This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft File: 8107B8970680BF15377E222E6093ED124116C40F.mft (raw, json) Hash identifier: Vk1gMUf89wu342EBf0Yj3kHEKhGmCmlnMINg3GoRrms= Subject key identifier: 63:C4:F9:FE:4F:E5:69:15:0C:89:62:D2:00:DC:A9:ED:66:FA:87:C1 Authority key identifier: 81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F Certificate issuer: /CN=8107B8970680BF15377E222E6093ED124116C40F Certificate serial: 02F4355BC19F6D6B74452AF42956B0FC70C4CB0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft Manifest number: CA Signing time: Sat 06 Dec 2025 08:00:03 +0000 Manifest this update: Sat 06 Dec 2025 07:55:03 +0000 Manifest next update: Tue 09 Dec 2025 11:51:03 +0000 Files and hashes: 1: 3136302e32322e3133362e302f32342d3234203d3e20313532383131.roa (hash: WXTlhMYeWb2XPsk3kKz2q/Y6eUxTYpdY6/4zyAzkOVg=) 2: 3136302e32322e3133362e302f32332d3233203d3e20313532383131.roa (hash: 2LacJURrRGdpqkr8B8+Js6eubdkn8GpcOPwFPaGcYgA=) 3: 3136302e32322e3133372e302f32342d3234203d3e20313532383131.roa (hash: HT3mtD9EzYNDUslH4D8zHP3cyYz5I1nQiUhW1KPbzG8=) 4: 8107B8970680BF15377E222E6093ED124116C40F.crl (hash: 56b4FhsD+YnkdzZsmMNh5v5bYamOJeUaNwaiWhAL6Y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f4:35:5b:c1:9f:6d:6b:74:45:2a:f4:29:56:b0:fc:70:c4:cb:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8107B8970680BF15377E222E6093ED124116C40F Validity Not Before: Dec 6 07:55:03 2025 GMT Not After : Dec 9 11:51:03 2025 GMT Subject: CN=63C4F9FE4FE569150C8962D200DCA9ED66FA87C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:46:77:c9:ac:f7:79:9d:8c:58:36:9e:8d: 75:bc:ba:ef:0f:63:ca:18:8c:e4:c2:f2:59:73:3d: 13:cb:73:29:ed:70:c0:7a:21:13:4b:f9:ad:74:df: 4a:8c:67:3b:f1:61:9a:45:d4:c4:f2:f3:75:9a:37: 7b:38:bc:cc:3d:27:4b:0c:69:57:d0:fe:b0:f8:af: 94:ab:ce:4f:fd:df:76:03:04:c6:a0:5a:ef:de:35: bc:4e:aa:1e:40:eb:08:72:51:dc:27:2a:27:a4:9e: 32:cf:6b:f0:26:cb:59:11:8c:eb:0a:74:9c:ce:9a: eb:f7:9a:25:c4:05:89:2c:b0:ee:3a:ce:34:30:9b: 36:e5:64:1b:b1:56:0a:c3:48:f2:e2:86:f9:f6:77: 74:49:dd:b8:6a:64:82:13:76:6d:c4:a4:a7:08:1e: 45:10:bb:b0:58:59:6e:94:e4:57:ba:fd:8d:cb:05: 69:d7:f2:e8:6f:ee:bc:f3:e5:38:6d:78:d0:4f:20: f2:f5:19:5e:fc:c8:db:8e:d4:1f:80:f3:fa:a6:53: dd:77:a8:7c:22:37:e3:f4:dd:96:bc:33:c9:84:e8: 35:c2:4b:4a:ec:52:0b:0c:38:e6:80:01:04:e4:de: 40:bc:2a:b4:f9:1e:85:09:97:b8:6a:eb:f4:4f:aa: da:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C4:F9:FE:4F:E5:69:15:0C:89:62:D2:00:DC:A9:ED:66:FA:87:C1 X509v3 Authority Key Identifier: