This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: kTPPZXt+jWoVmyONany2rkM4ERUbIyfldKBzGkg0aLk= Subject key identifier: 33:8D:B4:99:DD:C0:C9:10:80:31:A7:BF:CE:8A:58:DD:F4:C1:22:3B Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 7770BFE7213BD1652004033AD9B1D3A617F058C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 39 Signing time: Mon 01 Dec 2025 16:01:29 +0000 Manifest this update: Mon 01 Dec 2025 15:56:29 +0000 Manifest next update: Fri 05 Dec 2025 02:55:29 +0000 Files and hashes: 1: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: /FIZY6Y3fwPjVaakMP6+hRKvmQOgsxlixbeIgaKAvPc=) 2: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 02:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:70:bf:e7:21:3b:d1:65:20:04:03:3a:d9:b1:d3:a6:17:f0:58:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Dec 1 15:56:29 2025 GMT Not After : Dec 5 02:55:29 2025 GMT Subject: CN=338DB499DDC0C9108031A7BFCE8A58DDF4C1223B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:44:76:53:c8:e4:71:20:4b:ac:60:21:ef:1f: d3:d7:4e:29:5b:ca:a3:69:81:e8:70:6c:75:82:bb: 67:be:d2:36:6c:af:cc:76:a6:95:62:a9:6f:17:bd: 7f:06:81:52:fd:fa:76:0a:bc:24:f2:a0:16:d2:4f: 24:e3:3c:07:d5:9d:5c:41:05:b8:03:94:60:26:53: d5:00:85:80:cc:cf:8d:eb:92:5b:cd:50:e1:57:d2: 7b:b6:57:0c:e7:4b:38:3d:9c:93:08:ce:cd:b2:c1: 12:d1:c4:b2:80:61:f5:c4:52:4b:1a:84:b7:45:47: d2:58:3c:24:7d:3f:f9:96:c9:30:54:22:1d:9f:72: 70:a5:7f:40:88:81:32:aa:f3:02:fe:c9:43:5a:52: 9d:09:ad:82:26:64:cd:7a:f9:91:49:d2:52:b7:1d: a2:7f:ed:bb:fd:6d:ad:28:5b:93:66:56:da:01:0e: d8:ae:55:d1:a4:59:ef:35:ad:c3:91:93:64:da:45: 8e:71:5c:cd:2a:93:c4:8c:63:53:05:80:f7:cc:4f: c0:4a:db:b6:40:67:4e:54:0d:ef:55:fd:83:f7:fc: 28:3e:ea:74:62:4c:2f:76:47:eb:e6:dd:a8:c5:db: da:3d:1d:c9:60:1d:aa:09:43:b6:ef:23:94:30:1a: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8D:B4:99:DD:C0:C9:10:80:31:A7:BF:CE:8A:58:DD:F4:C1:22:3B X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:de:42:ce:4c:fc:3b:57:05:ab:f9:eb:8d:e9:37:9a:ee:f3: 12:4d:55:1e:bd:3f:5b:06:a2:f5:d9:fa:64:2d:71:d0:a7:24: f1:74:1d:e4:75:6a:5c:9d:71:76:60:ba:97:05:d0:07:c7:a2: af:73:9d:fb:7f:60:c0:42:a2:f0:fa:90:af:21:a2:c3:5d:b4: eb:84:81:80:2b:9a:eb:3b:b1:e5:08:33:2f:c1:d2:4b:79:de: 16:ae:56:96:4e:1b:e9:13:4f:eb:16:0b:2b:42:cc:bd:e2:57: 15:2b:a8:2a:91:c6:1d:72:b4:2e:a8:bd:ec:58:fa:bf:ec:d2: 24:ba:08:cf:72:fa:41:99:ce:89:d9:94:5c:20:c2:e9:4c:13: 85:00:5e:7d:6d:f1:0d:6a:9a:d3:3f:b5:42:4e:06:11:8d:82: b7:93:1b:85:dd:90:3e:0c:b0:f9:ac:24:e6:a3:99:7b:45:dd: e6:a2:2c:79:a6:5f:12:29:bc:9c:1b:4f:78:77:ab:37:0e:1d: 57:c4:05:cc:d8:fe:5d:2d:ff:67:d3:30:c8:09:0b:97:b6:87: 6c:dd:08:7e:21:98:09:4e:44:c1:3b:76:1e:ca:e9:4e:2f:cf: ed:c0:43:79:03:2a:ce:3e:f4:5e:9e:da:84:bf:f0:56:c0:ac: ae:ab:22:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3C/5yE70WUgBAM62bHTphfwWMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNTEyMDExNTU2MjlaFw0yNTEyMDUwMjU1MjlaMDMxMTAvBgNV BAMTKDMzOERCNDk5RERDMEM5MTA4MDMxQTdCRkNFOEE1OERERjRDMTIyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVRHZTyORxIEusYCHvH9PXTilb yqNpgehwbHWCu2e+0jZsr8x2ppViqW8XvX8GgVL9+nYKvCTyoBbSTyTjPAfVnVxB BbgDlGAmU9UAhYDMz43rklvNUOFX0nu2VwznSzg9nJMIzs2ywRLRxLKAYfXEUksa hLdFR9JYPCR9P/mWyTBUIh2fcnClf0CIgTKq8wL+yUNaUp0JrYImZM16+ZFJ0lK3 HaJ/7bv9ba0oW5NmVtoBDtiuVdGkWe81rcORk2TaRY5xXM0qk8SMY1MFgPfMT8BK 27ZAZ05UDe9V/YP3/Cg+6nRiTC92R+vm3ajF29o9HclgHaoJQ7bvI5QwGrwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM420md3AyRCAMae/zopY3fTBIjswHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDeQs5M/DtXBav5643pN5ru8xJNVR69P1sG ovXZ+mQtcdCnJPF0HeR1alydcXZgupcF0AfHoq9znft/YMBCovD6kK8hosNdtOuE gYArmus7seUIMy/B0kt53hauVpZOG+kTT+sWCytCzL3iVxUrqCqRxh1ytC6ovexY +r/s0iS6CM9y+kGZzonZlFwgwulME4UAXn1t8Q1qmtM/tUJOBhGNgreTG4XdkD4M sPmsJOajmXtF3eaiLHmmXxIpvJwbT3h3qzcOHVfEBczY/l0t/2fTMMgJC5e2h2zd CH4hmAlORME7dh7K6U4vz+3AQ3kDKs4+9F6e2oS/8FbArK6rIoI= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:40 2025 by rpki-client