This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: uwa7VH8hOts5ES+up6gp3sP8Dq7mYhhU4WIEw4JDL0I= Subject key identifier: 9A:A2:D4:62:4F:68:8E:9A:3D:BA:92:6B:FF:7B:AD:8A:8F:AA:42:39 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 4951CB0D636BC96D329165D147AE77EC61AEDD3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 02C2 Signing time: Mon 01 Dec 2025 22:21:41 +0000 Manifest this update: Mon 01 Dec 2025 22:16:41 +0000 Manifest next update: Fri 05 Dec 2025 10:20:41 +0000 Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: gonve5wIJ3O85bDiwHHm2xjnNdsU9xH6JAbxD3Ax5a8=) 2: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: 1HMS7hdHDKstX91d5M/e1Af7rGzVFoLwLHzXX6GmoZY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:51:cb:0d:63:6b:c9:6d:32:91:65:d1:47:ae:77:ec:61:ae:dd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Dec 1 22:16:41 2025 GMT Not After : Dec 5 10:20:41 2025 GMT Subject: CN=9AA2D4624F688E9A3DBA926BFF7BAD8A8FAA4239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a3:ce:b7:ab:80:f1:96:e9:28:cc:cc:54:38: 1d:e9:01:f2:85:82:14:55:94:16:a2:64:ee:d2:ca: 9c:cf:14:ee:0a:a4:cb:bb:97:1c:61:33:1e:44:78: 2d:7c:7b:69:4e:ee:74:43:9d:a2:1c:f7:0f:a9:54: ff:67:f6:5b:67:c0:91:bf:7b:ac:7d:83:3d:a9:eb: b6:c3:d2:3e:3e:db:50:f3:b2:66:85:fb:cc:a5:e4: 84:73:01:55:7f:af:34:56:64:12:1c:4a:c6:ef:59: 00:e3:04:50:b1:68:ce:6f:0f:4e:01:12:66:61:f5: 75:52:a1:0e:52:4a:8b:dc:41:c3:2c:e6:cf:f7:2f: bf:b2:5a:53:22:24:2c:a8:7d:3f:7f:ac:d4:7c:f3: 0e:0f:3b:cf:a9:3d:f0:23:31:a7:da:7b:86:8f:f5: d6:50:28:a4:b1:cb:e2:b2:ca:b3:55:71:17:54:fa: 65:6a:27:3f:00:6c:28:bb:1f:05:b2:8c:2e:12:2b: b5:98:f0:10:ca:d9:c8:9a:6c:33:ea:23:90:bc:13: 0d:ac:c5:76:0b:f4:9e:5d:8f:61:69:e0:ed:8b:3a: 77:b4:a1:3b:a2:ed:31:cd:2d:dc:77:0c:45:c8:ab: 25:21:e6:b9:e9:3a:1a:f1:33:f0:f6:08:75:16:2a: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A2:D4:62:4F:68:8E:9A:3D:BA:92:6B:FF:7B:AD:8A:8F:AA:42:39 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b1:bc:ad:47:36:ef:27:d8:8f:49:5a:53:c9:7d:37:f7:9a: ca:99:61:13:f8:b4:96:05:49:29:5b:a8:87:b8:54:09:2c:d4: d6:9e:4a:42:70:92:ff:03:9b:fd:29:ed:66:f3:b0:be:0e:24: 3f:ca:f6:77:43:8c:15:a1:6a:d1:ce:d4:69:0c:71:b9:a2:8c: c1:76:f3:2d:db:0a:cd:65:59:01:f3:25:24:07:30:8f:b3:ec: 76:4f:16:48:9a:3f:49:57:df:74:cb:86:65:95:d5:67:fd:5d: b2:e2:e1:75:ab:66:2e:c3:40:2a:e3:08:c2:d1:1a:99:bf:bb: ad:8d:51:e1:67:2a:59:4c:97:e7:1e:56:04:94:7a:34:c3:9a: 8d:73:1c:23:44:eb:b8:8d:98:4d:d5:da:7f:ae:b0:05:e0:de: b9:f9:e8:88:8e:64:a6:fb:c8:27:be:aa:bf:aa:92:c2:76:99: 30:ce:91:b8:b5:81:ba:28:1f:7f:75:40:17:ba:e9:7e:ff:e6: 1d:39:1f:83:1f:4f:d0:19:87:85:8f:7e:31:2e:98:0f:28:64: 6f:ad:3d:df:32:61:1a:93:04:b5:f7:bf:8b:a4:d0:9c:bd:0b: 09:9b:bc:87:6e:17:50:bd:fd:46:1c:82:67:12:aa:61:e9:e8: 99:c3:fd:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSVHLDWNryW0ykWXRR6537GGu3T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTEyMDEyMjE2NDFaFw0yNTEyMDUxMDIwNDFaMDMxMTAvBgNV BAMTKDlBQTJENDYyNEY2ODhFOUEzREJBOTI2QkZGN0JBRDhBOEZBQTQyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIo863q4DxlukozMxUOB3pAfKF ghRVlBaiZO7SypzPFO4KpMu7lxxhMx5EeC18e2lO7nRDnaIc9w+pVP9n9ltnwJG/ e6x9gz2p67bD0j4+21DzsmaF+8yl5IRzAVV/rzRWZBIcSsbvWQDjBFCxaM5vD04B EmZh9XVSoQ5SSovcQcMs5s/3L7+yWlMiJCyofT9/rNR88w4PO8+pPfAjMafae4aP 9dZQKKSxy+KyyrNVcRdU+mVqJz8AbCi7HwWyjC4SK7WY8BDK2ciabDPqI5C8Ew2s xXYL9J5dj2Fp4O2LOne0oTui7THNLdx3DEXIqyUh5rnpOhrxM/D2CHUWKmf3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqLUYk9ojpo9upJr/3utio+qQjkwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADixvK1HNu8n2I9JWlPJfTf3msqZYRP4tJYF SSlbqIe4VAks1NaeSkJwkv8Dm/0p7WbzsL4OJD/K9ndDjBWhatHO1GkMcbmijMF2 8y3bCs1lWQHzJSQHMI+z7HZPFkiaP0lX33TLhmWV1Wf9XbLi4XWrZi7DQCrjCMLR Gpm/u62NUeFnKllMl+ceVgSUejTDmo1zHCNE67iNmE3V2n+usAXg3rn56IiOZKb7 yCe+qr+qksJ2mTDOkbi1gbooH391QBe66X7/5h05H4MfT9AZh4WPfjEumA8oZG+t Pd8yYRqTBLX3v4uk0Jy9CwmbvIduF1C9/UYcgmcSqmHp6JnD/Uw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:23 2025 by rpki-client