This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: /9N7sVKWktYlMjtSPNXDXLmSoPRk7jmjCdB6iYNJQGE= Subject key identifier: 79:8D:4F:B6:19:D2:07:F3:25:5F:18:F3:D2:61:0A:FA:A9:8B:B0:61 Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 7956341F39B453B8A4336A9DC6DE84596CC63D21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: 0132 Signing time: Sun 07 Dec 2025 16:40:55 +0000 Manifest this update: Sun 07 Dec 2025 16:35:55 +0000 Manifest next update: Wed 10 Dec 2025 17:34:55 +0000 Files and hashes: 1: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: QDbyucBBBhe81O2EOYCb5dnt7I6OkGUAU8feHcglp00=) 2: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) 3: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) 4: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:56:34:1f:39:b4:53:b8:a4:33:6a:9d:c6:de:84:59:6c:c6:3d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Dec 7 16:35:55 2025 GMT Not After : Dec 10 17:34:55 2025 GMT Subject: CN=798D4FB619D207F3255F18F3D2610AFAA98BB061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:96:6c:91:24:6a:d0:2f:6b:86:96:34:23: 23:9a:e2:1e:77:d3:1a:ba:a4:e9:87:8d:7e:55:58: 84:84:c5:1f:6c:62:fc:c0:a7:b6:53:f4:05:24:b6: da:af:4b:05:ec:68:ad:73:c3:5a:79:38:a3:cb:93: f9:23:ae:15:96:c3:29:c7:37:09:2f:3e:42:73:02: b9:f0:17:a7:df:c1:52:3c:db:14:5e:6c:d5:da:b7: 96:b7:90:a1:88:08:bd:52:e7:90:1d:a5:a6:bf:85: 2c:68:20:fa:35:c7:5d:82:e1:65:6e:27:89:dc:53: ae:aa:8b:ae:38:1f:da:76:a7:62:3a:73:94:8b:26: e0:74:17:62:08:0f:0d:b7:15:54:48:93:05:39:5e: 18:1e:34:69:02:65:48:d0:41:f8:0f:0d:2b:f7:de: 30:d0:f6:63:33:5f:9d:7d:e3:26:d3:48:f0:c6:dc: 8f:85:38:e5:f5:60:7e:93:dc:04:72:8e:9e:34:92: 25:9a:de:4b:a2:23:a5:2c:ac:bf:54:f4:3c:a0:93: f1:62:74:e6:4c:d9:c0:d3:e2:65:bc:4b:f0:4a:d8: cc:da:b8:e9:46:70:89:99:03:17:91:dd:b5:dd:fa: bc:47:2d:83:9c:a6:ee:0f:12:20:49:9c:ae:ae:29: 09:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8D:4F:B6:19:D2:07:F3:25:5F:18:F3:D2:61:0A:FA:A9:8B:B0:61 X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9c:92:0e:82:51:1a:9b:91:36:a3:c3:e1:da:c7:09:5c:9b: 01:46:da:3b:41:91:d5:1b:e4:fb:ea:65:b5:76:09:7d:67:81: 34:ef:39:ba:e3:f5:e8:8e:67:a2:63:b0:4f:97:49:bf:aa:12: 4c:41:17:2d:6d:3c:59:e9:30:25:51:eb:53:5a:0e:73:3e:37: 8d:2b:ae:15:43:3c:ed:1c:8a:ff:f4:19:2d:d2:6d:d4:c3:8d: d5:9e:c7:02:a7:f3:4f:17:9f:bf:f3:78:ad:a8:70:8e:70:38: 34:67:e0:ae:3c:7a:a8:83:1f:dc:43:be:82:c5:bc:73:cb:1c: 00:82:f0:e1:dd:81:f4:c8:fc:dd:10:09:ca:82:08:da:c5:2f: 66:80:0e:49:7a:0e:91:19:14:80:c6:ca:48:3f:d8:4a:a1:08: da:2a:9a:21:b5:b4:7e:9b:25:f4:e1:9b:54:fb:b8:c5:6e:de: b1:78:9c:3a:7c:ba:68:bc:b2:12:97:05:e2:25:ad:f8:76:9f: bf:db:a5:91:61:13:32:b8:88:17:d9:bc:d4:22:e9:c9:d8:14: 05:f6:dc:0a:58:8b:cd:8c:9c:d7:c3:31:47:ab:5b:f8:49:2b: a0:3f:31:70:66:79:39:e1:02:bd:67:a1:a3:cd:c0:1b:8c:fa: b9:9a:e5:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeVY0Hzm0U7ikM2qdxt6EWWzGPSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTEyMDcxNjM1NTVaFw0yNTEyMTAxNzM0NTVaMDMxMTAvBgNV BAMTKDc5OEQ0RkI2MTlEMjA3RjMyNTVGMThGM0QyNjEwQUZBQTk4QkIwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxJZskSRq0C9rhpY0IyOa4h53 0xq6pOmHjX5VWISExR9sYvzAp7ZT9AUkttqvSwXsaK1zw1p5OKPLk/kjrhWWwynH NwkvPkJzArnwF6ffwVI82xRebNXat5a3kKGICL1S55Adpaa/hSxoIPo1x12C4WVu J4ncU66qi644H9p2p2I6c5SLJuB0F2IIDw23FVRIkwU5XhgeNGkCZUjQQfgPDSv3 3jDQ9mMzX5194ybTSPDG3I+FOOX1YH6T3ARyjp40kiWa3kuiI6UsrL9U9Dygk/Fi dOZM2cDT4mW8S/BK2MzauOlGcImZAxeR3bXd+rxHLYOcpu4PEiBJnK6uKQl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeY1PthnSB/MlXxjz0mEK+qmLsGEwHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2ckg6CURqbkTajw+HaxwlcmwFG2jtBkdUb 5PvqZbV2CX1ngTTvObrj9eiOZ6JjsE+XSb+qEkxBFy1tPFnpMCVR61NaDnM+N40r rhVDPO0civ/0GS3SbdTDjdWexwKn808Xn7/zeK2ocI5wODRn4K48eqiDH9xDvoLF vHPLHACC8OHdgfTI/N0QCcqCCNrFL2aADkl6DpEZFIDGykg/2EqhCNoqmiG1tH6b JfThm1T7uMVu3rF4nDp8umi8shKXBeIlrfh2n7/bpZFhEzK4iBfZvNQi6cnYFAX2 3ApYi82MnNfDMUerW/hJK6A/MXBmeTnhAr1noaPNwBuM+rma5bE= -----END CERTIFICATE-----Generated at Sun Dec 7 18:53:06 2025 by rpki-client