This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft File: 8762A545785B5A6352FB7DA20689CECA8A47432E.mft (raw, json) Hash identifier: WYIlw9Ft/8l62bIY15ocN7ZM/Fl4NBKcjEf2gzo5c9k= Subject key identifier: 0E:A4:05:42:EA:B7:D1:7E:A9:8F:FF:1A:8D:BF:87:06:18:2C:CB:76 Authority key identifier: 87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E Certificate issuer: /CN=8762A545785B5A6352FB7DA20689CECA8A47432E Certificate serial: 26CF1C9AE47E43C5E44922F878A77C59AD16B0B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft Manifest number: 0139 Signing time: Mon 01 Dec 2025 22:02:28 +0000 Manifest this update: Mon 01 Dec 2025 21:57:28 +0000 Manifest next update: Fri 05 Dec 2025 07:44:28 +0000 Files and hashes: 1: 8762A545785B5A6352FB7DA20689CECA8A47432E.crl (hash: 8gvHP4iOmYflP/WNjcur1qQwqYRQR6EVppfkVSv3fwc=) 2: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: 85HD3reiEjdkfQdQr7+NqjILaObNFWfX8Cb4+3Rhne0=) 3: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: lji/vTMkb0wOaoJDSAf5I41zHxz28OXK0EJIORWWggo=) 4: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: +NIjwWcX32iENUI6CwGHVjqpRn9w8NoFIe/Bw+4LZl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:cf:1c:9a:e4:7e:43:c5:e4:49:22:f8:78:a7:7c:59:ad:16:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8762A545785B5A6352FB7DA20689CECA8A47432E Validity Not Before: Dec 1 21:57:28 2025 GMT Not After : Dec 5 07:44:28 2025 GMT Subject: CN=0EA40542EAB7D17EA98FFF1A8DBF8706182CCB76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:fd:b4:f1:e7:55:e5:3a:94:c0:81:2c:ef: cd:01:3b:fe:b2:a9:19:42:b9:a8:df:db:78:9c:9a: c6:9b:7a:a6:9e:37:06:eb:88:b6:7b:f1:2b:65:fe: 76:5a:a7:78:18:5f:c6:21:f1:84:5e:f0:f4:89:21: 01:8c:62:64:d2:65:f8:da:25:cd:c2:47:b3:31:d7: 60:4d:9b:a7:6a:79:64:63:35:1b:85:55:67:7a:9f: 28:d1:fc:7d:e8:83:cb:68:ef:aa:ae:d6:9d:33:65: 40:f5:f8:8e:42:2c:15:2e:ab:ab:15:1c:4e:c9:fa: 1c:00:a7:02:36:f8:68:63:b6:a0:15:ad:a0:b3:f6: 94:ac:51:68:91:7b:f8:2e:ab:e2:e7:9d:1a:5a:36: bb:ee:de:81:10:f1:9d:11:45:24:63:99:61:82:e6: 4a:7f:8f:0d:57:80:58:ab:68:8f:d2:51:3e:ca:d8: bd:76:f9:ca:a4:aa:cf:f7:7d:9b:9d:0e:0d:de:af: 28:37:82:7f:7a:3b:29:ee:04:fe:dc:e0:df:c9:ba: 9c:51:d5:35:72:b6:c1:08:6b:01:ae:58:c9:1b:05: 82:ec:25:c7:3f:a1:db:a9:de:9b:0e:27:37:11:03: b7:35:fc:6f:6f:23:b1:f3:eb:e2:65:12:da:64:ea: b5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A4:05:42:EA:B7:D1:7E:A9:8F:FF:1A:8D:BF:87:06:18:2C:CB:76 X509v3 Authority Key Identifier: keyid:87:62:A5:45:78:5B:5A:63:52:FB:7D:A2:06:89:CE:CA:8A:47:43:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8762A545785B5A6352FB7DA20689CECA8A47432E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/8762A545785B5A6352FB7DA20689CECA8A47432E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:75:a7:0b:c0:61:0f:fc:17:66:1d:17:74:1b:97:38:55:35: 04:ab:29:17:37:8c:48:49:8b:f2:07:1d:a2:84:44:66:89:68: ee:0e:2f:44:98:0d:ce:04:a1:5b:94:7a:7e:a8:ec:fc:9d:a2: 2a:d5:ad:34:ba:a7:6e:15:97:f8:1f:d6:e7:5e:17:d8:4d:bc: 4f:12:0d:da:65:98:7e:c0:2e:8a:97:8a:9a:b8:bc:82:fd:3f: 06:a1:39:81:ca:ed:cc:f3:34:5f:6e:a9:b4:9c:ad:d0:5b:9a: ec:81:f2:3b:02:2c:d0:4f:6f:00:7b:3a:bf:36:44:a1:91:6b: ae:56:fd:7c:d3:3a:6b:88:48:ae:14:51:db:9c:c5:4b:32:49: 2a:7f:14:d0:58:a4:83:69:18:c4:b6:9b:d3:56:d3:a3:66:56: 10:0c:05:04:9d:37:d7:ec:09:3a:0a:7b:3e:10:72:92:b6:96: 59:28:b1:79:08:7f:85:4a:a3:1e:78:50:70:e7:6e:fd:3e:21: c3:20:fb:b6:38:b4:db:bb:60:67:44:d6:29:05:7a:9e:d8:63: b9:62:b3:57:7f:32:bc:b5:35:b9:8c:f3:c4:ce:98:28:b5:05: cc:f2:d3:c1:2e:9b:10:61:4d:6c:72:2a:3d:d3:a1:80:b0:a0: 6b:c1:e2:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJs8cmuR+Q8XkSSL4eKd8Wa0WsLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4 QTQ3NDMyRTAeFw0yNTEyMDEyMTU3MjhaFw0yNTEyMDUwNzQ0MjhaMDMxMTAvBgNV BAMTKDBFQTQwNTQyRUFCN0QxN0VBOThGRkYxQThEQkY4NzA2MTgyQ0NCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3P208edV5TqUwIEs780BO/6y qRlCuajf23icmsabeqaeNwbriLZ78Stl/nZap3gYX8Yh8YRe8PSJIQGMYmTSZfja Jc3CR7Mx12BNm6dqeWRjNRuFVWd6nyjR/H3og8to76qu1p0zZUD1+I5CLBUuq6sV HE7J+hwApwI2+GhjtqAVraCz9pSsUWiRe/guq+LnnRpaNrvu3oEQ8Z0RRSRjmWGC 5kp/jw1XgFiraI/SUT7K2L12+cqkqs/3fZudDg3eryg3gn96OynuBP7c4N/JupxR 1TVytsEIawGuWMkbBYLsJcc/odup3psOJzcRA7c1/G9vI7Hz6+JlEtpk6rWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDqQFQuq30X6pj/8ajb+HBhgsy3YwHwYDVR0j BBgwFoAUh2KlRXhbWmNS+32iBonOyopHQy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MzI4YjQ3Ni02MjI0LTRlMDEtYjE4Ni04MGJjZWM5YmMwZTMvMC84NzYyQTU0NTc4 NUI1QTYzNTJGQjdEQTIwNjg5Q0VDQThBNDc0MzJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNFQ0E4QTQ3 NDMyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx ODYtODBiY2VjOWJjMGUzLzAvODc2MkE1NDU3ODVCNUE2MzUyRkI3REEyMDY4OUNF Q0E4QTQ3NDMyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp1pwvAYQ/8F2YdF3QblzhVNQSrKRc3jEhJ i/IHHaKERGaJaO4OL0SYDc4EoVuUen6o7PydoirVrTS6p24Vl/gf1udeF9hNvE8S DdplmH7ALoqXipq4vIL9PwahOYHK7czzNF9uqbScrdBbmuyB8jsCLNBPbwB7Or82 RKGRa65W/XzTOmuISK4UUducxUsySSp/FNBYpINpGMS2m9NW06NmVhAMBQSdN9fs CToKez4QcpK2llkosXkIf4VKox54UHDnbv0+IcMg+7Y4tNu7YGdE1ikFep7YY7li s1d/Mry1NbmM88TOmCi1Bczy08EumxBhTWxyKj3ToYCwoGvB4g4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:12 2025 by rpki-client