This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft File: 83AA9F8209933310C87D9F85BD2379EACC6108B2.mft (raw, json) Hash identifier: tC9/U7cpG76jpARUwtkRFfG6iFyx6hixOZ9wEGAVX7Y= Subject key identifier: 86:ED:55:2E:32:20:4F:9F:3C:77:75:01:7B:D6:F2:A9:C3:53:8D:BB Authority key identifier: 83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 Certificate issuer: /CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Certificate serial: 6723E5A03B3635745B1DA97729D9C9BFA761ABE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft Manifest number: 0156 Signing time: Tue 02 Dec 2025 21:31:14 +0000 Manifest this update: Tue 02 Dec 2025 21:26:14 +0000 Manifest next update: Sat 06 Dec 2025 03:33:14 +0000 Files and hashes: 1: 3130332e3138392e3139372e302f32342d3234203d3e20313439393132.roa (hash: /9PZtxYTnuYAjZ8V+irC2Dshf64qaJaF9/SVuE03VjY=) 2: 83AA9F8209933310C87D9F85BD2379EACC6108B2.crl (hash: ry5RcaDwcFWd8Ez/m97ZABorWDufZFyK4TTW9U/ZtAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:33:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:23:e5:a0:3b:36:35:74:5b:1d:a9:77:29:d9:c9:bf:a7:61:ab:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83AA9F8209933310C87D9F85BD2379EACC6108B2 Validity Not Before: Dec 2 21:26:14 2025 GMT Not After : Dec 6 03:33:14 2025 GMT Subject: CN=86ED552E32204F9F3C7775017BD6F2A9C3538DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:74:6a:8c:cd:af:fe:1e:02:04:d7:b6:e7:e9: 6a:de:64:ef:7e:1f:8c:22:41:d7:08:c9:44:fb:47: 81:6f:86:70:6d:a3:c5:91:7c:e0:11:75:67:92:f7: 64:71:c0:ba:09:b9:64:4e:b7:b9:77:05:1c:2e:9f: 0c:b8:8b:8d:4e:6a:70:2e:4b:7c:82:05:0d:4b:16: 29:eb:34:ab:5b:04:69:ff:ef:c3:90:3c:c7:5c:d9: 19:5a:ab:42:00:be:d3:7b:ed:24:8b:34:a5:94:99: 1c:fa:65:99:13:f5:93:91:5a:cf:ff:22:8b:b7:ce: be:9c:fe:e2:bc:91:6f:82:e2:05:7b:34:be:07:5d: a1:c5:e8:d4:40:dc:36:a6:da:3a:ca:06:4a:c6:cb: 74:c0:63:76:c0:cb:43:f3:e2:47:c9:04:5c:82:cb: 4c:85:5d:2d:5f:7f:8c:a6:e4:c6:fc:40:f5:9d:d4: f9:af:71:25:d2:63:40:15:bc:5c:53:3c:dd:b1:7e: a8:d2:e6:9d:bf:05:de:0c:84:f3:32:54:55:c3:ad: 35:84:df:91:ea:e7:63:42:a3:f2:6b:ef:8d:6f:2f: 59:de:aa:6c:34:4c:96:84:09:60:a8:49:cf:63:0d: c2:12:ab:8d:fa:d1:d3:36:46:a0:57:3d:66:eb:7b: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:ED:55:2E:32:20:4F:9F:3C:77:75:01:7B:D6:F2:A9:C3:53:8D:BB X509v3 Authority Key Identifier: keyid:83:AA:9F:82:09:93:33:10:C8:7D:9F:85:BD:23:79:EA:CC:61:08:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83AA9F8209933310C87D9F85BD2379EACC6108B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/337e094c-c93b-4d72-b9f2-75b252ab83f9/0/83AA9F8209933310C87D9F85BD2379EACC6108B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:36:b2:55:a4:b6:0a:fb:d5:3e:7e:8e:d7:18:cf:d4:7e:b4: c2:b2:3f:81:27:9a:dc:29:96:7a:14:bf:e2:99:d8:0a:74:a7: 92:fc:c5:f3:3e:61:76:18:64:f2:9f:b4:9a:f3:a3:35:8c:e4: 3d:27:98:5e:8f:e1:1a:ae:16:fb:ca:b7:cb:df:29:f9:e0:b2: c5:c5:9d:7b:7a:ed:47:7c:09:8a:15:a3:52:24:59:8b:20:13: f8:97:ab:6a:cf:6f:47:f6:5d:73:6a:5f:6b:a9:85:46:3f:f3: f7:08:d8:03:4e:9c:a5:fd:43:79:ac:d4:71:4a:b0:a1:51:b3: 50:c3:33:31:15:10:e1:e8:62:f8:82:de:78:35:6c:c2:50:73: e7:96:09:b6:3b:7c:e9:e7:05:b0:69:72:ec:08:9e:0b:d8:48: 3a:d4:1f:0f:ae:8d:d0:bf:c0:24:81:46:3f:f0:6a:07:b9:98: bf:47:ed:1e:40:5d:ca:da:10:eb:8b:d9:9e:d3:30:cf:01:09: 3f:ba:f6:5d:e0:91:05:7c:2d:84:dd:22:93:af:f0:d6:84:f9: 4c:46:65:69:00:f2:38:0c:3f:4c:42:9a:33:2d:3b:0f:9a:c4: bd:17:df:3e:8b:0c:89:c6:43:de:77:66:ae:e8:50:ff:34:6f: 98:28:fa:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZyPloDs2NXRbHal3KdnJv6dhq+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFD QzYxMDhCMjAeFw0yNTEyMDIyMTI2MTRaFw0yNTEyMDYwMzMzMTRaMDMxMTAvBgNV BAMTKDg2RUQ1NTJFMzIyMDRGOUYzQzc3NzUwMTdCRDZGMkE5QzM1MzhEQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3dGqMza/+HgIE17bn6WreZO9+ H4wiQdcIyUT7R4FvhnBto8WRfOARdWeS92RxwLoJuWROt7l3BRwunwy4i41OanAu S3yCBQ1LFinrNKtbBGn/78OQPMdc2Rlaq0IAvtN77SSLNKWUmRz6ZZkT9ZORWs// Iou3zr6c/uK8kW+C4gV7NL4HXaHF6NRA3Dam2jrKBkrGy3TAY3bAy0Pz4kfJBFyC y0yFXS1ff4ym5Mb8QPWd1PmvcSXSY0AVvFxTPN2xfqjS5p2/Bd4MhPMyVFXDrTWE 35Hq52NCo/Jr741vL1neqmw0TJaECWCoSc9jDcISq4360dM2RqBXPWbrexdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhu1VLjIgT588d3UBe9byqcNTjbswHwYDVR0j BBgwFoAUg6qfggmTMxDIfZ+FvSN56sxhCLIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzdlMDk0Yy1jOTNiLTRkNzItYjlmMi03NWIyNTJhYjgzZjkvMC84M0FBOUY4MjA5 OTMzMzEwQzg3RDlGODVCRDIzNzlFQUNDNjEwOEIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5RUFDQzYx MDhCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM3ZTA5NGMtYzkzYi00ZDcyLWI5 ZjItNzViMjUyYWI4M2Y5LzAvODNBQTlGODIwOTkzMzMxMEM4N0Q5Rjg1QkQyMzc5 RUFDQzYxMDhCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC82slWktgr71T5+jtcYz9R+tMKyP4Enmtwp lnoUv+KZ2Ap0p5L8xfM+YXYYZPKftJrzozWM5D0nmF6P4RquFvvKt8vfKfngssXF nXt67Ud8CYoVo1IkWYsgE/iXq2rPb0f2XXNqX2uphUY/8/cI2ANOnKX9Q3ms1HFK sKFRs1DDMzEVEOHoYviC3ng1bMJQc+eWCbY7fOnnBbBpcuwIngvYSDrUHw+ujdC/ wCSBRj/wage5mL9H7R5AXcraEOuL2Z7TMM8BCT+69l3gkQV8LYTdIpOv8NaE+UxG ZWkA8jgMP0xCmjMtOw+axL0X3z6LDInGQ953Zq7oUP80b5go+oM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:20:42 2025 by rpki-client