keyid:81:07:B8:97:06:80:BF:15:37:7E:22:2E:60:93:ED:12:41:16:C4:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8107B8970680BF15377E222E6093ED124116C40F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f195b4b4-bc8a-4ce5-b550-9aa7b36ee1fa/0/8107B8970680BF15377E222E6093ED124116C40F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:21:34:78:f6:74:c9:a4:d3:58:41:22:84:db:59:45:2b:fa: 46:f8:eb:61:d8:e3:37:2b:f8:5d:03:27:36:c6:72:6a:ed:28: 1e:d0:ec:e1:91:2d:40:d8:a6:33:4f:ed:ff:f2:39:15:3c:2d: 1f:57:e6:20:97:de:37:60:fd:0c:7b:a7:cb:d8:99:66:47:c7: 43:99:55:19:b8:f1:ac:c8:d2:42:58:26:43:0a:ac:5b:c0:e2: 67:e9:78:e5:48:9f:03:0a:92:30:73:13:fe:68:f0:01:ee:e8: 44:3c:60:0d:e3:b6:d9:f1:62:37:4c:82:60:d2:af:c0:7d:66: a6:85:ed:f4:c1:62:72:7f:0a:ad:f1:15:e9:69:7f:24:4b:5d: f4:4f:03:4d:04:9c:f2:cf:6c:8b:4f:96:86:b4:62:8f:ea:63: 9d:62:a9:c7:b9:d4:67:8f:a9:a1:bb:d4:7b:82:5d:0a:29:95: 17:c0:74:e5:02:50:85:45:df:ff:58:db:2f:7c:72:11:8d:2b: 7f:0c:f6:56:e3:f9:36:82:02:73:57:83:3e:43:ad:53:1f:2b: b0:94:02:60:e7:a9:dd:2d:6c:27:05:00:89:85:0c:95:1b:0a: d9:79:eb:b2:be:f5:26:72:43:ee:7c:15:1c:bb:39:18:e1:d7: b7:76:4d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvQ1W8GfbWt0RSr0KVaw/HDEywowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0 MTE2QzQwRjAeFw0yNTEyMDYwNzU1MDNaFw0yNTEyMDkxMTUxMDNaMDMxMTAvBgNV BAMTKDYzQzRGOUZFNEZFNTY5MTUwQzg5NjJEMjAwRENBOUVENjZGQTg3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqLUZ3yaz3eZ2MWDaejXW8uu8P Y8oYjOTC8llzPRPLcyntcMB6IRNL+a1030qMZzvxYZpF1MTy83WaN3s4vMw9J0sM aVfQ/rD4r5Srzk/933YDBMagWu/eNbxOqh5A6whyUdwnKieknjLPa/Amy1kRjOsK dJzOmuv3miXEBYkssO46zjQwmzblZBuxVgrDSPLihvn2d3RJ3bhqZIITdm3EpKcI HkUQu7BYWW6U5Fe6/Y3LBWnX8uhv7rzz5ThteNBPIPL1GV78yNuO1B+A8/qmU913 qHwiN+P03Za8M8mE6DXCS0rsUgsMOOaAAQTk3kC8KrT5HoUJl7hq6/RPqtpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8T5/k/laRUMiWLSANyp7Wb6h8EwHwYDVR0j BBgwFoAUgQe4lwaAvxU3fiIuYJPtEkEWxA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTk1YjRiNC1iYzhhLTRjZTUtYjU1MC05YWE3YjM2ZWUxZmEvMC84MTA3Qjg5NzA2 ODBCRjE1Mzc3RTIyMkU2MDkzRUQxMjQxMTZDNDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VEMTI0MTE2 QzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5NWI0YjQtYmM4YS00Y2U1LWI1 NTAtOWFhN2IzNmVlMWZhLzAvODEwN0I4OTcwNjgwQkYxNTM3N0UyMjJFNjA5M0VE MTI0MTE2QzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIhNHj2dMmk01hBIoTbWUUr+kb462HY4zcr +F0DJzbGcmrtKB7Q7OGRLUDYpjNP7f/yORU8LR9X5iCX3jdg/Qx7p8vYmWZHx0OZ VRm48azI0kJYJkMKrFvA4mfpeOVInwMKkjBzE/5o8AHu6EQ8YA3jttnxYjdMgmDS r8B9ZqaF7fTBYnJ/Cq3xFelpfyRLXfRPA00EnPLPbItPloa0Yo/qY51iqce51GeP qaG71HuCXQoplRfAdOUCUIVF3/9Y2y98chGNK38M9lbj+TaCAnNXgz5DrVMfK7CU AmDnqd0tbCcFAImFDJUbCtl567K+9SZyQ+58FRy7ORjh17d2Tdo= -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:52 2025 by rpki-client