This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: WCVh2FGZ9Fg8WfF9PrOvSNyyrQDB2m+Y8bAr4AAlSyc= Subject key identifier: C7:92:07:FA:B4:6B:64:1E:FD:C3:3F:80:9E:DD:28:E6:E6:6F:1E:C9 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 57E4A84FCAA8EED9A0B02090BC6767FF9E7D734A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 019C Signing time: Mon 01 Dec 2025 21:52:02 +0000 Manifest this update: Mon 01 Dec 2025 21:47:02 +0000 Manifest next update: Fri 05 Dec 2025 03:27:02 +0000 Files and hashes: 1: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 2: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 3: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 4: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) 5: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: TtFYHE80AFekFQSTLcULYrciBnRpAhBtlaRIsdB2lZs=) 6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 7: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 8: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 9: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e4:a8:4f:ca:a8:ee:d9:a0:b0:20:90:bc:67:67:ff:9e:7d:73:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Dec 1 21:47:02 2025 GMT Not After : Dec 5 03:27:02 2025 GMT Subject: CN=C79207FAB46B641EFDC33F809EDD28E6E66F1EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:ad:f8:47:73:84:87:7c:8d:5d:99:15:e5: e4:9d:4f:47:a7:14:4b:8f:89:3e:f1:12:b1:37:8d: 3c:0e:2d:63:f0:9c:8a:55:3b:26:d4:5e:57:23:09: c3:ba:bf:35:5f:94:e8:0a:b0:71:a2:37:c7:3c:6f: 95:3d:f9:5f:a9:af:73:ac:3a:67:8a:02:4b:56:ad: 0e:bd:ae:9b:ea:85:36:98:6f:95:44:8a:5c:d2:5a: 6b:ea:ff:38:87:c2:29:0e:21:39:da:6b:4a:09:5b: d9:c7:92:60:d6:17:f6:b2:cb:7a:13:bf:a6:68:33: eb:b7:0d:ad:e2:c7:30:50:fd:51:23:ca:06:36:2c: 84:d0:9d:7e:73:ae:c2:c2:e8:18:aa:f1:56:0a:2b: 5a:a1:c4:a6:bc:06:bc:1d:de:81:ff:1a:43:af:06: 9b:d1:86:ce:6e:11:6d:81:44:ae:54:fd:b2:9c:8c: be:7c:ec:5e:d6:ff:8a:d5:cd:bb:f3:5c:db:bb:f7: 6f:a6:6e:96:dc:29:b9:d9:0f:18:32:05:5c:c1:01: 95:4b:63:5d:b8:66:29:29:51:f3:9e:a6:fc:e1:dd: b8:41:d8:d0:30:46:1d:26:1c:18:15:fe:5c:cc:e2: 59:85:ce:57:78:08:2d:7c:ff:0c:87:7a:68:be:11: db:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:92:07:FA:B4:6B:64:1E:FD:C3:3F:80:9E:DD:28:E6:E6:6F:1E:C9 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:d8:89:a0:8b:bc:74:c7:69:b3:22:65:90:ed:60:08:7a:1d: 15:87:30:f1:dc:6e:07:48:cf:5a:99:4e:9a:84:cd:06:0d:dc: c2:d8:0b:26:91:cd:b4:a5:68:41:1a:6d:bf:5b:14:60:ce:41: 5f:0a:fa:9f:03:fc:e9:2d:ee:e2:97:f8:a5:c7:ee:b9:7f:61: 60:c6:d1:b9:52:d3:8f:38:38:99:55:04:69:f2:17:f3:1d:e0: ea:ec:9d:dc:85:63:84:9b:f5:0a:68:99:9c:c6:92:80:67:3e: 64:2b:63:6e:b8:ba:b7:77:b2:5d:f0:f8:2c:7f:be:3c:09:8e: 86:fc:3c:97:7f:8e:f1:29:fe:03:21:d9:88:07:3d:27:e0:d6: 84:78:49:0c:48:b4:ae:89:0c:eb:e6:49:ed:b1:07:fd:8a:a0: 90:5c:11:a4:2b:aa:13:99:b8:32:ea:28:45:a1:1b:40:4d:a7: 97:12:3b:4d:5c:30:3e:e5:7b:3c:dd:d0:90:f8:19:c5:fa:b2: 41:d1:e4:79:f6:84:9e:8b:57:d4:ef:20:84:78:38:b9:b7:b0: ac:6c:f9:5d:0d:96:27:0e:de:23:c9:fd:2b:34:72:94:25:89: 17:71:b6:a3:3a:45:21:e0:d2:24:f5:c2:78:35:39:2e:65:c7: b4:11:bd:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+SoT8qo7tmgsCCQvGdn/559c0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTEyMDEyMTQ3MDJaFw0yNTEyMDUwMzI3MDJaMDMxMTAvBgNV BAMTKEM3OTIwN0ZBQjQ2QjY0MUVGREMzM0Y4MDlFREQyOEU2RTY2RjFFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Sq34R3OEh3yNXZkV5eSdT0en FEuPiT7xErE3jTwOLWPwnIpVOybUXlcjCcO6vzVflOgKsHGiN8c8b5U9+V+pr3Os OmeKAktWrQ69rpvqhTaYb5VEilzSWmvq/ziHwikOITnaa0oJW9nHkmDWF/ayy3oT v6ZoM+u3Da3ixzBQ/VEjygY2LITQnX5zrsLC6Biq8VYKK1qhxKa8Brwd3oH/GkOv BpvRhs5uEW2BRK5U/bKcjL587F7W/4rVzbvzXNu792+mbpbcKbnZDxgyBVzBAZVL Y124ZikpUfOepvzh3bhB2NAwRh0mHBgV/lzM4lmFzld4CC18/wyHemi+EdvDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx5IH+rRrZB79wz+Ant0o5uZvHskwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHYiaCLvHTHabMiZZDtYAh6HRWHMPHcbgdI z1qZTpqEzQYN3MLYCyaRzbSlaEEabb9bFGDOQV8K+p8D/Okt7uKX+KXH7rl/YWDG 0blS0484OJlVBGnyF/Md4OrsndyFY4Sb9QpomZzGkoBnPmQrY264urd3sl3w+Cx/ vjwJjob8PJd/jvEp/gMh2YgHPSfg1oR4SQxItK6JDOvmSe2xB/2KoJBcEaQrqhOZ uDLqKEWhG0BNp5cSO01cMD7lezzd0JD4GcX6skHR5Hn2hJ6LV9TvIIR4OLm3sKxs +V0NlicO3iPJ/Ss0cpQliRdxtqM6RSHg0iT1wng1OS5lx7QRvVE= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:22 2025 by rpki-client