This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: Xw0mZYkyKt8aL5hAyM70NRlFnzXMkdPdxq0he3Kl06s= Subject key identifier: 9C:45:FA:83:09:D4:1C:C6:47:29:DC:A1:31:7E:7A:F1:B7:28:74:58 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 3683C047DC1A989BD254ABFA3E538DE22CAABA8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 0206 Signing time: Mon 01 Dec 2025 12:30:40 +0000 Manifest this update: Mon 01 Dec 2025 12:25:40 +0000 Manifest next update: Thu 04 Dec 2025 20:58:40 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: fA6pAWrVfyhVw7UhzfzwmRrjU8DPtQRbKTnPjMC3e60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:83:c0:47:dc:1a:98:9b:d2:54:ab:fa:3e:53:8d:e2:2c:aa:ba:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Dec 1 12:25:40 2025 GMT Not After : Dec 4 20:58:40 2025 GMT Subject: CN=9C45FA8309D41CC64729DCA1317E7AF1B7287458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:df:59:e0:7b:37:b4:90:a3:38:45:08:f9: a2:90:31:78:fb:2f:25:08:1b:53:22:50:0e:20:59: 8d:03:88:19:28:8d:c7:30:69:ae:95:d3:38:51:44: f9:03:33:7e:83:17:9a:24:e5:1a:9b:33:2d:1d:37: bb:8d:e2:69:07:42:7b:7c:da:27:6e:74:ac:1f:90: a9:0f:14:32:bb:da:ab:db:0e:e4:a7:fd:3c:3b:05: a3:82:ed:96:bc:3a:00:18:c0:83:84:03:85:e9:4e: 85:50:be:00:f5:9e:e4:8c:09:e7:06:83:84:3d:3f: 13:9c:0b:05:5b:5c:7c:9d:b5:a2:de:24:e7:83:c8: 4e:8f:66:1c:6c:88:64:d7:8c:08:df:f8:9f:3f:1c: 94:69:58:39:97:85:89:bb:7c:d4:2e:3e:da:bf:86: c2:4b:31:e3:f1:c4:27:19:dd:cd:77:db:87:3e:ab: d4:10:18:56:cc:2c:d2:09:f3:25:52:ba:ee:70:f0: 81:65:0f:d2:a0:66:c3:c8:ff:e9:3d:06:94:01:43: 40:35:73:16:3f:e4:aa:57:bd:e4:40:8b:1b:83:a5: ca:43:fd:cc:60:7d:8d:2b:f3:73:e9:3a:e9:36:58: 6c:bf:5d:df:e3:c2:f3:63:48:d6:88:dd:c2:1d:43: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:45:FA:83:09:D4:1C:C6:47:29:DC:A1:31:7E:7A:F1:B7:28:74:58 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a0:01:fc:01:9e:7b:1f:9b:0b:94:53:13:af:07:3c:0f:81: 52:36:f1:0d:25:22:a5:48:eb:c8:6b:05:0b:b9:9a:19:9a:db: d5:cb:77:70:18:d6:c7:f0:44:c1:4a:e5:dd:1e:b3:31:bb:fb: 5e:18:36:b9:10:44:9b:00:1f:1d:a7:3d:0c:71:3b:74:ad:a0: 33:11:23:4e:be:3c:ed:7f:77:25:1c:b8:ed:bc:e2:62:d7:f7: 55:a4:2c:44:53:c1:6e:b0:7e:e9:56:74:b8:92:a1:f3:56:29: 23:69:88:83:35:ac:30:33:3e:b5:7b:bc:8d:13:1a:4e:df:0a: 54:be:2a:63:94:b7:4c:8c:b8:17:27:81:68:cd:d5:49:c1:ce: a1:b7:85:cf:7d:9f:3f:a0:85:cf:3d:13:d6:2e:41:63:1c:2d: 6b:70:af:78:77:83:4b:a9:72:02:b6:9c:9c:2b:39:9e:d2:a9: f3:e6:7c:dc:3e:3d:b8:36:f5:96:bc:fb:86:9b:03:e9:2f:0e: df:26:fc:69:9c:ad:cc:18:59:96:27:41:8d:a7:30:59:19:9d: a9:8e:7f:50:33:25:da:c9:91:c8:ee:ab:c3:2d:90:85:c2:fc: c9:53:f5:b4:d6:c7:da:cb:35:bf:32:e8:9d:01:8b:99:0f:9b: 09:89:01:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNoPAR9wamJvSVKv6PlON4iyquo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTEyMDExMjI1NDBaFw0yNTEyMDQyMDU4NDBaMDMxMTAvBgNV BAMTKDlDNDVGQTgzMDlENDFDQzY0NzI5RENBMTMxN0U3QUYxQjcyODc0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P99Z4Hs3tJCjOEUI+aKQMXj7 LyUIG1MiUA4gWY0DiBkojccwaa6V0zhRRPkDM36DF5ok5RqbMy0dN7uN4mkHQnt8 2idudKwfkKkPFDK72qvbDuSn/Tw7BaOC7Za8OgAYwIOEA4XpToVQvgD1nuSMCecG g4Q9PxOcCwVbXHydtaLeJOeDyE6PZhxsiGTXjAjf+J8/HJRpWDmXhYm7fNQuPtq/ hsJLMePxxCcZ3c1324c+q9QQGFbMLNIJ8yVSuu5w8IFlD9KgZsPI/+k9BpQBQ0A1 cxY/5KpXveRAixuDpcpD/cxgfY0r83PpOuk2WGy/Xd/jwvNjSNaI3cIdQ6XNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEX6gwnUHMZHKdyhMX568bcodFgwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2gAfwBnnsfmwuUUxOvBzwPgVI28Q0lIqVI 68hrBQu5mhma29XLd3AY1sfwRMFK5d0eszG7+14YNrkQRJsAHx2nPQxxO3StoDMR I06+PO1/dyUcuO284mLX91WkLERTwW6wfulWdLiSofNWKSNpiIM1rDAzPrV7vI0T Gk7fClS+KmOUt0yMuBcngWjN1UnBzqG3hc99nz+ghc89E9YuQWMcLWtwr3h3g0up cgK2nJwrOZ7SqfPmfNw+Pbg29Za8+4abA+kvDt8m/GmcrcwYWZYnQY2nMFkZnamO f1AzJdrJkcjuq8MtkIXC/MlT9bTWx9rLNb8y6J0Bi5kPmwmJAbM= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:13 2025 by rpki-client