This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: Gh7KJenmPGUBW/kHco1kLbcJFgfsC20CcgOWxvhr02o= Subject key identifier: 1F:39:97:0B:C4:98:0C:D3:5E:E6:BA:E1:EA:82:37:D5:ED:78:57:B6 Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 2F8FDE027FD712E7C85D28C6D0EABA00094AD873 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 0355 Signing time: Mon 01 Dec 2025 17:31:08 +0000 Manifest this update: Mon 01 Dec 2025 17:26:08 +0000 Manifest next update: Fri 05 Dec 2025 04:40:08 +0000 Files and hashes: 1: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) 2: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: CpyIuz1pd5VXGJtalb/uH2RDYdOv+U7aNnufzpdtfTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8f:de:02:7f:d7:12:e7:c8:5d:28:c6:d0:ea:ba:00:09:4a:d8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Dec 1 17:26:08 2025 GMT Not After : Dec 5 04:40:08 2025 GMT Subject: CN=1F39970BC4980CD35EE6BAE1EA8237D5ED7857B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:3c:fb:e0:fd:f3:bd:e3:7d:09:ec:bf:00:65: d4:43:99:a4:b7:7a:eb:09:83:48:6a:aa:a9:87:1a: ab:61:e2:2e:ef:e0:b5:f8:69:22:c3:f1:6e:64:46: 1f:9d:ae:b5:8b:60:f8:12:47:e0:dd:2a:fa:db:6b: bb:af:a7:4e:99:37:96:69:47:ea:c8:a8:4a:e5:64: a2:03:07:7a:a1:5f:22:6a:fc:7d:cc:bc:2f:55:4d: 09:51:7a:f3:a3:75:32:8b:3d:2c:97:40:80:2e:6c: 25:4b:cc:df:6f:56:15:c4:89:ab:86:ae:cf:ed:e3: 35:5e:e7:a2:27:f3:1c:35:6b:66:2b:69:3c:f5:3d: 5f:d8:73:76:9d:91:67:cb:9c:72:a8:15:a9:13:c9: aa:33:a9:a5:32:9b:66:30:56:47:ad:77:bc:b3:e8: 46:34:f2:25:37:66:8d:06:c0:20:ed:69:df:af:14: b2:9b:62:ad:4d:fa:80:a4:be:21:50:08:7b:25:24: 31:78:fd:39:c1:cc:d3:63:df:33:80:49:8c:be:bd: ef:fd:4b:59:86:68:ec:c7:58:c2:23:34:60:15:4a: 26:ef:7c:81:f4:b9:fc:c1:b2:5c:d9:b3:a1:c5:ea: 22:54:d1:00:4b:fc:98:6b:91:c1:ee:eb:98:9d:e6: 6d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:39:97:0B:C4:98:0C:D3:5E:E6:BA:E1:EA:82:37:D5:ED:78:57:B6 X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6f:94:39:84:ab:d3:66:b8:fd:a8:1c:03:63:8d:85:1e:9a: 79:e2:b0:14:42:7d:9e:bd:42:28:b8:0d:b6:74:37:b0:f4:a6: 53:97:d1:8d:18:98:c3:b8:2e:39:c1:3b:a7:8e:f6:c8:2b:a3: dc:8b:64:fb:38:10:37:81:94:8e:ff:f5:0b:b9:2e:68:4c:70: 53:e4:85:03:52:5c:ac:29:d3:a5:16:15:71:66:80:97:89:01: 74:c0:3f:82:6d:e8:39:61:8f:bb:69:e2:01:14:fd:6f:60:b5: 9e:85:71:f5:72:37:79:e1:1b:2c:67:fa:36:ab:23:53:26:e7: b9:37:a3:8e:53:0d:fb:aa:33:79:ac:23:bc:57:cb:3f:5f:cd: bc:ac:2e:f9:cc:b0:5a:fe:ea:da:2f:2e:75:e7:08:63:a0:8a: 34:c0:ed:3f:49:5e:bc:29:83:fd:02:5d:a2:fd:e7:a3:17:ca: 26:d4:f6:29:60:f0:67:42:25:2c:51:3d:57:0e:7d:5a:12:28: 9a:56:19:a4:f6:20:5f:c9:db:f3:f2:43:68:f0:c7:26:57:46: 6c:32:12:eb:5f:c1:08:83:10:3d:4d:c5:4b:aa:08:c8:e4:2f: 39:8d:42:2c:cd:21:20:88:99:9d:d2:ca:18:71:9f:91:3e:74: 11:8d:e3:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4/eAn/XEufIXSjG0Oq6AAlK2HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTEyMDExNzI2MDhaFw0yNTEyMDUwNDQwMDhaMDMxMTAvBgNV BAMTKDFGMzk5NzBCQzQ5ODBDRDM1RUU2QkFFMUVBODIzN0Q1RUQ3ODU3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzPPvg/fO9430J7L8AZdRDmaS3 eusJg0hqqqmHGqth4i7v4LX4aSLD8W5kRh+drrWLYPgSR+DdKvrba7uvp06ZN5Zp R+rIqErlZKIDB3qhXyJq/H3MvC9VTQlRevOjdTKLPSyXQIAubCVLzN9vVhXEiauG rs/t4zVe56In8xw1a2YraTz1PV/Yc3adkWfLnHKoFakTyaozqaUym2YwVketd7yz 6EY08iU3Zo0GwCDtad+vFLKbYq1N+oCkviFQCHslJDF4/TnBzNNj3zOASYy+ve/9 S1mGaOzHWMIjNGAVSibvfIH0ufzBslzZs6HF6iJU0QBL/JhrkcHu65id5m1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzmXC8SYDNNe5rrh6oI31e14V7YwHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdvlDmEq9NmuP2oHANjjYUemnnisBRCfZ69 Qii4DbZ0N7D0plOX0Y0YmMO4LjnBO6eO9sgro9yLZPs4EDeBlI7/9Qu5LmhMcFPk hQNSXKwp06UWFXFmgJeJAXTAP4Jt6Dlhj7tp4gEU/W9gtZ6FcfVyN3nhGyxn+jar I1Mm57k3o45TDfuqM3msI7xXyz9fzbysLvnMsFr+6tovLnXnCGOgijTA7T9JXrwp g/0CXaL956MXyibU9ilg8GdCJSxRPVcOfVoSKJpWGaT2IF/J2/PyQ2jwxyZXRmwy EutfwQiDED1NxUuqCMjkLzmNQizNISCImZ3Syhhxn5E+dBGN45c= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:21 2025 by rpki-client