This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: iUqVX9LVb4ETSW1Hn2pXfTHrtfWeLpIOGccn2lM57zA= Subject key identifier: 6C:43:E7:2F:2D:45:5F:19:54:46:05:AD:E9:4E:FF:17:9D:FA:39:BC Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 0BD7B84C6F366CEF211232774E85E1979F3A343C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 012C Signing time: Wed 03 Dec 2025 04:03:47 +0000 Manifest this update: Wed 03 Dec 2025 03:58:47 +0000 Manifest next update: Sat 06 Dec 2025 08:36:47 +0000 Files and hashes: 1: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: rAD1XPJFymhaavWnhvFXI/GwdKaC8WUnFxGoojgCr8s=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d7:b8:4c:6f:36:6c:ef:21:12:32:77:4e:85:e1:97:9f:3a:34:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Dec 3 03:58:47 2025 GMT Not After : Dec 6 08:36:47 2025 GMT Subject: CN=6C43E72F2D455F19544605ADE94EFF179DFA39BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:05:ce:71:ff:9c:0f:0c:1a:51:fa:0f:b4:25: 71:f5:2f:a5:93:50:f5:02:e9:91:7b:b8:02:22:f7: 5f:50:55:93:43:d0:9a:ed:ff:ed:73:df:ea:55:3e: 79:a0:17:fd:ea:95:65:cb:62:6c:63:15:e1:d5:7c: 6f:6d:31:51:bf:1d:4e:33:6e:bc:c1:59:ab:74:f9: dd:8f:0b:8d:49:ad:f4:4f:3d:56:96:13:93:75:86: bf:85:e9:11:b0:4d:94:62:f0:17:65:59:08:75:92: a9:42:4b:52:6c:41:4f:ab:80:50:a7:55:43:03:19: 84:4b:24:89:d9:16:bd:45:75:39:95:14:87:9c:2a: e9:6c:19:b8:38:ad:5b:f9:5a:0b:c6:21:bb:b7:29: 89:46:6a:0a:21:53:f7:03:cb:88:38:e2:38:f2:04: af:fe:7f:c1:93:95:97:aa:d0:17:98:b3:73:3e:af: b0:18:0b:0c:f8:2f:36:65:ff:b6:22:bb:45:c6:ce: 12:cd:23:67:6d:5d:6f:21:9c:d2:03:93:7a:90:2f: 8b:40:9a:69:40:1f:77:67:c1:18:b4:28:77:1f:99: a2:59:9a:b6:85:45:fb:0c:5b:f0:99:d1:e7:9e:38: db:0d:bc:12:95:5c:7f:05:98:22:61:cc:4f:4d:04: 94:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:43:E7:2F:2D:45:5F:19:54:46:05:AD:E9:4E:FF:17:9D:FA:39:BC X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:00:16:c0:18:b8:b4:cc:a5:0d:a2:e5:42:f5:17:fa:8f:c9: 0b:af:91:00:fb:be:b4:a4:11:39:b3:a2:1c:1c:de:e4:f4:ef: 6b:7b:ed:6e:2b:e1:2c:be:f3:62:57:2b:83:6f:39:eb:2e:8a: 36:31:70:29:85:1c:b1:56:fe:1d:c6:a2:30:da:79:42:64:0c: e5:5c:6e:17:a2:21:a0:b6:2a:4c:a7:4a:8c:8c:c8:0d:0c:f9: e8:a3:a7:2c:e4:4c:7b:8c:ff:a5:67:13:41:7c:0d:52:cd:7f: 2d:63:82:7c:be:2b:7d:9f:6f:22:6b:0c:74:bc:b2:44:46:94: 66:db:60:f6:9a:f4:80:84:2a:06:28:4a:ee:48:6e:c3:2f:af: 80:ee:f6:a5:dd:22:99:05:3d:9d:99:7a:a7:d2:ed:b4:1d:53: b9:7b:2a:f4:c8:89:7f:9b:36:24:c8:c4:0c:3c:37:dc:18:f9: 93:5c:53:7f:ee:f0:78:f3:5b:30:5e:66:71:9a:c9:c6:da:97: 23:cd:1a:a3:fe:b0:a4:10:7e:65:3d:a6:1b:f6:4b:fd:1f:45: ea:30:0e:1e:1a:7d:40:83:5f:3b:bf:12:db:4a:25:7d:ac:b8: b0:48:92:1b:8d:94:e6:7c:f8:77:d8:bc:ac:6e:38:04:0b:58: b4:f4:e2:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9e4TG82bO8hEjJ3ToXhl586NDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTEyMDMwMzU4NDdaFw0yNTEyMDYwODM2NDdaMDMxMTAvBgNV BAMTKDZDNDNFNzJGMkQ0NTVGMTk1NDQ2MDVBREU5NEVGRjE3OURGQTM5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLBc5x/5wPDBpR+g+0JXH1L6WT UPUC6ZF7uAIi919QVZND0Jrt/+1z3+pVPnmgF/3qlWXLYmxjFeHVfG9tMVG/HU4z brzBWat0+d2PC41JrfRPPVaWE5N1hr+F6RGwTZRi8BdlWQh1kqlCS1JsQU+rgFCn VUMDGYRLJInZFr1FdTmVFIecKulsGbg4rVv5WgvGIbu3KYlGagohU/cDy4g44jjy BK/+f8GTlZeq0BeYs3M+r7AYCwz4LzZl/7Yiu0XGzhLNI2dtXW8hnNIDk3qQL4tA mmlAH3dnwRi0KHcfmaJZmraFRfsMW/CZ0eeeONsNvBKVXH8FmCJhzE9NBJSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbEPnLy1FXxlURgWt6U7/F536ObwwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcAFsAYuLTMpQ2i5UL1F/qPyQuvkQD7vrSk ETmzohwc3uT072t77W4r4Sy+82JXK4NvOesuijYxcCmFHLFW/h3GojDaeUJkDOVc bheiIaC2KkynSoyMyA0M+eijpyzkTHuM/6VnE0F8DVLNfy1jgny+K32fbyJrDHS8 skRGlGbbYPaa9ICEKgYoSu5IbsMvr4Du9qXdIpkFPZ2ZeqfS7bQdU7l7KvTIiX+b NiTIxAw8N9wY+ZNcU3/u8HjzWzBeZnGaycbalyPNGqP+sKQQfmU9phv2S/0fReow Dh4afUCDXzu/EttKJX2suLBIkhuNlOZ8+HfYvKxuOAQLWLT04sA= -----END CERTIFICATE-----Generated at Wed Dec 3 18:02:19 2025 by rpki-client