This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: ut69tIiS0AR2tp0pkE5qoZJ7ijnHltHwm0edk/yuiiM= Subject key identifier: E7:65:90:BF:6C:94:AA:AE:FE:FE:96:A3:F9:C7:50:69:FC:41:9A:9B Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 2D8B35CCD54D6D8A81F2AAA41197BBF0A2467039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 0255 Signing time: Tue 02 Dec 2025 01:01:58 +0000 Manifest this update: Tue 02 Dec 2025 00:56:58 +0000 Manifest next update: Fri 05 Dec 2025 09:51:58 +0000 Files and hashes: 1: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: JnS7G1n0dkutbYAtifopPDZmAwNfUSH7/CN4+wlawTE=) 2: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: scqosPwH5BL2/2imBhyJZEPHHItlqeTByFILkve6Gxg=) 3: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: yvcS+4k20Y8iRZaWxf96+9kxISErdYY6WtdAGoUwpMc=) 4: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: pI4Ee2HOCQgHXKn0phpNZPvS39KAXUpqkjdsByhi1e8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8b:35:cc:d5:4d:6d:8a:81:f2:aa:a4:11:97:bb:f0:a2:46:70:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Dec 2 00:56:58 2025 GMT Not After : Dec 5 09:51:58 2025 GMT Subject: CN=E76590BF6C94AAAEFEFE96A3F9C75069FC419A9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:cf:4f:f5:44:81:74:1d:ea:ba:23:a1:2f: 07:6d:a8:c5:55:88:a7:71:53:0b:a3:c2:4d:c4:21: 35:be:e4:ed:87:3d:71:ce:4e:98:f7:6a:db:c3:03: c5:95:9d:81:36:7a:3f:fc:ea:ae:d0:38:68:60:f3: 04:ba:9e:16:12:1b:5c:6b:ab:0a:a3:72:0b:93:30: 4d:b0:da:86:f5:07:14:04:fd:44:6f:b4:86:80:c0: f4:39:c4:bf:6b:30:24:66:65:17:4c:7d:8d:75:7e: 45:d8:3f:78:f2:14:01:85:fb:e6:99:6c:3a:b5:14: 16:7c:72:26:de:e4:4c:32:eb:6a:9a:b9:a3:91:19: 2d:3e:d5:eb:5f:54:76:f8:9e:78:78:0d:61:92:58: 60:ae:2b:e4:08:23:e2:54:ee:c6:76:08:8f:04:f9: 4a:d2:1b:3b:cb:27:00:30:ee:a7:99:55:f4:cf:7d: 60:8a:90:b8:6f:cc:a9:51:d4:60:29:31:c6:ad:0a: 94:10:ba:87:0f:85:a4:43:7d:f6:c6:6e:ea:27:4b: d0:47:69:8d:d5:2f:42:3b:b6:39:9b:db:22:2d:f6: c7:2d:8c:ca:a9:05:3f:06:c6:4d:a5:a4:b3:d4:e5: 4a:6d:b8:94:55:64:49:7c:6b:f4:0c:11:6b:55:67: 10:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:65:90:BF:6C:94:AA:AE:FE:FE:96:A3:F9:C7:50:69:FC:41:9A:9B X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:ba:30:22:79:1d:ac:93:bd:9e:02:b6:6c:31:b2:09:05:95: ae:5d:19:89:a2:cc:2a:ed:e1:1e:92:b9:64:33:09:39:86:c9: 85:f5:bb:2a:5d:e1:10:19:87:84:9a:33:ff:95:d6:24:f5:e6: 6c:06:77:75:79:8d:80:e6:e4:43:4f:f1:bc:f2:f9:4f:bf:cb: d0:4e:84:ae:35:f6:33:f4:57:e0:98:31:94:ab:fd:9a:c4:94: 78:9f:d2:24:f0:79:c4:91:42:b7:08:20:0d:10:c6:7f:76:76: 3d:02:5e:9f:37:11:b8:10:c1:3d:b2:b0:c0:0c:f3:b5:16:23: 55:c6:00:5a:d7:98:cd:80:d6:ed:4d:2d:81:56:66:16:2f:4f: ad:72:ff:fd:b2:5f:4b:65:37:23:9a:17:91:ee:b2:1c:2d:2f: de:ab:81:77:95:85:5d:40:a6:d7:82:5e:a3:7f:e8:90:e8:d5: 41:c2:69:6c:d5:5a:0f:1b:59:db:f7:7f:df:8c:61:d6:b3:80: a6:31:bc:6e:1e:d5:b4:98:a1:e1:26:a9:0e:98:fb:20:b0:45: 5f:34:2f:5b:8a:e8:ba:c7:4b:64:43:d8:40:bb:40:06:d1:ed: a6:d4:96:67:83:13:46:e7:03:39:bd:90:53:8d:2a:cd:b7:e1: 29:8a:be:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYs1zNVNbYqB8qqkEZe78KJGcDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNTEyMDIwMDU2NThaFw0yNTEyMDUwOTUxNThaMDMxMTAvBgNV BAMTKEU3NjU5MEJGNkM5NEFBQUVGRUZFOTZBM0Y5Qzc1MDY5RkM0MTlBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9989P9USBdB3quiOhLwdtqMVV iKdxUwujwk3EITW+5O2HPXHOTpj3atvDA8WVnYE2ej/86q7QOGhg8wS6nhYSG1xr qwqjcguTME2w2ob1BxQE/URvtIaAwPQ5xL9rMCRmZRdMfY11fkXYP3jyFAGF++aZ bDq1FBZ8cibe5Ewy62qauaORGS0+1etfVHb4nnh4DWGSWGCuK+QII+JU7sZ2CI8E +UrSGzvLJwAw7qeZVfTPfWCKkLhvzKlR1GApMcatCpQQuocPhaRDffbGbuonS9BH aY3VL0I7tjmb2yIt9sctjMqpBT8Gxk2lpLPU5UptuJRVZEl8a/QMEWtVZxABAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU52WQv2yUqq7+/paj+cdQafxBmpswHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHC6MCJ5HayTvZ4CtmwxsgkFla5dGYmizCrt 4R6SuWQzCTmGyYX1uypd4RAZh4SaM/+V1iT15mwGd3V5jYDm5ENP8bzy+U+/y9BO hK419jP0V+CYMZSr/ZrElHif0iTwecSRQrcIIA0Qxn92dj0CXp83EbgQwT2ysMAM 87UWI1XGAFrXmM2A1u1NLYFWZhYvT61y//2yX0tlNyOaF5HushwtL96rgXeVhV1A pteCXqN/6JDo1UHCaWzVWg8bWdv3f9+MYdazgKYxvG4e1bSYoeEmqQ6Y+yCwRV80 L1uK6LrHS2RD2EC7QAbR7abUlmeDE0bnAzm9kFONKs234SmKvl8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:56 2025 by rpki-client