This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: 2lLi73lJHk+v3ckQFrbOQeYgeQG1b9pXwhG6v/fEIbo= Subject key identifier: B4:21:B6:77:A5:B9:D9:2F:18:70:D7:F7:59:A8:04:DC:3C:2A:25:93 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 11955E827B701D7E7AA61FFC7787E42E8F2142CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 77 Signing time: Sat 06 Dec 2025 12:41:43 +0000 Manifest this update: Sat 06 Dec 2025 12:36:43 +0000 Manifest next update: Tue 09 Dec 2025 17:00:43 +0000 Files and hashes: 1: 3230322e39302e3139342e302f32342d3234203d3e203435333233.roa (hash: E3gl245QWUOSrRvQIfs41ST6vQLNBujKh2hLnsJBzx8=) 2: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: 0ZBfE6mFWaGryuHwnm2Vj6899j/PcTU62tCNN6Itr+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:95:5e:82:7b:70:1d:7e:7a:a6:1f:fc:77:87:e4:2e:8f:21:42:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Dec 6 12:36:43 2025 GMT Not After : Dec 9 17:00:43 2025 GMT Subject: CN=B421B677A5B9D92F1870D7F759A804DC3C2A2593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:18:58:af:e3:b4:57:b2:43:64:0e:42:4d: c4:26:df:c3:23:3e:d7:42:bf:50:bd:9a:be:56:8d: c3:83:cf:ad:ee:77:41:0f:a2:c2:f2:f3:2a:80:5c: 98:92:16:3c:aa:4e:22:1f:ee:d8:f0:8c:0d:08:3f: 52:af:29:fc:a8:24:19:70:c0:c6:f9:10:55:ed:b2: 77:28:19:5a:15:f1:72:d0:ca:ad:49:45:7b:6b:71: 45:75:b9:30:67:15:07:d1:ee:ac:5c:5d:16:58:51: b8:6a:c3:69:58:ae:e2:2b:d7:57:20:12:b5:9d:92: 0c:4d:61:ff:27:34:2f:ce:48:a9:f1:81:29:06:c1: 32:5b:1d:05:83:be:76:48:79:ec:13:53:ba:60:1f: ba:1d:02:f0:74:7f:bd:08:2e:bf:a3:23:82:19:fa: d6:84:8d:b6:4b:ba:99:ed:7c:a5:81:0a:34:d7:4d: c1:3f:ab:89:50:b0:f5:b6:ed:2e:3e:3a:15:e0:4d: 50:26:36:9e:69:e3:fb:a1:e3:1c:97:5e:97:87:a7: 6a:16:60:5d:d2:9d:74:b5:71:00:73:ba:4e:89:0a: 58:52:a2:17:6c:2d:4c:d8:76:4c:f4:b8:1c:cd:b7: 5d:82:7d:39:e1:b1:bc:85:c3:e4:fe:5f:28:64:89: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:21:B6:77:A5:B9:D9:2F:18:70:D7:F7:59:A8:04:DC:3C:2A:25:93 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:72:92:f7:05:f4:3a:d6:e9:c4:92:22:2f:14:68:58:b2:f2: ac:b9:e1:49:e6:a0:69:34:86:4b:b9:ef:6a:62:e8:70:f1:dd: 4d:8c:72:5d:9c:1b:64:3c:13:df:9c:8f:8b:91:ea:10:d1:47: 6b:d1:e2:87:11:3c:0b:64:88:6c:6f:b9:1d:cf:b2:d2:ec:2b: d2:96:19:25:d0:1d:8c:5a:fc:97:4a:aa:97:9f:06:23:8f:f2: 03:b5:89:22:f8:5f:0e:c9:fb:f0:24:da:c1:ba:78:a1:bc:c3: ad:58:e2:9d:de:be:08:85:ba:73:3d:64:e9:b1:1c:7a:a1:ff: 98:cb:93:ad:7b:8e:9b:3b:dc:62:2a:d2:55:81:73:8c:74:37: 84:41:e3:fa:c9:4c:32:52:21:3c:a6:e6:4a:c2:7e:44:d4:b3: 8d:74:0b:c8:9b:04:84:a6:ec:cf:87:a8:6a:46:ca:40:23:c6: 41:0f:b0:e1:67:4e:95:dd:55:0e:f1:4a:82:83:79:bf:d8:28: 95:3e:4a:dd:30:35:f6:9d:fd:c0:ea:a0:b7:6e:70:46:d0:31: 84:00:6f:8d:63:a0:06:52:0d:de:ed:34:0c:af:c5:03:79:4f: 01:43:9c:da:69:be:bd:b3:d5:0b:e6:95:7d:1a:07:ac:87:a4: 9d:20:1c:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZVegntwHX56ph/8d4fkLo8hQswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTEyMDYxMjM2NDNaFw0yNTEyMDkxNzAwNDNaMDMxMTAvBgNV BAMTKEI0MjFCNjc3QTVCOUQ5MkYxODcwRDdGNzU5QTgwNERDM0MyQTI1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/BhYr+O0V7JDZA5CTcQm38Mj PtdCv1C9mr5WjcODz63ud0EPosLy8yqAXJiSFjyqTiIf7tjwjA0IP1KvKfyoJBlw wMb5EFXtsncoGVoV8XLQyq1JRXtrcUV1uTBnFQfR7qxcXRZYUbhqw2lYruIr11cg ErWdkgxNYf8nNC/OSKnxgSkGwTJbHQWDvnZIeewTU7pgH7odAvB0f70ILr+jI4IZ +taEjbZLupntfKWBCjTXTcE/q4lQsPW27S4+OhXgTVAmNp5p4/uh4xyXXpeHp2oW YF3SnXS1cQBzuk6JClhSohdsLUzYdkz0uBzNt12CfTnhsbyFw+T+XyhkibdPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtCG2d6W52S8YcNf3WagE3DwqJZMwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpykvcF9DrW6cSSIi8UaFiy8qy54UnmoGk0 hku572pi6HDx3U2Mcl2cG2Q8E9+cj4uR6hDRR2vR4ocRPAtkiGxvuR3PstLsK9KW GSXQHYxa/JdKqpefBiOP8gO1iSL4Xw7J+/Ak2sG6eKG8w61Y4p3evgiFunM9ZOmx HHqh/5jLk617jps73GIq0lWBc4x0N4RB4/rJTDJSITym5krCfkTUs410C8ibBISm 7M+HqGpGykAjxkEPsOFnTpXdVQ7xSoKDeb/YKJU+St0wNfad/cDqoLducEbQMYQA b41joAZSDd7tNAyvxQN5TwFDnNppvr2z1QvmlX0aB6yHpJ0gHF0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:59 2025 by rpki-client