This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: uBMtly3MU4b3yrwLjJqSxOzWrS1Tz9OWPXxUlB/rOxo= Subject key identifier: 76:85:1A:74:AD:C2:2E:34:99:2F:28:6B:67:B2:83:BA:00:FC:BE:72 Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 0E9F7AFF89D929AB59E615F5229B75801BF38A35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 052A Signing time: Wed 03 Dec 2025 02:52:16 +0000 Manifest this update: Wed 03 Dec 2025 02:47:16 +0000 Manifest next update: Sat 06 Dec 2025 10:25:16 +0000 Files and hashes: 1: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 2: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) 3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: ZaL86f4MTV0yPamQIE+mie1u7jj1FkFEJoqkXNc3K8U=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:9f:7a:ff:89:d9:29:ab:59:e6:15:f5:22:9b:75:80:1b:f3:8a:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Dec 3 02:47:16 2025 GMT Not After : Dec 6 10:25:16 2025 GMT Subject: CN=76851A74ADC22E34992F286B67B283BA00FCBE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:de:ce:22:28:cf:bb:98:69:e6:5d:da:1f: 9f:c3:47:f0:8d:4c:ea:de:e5:76:09:fc:bb:5a:e2: 0a:43:4b:bc:58:f7:b6:18:0c:33:ff:7f:f3:70:ce: c5:7c:f3:02:1b:fc:cd:97:2d:a9:ba:31:10:2e:d8: 46:8a:3e:95:8b:ec:f9:c2:0a:2a:32:d8:49:6f:6b: 18:02:33:60:a5:9c:ec:93:26:15:e2:a4:92:8e:de: 03:91:8f:1f:2b:96:fc:9e:99:d6:1a:5b:f7:70:f9: 0e:ba:de:8d:69:f1:24:b0:fc:33:b4:23:f6:ab:d7: 77:b4:11:ff:77:f5:d3:80:46:4e:49:8c:43:9e:91: c3:3c:40:e8:c6:64:4f:4c:ef:a8:5e:8d:a9:60:72: 1e:6d:32:93:31:ca:b1:65:f9:ad:fd:b0:e4:30:ce: 8a:9a:91:fb:3e:ce:be:25:1b:33:85:fd:dd:91:b8: 0e:9e:77:2d:27:1f:11:91:72:aa:34:f4:ff:cb:d8: 20:10:dc:09:2e:ea:e1:92:c9:60:0b:ad:b6:8e:ab: 07:60:f4:da:1d:b8:58:9f:90:58:51:ab:ed:c6:d4: 57:3d:8a:2d:a8:9d:b7:e8:da:b3:06:d0:5c:72:4a: a1:4b:11:94:77:d1:52:11:3b:a1:7b:bc:32:d7:9a: 0a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:85:1A:74:AD:C2:2E:34:99:2F:28:6B:67:B2:83:BA:00:FC:BE:72 X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0f:5c:36:a3:64:92:9f:2b:e2:28:fb:0e:13:ad:d2:4f:75: c9:ce:c1:eb:62:cf:4b:06:99:a5:f5:6b:08:62:14:54:53:68: 65:55:4f:6d:7e:52:ee:b8:ad:85:89:86:2a:37:0d:28:9a:29: 37:aa:60:97:a7:bf:9a:78:ad:b2:f5:35:fe:e2:91:d6:df:2d: b3:ff:75:15:15:2f:30:8b:52:7c:0c:59:29:bc:c2:fc:dd:92: c8:12:be:df:d3:01:b6:3f:2d:a7:3e:72:01:98:cf:43:9e:a3: ef:66:b0:a9:d0:42:14:9c:44:cc:e6:ab:ea:5d:92:40:75:66: ee:58:d9:af:93:55:df:68:97:22:e3:30:68:b9:a3:1c:96:8e: 2d:0d:e9:18:56:97:41:7c:f0:b8:4c:a0:ed:cd:89:3e:cb:02: dc:16:76:7f:23:9d:6d:41:b0:c1:3e:a2:0e:ac:d6:21:c4:c4: be:e6:8c:0f:ce:47:0f:d1:6e:86:99:32:29:de:d1:ba:4c:15: d4:f3:c5:eb:17:37:35:ca:0e:87:04:ca:91:c5:6d:d3:50:92: d9:26:7d:f0:29:77:85:d9:22:87:07:9f:ea:3e:e7:56:21:ac: bc:a5:f4:0f:79:9b:83:1e:b8:fc:30:4c:0e:b8:9d:82:1a:f5: 68:a4:63:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDp96/4nZKatZ5hX1Ipt1gBvzijUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTEyMDMwMjQ3MTZaFw0yNTEyMDYxMDI1MTZaMDMxMTAvBgNV BAMTKDc2ODUxQTc0QURDMjJFMzQ5OTJGMjg2QjY3QjI4M0JBMDBGQ0JFNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyN7OIijPu5hp5l3aH5/DR/CN TOre5XYJ/Lta4gpDS7xY97YYDDP/f/NwzsV88wIb/M2XLam6MRAu2EaKPpWL7PnC Cioy2ElvaxgCM2ClnOyTJhXipJKO3gORjx8rlvyemdYaW/dw+Q663o1p8SSw/DO0 I/ar13e0Ef939dOARk5JjEOekcM8QOjGZE9M76hejalgch5tMpMxyrFl+a39sOQw zoqakfs+zr4lGzOF/d2RuA6edy0nHxGRcqo09P/L2CAQ3Aku6uGSyWALrbaOqwdg 9NoduFifkFhRq+3G1Fc9ii2onbfo2rMG0FxySqFLEZR30VIRO6F7vDLXmgpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdoUadK3CLjSZLyhrZ7KDugD8vnIwHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQPXDajZJKfK+Io+w4TrdJPdcnOwetiz0sG maX1awhiFFRTaGVVT21+Uu64rYWJhio3DSiaKTeqYJenv5p4rbL1Nf7ikdbfLbP/ dRUVLzCLUnwMWSm8wvzdksgSvt/TAbY/Lac+cgGYz0Oeo+9msKnQQhScRMzmq+pd kkB1Zu5Y2a+TVd9olyLjMGi5oxyWji0N6RhWl0F88LhMoO3NiT7LAtwWdn8jnW1B sME+og6s1iHExL7mjA/ORw/RboaZMine0bpMFdTzxesXNzXKDocEypHFbdNQktkm ffApd4XZIocHn+o+51YhrLyl9A95m4MeuPwwTA64nYIa9WikY0o= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:57 2025 by rpki-client