This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft File: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft (raw, json) Hash identifier: sSp0QVZ6dlDlRSRYbWP+7pcrmEXTTkm1hiR3TT9O17o= Subject key identifier: 65:F4:3F:C2:05:2E:02:E4:D2:5B:3D:48:7E:89:12:F4:FD:60:51:81 Authority key identifier: 87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 Certificate issuer: /CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Certificate serial: 775B26CD7701A8AE91549C9F775971A94BF392B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft Manifest number: 0216 Signing time: Tue 02 Dec 2025 03:42:27 +0000 Manifest this update: Tue 02 Dec 2025 03:37:27 +0000 Manifest next update: Fri 05 Dec 2025 13:09:27 +0000 Files and hashes: 1: 8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl (hash: qSw3leHnQiH0z34HZfCzpoOxyrn714/mydfhjZ+O//8=) 2: 3130332e32302e31362e302f32342d3234203d3e20313439393633.roa (hash: zDyrXTGOoVhoyVXFQzLfzvSBhhtitp+cvr9nrYj9PZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:09:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5b:26:cd:77:01:a8:ae:91:54:9c:9f:77:59:71:a9:4b:f3:92:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8714172B5D3FC9C36A83EBA27AB946FC69A4F821 Validity Not Before: Dec 2 03:37:27 2025 GMT Not After : Dec 5 13:09:27 2025 GMT Subject: CN=65F43FC2052E02E4D25B3D487E8912F4FD605181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:b5:a3:72:df:b5:3d:7c:24:8d:c1:4b:77: a1:3a:2f:1e:42:7b:7a:b0:0b:26:05:67:a9:f4:f9: da:69:8a:6a:2e:c6:2d:a4:d2:56:27:8b:42:70:56: 90:89:a9:53:80:e9:de:1e:a4:e4:4d:2f:2c:9e:0e: f1:86:19:1a:37:ff:36:de:72:a7:10:8e:8a:e2:a0: ab:ad:1d:2a:5b:a8:2d:55:e3:7d:e5:db:f6:5d:58: 78:f9:38:e1:24:db:36:96:eb:dc:91:5a:cc:58:47: a6:6b:71:72:d2:84:bf:f3:7c:42:ad:c8:59:fa:65: 62:fa:a5:e6:b6:a5:c1:29:1c:6b:cf:81:6b:c9:59: f0:d6:d8:9b:c7:2e:b8:c3:65:4d:ba:49:5d:75:d9: b7:7f:b5:7e:40:3d:0a:c6:02:8b:24:19:32:ff:9b: 84:a3:90:bd:af:db:53:c7:45:89:8d:41:c9:ac:bc: 47:19:af:f7:06:fd:16:c2:be:89:bf:ca:4f:98:d8: 29:5b:42:42:30:ab:19:a3:ed:ba:95:d2:b9:e2:ff: b0:3f:93:86:bc:cf:57:f7:57:ba:9c:52:20:45:41: ff:ba:e7:4a:99:1c:8a:5d:24:8a:92:90:0b:28:a3: c4:d9:60:2b:0e:b4:90:62:a7:6d:a4:ca:f9:5b:be: 2c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:F4:3F:C2:05:2E:02:E4:D2:5B:3D:48:7E:89:12:F4:FD:60:51:81 X509v3 Authority Key Identifier: keyid:87:14:17:2B:5D:3F:C9:C3:6A:83:EB:A2:7A:B9:46:FC:69:A4:F8:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643db7d2-b3fd-4214-b6a4-d0162f95e72e/0/8714172B5D3FC9C36A83EBA27AB946FC69A4F821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:69:bc:b8:a9:36:b9:56:5b:03:c0:c5:05:8e:4c:d3:36:20: 