This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: rkPyc+fgk3GpihA2Uf1L6KhXONB+OPRqtygSu4hYB2s= Subject key identifier: 4F:D2:BF:B7:D5:24:DD:CA:65:F5:83:C9:5B:AC:C2:9D:5B:4C:20:65 Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 04B455C1CA83F23DB73E0ADB6DCAB96BB64FAA8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: FC Signing time: Tue 16 Dec 2025 23:20:00 +0000 Manifest this update: Tue 16 Dec 2025 23:15:00 +0000 Manifest next update: Sat 20 Dec 2025 03:47:00 +0000 Files and hashes: 1: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 2: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: TDPfMomymfgN+a6y3rq5KM2SzMittz8Cv9+0pypvbSs=) 3: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b4:55:c1:ca:83:f2:3d:b7:3e:0a:db:6d:ca:b9:6b:b6:4f:aa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Dec 16 23:15:00 2025 GMT Not After : Dec 20 03:47:00 2025 GMT Subject: CN=4FD2BFB7D524DDCA65F583C95BACC29D5B4C2065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:a3:e0:de:1f:1d:b8:22:61:ac:71:42:28: f4:f4:05:3d:94:3c:e6:92:d1:43:ae:dc:b6:79:11: 14:a1:b6:cb:8c:34:ab:01:42:e3:e7:0b:ae:f0:11: 9c:e4:bb:21:7c:5f:d9:bd:8e:eb:b9:93:0f:45:7c: 57:3e:a9:90:a0:33:3f:70:99:11:05:f5:41:e7:dc: 55:af:e1:b0:63:65:26:33:17:88:f1:c5:85:3f:5b: 6d:fa:6e:88:13:04:b5:16:54:d8:fd:58:96:64:8d: e0:44:a7:71:c0:a7:e0:d5:77:03:23:86:d2:89:26: f9:e8:0b:7f:b4:5b:35:67:a2:18:eb:c2:ad:1a:a5: e8:ef:96:6c:f1:25:3a:c4:87:f3:bd:e8:26:09:02: f8:00:d0:74:a6:2f:0b:44:b4:dc:b3:e2:fd:4a:f1: 5b:d5:af:b3:a9:20:2c:cb:8a:e5:aa:c3:59:f4:e0: 18:8b:43:f2:08:68:f7:74:2f:95:ff:23:be:e5:d6: 7e:73:4e:86:69:f9:a8:9b:cc:53:fd:3b:25:57:5f: 1c:e2:b9:11:11:68:aa:4b:89:98:8f:ff:01:05:a1: 16:06:f7:52:e1:b2:50:a9:a4:08:47:b0:10:0d:c8: c2:ce:5d:b5:71:36:e2:5e:17:10:a2:7a:73:0a:d3: 20:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D2:BF:B7:D5:24:DD:CA:65:F5:83:C9:5B:AC:C2:9D:5B:4C:20:65 X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:17:d0:76:4e:b7:4c:be:b6:4b:e4:84:b4:a1:82:50:15:55: b8:2f:09:f8:be:7c:be:81:08:41:e0:36:ae:11:26:22:a2:f4: 07:dc:32:f1:7a:62:99:34:9c:d3:40:b7:9f:f5:2a:8a:de:b4: dc:91:c5:4c:70:ae:61:93:1f:e1:62:58:0a:86:3b:81:0e:36: b8:4e:02:7e:98:a5:07:7e:ed:65:80:38:fc:12:f6:90:c7:97: 49:08:c3:b3:81:1d:ba:89:bf:9b:09:77:e4:3b:3f:3e:75:d7: 74:a5:a6:99:18:10:32:93:1c:01:9e:e6:51:74:79:20:b1:68: f2:76:9f:35:a6:47:39:6d:75:14:dd:21:b2:50:0a:14:b1:8a: 7f:e4:5d:68:90:51:ef:53:ac:d0:0c:c3:2d:8e:37:12:f8:68: 0a:ea:76:ca:1a:32:83:80:a4:db:3b:26:d6:25:5e:82:ff:1e: 10:a0:85:94:a4:ec:3e:94:e3:bd:44:94:7c:3c:ee:33:38:0f: 71:66:fd:1a:be:3b:d7:26:e3:c9:9a:44:13:35:77:fe:d6:3b: 8b:c7:48:25:30:11:b2:18:66:9e:8a:6e:9e:10:f2:cb:8a:cf: 48:80:18:71:e4:34:43:56:e8:d1:15:5d:23:e3:0d:a1:79:cc: a9:b0:8d:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLRVwcqD8j23Pgrbbcq5a7ZPqo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTEyMTYyMzE1MDBaFw0yNTEyMjAwMzQ3MDBaMDMxMTAvBgNV BAMTKDRGRDJCRkI3RDUyNEREQ0E2NUY1ODNDOTVCQUNDMjlENUI0QzIwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa56Pg3h8duCJhrHFCKPT0BT2U POaS0UOu3LZ5ERShtsuMNKsBQuPnC67wEZzkuyF8X9m9juu5kw9FfFc+qZCgMz9w mREF9UHn3FWv4bBjZSYzF4jxxYU/W236bogTBLUWVNj9WJZkjeBEp3HAp+DVdwMj htKJJvnoC3+0WzVnohjrwq0apejvlmzxJTrEh/O96CYJAvgA0HSmLwtEtNyz4v1K 8VvVr7OpICzLiuWqw1n04BiLQ/IIaPd0L5X/I77l1n5zToZp+aibzFP9OyVXXxzi uRERaKpLiZiP/wEFoRYG91LhslCppAhHsBANyMLOXbVxNuJeFxCienMK0yAxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT9K/t9Uk3cpl9YPJW6zCnVtMIGUwHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwX0HZOt0y+tkvkhLShglAVVbgvCfi+fL6B CEHgNq4RJiKi9AfcMvF6Ypk0nNNAt5/1KoretNyRxUxwrmGTH+FiWAqGO4EONrhO An6YpQd+7WWAOPwS9pDHl0kIw7OBHbqJv5sJd+Q7Pz5113SlppkYEDKTHAGe5lF0 eSCxaPJ2nzWmRzltdRTdIbJQChSxin/kXWiQUe9TrNAMwy2ONxL4aArqdsoaMoOA pNs7JtYlXoL/HhCghZSk7D6U471ElHw87jM4D3Fm/Rq+O9cm48maRBM1d/7WO4vH SCUwEbIYZp6Kbp4Q8suKz0iAGHHkNENW6NEVXSPjDaF5zKmwjXs= -----END CERTIFICATE-----Generated at Wed Dec 17 17:55:43 2025 by rpki-client