This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft File: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft (raw, json) Hash identifier: le7HeCS+bBUrc3MPcTCaFlbB63I8OVpitlAJ2bjiIpw= Subject key identifier: 95:76:EF:3E:EF:38:5D:EC:22:A9:68:C7:50:FD:3F:BC:62:2E:C3:3D Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 Certificate issuer: /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Certificate serial: 78B4AC26C44FD484B04549F6022FB0CB9E7DD973 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 17:52:29 +0000 Manifest this update: Tue 02 Dec 2025 17:47:29 +0000 Manifest next update: Sat 06 Dec 2025 02:18:29 +0000 Files and hashes: 1: 323430353a336463303a3a2f33322d3438203d3e20313332363432.roa (hash: klLZJtnV+xWW7YQzH2mIJ1a0TeqcgHLxJAezwqgVxkg=) 2: 3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (hash: SLH6hiLVAcjKJgYGlgSHzMZrDl0w7mu4FSwj+uEfhtQ=) 3: 3130332e31392e3138302e302f32342d3234203d3e20313332363432.roa (hash: qNqEjSuCjuvM2nb2P9YufyugF7e/EHHhJHg78hVDerc=) 4: 3130332e31392e3138332e302f32342d3234203d3e20313332363432.roa (hash: hpPXUQ5gypmdo+ZfR0ZPUxHpoc6PClgxO5mrZ0mqIsY=) 5: 3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (hash: oFvKKDxpW/0C/Q3mkSaRj7w7VX6MBfKr//38ErGs2CE=) 6: 3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (hash: 3f3jJh3+oWJeudvuDrAqcUf8ITcTw5/zz4360Ggudd4=) 7: 818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl (hash: LWnKonCO0SNiheWllxpz0K/IZTCrACoRAm9B/R/SE7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b4:ac:26:c4:4f:d4:84:b0:45:49:f6:02:2f:b0:cb:9e:7d:d9:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9 Validity Not Before: Dec 2 17:47:29 2025 GMT Not After : Dec 6 02:18:29 2025 GMT Subject: CN=9576EF3EEF385DEC22A968C750FD3FBC622EC33D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:54:5e:30:da:4e:96:af:31:cc:c5:97:f1: 8b:b6:8e:77:28:55:5e:4e:d0:49:1b:68:fb:6a:2c: fe:f9:32:c3:fb:d5:9e:66:17:c0:e8:a9:2e:28:5a: e0:83:3e:30:30:74:59:48:e6:93:a8:71:af:c0:c4: 56:40:11:19:55:55:32:bd:9e:39:3e:24:b9:5b:6f: a2:85:5d:6c:0a:99:c3:3d:0c:f6:47:68:77:78:74: f0:9a:b1:db:c7:d9:82:ca:2e:6c:3c:56:61:85:78: c9:ba:94:60:c7:5c:0f:d7:37:3d:3b:b6:f9:22:f6: 69:62:ba:07:8b:67:e9:1a:c7:55:1b:b8:55:48:5f: 11:0c:24:a3:f6:9f:c8:5a:bb:26:ff:1d:ab:2e:06: a7:33:e8:41:cc:d5:a0:78:28:57:57:6f:70:b6:53: c0:ef:c6:ec:c4:51:9c:4e:ee:de:94:ad:a0:ca:17: 94:6b:e8:62:e1:3c:d3:f0:c8:a2:7b:75:1c:64:61: 49:fe:13:95:72:a3:0f:15:3b:17:f6:3e:35:72:f0: 08:3d:6a:b1:09:6f:98:89:23:91:21:0b:6c:54:ae: 