9a:2d:af:07:56:d1:c1:39:e2:ed:52:a4:3a:35:2d:7c:fa:76: 6a:df:b6:07:4d:15:0e:ca:23:9f:d6:b7:d8:75:87:2d:a4:30: 67:27:40:7a:73:bf:73:61:f1:56:49:ae:fd:52:1c:33:a1:21: ff:a8:95:25:42:a1:ab:2b:54:fc:1d:98:26:6d:b9:3e:25:15: f8:a0:18:57:e0:03:f2:6e:67:c9:29:7d:f5:f1:76:6c:a6:0a: 82:3c:ae:9e:17:0e:30:c5:6c:c0:2d:b8:62:27:ec:bb:95:5d: 57:7d:a9:c2:ec:3d:2a:ed:12:df:71:8d:de:6e:db:6e:72:f1: e8:8f:78:45:79:74:ff:88:70:81:65:0c:80:91:3d:f3:30:cd: fc:6e:e3:6b:8d:cb:bf:bc:83:e9:1a:98:aa:4d:65:33:44:48: f2:53:e2:c1:32:07:53:8b:35:35:a0:ec:16:10:a2:42:35:fc: 8c:db:7b:7a:db:67:09:45:75:43:25:cc:e1:98:5f:5e:65:3b: c7:12:f3:c6:93:bb:87:8f:8f:09:21:2d:cd:70:f9:24:2f:7c: da:f8:93:10:59:49:01:4f:85:7d:23:ca:1a:78:3e:a2:b6:db: 00:20:b1:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1smzXcBqK6RVJyfd1lxqUvzkrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2 OUE0RjgyMTAeFw0yNTEyMDIwMzM3MjdaFw0yNTEyMDUxMzA5MjdaMDMxMTAvBgNV BAMTKDY1RjQzRkMyMDUyRTAyRTREMjVCM0Q0ODdFODkxMkY0RkQ2MDUxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQFbWjct+1PXwkjcFLd6E6Lx5C e3qwCyYFZ6n0+dppimouxi2k0lYni0JwVpCJqVOA6d4epORNLyyeDvGGGRo3/zbe cqcQjorioKutHSpbqC1V433l2/ZdWHj5OOEk2zaW69yRWsxYR6ZrcXLShL/zfEKt yFn6ZWL6pea2pcEpHGvPgWvJWfDW2JvHLrjDZU26SV112bd/tX5APQrGAoskGTL/ m4SjkL2v21PHRYmNQcmsvEcZr/cG/RbCvom/yk+Y2ClbQkIwqxmj7bqV0rni/7A/ k4a8z1f3V7qcUiBFQf+650qZHIpdJIqSkAsoo8TZYCsOtJBip22kyvlbviz9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZfQ/wgUuAuTSWz1IfokS9P1gUYEwHwYDVR0j BBgwFoAUhxQXK10/ycNqg+uierlG/Gmk+CEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDNkYjdkMi1iM2ZkLTQyMTQtYjZhNC1kMDE2MmY5NWU3MmUvMC84NzE0MTcyQjVE M0ZDOUMzNkE4M0VCQTI3QUI5NDZGQzY5QTRGODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2RkM2OUE0 RjgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzZGI3ZDItYjNmZC00MjE0LWI2 YTQtZDAxNjJmOTVlNzJlLzAvODcxNDE3MkI1RDNGQzlDMzZBODNFQkEyN0FCOTQ2 RkM2OUE0RjgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClpvLipNrlWWwPAxQWOTNM2IJotrwdW0cE5 4u1SpDo1LXz6dmrftgdNFQ7KI5/Wt9h1hy2kMGcnQHpzv3Nh8VZJrv1SHDOhIf+o lSVCoasrVPwdmCZtuT4lFfigGFfgA/JuZ8kpffXxdmymCoI8rp4XDjDFbMAtuGIn 7LuVXVd9qcLsPSrtEt9xjd5u225y8eiPeEV5dP+IcIFlDICRPfMwzfxu42uNy7+8 g+kamKpNZTNESPJT4sEyB1OLNTWg7BYQokI1/Izbe3rbZwlFdUMlzOGYX15lO8cS 88aTu4ePjwkhLc1w+SQvfNr4kxBZSQFPhX0jyhp4PqK22wAgsTc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:22 2025 by rpki-client