This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: uq4Dc7wDnOfCfL4uQFYCK0JwEnOAkMyZo8aiRHxwKz8= Subject key identifier: 1F:13:1D:C2:63:43:47:46:14:63:A6:D1:73:7F:CB:BF:C3:D2:DE:F6 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 522FE81D2B4338F7751218714845E37C0F44E68B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 021D Signing time: Thu 18 Dec 2025 13:22:27 +0000 Manifest this update: Thu 18 Dec 2025 13:17:27 +0000 Manifest next update: Sun 21 Dec 2025 19:10:27 +0000 Files and hashes: 1: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) 2: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: sV9w3QtWYyEQ1J8xWDTqrdG5s2E9zH4y1UZnx5I2XTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:10:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2f:e8:1d:2b:43:38:f7:75:12:18:71:48:45:e3:7c:0f:44:e6:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Dec 18 13:17:27 2025 GMT Not After : Dec 21 19:10:27 2025 GMT Subject: CN=1F131DC2634347461463A6D1737FCBBFC3D2DEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1d:42:5b:f3:e9:86:cd:ac:59:de:5c:af:e5: 6e:c9:4f:1a:08:b2:70:e0:97:3c:fd:d5:a2:cb:7d: 2d:bb:e2:02:7c:1b:ea:86:38:33:8c:91:72:15:70: 26:68:a3:16:59:be:32:c5:32:cc:65:64:3e:1a:f3: 78:5a:39:88:1d:22:90:9a:e1:d9:1c:0a:46:d9:ee: 55:f9:f8:d1:2a:b9:f1:39:8d:58:76:ba:b8:09:b2: 61:d5:ff:ad:43:2c:4f:02:00:26:f0:62:b2:5e:6f: 58:48:c7:9c:6e:1c:46:2b:7c:55:f1:11:ff:c0:0b: 57:54:5b:8f:50:7e:f2:e9:2e:0b:70:c0:e5:12:88: 20:0c:8b:5d:9d:3a:35:db:b0:64:79:c0:a0:20:53: ed:93:fb:ea:87:c4:8e:41:1c:25:d8:57:f2:74:46: 9a:83:d8:c3:ae:4a:2f:4b:82:31:f0:6a:5f:89:42: a8:19:5f:92:fa:17:c7:38:8c:34:60:58:88:33:ee: 22:93:40:35:4a:dd:15:a7:96:d5:5b:d1:54:23:69: 5f:ca:e0:f4:41:e0:15:eb:32:29:00:c4:8e:84:97: fd:9e:3e:d2:c7:c2:3c:49:d6:b4:7c:d5:63:3d:a9: d8:37:5f:60:53:fe:06:0b:62:2c:76:4c:b9:0c:5f: f5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:13:1D:C2:63:43:47:46:14:63:A6:D1:73:7F:CB:BF:C3:D2:DE:F6 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a0:ce:47:51:fb:85:ec:85:49:cb:e2:26:fc:93:4f:fe:af: 17:5d:ae:f8:e8:65:8d:83:30:cd:c9:5c:d8:a0:69:96:c0:8f: 0a:5c:2a:18:46:51:f4:45:e2:9a:74:07:27:3b:63:36:45:a2: 0d:62:22:d7:84:2b:3d:30:48:80:d8:df:61:29:05:de:a7:04: 05:e9:a3:9d:91:d8:3f:b8:f1:fc:96:14:92:85:14:fe:a1:ea: 56:b1:5f:8d:08:14:8d:58:e7:9f:ee:ff:0f:d6:1d:cc:2b:0e: 4c:65:56:4d:66:74:ce:27:8a:46:36:94:2c:93:13:ed:51:ab: 7d:10:c7:f4:25:5c:9f:0b:45:0b:c0:e3:96:7c:ac:4e:a9:8a: 7d:fa:86:00:f1:cf:80:7c:40:cb:1a:94:6f:61:95:45:01:9c: b6:e3:f9:f4:04:ea:17:93:78:02:7f:77:ee:17:c9:66:fc:0c: 30:e7:b7:82:4a:07:b8:0c:27:af:45:52:a8:c9:4b:db:70:eb: 7f:ed:ad:55:91:e1:7d:20:34:1a:a4:97:f2:70:49:0b:67:14: 17:ba:3b:38:b7:ae:9b:6f:bd:d5:db:22:91:ed:91:e0:05:ab: 46:04:e2:0c:27:26:63:d8:e0:ad:01:47:20:c0:31:66:a8:1f: 2b:6e:7f:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUi/oHStDOPd1EhhxSEXjfA9E5oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTEyMTgxMzE3MjdaFw0yNTEyMjExOTEwMjdaMDMxMTAvBgNV BAMTKDFGMTMxREMyNjM0MzQ3NDYxNDYzQTZEMTczN0ZDQkJGQzNEMkRFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHUJb8+mGzaxZ3lyv5W7JTxoI snDglzz91aLLfS274gJ8G+qGODOMkXIVcCZooxZZvjLFMsxlZD4a83haOYgdIpCa 4dkcCkbZ7lX5+NEqufE5jVh2urgJsmHV/61DLE8CACbwYrJeb1hIx5xuHEYrfFXx Ef/AC1dUW49QfvLpLgtwwOUSiCAMi12dOjXbsGR5wKAgU+2T++qHxI5BHCXYV/J0 RpqD2MOuSi9LgjHwal+JQqgZX5L6F8c4jDRgWIgz7iKTQDVK3RWnltVb0VQjaV/K 4PRB4BXrMikAxI6El/2ePtLHwjxJ1rR81WM9qdg3X2BT/gYLYix2TLkMX/V1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHxMdwmNDR0YUY6bRc3/Lv8PS3vYwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACygzkdR+4XshUnL4ib8k0/+rxddrvjoZY2D MM3JXNigaZbAjwpcKhhGUfRF4pp0Byc7YzZFog1iIteEKz0wSIDY32EpBd6nBAXp o52R2D+48fyWFJKFFP6h6laxX40IFI1Y55/u/w/WHcwrDkxlVk1mdM4nikY2lCyT E+1Rq30Qx/QlXJ8LRQvA45Z8rE6pin36hgDxz4B8QMsalG9hlUUBnLbj+fQE6heT eAJ/d+4XyWb8DDDnt4JKB7gMJ69FUqjJS9tw63/trVWR4X0gNBqkl/JwSQtnFBe6 Ozi3rptvvdXbIpHtkeAFq0YE4gwnJmPY4K0BRyDAMWaoHytufzA= -----END CERTIFICATE-----Generated at Fri Dec 19 01:55:45 2025 by rpki-client