This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: +8+OXkcO66SSTw+LBiEfPPNLMrL5rZsuGcj9eulwo78= Subject key identifier: F6:ED:99:CF:FE:EA:61:69:19:13:DF:86:D4:39:61:A5:4A:6E:52:11 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 20C3783CF647BF319611C7E27F9D62EF24D8054D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 033B Signing time: Tue 09 Dec 2025 18:32:09 +0000 Manifest this update: Tue 09 Dec 2025 18:27:09 +0000 Manifest next update: Fri 12 Dec 2025 19:25:09 +0000 Files and hashes: 1: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: gqg2jKtUom7iTvIgDMZ4s06YckYX3OPWzvG8K2jrtX8=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: KhAy9i7rNh+YO2rkl451EFCJ0ALmEvE00mvytErQzRA=) 3: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: oLV8DpLz1l+1Ajh0O28O/v5GcjJ/k+/Vq+9P5fe+FMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 19:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c3:78:3c:f6:47:bf:31:96:11:c7:e2:7f:9d:62:ef:24:d8:05:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Dec 9 18:27:09 2025 GMT Not After : Dec 12 19:25:09 2025 GMT Subject: CN=F6ED99CFFEEA61691913DF86D43961A54A6E5211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d3:77:3e:bf:a8:32:8d:ca:44:5d:e4:de:a0: 3c:f2:27:ea:3d:5c:e4:8e:bd:dc:c3:f0:55:6b:99: 0a:39:86:2c:06:fd:bb:d0:b8:33:2a:0d:32:75:df: 08:6f:8f:9e:a4:76:e5:1d:1b:6f:a7:56:7b:3a:2c: b2:13:35:74:fd:89:1e:ac:cc:31:0d:28:6f:12:f8: c2:69:c8:85:99:d8:a5:f0:a7:ad:a1:69:6d:bb:06: 94:bf:07:46:7f:b1:12:06:e8:21:92:ab:27:81:40: 3f:d4:f6:33:ec:2b:ac:a7:f9:f3:67:5e:43:f2:8a: a5:f6:55:65:a6:6f:57:3c:30:35:53:44:f6:a2:31: ab:34:18:79:f7:15:4a:ab:0e:8c:9f:3e:76:f1:4f: 9b:18:d4:79:dc:26:55:c9:b0:f2:c4:e8:80:74:68: 95:98:3f:8b:3b:a8:88:6a:f1:6c:cd:e2:9f:9f:a9: bd:08:48:bb:5e:11:1d:9c:78:b5:a0:3d:70:8e:a3: 1c:8f:e5:79:ce:23:01:d7:96:b8:86:5f:7d:b7:d8: 0a:bb:ca:28:34:8d:cd:20:bb:b3:b5:fd:c3:eb:3a: 1a:69:04:d6:7c:5e:f2:b3:55:17:84:f3:3c:e5:c6: bc:2e:01:49:5b:c0:39:fc:7f:b2:68:f2:cc:a1:fc: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:ED:99:CF:FE:EA:61:69:19:13:DF:86:D4:39:61:A5:4A:6E:52:11 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:de:fd:bf:57:b1:7f:55:39:37:11:bb:61:0c:f9:77:99:90: ee:82:7a:c8:86:64:72:ac:0e:81:e1:8e:80:6e:fd:a6:26:ce: 57:06:d3:bc:d6:c0:67:f4:93:a1:2e:fe:d5:86:2d:87:28:b0: dd:04:77:7a:65:66:fb:b8:87:f0:10:21:43:51:bf:0e:f5:69: 21:d2:c4:4f:18:50:fc:64:6e:27:c9:f7:52:91:ac:dc:47:10: a8:e6:2c:fe:92:8f:99:09:c4:61:9d:bf:76:c7:3a:ef:37:ff: 65:e6:4e:a4:fd:7e:f3:0e:0c:b1:fc:e1:ed:05:e5:e6:f9:1f: 1e:2f:70:f5:4b:98:b6:a4:32:36:fc:16:51:98:10:d9:b4:e7: e8:e7:5b:53:ad:d0:0a:cd:8e:99:77:ce:42:7d:6f:fd:8c:fd: be:80:59:f1:e1:db:df:5b:4b:06:76:4d:4b:45:6e:fc:f8:59: 14:8b:2f:0f:90:10:53:7f:e0:fa:f7:59:60:c7:ec:c3:ea:85: ff:5f:a9:00:48:e2:93:dd:85:f1:69:dd:e1:f9:85:87:83:dc: a7:89:c8:d8:44:25:76:98:07:ff:76:74:02:41:d2:5e:1a:78: b8:58:b4:bb:de:fe:77:61:e0:f8:e6:a9:c1:7e:f2:0d:a6:73: 25:18:75:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMN4PPZHvzGWEcfif51i7yTYBU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTEyMDkxODI3MDlaFw0yNTEyMTIxOTI1MDlaMDMxMTAvBgNV BAMTKEY2RUQ5OUNGRkVFQTYxNjkxOTEzREY4NkQ0Mzk2MUE1NEE2RTUyMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc03c+v6gyjcpEXeTeoDzyJ+o9 XOSOvdzD8FVrmQo5hiwG/bvQuDMqDTJ13whvj56kduUdG2+nVns6LLITNXT9iR6s zDENKG8S+MJpyIWZ2KXwp62haW27BpS/B0Z/sRIG6CGSqyeBQD/U9jPsK6yn+fNn XkPyiqX2VWWmb1c8MDVTRPaiMas0GHn3FUqrDoyfPnbxT5sY1HncJlXJsPLE6IB0 aJWYP4s7qIhq8WzN4p+fqb0ISLteER2ceLWgPXCOoxyP5XnOIwHXlriGX3232Aq7 yig0jc0gu7O1/cPrOhppBNZ8XvKzVReE8zzlxrwuAUlbwDn8f7Jo8syh/PALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9u2Zz/7qYWkZE9+G1DlhpUpuUhEwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfe/b9XsX9VOTcRu2EM+XeZkO6CesiGZHKs DoHhjoBu/aYmzlcG07zWwGf0k6Eu/tWGLYcosN0Ed3plZvu4h/AQIUNRvw71aSHS xE8YUPxkbifJ91KRrNxHEKjmLP6Sj5kJxGGdv3bHOu83/2XmTqT9fvMODLH84e0F 5eb5Hx4vcPVLmLakMjb8FlGYENm05+jnW1Ot0ArNjpl3zkJ9b/2M/b6AWfHh299b SwZ2TUtFbvz4WRSLLw+QEFN/4Pr3WWDH7MPqhf9fqQBI4pPdhfFp3eH5hYeD3KeJ yNhEJXaYB/92dAJB0l4aeLhYtLve/ndh4PjmqcF+8g2mcyUYdfc= -----END CERTIFICATE-----Generated at Wed Dec 10 02:53:13 2025 by rpki-client