This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: xXnncnRYtSYvS4cX7a+ohenxQ+UTqqMRU50ENveDsto= Subject key identifier: 10:7F:03:D3:D9:09:20:E0:45:01:83:7E:B4:55:15:7A:9B:4A:19:2E Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 6B545EF19E4EFCDDEBDE77AE78FA52478401CCEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01F8 Signing time: Tue 16 Dec 2025 20:42:07 +0000 Manifest this update: Tue 16 Dec 2025 20:37:07 +0000 Manifest next update: Sat 20 Dec 2025 05:11:07 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: ax0/t9o9NYWCLL1YTgv4A2143eP06pvPqSv2cJ/eKOA=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 05:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:54:5e:f1:9e:4e:fc:dd:eb:de:77:ae:78:fa:52:47:84:01:cc:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Dec 16 20:37:07 2025 GMT Not After : Dec 20 05:11:07 2025 GMT Subject: CN=107F03D3D90920E04501837EB455157A9B4A192E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6f:37:ec:ec:d4:57:85:8f:1b:14:19:79:a1: 6f:9f:27:16:f1:f1:43:26:92:74:c5:b1:5e:e9:55: 5c:c2:a7:23:32:aa:cd:6b:09:3e:b0:96:c1:18:1e: 23:70:0c:6d:3f:be:20:6c:45:d4:c8:24:de:27:9d: a7:52:89:b2:65:b8:9b:8a:58:4f:e4:2a:da:5c:05: 4b:e2:cc:02:bd:c8:71:1a:41:ba:64:c2:cb:81:8b: ab:88:e0:eb:58:6e:dc:b8:9f:28:dd:7d:a5:20:16: 5a:79:7f:c4:ea:f2:c7:93:76:d6:b8:05:eb:43:37: 15:9f:1c:7f:b3:27:67:fd:2f:a6:b4:83:2b:6c:18: 43:95:96:15:54:e2:7f:c0:61:b0:5e:e5:a3:7a:16: 55:21:f5:de:38:89:b4:0f:46:92:ac:cd:e0:4b:5d: ab:0c:ae:7c:1e:db:75:9e:11:31:0e:55:ec:dc:65: 7f:91:e8:19:a1:a6:82:ce:66:85:3b:c8:4b:af:6a: 71:b6:7f:78:81:6f:72:32:7e:7d:e4:58:f3:90:97: af:a4:51:99:4e:a0:12:4a:ab:ca:94:a2:7b:29:93: 65:b8:17:05:64:7c:f3:79:8a:af:42:43:fd:8b:b4: 2d:f4:20:81:07:b9:89:ce:b2:b9:6d:13:f5:15:8e: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7F:03:D3:D9:09:20:E0:45:01:83:7E:B4:55:15:7A:9B:4A:19:2E X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a5:66:d7:a4:46:68:a4:25:11:6f:20:c6:f2:fd:26:fd:07: a8:4e:ba:ee:0b:c7:72:33:06:37:a9:8c:2a:41:75:ee:42:fe: 72:92:dc:09:a4:83:6f:75:1a:8e:12:53:f6:71:b8:38:9d:68: 5a:f7:5e:ae:96:de:89:f3:05:f6:73:b7:a6:5f:d9:98:9a:dc: 81:03:6c:e7:15:b1:f7:ca:2d:5d:4a:49:62:28:8f:9a:f4:ea: 50:99:f0:64:20:fd:d2:4b:58:d7:26:13:f7:85:2f:3c:d1:bf: 19:37:7e:79:ed:f1:c8:7e:b7:8e:7e:73:cb:28:03:19:f1:8d: f7:da:bd:43:8b:f1:25:db:85:1a:a9:66:18:54:f6:80:ce:2a: 38:43:6e:98:a0:89:31:6a:83:ec:05:a2:3a:ec:17:bf:47:29: 13:4d:2b:6a:05:21:72:5a:ed:61:94:c4:f7:af:39:ae:3f:17: 64:47:c3:ab:87:c0:7b:43:05:c7:7c:c7:89:4f:a3:23:81:8c: bb:0a:72:5f:27:f6:27:a7:a4:fb:02:ab:fd:47:e3:bf:fa:b9: bd:36:06:26:8f:ec:54:6e:44:be:58:a4:31:f8:b3:48:08:5b: c5:c8:3f:54:4b:28:9a:b5:5e:4a:c9:ce:48:5c:71:31:f0:ea: d5:51:6c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1Re8Z5O/N3r3neuePpSR4QBzO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTEyMTYyMDM3MDdaFw0yNTEyMjAwNTExMDdaMDMxMTAvBgNV BAMTKDEwN0YwM0QzRDkwOTIwRTA0NTAxODM3RUI0NTUxNTdBOUI0QTE5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0bzfs7NRXhY8bFBl5oW+fJxbx 8UMmknTFsV7pVVzCpyMyqs1rCT6wlsEYHiNwDG0/viBsRdTIJN4nnadSibJluJuK WE/kKtpcBUvizAK9yHEaQbpkwsuBi6uI4OtYbty4nyjdfaUgFlp5f8Tq8seTdta4 BetDNxWfHH+zJ2f9L6a0gytsGEOVlhVU4n/AYbBe5aN6FlUh9d44ibQPRpKszeBL XasMrnwe23WeETEOVezcZX+R6BmhpoLOZoU7yEuvanG2f3iBb3Iyfn3kWPOQl6+k UZlOoBJKq8qUonspk2W4FwVkfPN5iq9CQ/2LtC30IIEHuYnOsrltE/UVjhbhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEH8D09kJIOBFAYN+tFUVeptKGS4wHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqlZtekRmikJRFvIMby/Sb9B6hOuu4Lx3Iz BjepjCpBde5C/nKS3Amkg291Go4SU/ZxuDidaFr3Xq6W3onzBfZzt6Zf2Zia3IED bOcVsffKLV1KSWIoj5r06lCZ8GQg/dJLWNcmE/eFLzzRvxk3fnnt8ch+t45+c8so AxnxjffavUOL8SXbhRqpZhhU9oDOKjhDbpigiTFqg+wFojrsF79HKRNNK2oFIXJa 7WGUxPevOa4/F2RHw6uHwHtDBcd8x4lPoyOBjLsKcl8n9ienpPsCq/1H47/6ub02 BiaP7FRuRL5YpDH4s0gIW8XIP1RLKJq1XkrJzkhccTHw6tVRbJk= -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:05 2025 by rpki-client