This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: IyUw7kb6+RK9WOEUKauQCLXHMtofEgRajHA3lcjUxYI= Subject key identifier: 0C:C6:38:A5:B0:45:08:28:A0:7D:D1:4E:61:9C:31:ED:C6:A8:6B:7B Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 4EC78156AEE7651C047388AAD3532BD6EB848813 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0420 Signing time: Wed 17 Dec 2025 03:12:04 +0000 Manifest this update: Wed 17 Dec 2025 03:07:04 +0000 Manifest next update: Sat 20 Dec 2025 12:50:04 +0000 Files and hashes: 1: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: Tf8XFr2Mh8B/p7ft/CxMEbyRw789145WmHMJl2gqw90=) 2: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) 3: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 4: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 5: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:81:56:ae:e7:65:1c:04:73:88:aa:d3:53:2b:d6:eb:84:88:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Dec 17 03:07:04 2025 GMT Not After : Dec 20 12:50:04 2025 GMT Subject: CN=0CC638A5B0450828A07DD14E619C31EDC6A86B7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:55:93:47:ab:74:9c:78:24:1e:56:97:96: 15:fa:34:20:cb:07:5b:67:5f:e3:a4:fd:8a:a7:71: 9f:02:a6:25:03:48:60:5f:90:8c:db:d3:0a:05:6e: e0:e2:d0:08:0f:5c:37:ca:04:63:e5:d4:f0:bd:3e: 4c:ac:58:aa:62:87:d1:07:40:b7:f7:88:91:fb:c4: 27:30:3b:c6:35:1e:34:d7:84:d0:62:15:dc:90:b1: df:72:3d:75:20:72:1c:25:ee:89:a7:0f:77:66:5a: e1:f8:4c:e4:a1:8d:4a:56:5f:4a:01:cd:6d:36:1c: a7:48:6f:64:06:8f:07:29:5b:81:e2:df:d3:83:5d: d9:0d:64:10:f6:c9:b2:95:60:9e:89:ae:c3:87:41: 14:93:e0:a9:86:b5:7b:af:42:40:f6:ed:8d:c6:d9: e1:77:56:9b:3e:2c:06:bc:72:fd:7d:ab:0f:f3:4c: d5:2a:91:1e:c8:f8:4b:a2:86:b3:71:02:f2:d3:e6: 2e:ae:c4:95:74:f5:56:74:81:cc:ef:35:8a:76:55: 81:2a:80:3c:34:87:76:09:4c:98:12:98:4a:c0:51: 97:4c:7d:45:a2:17:4f:40:f1:e9:4b:94:9d:17:b9: a7:8f:51:6a:82:53:80:c5:58:fc:93:85:11:e4:5a: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C6:38:A5:B0:45:08:28:A0:7D:D1:4E:61:9C:31:ED:C6:A8:6B:7B X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c8:2f:01:4f:8a:70:44:56:13:16:58:5e:28:21:68:88:74: a5:0c:be:6f:03:fb:d5:4d:fa:3b:88:e3:f9:73:3a:0c:70:8d: a5:ed:bb:24:96:65:40:01:93:c7:ca:ac:59:b2:32:09:53:76: e0:e4:1d:ae:17:51:a8:23:e1:f6:2d:97:d5:cb:59:50:68:77: cf:fd:1c:f8:1d:bc:04:d8:01:61:3d:37:29:64:61:8b:32:4f: 67:87:0b:3c:59:aa:00:fb:20:1f:80:46:58:f4:66:ef:ed:d8: 10:71:42:ef:ce:23:e4:2d:43:e7:95:00:c1:7d:d5:10:fd:3f: c4:3f:7f:22:c8:8e:b1:e3:5f:4c:7f:f3:9f:e3:13:38:5b:c1: 15:b0:a5:88:bd:82:0d:98:cb:a3:fc:72:d4:49:86:53:94:2e: 22:94:59:78:7f:48:5e:6c:70:9b:1b:51:4d:f7:94:ef:c9:a6: 31:f5:f5:c4:b3:42:da:20:f7:14:67:25:81:07:dc:58:12:c4: fb:77:39:dd:09:2a:c8:31:89:17:61:75:b3:c6:96:85:61:bc: 8c:88:51:d4:ba:59:b5:b6:a3:68:41:63:31:43:7f:3e:94:1d: 80:40:25:55:c9:f3:38:3b:b9:43:87:4f:10:34:d1:e0:bc:57: 62:22:cd:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTseBVq7nZRwEc4iq01Mr1uuEiBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTEyMTcwMzA3MDRaFw0yNTEyMjAxMjUwMDRaMDMxMTAvBgNV BAMTKDBDQzYzOEE1QjA0NTA4MjhBMDdERDE0RTYxOUMzMUVEQzZBODZCN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYW1WTR6t0nHgkHlaXlhX6NCDL B1tnX+Ok/YqncZ8CpiUDSGBfkIzb0woFbuDi0AgPXDfKBGPl1PC9PkysWKpih9EH QLf3iJH7xCcwO8Y1HjTXhNBiFdyQsd9yPXUgchwl7omnD3dmWuH4TOShjUpWX0oB zW02HKdIb2QGjwcpW4Hi39ODXdkNZBD2ybKVYJ6JrsOHQRST4KmGtXuvQkD27Y3G 2eF3Vps+LAa8cv19qw/zTNUqkR7I+EuihrNxAvLT5i6uxJV09VZ0gczvNYp2VYEq gDw0h3YJTJgSmErAUZdMfUWiF09A8elLlJ0XuaePUWqCU4DFWPyThRHkWqFpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMY4pbBFCCigfdFOYZwx7caoa3swHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEfILwFPinBEVhMWWF4oIWiIdKUMvm8D+9VN +juI4/lzOgxwjaXtuySWZUABk8fKrFmyMglTduDkHa4XUagj4fYtl9XLWVBod8/9 HPgdvATYAWE9NylkYYsyT2eHCzxZqgD7IB+ARlj0Zu/t2BBxQu/OI+QtQ+eVAMF9 1RD9P8Q/fyLIjrHjX0x/85/jEzhbwRWwpYi9gg2Yy6P8ctRJhlOULiKUWXh/SF5s cJsbUU33lO/JpjH19cSzQtog9xRnJYEH3FgSxPt3Od0JKsgxiRdhdbPGloVhvIyI UdS6WbW2o2hBYzFDfz6UHYBAJVXJ8zg7uUOHTxA00eC8V2IizUk= -----END CERTIFICATE-----Generated at Fri Dec 19 09:45:18 2025 by rpki-client