This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: UBvPJuy86KnK2I0Zt0FcshXG+CvcN33P5cv7yyvu+AU= Subject key identifier: 19:F9:B4:6E:31:44:DC:2A:61:FD:38:84:49:A0:EF:74:5B:99:E1:6A Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 5F9C286347EB8C0D4DBD0EC5D52AC3994C921CBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 0285 Signing time: Tue 02 Dec 2025 12:30:47 +0000 Manifest this update: Tue 02 Dec 2025 12:25:47 +0000 Manifest next update: Fri 05 Dec 2025 23:48:47 +0000 Files and hashes: 1: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) 2: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: f7+9OWRjFtMw2bOmg20I7NPRyB4XW3wtWIRotSMiI/0=) 3: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:9c:28:63:47:eb:8c:0d:4d:bd:0e:c5:d5:2a:c3:99:4c:92:1c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Dec 2 12:25:47 2025 GMT Not After : Dec 5 23:48:47 2025 GMT Subject: CN=19F9B46E3144DC2A61FD388449A0EF745B99E16A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:c8:a2:d7:7d:ce:2d:0c:29:1b:a5:2c:1b: 39:23:6d:f2:f0:87:3c:a2:f8:81:75:04:fc:0b:75: 95:16:8a:97:03:ce:3f:82:be:ca:ce:ea:4c:2c:b5: 1f:60:a4:20:9b:61:bf:ef:1e:d5:ad:fc:fb:e2:1c: cb:48:95:59:95:cb:e9:14:09:df:49:e1:37:7e:32: 9b:30:24:dc:b7:67:4c:da:7c:e0:cc:21:ce:19:7a: 14:cb:85:17:bb:5a:86:7a:1d:ac:72:a4:63:2f:7a: bc:7e:48:6b:1b:e9:40:41:10:3e:38:ca:d0:ff:35: bc:84:af:41:e7:a2:da:4c:9c:2c:db:4a:08:97:db: c9:1f:4b:02:57:4e:ef:a0:d0:cb:f6:ed:f0:4f:d9: 77:1a:92:a5:f0:75:7e:e1:7c:3b:f7:c2:6d:b9:14: e7:05:af:fa:72:a8:9a:4f:dc:a8:c6:5d:91:4b:1e: 38:92:c0:aa:03:22:31:2b:ba:15:bb:39:78:f1:31: 8b:e7:31:5d:e5:b5:db:31:34:f5:f2:0e:a5:7d:af: eb:2d:57:f2:fc:3d:52:f4:4b:82:18:f2:12:7d:b8: a4:a5:46:a1:6c:23:70:db:a6:df:af:e9:0b:92:94: ea:6e:8d:82:e5:34:80:59:96:59:6b:7b:f1:42:56: 17:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F9:B4:6E:31:44:DC:2A:61:FD:38:84:49:A0:EF:74:5B:99:E1:6A X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:cc:90:b9:c7:76:52:69:63:54:1a:2d:1c:b9:b6:16:2e:41: 05:a9:13:7b:05:09:b5:b6:6a:7c:f2:0d:99:0d:36:ab:22:eb: dd:57:78:e5:14:d2:4a:73:16:d8:5e:5e:80:e6:8f:87:04:83: 4b:6b:b7:d8:b4:97:fb:ca:11:bd:86:4f:a5:79:69:b9:9b:38: ec:b9:ef:46:30:6b:19:dc:ae:14:e5:61:34:d5:49:fd:44:4c: 21:d9:04:bb:96:f9:a6:00:bb:d0:df:22:3b:a9:b2:d1:c2:cb: ed:9a:ae:43:c1:13:84:e0:e1:1b:5a:1c:9b:99:48:66:a8:1c: 4a:26:0d:9e:5d:3f:5a:00:30:12:62:70:ea:3d:f7:39:d0:9c: a1:2a:4e:e5:49:68:9a:07:dc:4e:53:fe:51:40:37:21:4c:49: c7:c9:6e:32:67:1c:fc:80:3e:bf:56:40:7f:9c:bd:46:57:fd: ac:8c:ba:b7:7c:8b:17:3c:44:73:fd:96:0b:c3:ac:67:b1:f1: b2:6f:09:15:4d:78:f0:48:7a:b9:51:68:62:23:35:da:6a:d0: 76:ea:d5:0a:f6:cf:81:ae:9b:54:2f:72:e6:ad:98:0d:2c:4e: 58:3f:d2:49:66:83:76:2d:33:fd:b3:9e:84:fc:46:c4:8d:a5: 26:88:a5:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5woY0frjA1NvQ7F1SrDmUySHLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTEyMDIxMjI1NDdaFw0yNTEyMDUyMzQ4NDdaMDMxMTAvBgNV BAMTKDE5RjlCNDZFMzE0NERDMkE2MUZEMzg4NDQ5QTBFRjc0NUI5OUUxNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHosii133OLQwpG6UsGzkjbfLw hzyi+IF1BPwLdZUWipcDzj+CvsrO6kwstR9gpCCbYb/vHtWt/PviHMtIlVmVy+kU Cd9J4Td+MpswJNy3Z0zafODMIc4ZehTLhRe7WoZ6HaxypGMverx+SGsb6UBBED44 ytD/NbyEr0HnotpMnCzbSgiX28kfSwJXTu+g0Mv27fBP2XcakqXwdX7hfDv3wm25 FOcFr/pyqJpP3KjGXZFLHjiSwKoDIjEruhW7OXjxMYvnMV3ltdsxNPXyDqV9r+st V/L8PVL0S4IY8hJ9uKSlRqFsI3Dbpt+v6QuSlOpujYLlNIBZlllre/FCVhfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGfm0bjFE3Cph/TiESaDvdFuZ4WowHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHMkLnHdlJpY1QaLRy5thYuQQWpE3sFCbW2 anzyDZkNNqsi691XeOUU0kpzFtheXoDmj4cEg0trt9i0l/vKEb2GT6V5abmbOOy5 70YwaxncrhTlYTTVSf1ETCHZBLuW+aYAu9DfIjupstHCy+2arkPBE4Tg4RtaHJuZ SGaoHEomDZ5dP1oAMBJicOo99znQnKEqTuVJaJoH3E5T/lFANyFMScfJbjJnHPyA Pr9WQH+cvUZX/ayMurd8ixc8RHP9lgvDrGex8bJvCRVNePBIerlRaGIjNdpq0Hbq 1Qr2z4Gum1QvcuatmA0sTlg/0klmg3YtM/2znoT8RsSNpSaIpfI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:50 2025 by rpki-client