:ad:b1:41:a7:80:3c:50:54:c6:60:0c:8f:db:fc:73:64:89: 77:ee:0f:97:28:66:f9:16:08:a7:42:0e:5c:4b:c9:0e:25:b8: e2:ae:16:69:56:a4:4b:b0:9c:e4:c6:41:e9:ec:93:28:f9:cb: 62:f1:47:ad:42:00:6a:e9:a9:20:29:28:64:fc:60:4f:a5:02: 42:41:bc:73:30:9e:28:eb:bd:f6:4b:7e:bc:0c:43:90:fb:e3: c4:e7:09:ad:e8:61:6d:b3:cf:b2:7d:b1:61:80:5f:a3:d7:c5: 7e:7e:dc:f0:99:ad:06:67:af:15:76:b0:43:6a:e9:c0:1d:13: ba:c0:0d:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjb9cLdW4Z0QroYCQ5VqyEkzb4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTEyMDQyMzQ1NDdaFw0yNTEyMDgwNTM4NDdaMDMxMTAvBgNV BAMTKDNCMTVDNzZEMzg5MDFGN0RDNDIyQjM5QjE5QjkwQTQ0Mzk3M0E2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvqOv7jhBiqlDYhMxb4G4GSC4I GoMu6cAiraEuliXuat2YtaL92K0kFobZicJ8uCdAGWaBxoaQfbJVll9kr82NKDWF pGQFtVerzcLp1Iuy8FYfp7N8LktalElWJg/9XNE90RIr1ALvnp8uz5LLlsi5Nkyb P8vNJAsfrZxF6ocaGwPKwLLT0npG4bMqmuffwYA5LkXoyQHthUxowxG5o/W/D/tN P2kvY7Ga9Iy+9o5XHXYE/G6GXMb9nEDPvwcYGfG5oqd1LfANDQNSu/q8UOxr7YCV o7ZUwl5W5zvk00JfxSmybcPalyllmdhyRxylgzNuxLEDa1zP9fjvPVVTcSyTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOxXHbTiQH33EIrObGbkKRDlzphswHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQUaXr7yvZHDFmYviFZiAGMNuXE/7L0u9Po 2sgB1YjCbw8WrqQ7QNEVuy7svdeZd0seAOc2gSTKd7ikh1UQhRLTUSBDqhHjRcw/ nnfvfDVrKmC6rKl/T+wRwe6KaHE5yqH5ytrNPRIQLFsMmmjsWEUpRcQI57vbc4Oa 7T6LxFWtsUGngDxQVMZgDI/b/HNkiXfuD5coZvkWCKdCDlxLyQ4luOKuFmlWpEuw nOTGQenskyj5y2LxR61CAGrpqSApKGT8YE+lAkJBvHMwnijrvfZLfrwMQ5D748Tn Ca3oYW2zz7J9sWGAX6PXxX5+3PCZrQZnrxV2sENq6cAdE7rADZY= -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:03 2025 by rpki-client