This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: KtuD7Y42bxInWrCemHqcYRtWvAjakhMmoLSJtdc6DlU= Subject key identifier: 9D:87:04:DE:58:B8:F4:6A:85:E8:4A:0B:1B:18:1A:8C:ED:8D:37:F0 Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 017BEE74E7B330F82314CE0DD2890187FA85D80A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01D1 Signing time: Tue 02 Dec 2025 19:32:27 +0000 Manifest this update: Tue 02 Dec 2025 19:27:27 +0000 Manifest next update: Fri 05 Dec 2025 20:44:27 +0000 Files and hashes: 1: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: V0pydTaIefY8jeX9aEfCc4lybdau+M637xpEFMl8IXw=) 2: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=) 3: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7b:ee:74:e7:b3:30:f8:23:14:ce:0d:d2:89:01:87:fa:85:d8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Dec 2 19:27:27 2025 GMT Not After : Dec 5 20:44:27 2025 GMT Subject: CN=9D8704DE58B8F46A85E84A0B1B181A8CED8D37F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:26:ce:8e:a9:7a:9d:ec:03:c5:d7:64:50: 33:4b:37:5a:c5:f1:b4:56:b3:da:c5:f1:9d:6c:a6: 99:ef:44:b3:38:e6:09:f5:5c:a4:5d:59:3b:a2:0c: a6:c0:4e:be:c5:6f:20:b7:56:0e:5d:36:ce:7a:da: 4d:25:20:02:2d:f2:53:af:c1:4e:c4:10:70:f1:b1: 97:fd:a4:2b:d7:09:16:25:8d:a9:d3:45:b4:79:e1: 94:69:03:b4:ee:74:cb:5f:d5:e8:d8:c3:9d:c0:ef: cd:35:6e:67:a5:db:88:52:10:54:20:45:2a:7e:5c: ac:4e:a0:ad:2c:98:9e:a7:e7:d9:0b:dc:8e:ca:4b: 0f:0b:2d:07:b5:35:d9:26:5a:f4:46:c3:56:f5:79: af:ae:d4:57:02:9c:50:e1:85:ba:73:5e:52:39:93: a6:cc:d6:35:e8:92:ae:4c:63:98:03:41:2a:d0:9f: 90:df:e1:fd:af:b8:78:7b:4e:f6:bf:25:cc:e4:09: 5b:0b:0f:6e:76:da:ef:ee:ff:ff:e6:be:54:a1:ac: 11:b3:10:ac:1e:7f:3f:41:d3:ee:6b:7a:46:9e:88: fb:a4:08:be:c8:76:d7:c1:d7:c6:6b:b4:5b:81:ef: 84:ed:75:f9:f5:58:01:ca:88:f4:40:08:cd:21:c9: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:04:DE:58:B8:F4:6A:85:E8:4A:0B:1B:18:1A:8C:ED:8D:37:F0 X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e6:da:11:37:d6:83:55:3b:af:37:9b:e8:ab:e8:bd:29:dd: ca:a6:ac:29:bb:4e:a1:17:5f:12:54:2b:9e:24:45:f3:18:be: 7d:1e:5b:3c:45:89:c5:ee:2d:39:69:0b:a5:a8:87:d3:22:1a: 15:99:89:ad:43:ff:b2:1d:26:82:b2:bf:31:67:da:a5:40:4b: ef:6e:0b:e8:67:be:67:40:7c:51:32:03:fb:35:cf:2e:da:c0: ce:34:b0:06:73:c2:fa:0e:30:82:8a:25:08:22:b3:e6:df:a4: fd:f0:2e:f9:03:99:23:4c:fe:33:60:e8:c6:45:f7:0c:d5:1c: f4:6f:06:c1:1b:63:e1:01:4d:54:73:11:2b:3f:4a:d5:67:6e: 89:e5:c9:16:f3:5a:23:b3:5f:b4:6b:03:3b:3f:f7:7e:60:d3: 60:8d:8f:28:d6:81:c2:86:10:46:c3:91:06:b6:5a:9f:25:e3: 62:19:2a:cb:3a:a2:0a:ff:eb:ff:9e:39:ea:38:c3:5a:4a:c8: d7:89:34:6c:18:b7:aa:09:5f:c1:51:46:58:ab:3f:43:12:1f: aa:35:38:65:ee:9d:9a:8e:e3:46:fa:e4:16:a3:1a:df:31:73: d1:1a:4a:5a:08:f3:2c:1a:71:7f:f5:24:a6:68:2b:69:c4:cb: d6:5b:2a:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXvudOezMPgjFM4N0okBh/qF2AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTEyMDIxOTI3MjdaFw0yNTEyMDUyMDQ0MjdaMDMxMTAvBgNV BAMTKDlEODcwNERFNThCOEY0NkE4NUU4NEEwQjFCMTgxQThDRUQ4RDM3RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwEybOjql6newDxddkUDNLN1rF 8bRWs9rF8Z1sppnvRLM45gn1XKRdWTuiDKbATr7FbyC3Vg5dNs562k0lIAIt8lOv wU7EEHDxsZf9pCvXCRYljanTRbR54ZRpA7TudMtf1ejYw53A7801bmel24hSEFQg RSp+XKxOoK0smJ6n59kL3I7KSw8LLQe1NdkmWvRGw1b1ea+u1FcCnFDhhbpzXlI5 k6bM1jXokq5MY5gDQSrQn5Df4f2vuHh7Tva/JczkCVsLD2522u/u///mvlShrBGz EKwefz9B0+5rekaeiPukCL7IdtfB18ZrtFuB74Ttdfn1WAHKiPRACM0hyS4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnYcE3li49GqF6EoLGxgajO2NN/AwHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTm2hE31oNVO683m+ir6L0p3cqmrCm7TqEX XxJUK54kRfMYvn0eWzxFicXuLTlpC6Woh9MiGhWZia1D/7IdJoKyvzFn2qVAS+9u C+hnvmdAfFEyA/s1zy7awM40sAZzwvoOMIKKJQgis+bfpP3wLvkDmSNM/jNg6MZF 9wzVHPRvBsEbY+EBTVRzESs/StVnbonlyRbzWiOzX7RrAzs/935g02CNjyjWgcKG EEbDkQa2Wp8l42IZKss6ogr/6/+eOeo4w1pKyNeJNGwYt6oJX8FRRlirP0MSH6o1 OGXunZqO40b65BajGt8xc9EaSloI8ywacX/1JKZoK2nEy9ZbKqA= -----END CERTIFICATE-----Generated at Wed Dec 3 12:46:13 2025 by rpki-client