This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json) Hash identifier: 9LfcFMyDETVscaKydQlYw6RnXOZMnRcRB8Ak0TAPsW8= Subject key identifier: F6:98:89:B2:11:22:5F:A8:75:4F:A3:6F:10:5D:8F:5B:F0:03:A2:D8 Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Certificate serial: 62B63F52017A4EE8AA2C85F8637260B35A2CEFE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft Manifest number: 0531 Signing time: Sat 06 Dec 2025 11:01:26 +0000 Manifest this update: Sat 06 Dec 2025 10:56:26 +0000 Manifest next update: Tue 09 Dec 2025 13:51:26 +0000 Files and hashes: 1: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: EeVS/Wotu8QiYnhwHE/NjTJ1MQmj/cQtABdAbLQgSvo=) 2: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: yPuBWrEO5gGVuOqzGalBsH1AfcuZdU7Qdd+S4FkRZE4=) 3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UXCPnVMF20T3u89LBilCEmmt67UECY/psh8twg2H0Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:51:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b6:3f:52:01:7a:4e:e8:aa:2c:85:f8:63:72:60:b3:5a:2c:ef:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Validity Not Before: Dec 6 10:56:26 2025 GMT Not After : Dec 9 13:51:26 2025 GMT Subject: CN=F69889B211225FA8754FA36F105D8F5BF003A2D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b3:08:a4:9f:f9:7c:49:86:e7:a8:bb:d9:82: 26:4f:2f:ce:c9:4b:70:4c:5c:12:ec:f7:c4:7e:d8: 47:4e:08:19:33:8f:5b:59:b8:3e:a7:b8:5d:ec:48: b9:72:43:85:48:12:5f:75:27:37:f9:1c:02:ca:b5: df:90:a9:a9:7a:e7:37:e5:bb:15:d9:33:6c:3f:e4: 47:e1:0b:cd:b0:a0:08:e3:67:3c:be:23:07:5c:fa: 7f:36:fe:72:05:39:1c:88:2a:18:16:9a:d5:fc:a6: e2:ca:56:19:40:cd:8e:80:54:7f:f6:7c:08:29:32: d4:c2:76:0b:cb:62:56:f8:bc:9a:00:40:41:a1:f0: 4e:f6:c0:de:52:d5:4b:2a:6b:d8:e5:3a:61:f3:6e: 6d:f1:7d:0f:00:05:a1:ba:e9:d8:c3:56:50:ac:50: 70:25:79:62:3d:e6:ab:d5:db:7f:bb:bf:db:89:ea: 82:ed:43:70:19:ac:36:4a:08:f3:e8:83:cb:aa:27: 80:4e:2d:73:30:03:63:09:e2:80:12:7d:9c:fb:33: 31:0e:5e:d8:0d:9a:40:c8:ca:63:e9:79:9b:ed:67: 8d:35:f2:a0:0d:2f:36:15:c8:a7:dc:f4:52:79:2c: 9c:30:58:13:c7:01:8d:25:cf:ae:86:7e:2d:2e:12: c1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:98:89:B2:11:22:5F:A8:75:4F:A3:6F:10:5D:8F:5B:F0:03:A2:D8 X509v3 Authority Key Identifier: keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:d6:ae:49:35:f4:90:47:7c:b9:82:48:b2:91:93:99:ba:e5: 66:c4:15:14:79:62:1c:65:44:23:0b:ae:e4:e9:1b:60:5f:b4: 64:70:32:5b:27:c2:36:66:15:20:d6:26:74:f6:f6:6a:e0:b1: 03:64:cd:70:82:55:88:c1:a5:5c:b4:af:a1:c1:54:ee:a5:44: 37:b3:04:f3:ea:fd:5b:36:b3:1f:a6:f8:03:c4:38:fa:d2:5a: bb:24:6c:2c:7a:4a:c3:d9:b5:b1:88:7e:18:71:da:bf:f0:84: f9:66:0f:1b:ee:33:d6:50:c0:95:9b:87:6a:7a:e0:db:34:73: 07:07:fb:94:f6:a2:3d:89:24:33:7a:3d:cf:90:9f:25:f6:f5: f9:65:18:6e:49:f7:b0:27:6b:44:51:19:27:45:ed:01:4b:56: 6c:ee:37:25:73:55:62:b3:79:cd:2a:b4:6a:f0:75:69:0d:7a: 0e:b7:32:c5:da:76:7a:df:6c:49:ea:b6:b8:5b:d1:91:d7:8a: e3:8f:de:fe:0d:b3:5c:c6:13:a2:b0:ae:91:41:0c:99:eb:2a: f8:f8:86:5e:c6:a1:51:c9:6c:d7:09:8b:4f:24:b3:fa:fa:25: 11:67:40:9b:5c:a5:64:87:5f:23:fa:21:a4:92:bd:6b:f7:18: 6d:cc:9b:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrY/UgF6TuiqLIX4Y3Jgs1os7+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVC NEVDNjlDQTAeFw0yNTEyMDYxMDU2MjZaFw0yNTEyMDkxMzUxMjZaMDMxMTAvBgNV BAMTKEY2OTg4OUIyMTEyMjVGQTg3NTRGQTM2RjEwNUQ4RjVCRjAwM0EyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQswikn/l8SYbnqLvZgiZPL87J S3BMXBLs98R+2EdOCBkzj1tZuD6nuF3sSLlyQ4VIEl91Jzf5HALKtd+Qqal65zfl uxXZM2w/5EfhC82woAjjZzy+Iwdc+n82/nIFORyIKhgWmtX8puLKVhlAzY6AVH/2 fAgpMtTCdgvLYlb4vJoAQEGh8E72wN5S1Usqa9jlOmHzbm3xfQ8ABaG66djDVlCs UHAleWI95qvV23+7v9uJ6oLtQ3AZrDZKCPPog8uqJ4BOLXMwA2MJ4oASfZz7MzEO XtgNmkDIymPpeZvtZ4018qANLzYVyKfc9FJ5LJwwWBPHAY0lz66Gfi0uEsG3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9piJshEiX6h1T6NvEF2PW/ADotgwHwYDVR0j BBgwFoAUgoT2HHdGIv7GR1nm13yd7rTsacowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTgxNDUwNy03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC84Mjg0RjYxQzc3 NDYyMkZFQzY0NzU5RTZENzdDOURFRUI0RUM2OUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVCNEVD NjlDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlE RUVCNEVDNjlDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/Wrkk19JBHfLmCSLKRk5m65WbEFRR5Yhxl RCMLruTpG2BftGRwMlsnwjZmFSDWJnT29mrgsQNkzXCCVYjBpVy0r6HBVO6lRDez BPPq/Vs2sx+m+APEOPrSWrskbCx6SsPZtbGIfhhx2r/whPlmDxvuM9ZQwJWbh2p6 4Ns0cwcH+5T2oj2JJDN6Pc+QnyX29fllGG5J97Ana0RRGSdF7QFLVmzuNyVzVWKz ec0qtGrwdWkNeg63MsXadnrfbEnqtrhb0ZHXiuOP3v4Ns1zGE6KwrpFBDJnrKvj4 hl7GoVHJbNcJi08ks/r6JRFnQJtcpWSHXyP6IaSSvWv3GG3Mmwk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:01 2025 by rpki-client