This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft File: 82FB9CE597D61EC382BA2D63909426959C43F18F.mft (raw, json) Hash identifier: pQq0dWfvowEJhefUue8RDb6ZR5yBGixxoUoMPtgqIGY= Subject key identifier: 54:F8:8F:CC:A0:C3:14:8A:73:87:95:44:24:D2:CE:2A:9E:8D:C0:E5 Authority key identifier: 82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F Certificate issuer: /CN=82FB9CE597D61EC382BA2D63909426959C43F18F Certificate serial: 14F2248E9037DBF434F6BA9C01027C4C00E32F3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft Manifest number: 0155 Signing time: Tue 02 Dec 2025 08:32:31 +0000 Manifest this update: Tue 02 Dec 2025 08:27:31 +0000 Manifest next update: Fri 05 Dec 2025 15:12:31 +0000 Files and hashes: 1: 3130332e372e3130352e302f32342d3234203d3e20313531353933.roa (hash: +Rw2T75m1ati4oVfQCR6RiMANt/qU5P03srE51mQwtg=) 2: 82FB9CE597D61EC382BA2D63909426959C43F18F.crl (hash: 2PpOgbNI1Eaz0iJp0viZ5FNDtTOVnLdsmTKLQ169cC8=) 3: 3130332e372e3130342e302f32342d3234203d3e20313531353933.roa (hash: 3uNfdf5OyBJLpmZT75dt2srrC7nbkL5sTgGA5ZUxCD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:12:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f2:24:8e:90:37:db:f4:34:f6:ba:9c:01:02:7c:4c:00:e3:2f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82FB9CE597D61EC382BA2D63909426959C43F18F Validity Not Before: Dec 2 08:27:31 2025 GMT Not After : Dec 5 15:12:31 2025 GMT Subject: CN=54F88FCCA0C3148A7387954424D2CE2A9E8DC0E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:86:a1:67:ed:a4:8d:de:f5:94:40:ba:ab:2c: 96:4e:f0:cc:58:77:9d:84:4d:a0:a0:5e:3a:ba:00: f0:b4:1a:cb:90:b7:4e:c7:7d:f3:68:6d:73:6f:9c: 5e:8b:b9:59:08:48:26:aa:13:6d:e4:fa:90:c8:9a: 1a:e3:14:dc:db:fa:8c:ff:84:bb:56:c1:1c:80:61: 1e:29:81:dd:74:9e:9c:4c:0d:1e:f0:c5:13:bc:82: f4:c9:6a:ed:a4:e7:21:38:ae:85:2c:af:ae:a5:ac: 75:bd:50:df:a9:f6:f2:25:8b:98:bb:4a:26:23:ea: 62:f2:de:56:f8:01:a6:25:4a:5f:12:38:71:2d:c8: a3:f9:63:47:82:a6:ca:c7:5a:3d:74:20:a3:47:b7: 4e:0b:fb:5f:1c:d1:f6:65:82:05:de:b9:af:13:4f: a6:42:74:89:21:15:73:8d:2e:49:fc:6b:76:ee:ea: b6:83:5c:c6:14:ca:e3:49:83:13:c3:71:22:a0:f1: 2d:10:a6:d8:bb:6d:ff:ff:aa:09:33:f1:48:96:bf: 07:2b:fb:a5:1d:e4:3c:5e:4a:6a:ab:28:2c:07:e1: cd:39:98:4e:88:6c:27:24:24:81:32:7c:c4:e6:55: 25:2d:2d:66:1a:72:e3:b1:47:90:a9:60:ad:dd:ad: ce:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F8:8F:CC:A0:C3:14:8A:73:87:95:44:24:D2:CE:2A:9E:8D:C0:E5 X509v3 Authority Key Identifier: keyid:82:FB:9C:E5:97:D6:1E:C3:82:BA:2D:63:90:94:26:95:9C:43:F1:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82FB9CE597D61EC382BA2D63909426959C43F18F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c76c7825-8b3d-466c-ba0c-99553c1d73ea/0/82FB9CE597D61EC382BA2D63909426959C43F18F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:0b:de:f5:ff:47:97:d6:96:b1:e8:47:1d:15:41:44:e2:f4: c3:6b:6a:35:31:21:98:81:eb:d2:42:31:0c:1c:3f:fd:6f:23: c5:76:e0:23:b9:bc:a0:4b:a2:3c:a6:e2:97:55:6e:75:fb:36: c2:5a:1a:11:2b:be:42:2b:06:40:da:a5:0b:4d:99:fb:d5:76: ea:2c:6b:f0:46:a6:8e:98:9e:e6:d2:71:aa:ab:14:c6:f6:51: cd:33:b7:c6:cb:89:32:85:95:2c:48:e6:5e:0e:4a:92:6d:c1: 26:63:7d:13:c5:06:76:ba:58:66:01:64:94:be:89:77:ab:9d: f2:c3:15:79:3d:e3:5a:6f:fe:49:da:35:d8:8f:63:65:3c:ad: eb:f1:a1:ec:5e:54:27:a4:f3:9c:af:34:ec:0e:46:7e:f4:aa: 2b:9b:e8:b0:48:04:70:ac:20:e5:a3:dd:e5:ac:ed:92:d5:0e: 4c:69:9d:12:15:f2:d2:ec:9e:03:4e:11:72:9b:8f:10:22:c7: cc:9d:65:5a:b4:f0:44:7a:ef:90:ad:d8:6e:78:65:e8:70:ee: 67:33:c9:7e:d9:de:d4:a7:d6:6d:5b:e7:91:4b:14:1a:c5:70: af:9b:88:fd:65:74:fa:24:c0:61:d0:36:69:64:73:19:63:f8: 2f:16:69:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPIkjpA32/Q09rqcAQJ8TADjLz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5 QzQzRjE4RjAeFw0yNTEyMDIwODI3MzFaFw0yNTEyMDUxNTEyMzFaMDMxMTAvBgNV BAMTKDU0Rjg4RkNDQTBDMzE0OEE3Mzg3OTU0NDI0RDJDRTJBOUU4REMwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCphqFn7aSN3vWUQLqrLJZO8MxY d52ETaCgXjq6APC0GsuQt07HffNobXNvnF6LuVkISCaqE23k+pDImhrjFNzb+oz/ hLtWwRyAYR4pgd10npxMDR7wxRO8gvTJau2k5yE4roUsr66lrHW9UN+p9vIli5i7 SiYj6mLy3lb4AaYlSl8SOHEtyKP5Y0eCpsrHWj10IKNHt04L+18c0fZlggXeua8T T6ZCdIkhFXONLkn8a3bu6raDXMYUyuNJgxPDcSKg8S0Qpti7bf//qgkz8UiWvwcr +6Ud5DxeSmqrKCwH4c05mE6IbCckJIEyfMTmVSUtLWYacuOxR5CpYK3drc4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVPiPzKDDFIpzh5VEJNLOKp6NwOUwHwYDVR0j BBgwFoAUgvuc5ZfWHsOCui1jkJQmlZxD8Y8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzZjNzgyNS04YjNkLTQ2NmMtYmEwYy05OTU1M2MxZDczZWEvMC84MkZCOUNFNTk3 RDYxRUMzODJCQTJENjM5MDk0MjY5NTlDNDNGMThGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2OTU5QzQz RjE4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2Yzc4MjUtOGIzZC00NjZjLWJh MGMtOTk1NTNjMWQ3M2VhLzAvODJGQjlDRTU5N0Q2MUVDMzgyQkEyRDYzOTA5NDI2 OTU5QzQzRjE4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQL3vX/R5fWlrHoRx0VQUTi9MNrajUxIZiB 69JCMQwcP/1vI8V24CO5vKBLojym4pdVbnX7NsJaGhErvkIrBkDapQtNmfvVduos a/BGpo6YnubScaqrFMb2Uc0zt8bLiTKFlSxI5l4OSpJtwSZjfRPFBna6WGYBZJS+ iXernfLDFXk941pv/knaNdiPY2U8revxoexeVCek85yvNOwORn70qiub6LBIBHCs IOWj3eWs7ZLVDkxpnRIV8tLsngNOEXKbjxAix8ydZVq08ER675Ct2G54Zehw7mcz yX7Z3tSn1m1b55FLFBrFcK+biP1ldPokwGHQNmlkcxlj+C8WaWY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:45 2025 by rpki-client