This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: gS69yh/WNUD9D6tqH57IqobQPCH2waigA7v4OEZv7UQ= Subject key identifier: 02:51:36:09:38:7F:FC:40:E1:F6:74:B4:98:E3:B0:C3:B2:F0:D7:BF Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 44DA0B9F126F186472E4A7E4E0A562E2FBEF443D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01D4 Signing time: Thu 18 Dec 2025 16:30:49 +0000 Manifest this update: Thu 18 Dec 2025 16:25:49 +0000 Manifest next update: Mon 22 Dec 2025 04:07:49 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: XJ6ZASuA+uscS4z+lireUMA9NuGZZGy9wnx/mKFgHjE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:da:0b:9f:12:6f:18:64:72:e4:a7:e4:e0:a5:62:e2:fb:ef:44:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Dec 18 16:25:49 2025 GMT Not After : Dec 22 04:07:49 2025 GMT Subject: CN=02513609387FFC40E1F674B498E3B0C3B2F0D7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:2d:d2:94:c4:f9:b1:f8:be:63:4b:d3:3a:53: 87:a8:7d:fd:9a:b9:bc:bf:3d:ea:a7:dc:a9:ee:e2: 3c:f5:77:28:93:11:a9:a1:a6:aa:9f:50:d3:09:4f: 61:e3:81:73:b1:5e:a6:81:d9:ae:ba:6d:5a:17:ca: 3a:a4:63:01:97:91:a8:55:b6:00:69:8a:74:28:bd: 9b:82:04:ed:3a:1f:c7:5d:d9:86:73:3e:76:fb:0e: 18:6d:23:06:7c:74:74:84:eb:6a:80:a7:fb:12:d9: 3a:7c:aa:37:86:45:30:5d:37:3e:55:ec:cf:f9:b2: ad:3e:d9:8f:04:0c:4f:03:2f:90:fd:9b:af:60:0b: cc:f8:71:95:1a:51:81:4e:2a:da:c8:60:fc:4d:c5: 4b:a5:62:72:ac:c2:0e:c7:1d:2b:d9:46:ad:6b:c9: fd:14:50:a2:d6:da:84:74:7d:48:f6:0b:36:a9:5c: 53:94:71:98:96:90:2c:38:5e:0c:a7:9c:15:a7:7d: 47:fd:a9:1d:11:cb:29:f7:d4:36:82:0f:96:e7:f9: 3c:bd:90:fe:23:6a:4d:7a:f1:69:6a:66:b6:b1:6d: 81:90:02:65:4f:01:00:e8:38:35:cf:df:23:f4:b8: 09:d0:3a:f9:27:28:e3:34:75:c7:ba:16:a8:6b:3b: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:51:36:09:38:7F:FC:40:E1:F6:74:B4:98:E3:B0:C3:B2:F0:D7:BF X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:ab:9b:a7:78:0a:84:d3:6a:20:74:39:e6:6e:06:8a:a2:4d: 81:2c:25:b3:f3:6a:34:2b:18:36:ac:1d:eb:26:c0:62:7b:d8: 21:8d:7e:8b:b3:64:0c:63:f3:50:4b:13:7b:34:0b:d2:90:e9: ec:a4:5f:cc:f8:6f:1c:84:85:be:3a:83:f6:39:e8:6f:fa:6d: 3c:0a:c2:2f:55:59:f8:a1:5b:cb:19:0f:3c:41:10:d3:1c:2c: 90:c3:9a:5c:5e:c7:7b:cc:0b:9d:7d:54:93:e0:e5:80:59:ac: 57:9a:52:ad:27:3b:52:c5:d3:70:4b:cd:b2:45:37:d5:18:d6: 4d:7d:9f:17:ac:32:f9:9b:cb:b9:00:13:30:57:5e:90:42:36: f2:fd:15:e5:7c:92:1c:45:ea:26:8d:aa:46:3d:d7:5f:93:3f: 3a:aa:2c:c0:d9:f5:18:e1:aa:21:9d:33:d1:e2:1b:c4:10:76: d6:8a:9f:1c:49:fb:02:99:be:ac:3c:5e:7f:f6:6e:b6:e0:3c: db:b7:16:5e:21:ee:40:c6:17:e4:c1:fb:5f:b5:86:63:0e:30: d1:b5:6e:59:0e:31:e5:3f:01:41:bd:ab:f4:bd:2d:1d:56:0d: 5d:28:d2:ce:4e:bf:fb:a6:7d:68:51:ca:22:8a:8a:95:8c:74: 00:f7:4c:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNoLnxJvGGRy5Kfk4KVi4vvvRD0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTEyMTgxNjI1NDlaFw0yNTEyMjIwNDA3NDlaMDMxMTAvBgNV BAMTKDAyNTEzNjA5Mzg3RkZDNDBFMUY2NzRCNDk4RTNCMEMzQjJGMEQ3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrLdKUxPmx+L5jS9M6U4eoff2a uby/Peqn3Knu4jz1dyiTEamhpqqfUNMJT2HjgXOxXqaB2a66bVoXyjqkYwGXkahV tgBpinQovZuCBO06H8dd2YZzPnb7DhhtIwZ8dHSE62qAp/sS2Tp8qjeGRTBdNz5V 7M/5sq0+2Y8EDE8DL5D9m69gC8z4cZUaUYFOKtrIYPxNxUulYnKswg7HHSvZRq1r yf0UUKLW2oR0fUj2CzapXFOUcZiWkCw4XgynnBWnfUf9qR0Ryyn31DaCD5bn+Ty9 kP4jak168WlqZraxbYGQAmVPAQDoODXP3yP0uAnQOvknKOM0dce6FqhrO/SDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAlE2CTh//EDh9nS0mOOww7Lw178wHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCrm6d4CoTTaiB0OeZuBoqiTYEsJbPzajQr GDasHesmwGJ72CGNfouzZAxj81BLE3s0C9KQ6eykX8z4bxyEhb46g/Y56G/6bTwK wi9VWfihW8sZDzxBENMcLJDDmlxex3vMC519VJPg5YBZrFeaUq0nO1LF03BLzbJF N9UY1k19nxesMvmby7kAEzBXXpBCNvL9FeV8khxF6iaNqkY911+TPzqqLMDZ9Rjh qiGdM9HiG8QQdtaKnxxJ+wKZvqw8Xn/2brbgPNu3Fl4h7kDGF+TB+1+1hmMOMNG1 blkOMeU/AUG9q/S9LR1WDV0o0s5Ov/umfWhRyiKKipWMdAD3TBw= -----END CERTIFICATE-----Generated at Fri Dec 19 08:06:48 2025 by rpki-client