This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft File: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft (raw, json) Hash identifier: bCgmMwv8QoUs0GiBfpvyUHuPvHG2l7hiaJj1unTu5Cs= Subject key identifier: A7:3E:B8:18:6E:BA:E7:F0:B3:C3:27:33:95:73:B7:99:90:7F:86:DA Authority key identifier: 89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 Certificate issuer: /CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Certificate serial: 62F4D08F5B3385385F3EE8B8F31120CC2F652EF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft Manifest number: F6 Signing time: Wed 03 Dec 2025 01:50:00 +0000 Manifest this update: Wed 03 Dec 2025 01:45:00 +0000 Manifest next update: Sat 06 Dec 2025 05:00:00 +0000 Files and hashes: 1: 3130332e32392e3137312e302f32342d3234203d3e203538333738.roa (hash: VGUNPT+EvshoEIe2DkaARFh/LWXkGNwN7useeVXqqQc=) 2: 3130332e32392e3137302e302f32342d3234203d3e203536323631.roa (hash: AbfmsPIM39RXP9giC5KqkIRrkD9RG/QaxNfAq/KCmcs=) 3: 8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl (hash: NCdsAyvrmnqknxq4d1hBbGZ9rRFZUd1iq7NnCb/xd+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f4:d0:8f:5b:33:85:38:5f:3e:e8:b8:f3:11:20:cc:2f:65:2e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11 Validity Not Before: Dec 3 01:45:00 2025 GMT Not After : Dec 6 05:00:00 2025 GMT Subject: CN=A73EB8186EBAE7F0B3C327339573B799907F86DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5c:9e:27:05:a6:9b:9c:e0:07:ee:66:e3:26: 89:ab:7b:46:cd:c3:04:9a:23:4c:24:2d:0a:4c:1f: 25:36:d5:29:0c:38:0c:50:49:c5:6c:bd:00:ca:db: c8:06:4e:b3:12:e0:bc:d9:c0:3d:6e:f5:84:7d:5c: 4a:43:c7:02:e8:43:ee:de:b6:b6:45:64:41:2d:66: f3:16:01:6b:88:fe:28:7c:5e:b4:15:fb:b0:fd:85: 0f:8a:3c:0b:0b:30:6f:a6:64:4b:1e:74:63:a0:02: b0:f7:4d:05:aa:f8:a1:99:ce:db:00:fb:cb:b2:1d: 42:2a:17:16:75:f6:56:64:ca:8a:0a:7d:84:df:e1: 2c:17:30:04:7c:e1:06:ec:5d:96:d2:46:af:66:a1: d9:fa:29:30:4d:bf:8b:77:1f:37:34:a8:f2:b7:6f: ba:7c:11:bf:fe:c7:1a:da:47:8d:66:53:1c:db:b7: 21:d9:4e:e1:46:89:86:fa:bc:62:00:63:74:4a:af: 06:2d:28:94:1d:23:80:aa:ed:5c:41:de:a0:f0:7c: 8c:ac:94:f5:6b:51:00:26:0d:d0:63:1f:dd:7c:ad: 0e:65:d5:88:61:eb:2e:6b:22:fa:c1:39:69:03:69: e1:02:ae:d9:a2:6e:59:09:29:fc:a3:7d:ef:df:06: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:B8:18:6E:BA:E7:F0:B3:C3:27:33:95:73:B7:99:90:7F:86:DA X509v3 Authority Key Identifier: keyid:89:32:E2:5F:54:C4:B1:0E:2A:E5:B7:1E:38:D2:AD:4D:1E:E3:BB:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3809384-9b1c-4f5a-aa6b-9de3b52a9c05/0/8932E25F54C4B10E2AE5B71E38D2AD4D1EE3BB11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:06:4d:fc:da:8f:c4:95:73:58:e8:92:ff:9c:80:c7:9b:b7: 