This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: wec1FQQaLVpkundhjSibXEEfcWZoqwWVuKlaJ2vNhHs= Subject key identifier: 6C:2D:FF:24:89:25:CE:28:94:50:F0:06:4E:19:CB:91:35:8D:59:E2 Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 76C061339F2758E404687DACDC8E14E6CB6D35A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 0129 Signing time: Wed 03 Dec 2025 00:41:47 +0000 Manifest this update: Wed 03 Dec 2025 00:36:47 +0000 Manifest next update: Sat 06 Dec 2025 06:03:47 +0000 Files and hashes: 1: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) 2: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: C2Vp/v/wAIFTdAfGJHVWlnGEtyemwfWab7dg5tQdB+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c0:61:33:9f:27:58:e4:04:68:7d:ac:dc:8e:14:e6:cb:6d:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Dec 3 00:36:47 2025 GMT Not After : Dec 6 06:03:47 2025 GMT Subject: CN=6C2DFF248925CE289450F0064E19CB91358D59E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:c1:11:19:d5:36:f5:25:90:fb:e2:8c:9d: 63:a4:5c:1f:76:b9:2e:e4:48:c9:6b:48:a7:31:0c: 49:9f:88:5c:c3:f5:db:41:75:61:61:d1:f2:1b:e4: 77:3a:db:3a:ac:ce:27:32:97:04:05:c8:dd:43:d9: 6c:6b:f4:55:85:f4:6f:4c:71:2b:ae:8a:52:9e:40: 81:8b:bf:49:db:5a:75:3e:b9:7a:bc:9e:d9:13:cb: 92:06:44:0d:2f:c5:68:f8:76:93:87:27:c6:2f:06: 96:a2:3e:f6:8c:de:0f:22:e6:42:26:b7:84:22:44: 64:b5:64:47:2d:46:b5:14:e3:4e:09:29:31:26:39: d5:b1:83:60:1f:98:e0:ee:b4:9b:f3:11:09:a3:d6: e1:94:fd:b3:ee:0e:1f:6c:1b:9c:7f:5a:28:65:ee: 2d:fd:53:ef:28:9b:2a:73:92:6b:0a:41:26:65:12: 03:f9:d9:b1:2d:9c:5b:36:4f:d1:f6:47:a9:02:87: b5:39:b9:ee:a9:2a:2d:36:25:8d:bc:66:81:34:fb: a9:6c:c9:3e:0f:a1:16:21:3c:9d:5d:e9:a4:c0:a7: e4:c6:6d:45:e3:ed:98:11:ad:6e:e4:cb:fe:a8:e9: 0b:95:d8:9f:1e:b5:01:3d:87:df:e6:f3:9e:80:27: da:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2D:FF:24:89:25:CE:28:94:50:F0:06:4E:19:CB:91:35:8D:59:E2 X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e2:3f:82:bc:6c:a9:c6:f9:91:5e:d8:e0:aa:12:03:04:f1: 03:83:4f:27:f2:b1:2e:2f:67:4f:5e:47:9f:23:80:93:56:ea: 00:e0:b5:d5:30:61:49:90:47:b8:5e:35:e3:7c:f6:6e:a1:76: 9f:04:9c:58:9d:38:96:a9:91:c5:d8:94:09:1f:9e:f9:69:f4: 99:e5:75:3c:0b:7e:c3:6f:4a:c9:00:eb:86:74:3f:eb:b5:67: a7:c0:ab:71:39:63:bf:a0:7d:f7:47:f8:93:74:76:c2:0a:6b: 33:48:4f:19:86:91:71:28:08:f9:3a:bf:44:55:c5:20:40:b5: d4:b7:35:e7:fa:e0:b3:55:3b:fb:23:64:b9:e8:a7:03:a9:e3: a8:ea:16:d1:ed:a1:c5:1f:db:9a:c3:1e:38:9a:05:35:1d:99: 7d:71:66:76:e2:c5:86:c9:dd:d4:17:77:ff:d2:5a:46:42:bc: b9:eb:20:ae:31:f6:85:2c:40:7e:41:93:dd:68:53:2d:44:5e: 32:90:9e:ab:26:98:6d:cb:69:a0:f2:2e:a7:32:33:89:01:99: 29:17:37:51:4a:c3:9e:26:29:3e:c3:7f:37:83:f8:78:be:07: c4:05:61:59:6a:f5:05:1d:50:34:47:e2:3d:c8:86:40:12:d3: fc:f5:b8:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsBhM58nWOQEaH2s3I4U5sttNaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTEyMDMwMDM2NDdaFw0yNTEyMDYwNjAzNDdaMDMxMTAvBgNV BAMTKDZDMkRGRjI0ODkyNUNFMjg5NDUwRjAwNjRFMTlDQjkxMzU4RDU5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMKMERGdU29SWQ++KMnWOkXB92 uS7kSMlrSKcxDEmfiFzD9dtBdWFh0fIb5Hc62zqszicylwQFyN1D2Wxr9FWF9G9M cSuuilKeQIGLv0nbWnU+uXq8ntkTy5IGRA0vxWj4dpOHJ8YvBpaiPvaM3g8i5kIm t4QiRGS1ZEctRrUU404JKTEmOdWxg2AfmODutJvzEQmj1uGU/bPuDh9sG5x/Wihl 7i39U+8omypzkmsKQSZlEgP52bEtnFs2T9H2R6kCh7U5ue6pKi02JY28ZoE0+6ls yT4PoRYhPJ1d6aTAp+TGbUXj7ZgRrW7ky/6o6QuV2J8etQE9h9/m856AJ9rdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbC3/JIklziiUUPAGThnLkTWNWeIwHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXiP4K8bKnG+ZFe2OCqEgME8QODTyfysS4v Z09eR58jgJNW6gDgtdUwYUmQR7heNeN89m6hdp8EnFidOJapkcXYlAkfnvlp9Jnl dTwLfsNvSskA64Z0P+u1Z6fAq3E5Y7+gffdH+JN0dsIKazNITxmGkXEoCPk6v0RV xSBAtdS3Nef64LNVO/sjZLnopwOp46jqFtHtocUf25rDHjiaBTUdmX1xZnbixYbJ 3dQXd//SWkZCvLnrIK4x9oUsQH5Bk91oUy1EXjKQnqsmmG3LaaDyLqcyM4kBmSkX N1FKw54mKT7DfzeD+Hi+B8QFYVlq9QUdUDRH4j3IhkAS0/z1uBg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:24 2025 by rpki-client