This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: V//lqzGJtdOs129Up7t75hUZt0s85JC7nipLRFMlwLw= Subject key identifier: 07:5F:20:4E:00:F4:B3:66:45:3A:2D:C3:83:40:60:43:6E:2C:58:3D Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 604F1CE077DEE89357AA73A92449624938FB210B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: F4 Signing time: Sun 07 Dec 2025 07:32:02 +0000 Manifest this update: Sun 07 Dec 2025 07:27:02 +0000 Manifest next update: Wed 10 Dec 2025 11:24:02 +0000 Files and hashes: 1: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: jVMuhNv02rgYmvImrlAKDD02gEdJ4hemFSKCnLEis1o=) 2: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4f:1c:e0:77:de:e8:93:57:aa:73:a9:24:49:62:49:38:fb:21:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Dec 7 07:27:02 2025 GMT Not After : Dec 10 11:24:02 2025 GMT Subject: CN=075F204E00F4B366453A2DC3834060436E2C583D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:ee:a4:4b:f7:c8:b5:77:c3:0a:e2:af:09: 00:dd:48:74:f9:cc:33:61:f2:ba:e0:67:4a:65:54: 57:0d:d9:34:dc:c9:f3:92:c5:59:8e:fe:e8:b7:b2: 85:c6:45:4a:47:1c:a5:b6:41:7c:6d:4e:36:df:d9: 8a:f1:d0:6c:77:d8:b0:6f:87:4e:a3:46:89:9d:f2: 57:78:f8:8c:d3:fb:f1:b9:fa:8a:99:c9:11:e0:33: 35:11:06:16:e6:99:05:90:9e:27:38:63:44:bc:61: 33:da:13:98:bf:00:fd:61:10:49:3f:4c:7d:ea:9c: 8c:9f:c1:03:67:6a:82:2e:9a:f8:c9:a2:81:92:02: 37:07:4a:e8:10:13:24:e7:68:cc:5c:58:ef:e6:a2: d7:b8:6d:9b:66:4b:52:23:e5:dc:71:a9:b4:51:41: 6d:86:b1:39:6a:84:53:50:bd:26:6b:c3:75:9c:72: 0e:0f:07:6b:96:74:40:61:8f:cd:da:bc:ba:ba:05: 88:eb:58:d2:66:ff:1a:5e:01:60:5b:1b:6b:2b:4b: 59:34:99:ac:3c:74:69:23:8c:1d:c9:d4:0b:84:a4: 87:1a:ff:e3:da:26:81:07:0a:21:5d:22:29:c4:a1: 2a:8f:16:32:c6:cb:9d:d9:24:45:d5:dc:db:fb:2c: 79:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:20:4E:00:F4:B3:66:45:3A:2D:C3:83:40:60:43:6E:2C:58:3D X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:0c:37:f7:37:b9:94:3f:0b:22:58:1a:7c:0b:dc:55:bf:b4: 25:88:26:24:0e:81:04:f7:c9:b6:30:bd:49:6e:87:47:53:e7: d6:eb:5b:9d:e0:37:2a:06:96:d4:97:b7:1f:ec:6c:24:25:96: a7:83:dd:dd:b7:d8:74:c8:0e:02:54:ae:db:5e:a1:a8:67:89: c4:3c:a8:ed:b0:e3:fa:4f:48:e6:39:f0:da:d4:a2:e3:4b:94: 0b:22:a3:4e:46:6d:55:ca:25:a5:b8:cc:8a:9c:bb:8a:7f:fe: 17:54:56:22:76:16:6b:65:d9:65:00:c4:e8:77:9f:65:06:20: 80:0b:5f:7e:d4:fb:f8:e9:8b:db:e2:dc:94:9a:f4:f2:dc:02: 34:2a:de:17:f8:14:f0:69:61:11:7d:95:94:a4:5d:7f:60:4b: 26:28:7f:8e:00:81:2e:f0:dd:47:da:ba:66:77:44:3d:a4:ea: 1f:70:4f:0d:8e:ef:3c:20:eb:dd:e4:25:82:6d:d2:ae:e4:aa: 12:dc:bd:49:0f:f4:4b:83:e0:2d:d2:35:b6:d5:b2:6a:cd:62: 83:a9:58:6b:61:58:c8:89:07:f2:ca:93:c6:e4:53:36:81:e4: 3f:57:da:9c:46:8a:1c:08:bc:78:51:78:16:fe:54:a7:8b:45: 63:76:11:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYE8c4Hfe6JNXqnOpJEliSTj7IQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTEyMDcwNzI3MDJaFw0yNTEyMTAxMTI0MDJaMDMxMTAvBgNV BAMTKDA3NUYyMDRFMDBGNEIzNjY0NTNBMkRDMzgzNDA2MDQzNkUyQzU4M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKO6kS/fItXfDCuKvCQDdSHT5 zDNh8rrgZ0plVFcN2TTcyfOSxVmO/ui3soXGRUpHHKW2QXxtTjbf2Yrx0Gx32LBv h06jRomd8ld4+IzT+/G5+oqZyRHgMzURBhbmmQWQnic4Y0S8YTPaE5i/AP1hEEk/ TH3qnIyfwQNnaoIumvjJooGSAjcHSugQEyTnaMxcWO/mote4bZtmS1Ij5dxxqbRR QW2GsTlqhFNQvSZrw3Wccg4PB2uWdEBhj83avLq6BYjrWNJm/xpeAWBbG2srS1k0 maw8dGkjjB3J1AuEpIca/+PaJoEHCiFdIinEoSqPFjLGy53ZJEXV3Nv7LHkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB18gTgD0s2ZFOi3Dg0BgQ24sWD0wHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8MN/c3uZQ/CyJYGnwL3FW/tCWIJiQOgQT3 ybYwvUluh0dT59brW53gNyoGltSXtx/sbCQllqeD3d232HTIDgJUrtteoahnicQ8 qO2w4/pPSOY58NrUouNLlAsio05GbVXKJaW4zIqcu4p//hdUViJ2Fmtl2WUAxOh3 n2UGIIALX37U+/jpi9vi3JSa9PLcAjQq3hf4FPBpYRF9lZSkXX9gSyYof44AgS7w 3UfaumZ3RD2k6h9wTw2O7zwg693kJYJt0q7kqhLcvUkP9EuD4C3SNbbVsmrNYoOp WGthWMiJB/LKk8bkUzaB5D9X2pxGihwIvHhReBb+VKeLRWN2EZw= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:46 2025 by rpki-client