3a:67:4f:b8:ee:9d:f4:fd:7b:e6:e7:3f:a8:f9:c1:4b:e9:00: 11:90:c7:79:d6:fe:1c:b6:67:61:14:dc:d1:5a:7e:b6:d9:39: a7:b1:ef:c0:75:34:53:ce:d6:eb:10:2f:bf:59:5b:8d:98:36: d0:e4:1e:71:da:5f:75:d2:55:63:6a:af:f9:61:ef:7e:0f:06: b7:b1:64:27:52:62:17:ef:fb:a6:d6:94:b7:f6:18:6b:eb:60: ae:c4:ee:20:03:31:d2:83:1f:b1:65:8b:5e:c6:85:49:7e:13: 9b:d0:3b:21:f3:26:af:44:ba:22:3a:59:2f:a3:62:6e:32:e2: 51:02:ed:61:13:e1:db:72:6a:8c:5c:91:18:84:81:65:eb:f4: 7a:0c:eb:22:16:d7:0f:6c:2d:28:86:38:9f:38:e8:3d:a3:76: 21:cf:10:2e:eb:aa:23:fc:bb:3a:16:3b:c6:30:7f:75:be:79: ab:aa:c0:9f:1d:64:90:31:1a:e1:90:36:ac:fa:d1:21:e1:5d: d1:7e:f6:7c:fc:74:1f:e4:db:f7:e3:25:8d:2f:58:38:a2:5c: 63:4f:5c:80:ae:ae:fc:c1:e1:32:9e:ef:1e:30:a0:d2:f9:78: b5:56:bf:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvTQj1szhThfPui48xEgzC9lLvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQx RUUzQkIxMTAeFw0yNTEyMDMwMTQ1MDBaFw0yNTEyMDYwNTAwMDBaMDMxMTAvBgNV BAMTKEE3M0VCODE4NkVCQUU3RjBCM0MzMjczMzk1NzNCNzk5OTA3Rjg2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXJ4nBaabnOAH7mbjJomre0bN wwSaI0wkLQpMHyU21SkMOAxQScVsvQDK28gGTrMS4LzZwD1u9YR9XEpDxwLoQ+7e trZFZEEtZvMWAWuI/ih8XrQV+7D9hQ+KPAsLMG+mZEsedGOgArD3TQWq+KGZztsA +8uyHUIqFxZ19lZkyooKfYTf4SwXMAR84QbsXZbSRq9modn6KTBNv4t3Hzc0qPK3 b7p8Eb/+xxraR41mUxzbtyHZTuFGiYb6vGIAY3RKrwYtKJQdI4Cq7VxB3qDwfIys lPVrUQAmDdBjH918rQ5l1Yhh6y5rIvrBOWkDaeECrtmiblkJKfyjfe/fBosvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpz64GG665/CzwyczlXO3mZB/htowHwYDVR0j BBgwFoAUiTLiX1TEsQ4q5bceONKtTR7juxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzgwOTM4NC05YjFjLTRmNWEtYWE2Yi05ZGUzYjUyYTljMDUvMC84OTMyRTI1RjU0 QzRCMTBFMkFFNUI3MUUzOEQyQUQ0RDFFRTNCQjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFENEQxRUUz QkIxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4MDkzODQtOWIxYy00ZjVhLWFh NmItOWRlM2I1MmE5YzA1LzAvODkzMkUyNUY1NEM0QjEwRTJBRTVCNzFFMzhEMkFE NEQxRUUzQkIxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoGTfzaj8SVc1jokv+cgMebtzpnT7junfT9 e+bnP6j5wUvpABGQx3nW/hy2Z2EU3NFafrbZOaex78B1NFPO1usQL79ZW42YNtDk HnHaX3XSVWNqr/lh734PBrexZCdSYhfv+6bWlLf2GGvrYK7E7iADMdKDH7Fli17G hUl+E5vQOyHzJq9EuiI6WS+jYm4y4lEC7WET4dtyaoxckRiEgWXr9HoM6yIW1w9s LSiGOJ846D2jdiHPEC7rqiP8uzoWO8Ywf3W+eauqwJ8dZJAxGuGQNqz60SHhXdF+ 9nz8dB/k2/fjJY0vWDiiXGNPXICurvzB4TKe7x4woNL5eLVWvys= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:37 2025 by rpki-client