This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft File: D85F6D41E807D8825356A681A7518FA27664A965.mft (raw, json) Hash identifier: 4fyD/IcwH3KshurbF5DLIspflyj9omJBChqsGs/OeqM= Subject key identifier: 8A:43:EA:B7:19:C1:84:BE:FA:0A:AD:94:83:37:22:3B:8C:CD:29:AD Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 248482D4151942C72CBA9C1BDB14AE4F858552C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft Manifest number: 0192 Signing time: Tue 02 Dec 2025 01:12:23 +0000 Manifest this update: Tue 02 Dec 2025 01:07:23 +0000 Manifest next update: Fri 05 Dec 2025 03:12:23 +0000 Files and hashes: 1: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: hFj4Uh0PGeOBka7Cx4rmARhSt9TGPmz98D01cPT+PF4=) 2: D85F6D41E807D8825356A681A7518FA27664A965.crl (hash: Ch63rhVSWa977dY/qi1eehke9zEiIH9RDPGp505t5Es=) 3: 323430373a396363303a3a2f33322d3332203d3e20313431393833.roa (hash: X3XCCURHmUEWOKsujokS9KRQ2ATuG6WfjZ6Xo/ilPmk=) 4: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: mLhBYPkwACBbxlJsTnV03pPrOs7jfGDROaGC1YIb24I=) 5: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: 2X5KoMU/cWrAj0o88iqREF+W66XbV79s9jtdMfDvn84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:84:82:d4:15:19:42:c7:2c:ba:9c:1b:db:14:ae:4f:85:85:52:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Dec 2 01:07:23 2025 GMT Not After : Dec 5 03:12:23 2025 GMT Subject: CN=8A43EAB719C184BEFA0AAD948337223B8CCD29AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:70:03:16:5f:07:12:cd:be:6a:11:08:50: 59:e5:3c:7c:6e:95:d1:d4:c7:89:16:79:7c:81:04: ab:7e:67:f3:f2:bf:c4:c5:ea:19:4f:d5:9e:f6:49: 4d:fb:b1:86:a1:a2:c3:fb:0f:2a:b2:31:8a:4f:a9: bf:f9:09:4a:01:93:a3:43:30:1c:83:04:50:06:b4: 40:1b:29:e4:65:24:98:f2:b0:7d:a1:86:71:04:92: a3:1d:f9:59:90:84:ac:5a:3d:67:c9:0f:e2:85:b3: 65:f1:7b:b2:ac:6d:e8:e9:1e:3f:22:8d:d9:a3:88: 53:cd:eb:f8:1f:ac:a9:89:b5:bb:11:43:b2:13:84: c9:66:8b:15:d4:2c:b7:bc:2a:66:27:90:d5:e3:a1: 45:64:cd:69:e0:ec:61:93:ee:ae:55:9b:ab:d5:8f: 88:f9:6a:97:85:13:a9:1a:d7:7c:a2:96:1e:f2:4a: 49:78:f2:b0:b8:07:37:5d:77:ab:05:a4:d7:be:17: 02:2a:bb:34:06:76:c9:9c:13:0d:c4:eb:35:dc:41: cb:0b:2d:78:e5:e8:5f:95:ab:41:80:aa:c6:5d:07: cf:5a:e6:74:70:ad:30:06:20:9f:53:f8:91:ae:f8: ae:3a:be:ec:ba:20:53:08:c9:8f:eb:c2:cf:71:22: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:43:EA:B7:19:C1:84:BE:FA:0A:AD:94:83:37:22:3B:8C:CD:29:AD X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:aa:39:7c:6e:f4:55:c6:0c:70:bc:b7:72:ef:03:c5:2a:3d: c8:02:e0:89:ed:37:76:ab:61:6d:65:ae:00:87:24:0e:7f:75: 54:8e:a6:fa:a8:c9:47:62:ee:72:fd:4d:ae:68:d5:74:73:e5: e4:5c:13:a5:e2:69:c8:08:bd:53:be:44:77:e9:dd:85:fc:05: 19:e5:ca:95:a6:f8:4d:2c:c2:9d:45:21:f0:54:7a:bd:b5:1d: b5:de:0d:c5:21:b1:30:50:82:5f:99:2d:97:8b:fa:d0:7b:e5: a6:f8:02:b9:a9:c9:13:09:b2:7c:dd:36:45:cf:2b:d1:78:df: 7c:64:86:a8:af:78:c6:ad:16:dd:73:57:15:b4:76:47:3a:36: e0:c1:90:ec:fd:8e:91:5a:ae:b8:ed:b4:d4:cf:f3:1d:0b:79: 56:59:de:95:39:d7:c0:df:36:3e:f2:fc:03:14:4d:b7:8b:b2: f1:0b:08:b6:2c:56:a0:26:71:0c:f1:c3:19:c1:77:b6:a7:6c: e6:02:fe:ae:9e:b1:e4:8b:f9:46:96:6e:56:6a:8a:ef:98:59: cb:4e:2c:bf:6d:d2:8d:b1:ea:b7:e5:64:29:64:84:99:e4:2c: 9c:ee:e4:95:e9:72:50:42:4b:4b:be:8c:05:c7:a5:cd:63:2b: ac:8a:f7:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJISC1BUZQscsupwb2xSuT4WFUsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNTEyMDIwMTA3MjNaFw0yNTEyMDUwMzEyMjNaMDMxMTAvBgNV BAMTKDhBNDNFQUI3MTlDMTg0QkVGQTBBQUQ5NDgzMzcyMjNCOENDRDI5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kXADFl8HEs2+ahEIUFnlPHxu ldHUx4kWeXyBBKt+Z/Pyv8TF6hlP1Z72SU37sYahosP7DyqyMYpPqb/5CUoBk6ND MByDBFAGtEAbKeRlJJjysH2hhnEEkqMd+VmQhKxaPWfJD+KFs2Xxe7KsbejpHj8i jdmjiFPN6/gfrKmJtbsRQ7IThMlmixXULLe8KmYnkNXjoUVkzWng7GGT7q5Vm6vV j4j5apeFE6ka13yilh7ySkl48rC4Bzddd6sFpNe+FwIquzQGdsmcEw3E6zXcQcsL LXjl6F+Vq0GAqsZdB89a5nRwrTAGIJ9T+JGu+K46vuy6IFMIyY/rws9xIg4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUikPqtxnBhL76Cq2UgzciO4zNKa0wHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThG QTI3NjY0QTk2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+qOXxu9FXGDHC8t3LvA8UqPcgC4IntN3ar YW1lrgCHJA5/dVSOpvqoyUdi7nL9Ta5o1XRz5eRcE6XiacgIvVO+RHfp3YX8BRnl ypWm+E0swp1FIfBUer21HbXeDcUhsTBQgl+ZLZeL+tB75ab4ArmpyRMJsnzdNkXP K9F433xkhqiveMatFt1zVxW0dkc6NuDBkOz9jpFarrjttNTP8x0LeVZZ3pU518Df Nj7y/AMUTbeLsvELCLYsVqAmcQzxwxnBd7anbOYC/q6eseSL+UaWblZqiu+YWctO LL9t0o2x6rflZClkhJnkLJzu5JXpclBCS0u+jAXHpc1jK6yK9+o= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:08 2025 by rpki-client