This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: Z9fQFGAfsKXBHMGdXYRkSuwwjFAED/oZI9484xqIf1o= Subject key identifier: B8:04:B7:23:2C:17:D9:CF:E9:31:82:A2:C1:07:1F:C9:6E:84:9D:60 Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 7209BD70D3143C6AF9106A6EAC6E8A98102E446F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 014C Signing time: Wed 03 Dec 2025 03:51:09 +0000 Manifest this update: Wed 03 Dec 2025 03:46:09 +0000 Manifest next update: Sat 06 Dec 2025 05:42:09 +0000 Files and hashes: 1: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: fM13rZvkz/FQ/X7PXEKmHDc46tSbvNXhwIfl9am1mjw=) 2: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 3: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:09:bd:70:d3:14:3c:6a:f9:10:6a:6e:ac:6e:8a:98:10:2e:44:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Dec 3 03:46:09 2025 GMT Not After : Dec 6 05:42:09 2025 GMT Subject: CN=B804B7232C17D9CFE93182A2C1071FC96E849D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:bc:ab:72:0f:24:7d:23:03:16:2c:09:1f: 87:5a:8c:17:a7:ad:9b:87:7d:eb:ac:01:f6:b2:8f: b3:a8:bb:f9:bd:38:f1:cb:f5:8f:da:e8:83:49:26: 37:c7:33:fe:6f:21:7d:74:c5:20:e2:44:8e:cb:27: 3f:25:3f:4e:53:bd:4f:5a:32:b9:fc:30:93:ed:1d: 05:e8:37:86:85:19:d0:36:ba:99:c4:14:7a:ac:ce: f5:3b:84:18:d1:e6:bb:f1:43:aa:1b:1a:ba:c2:49: 5c:32:98:0d:b9:6f:46:d9:57:fe:4c:5f:63:58:e9: 8b:a6:60:77:ad:c9:47:d3:aa:ff:bb:cf:99:bf:93: 6a:70:94:80:f7:5f:32:6d:b5:50:a5:2c:a8:b6:62: be:09:a8:16:49:af:66:10:31:af:45:c2:97:da:c8: fb:6e:22:bb:62:b1:f3:67:ef:fe:e5:04:7c:f6:69: 71:9f:48:b8:d2:04:3d:6f:5f:29:03:9c:4d:77:21: 45:28:0f:99:01:ad:51:13:73:66:5d:5b:03:25:73: 04:37:bc:b8:be:d6:d7:04:ab:0c:80:ca:f5:55:2d: be:41:ec:36:91:e9:33:76:d4:14:1f:50:8b:f6:aa: 47:5e:1b:1d:93:ee:cd:17:cb:39:b8:ae:b9:48:24: 50:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:04:B7:23:2C:17:D9:CF:E9:31:82:A2:C1:07:1F:C9:6E:84:9D:60 X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d1:fd:08:c0:7b:89:82:d4:1c:3c:e4:a1:fd:b1:1f:5f:17: 96:b4:7c:05:40:84:54:9d:75:ea:2a:d9:29:e0:09:5f:13:5e: 92:5f:ac:7f:9d:7f:a6:64:69:ea:e5:fb:b8:3f:6b:7b:7e:af: d1:8a:d3:52:39:9a:cb:91:3d:a0:e4:35:c9:79:4a:be:b5:50: e1:5e:eb:9e:33:e1:96:ef:69:70:ab:e1:f0:63:c5:39:9c:4c: ca:03:97:82:e5:80:bf:e4:0d:a3:92:5e:3a:28:0f:53:40:da: 1d:a1:30:41:98:41:e4:27:6a:57:f0:c9:6f:e3:28:e7:96:31: 5a:41:17:d2:ed:09:e8:71:ec:7b:a0:1d:ab:84:eb:48:1d:83: ac:b0:e1:c8:52:84:83:72:ba:4a:93:d3:02:ec:cd:da:e9:20: c3:5d:a0:b8:76:cd:73:18:74:5e:bf:0b:df:0b:c3:91:70:e5: 92:16:b5:3c:25:c9:c2:9e:16:03:1e:1a:60:41:75:fe:b1:7a: 0a:cf:e7:2d:a8:74:fe:6d:cd:0d:15:7c:4a:6f:7d:1c:ca:1a: b8:16:9c:f1:ef:c6:5f:f1:33:02:6a:6a:76:ea:e5:56:62:03: 29:e7:64:21:17:21:3f:aa:02:ca:c7:90:82:fd:7e:13:8b:50: a1:83:e7:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgm9cNMUPGr5EGpurG6KmBAuRG8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTEyMDMwMzQ2MDlaFw0yNTEyMDYwNTQyMDlaMDMxMTAvBgNV BAMTKEI4MDRCNzIzMkMxN0Q5Q0ZFOTMxODJBMkMxMDcxRkM5NkU4NDlENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQQryrcg8kfSMDFiwJH4dajBen rZuHfeusAfayj7Oou/m9OPHL9Y/a6INJJjfHM/5vIX10xSDiRI7LJz8lP05TvU9a Mrn8MJPtHQXoN4aFGdA2upnEFHqszvU7hBjR5rvxQ6obGrrCSVwymA25b0bZV/5M X2NY6YumYHetyUfTqv+7z5m/k2pwlID3XzJttVClLKi2Yr4JqBZJr2YQMa9Fwpfa yPtuIrtisfNn7/7lBHz2aXGfSLjSBD1vXykDnE13IUUoD5kBrVETc2ZdWwMlcwQ3 vLi+1tcEqwyAyvVVLb5B7DaR6TN21BQfUIv2qkdeGx2T7s0Xyzm4rrlIJFCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuAS3IywX2c/pMYKiwQcfyW6EnWAwHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTR/QjAe4mC1Bw85KH9sR9fF5a0fAVAhFSd deoq2SngCV8TXpJfrH+df6Zkaerl+7g/a3t+r9GK01I5msuRPaDkNcl5Sr61UOFe 654z4ZbvaXCr4fBjxTmcTMoDl4LlgL/kDaOSXjooD1NA2h2hMEGYQeQnalfwyW/j KOeWMVpBF9LtCehx7HugHauE60gdg6yw4chShINyukqT0wLszdrpIMNdoLh2zXMY dF6/C98Lw5Fw5ZIWtTwlycKeFgMeGmBBdf6xegrP5y2odP5tzQ0VfEpvfRzKGrgW nPHvxl/xMwJqanbq5VZiAynnZCEXIT+qAsrHkIL9fhOLUKGD53Y= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:33 2025 by rpki-client