6f:db:d5:70:e7:3a:b1:11:f4:2d:99:b9:6e:86:29: 5d:ec:8e:47:37:ef:a3:64:40:22:27:74:10:cc:40: 04:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:76:EF:3E:EF:38:5D:EC:22:A9:68:C7:50:FD:3F:BC:62:2E:C3:3D X509v3 Authority Key Identifier: keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:09:96:d2:2e:68:9b:16:1a:32:4c:fe:a9:91:93:f6:e4:52: 72:2a:76:bc:e9:9f:5e:5f:1f:79:c9:e4:26:82:27:27:fb:ce: d0:f2:04:1b:bd:96:47:c8:f4:7d:6b:b5:42:cb:2b:37:5a:ca: 56:04:ad:1f:78:af:0e:36:fa:3c:5d:bf:14:2d:4e:02:82:67: 11:77:18:f7:38:2b:ac:2c:f4:c2:22:03:16:9b:bf:03:eb:e4: 94:31:95:cc:f1:02:f2:cf:0a:b1:2d:15:22:cd:cf:cd:ba:05: 80:1a:fa:43:55:50:11:3e:a1:d9:b5:13:0e:d6:65:a3:e2:28: 5a:4f:e1:75:a1:5e:fa:8e:bb:66:20:75:b7:f7:99:36:22:b0: 04:f1:0a:4d:f8:98:68:0a:ef:5c:96:cb:cf:5a:3c:0f:c1:5b: 3e:1b:c6:5d:29:bd:9d:bf:d3:f5:c9:52:a4:ab:75:43:af:27: 8b:13:c6:dd:38:5d:07:a8:2d:3c:6b:e8:32:88:5c:91:30:22: e1:0a:f9:1e:e3:e6:a2:d8:90:08:5b:6e:97:31:40:9b:30:e7: 0b:b2:f0:f2:83:15:00:fd:90:09:f5:35:81:0c:a7:93:22:5d: 93:a6:5c:26:e5:34:6b:c9:48:1a:5c:02:a6:48:e2:be:06:d4: 2b:90:de:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLSsJsRP1ISwRUn2Ai+wy5592XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0 MzdDQThFOTAeFw0yNTEyMDIxNzQ3MjlaFw0yNTEyMDYwMjE4MjlaMDMxMTAvBgNV BAMTKDk1NzZFRjNFRUYzODVERUMyMkE5NjhDNzUwRkQzRkJDNjIyRUMzM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCahVReMNpOlq8xzMWX8Yu2jnco VV5O0EkbaPtqLP75MsP71Z5mF8DoqS4oWuCDPjAwdFlI5pOoca/AxFZAERlVVTK9 njk+JLlbb6KFXWwKmcM9DPZHaHd4dPCasdvH2YLKLmw8VmGFeMm6lGDHXA/XNz07 tvki9mliugeLZ+kax1UbuFVIXxEMJKP2n8hauyb/HasuBqcz6EHM1aB4KFdXb3C2 U8DvxuzEUZxO7t6UraDKF5Rr6GLhPNPwyKJ7dRxkYUn+E5Vyow8VOxf2PjVy8Ag9 arEJb5iJI5EhC2xUrm/b1XDnOrER9C2ZuW6GKV3sjkc376NkQCIndBDMQATxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXbvPu84XewiqWjHUP0/vGIuwz0wHwYDVR0j BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD QThFOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjNzczYzgtZmI1Ni00NDlmLTg2 NDktMTEyZDZlMTY4NmIzLzAvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDRE QjA0MzdDQThFOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgJltIuaJsWGjJM/qmRk/bkUnIqdrzpn15f H3nJ5CaCJyf7ztDyBBu9lkfI9H1rtULLKzdaylYErR94rw42+jxdvxQtTgKCZxF3 GPc4K6ws9MIiAxabvwPr5JQxlczxAvLPCrEtFSLNz826BYAa+kNVUBE+odm1Ew7W ZaPiKFpP4XWhXvqOu2Ygdbf3mTYisATxCk34mGgK71yWy89aPA/BWz4bxl0pvZ2/ 0/XJUqSrdUOvJ4sTxt04XQeoLTxr6DKIXJEwIuEK+R7j5qLYkAhbbpcxQJsw5wuy 8PKDFQD9kAn1NYEMp5MiXZOmXCblNGvJSBpcAqZI4r4G1CuQ3uc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:57 2025 by rpki-client