This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft File: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft (raw, json) Hash identifier: /++i5U9jPV5AlgI3pPcVczUHd18NBLHUPcFvSOs0GgY= Subject key identifier: 18:83:A3:28:C7:F2:DA:35:77:4C:B2:8C:5B:AB:88:49:37:C6:FD:C6 Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA Certificate issuer: /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Certificate serial: 4C597B6CE819CF827970A33BCE856967A80A9DB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft Manifest number: 0536 Signing time: Wed 17 Dec 2025 20:41:27 +0000 Manifest this update: Wed 17 Dec 2025 20:36:27 +0000 Manifest next update: Sun 21 Dec 2025 06:05:27 +0000 Files and hashes: 1: 8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl (hash: F4vuQHKX6/BBMdBPFT+MO0mcIRQ+XmdMAHNKMTyFhQY=) 2: 3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (hash: EeVS/Wotu8QiYnhwHE/NjTJ1MQmj/cQtABdAbLQgSvo=) 3: 3130332e3130302e32372e302f32342d3234203d3e20313336383335.roa (hash: UXCPnVMF20T3u89LBilCEmmt67UECY/psh8twg2H0Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:59:7b:6c:e8:19:cf:82:79:70:a3:3b:ce:85:69:67:a8:0a:9d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA Validity Not Before: Dec 17 20:36:27 2025 GMT Not After : Dec 21 06:05:27 2025 GMT Subject: CN=1883A328C7F2DA35774CB28C5BAB884937C6FDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0c:5d:53:ff:5a:6c:b5:71:ef:36:23:d5:ea: eb:37:85:e7:ab:70:a9:6c:f0:8f:d8:35:6e:f3:cf: 4f:69:ed:95:02:f4:42:5a:41:c5:de:dd:34:f5:57: 75:4d:ff:d8:4d:59:b9:d5:e3:ed:c1:20:4d:27:e6: 83:69:e2:ba:9b:77:b6:25:48:9e:74:6e:62:39:88: 4a:ba:3f:bd:2e:19:83:3a:f3:a2:ff:e9:32:c4:99: 40:6c:90:b6:80:52:bb:89:09:31:dc:09:bd:e0:79: 40:96:c6:fb:2e:df:41:d4:42:de:a4:7a:0b:98:56: 9a:09:b0:a2:97:35:c3:ff:e8:7b:b1:ac:ea:d2:76: 48:d6:0d:69:61:a2:d7:c6:90:12:ff:e4:7e:de:88: 07:2d:6b:bc:64:d6:2e:0a:e6:e2:58:96:5e:5e:fd: 97:b2:97:c8:dd:af:45:dd:00:a2:2d:c3:6d:e3:65: 86:2c:e0:e8:00:ef:92:d5:20:4d:b2:8e:a2:84:55: d7:f1:af:95:de:ec:dd:98:c0:4f:d1:84:c9:29:26: 1f:c4:f1:a8:e5:b7:e7:9d:88:e6:6b:28:fa:6a:3d: f1:b6:af:41:6e:05:d2:fa:47:6f:1c:45:ac:fe:7f: b0:13:ec:9b:31:f8:1b:e4:26:b1:46:cd:67:dc:75: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:A3:28:C7:F2:DA:35:77:4C:B2:8C:5B:AB:88:49:37:C6:FD:C6 X509v3 Authority Key Identifier: keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:6a:60:52:f5:e2:fe:d6:f3:cc:02:6e:d6:81:49:5f:d0:d0: 58:6b:2e:b5:95:c8:18:ff:d0:4e:5b:3a:53:2a:a8:00:7c:c8: 45:9f:de:69:5b:0d:77:c6:20:17:e0:ea:01:93:9c:14:b2:50: 52:b0:9b:04:1a:89:7e:49:67:40:1c:91:a0:1c:b6:0f:fd:19: 85:c9:74:a9:01:38:85:f4:42:8c:20:47:42:73:91:c6:e8:7d: 5c:ea:e6:80:9d:bd:c2:87:dd:18:81:46:30:57:3c:21:70:a5: 46:7b:3a:01:fe:cb:26:fb:6f:06:5e:01:50:d4:26:3a:1c:c5: e7:21:53:e9:fc:64:de:f8:c7:19:1a:22:3b:ee:43:fb:6e:79: c2:bb:29:fe:76:cb:18:c9:84:94:91:b8:0c:8d:49:5c:b9:bf: e8:7d:44:83:59:29:55:9b:12:fa:4e:fc:21:3a:e5:b7:45:d0: b2:59:d9:c4:fa:75:f2:88:42:eb:a3:a9:96:a1:53:eb:97:51: 57:5c:bb:97:ef:f0:ee:38:c3:05:83:ee:30:2f:2b:ea:9a:be: 85:07:47:96:9b:bc:e6:26:e8:d7:d9:67:69:d8:e3:24:5c:95: 4e:04:74:15:01:a7:5b:0a:2c:80:de:1c:57:38:1b:e6:c8:df: 5a:9b:47:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTFl7bOgZz4J5cKM7zoVpZ6gKnbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVC NEVDNjlDQTAeFw0yNTEyMTcyMDM2MjdaFw0yNTEyMjEwNjA1MjdaMDMxMTAvBgNV BAMTKDE4ODNBMzI4QzdGMkRBMzU3NzRDQjI4QzVCQUI4ODQ5MzdDNkZEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZDF1T/1pstXHvNiPV6us3heer cKls8I/YNW7zz09p7ZUC9EJaQcXe3TT1V3VN/9hNWbnV4+3BIE0n5oNp4rqbd7Yl SJ50bmI5iEq6P70uGYM686L/6TLEmUBskLaAUruJCTHcCb3geUCWxvsu30HUQt6k eguYVpoJsKKXNcP/6HuxrOrSdkjWDWlhotfGkBL/5H7eiActa7xk1i4K5uJYll5e /Zeyl8jdr0XdAKItw23jZYYs4OgA75LVIE2yjqKEVdfxr5Xe7N2YwE/RhMkpJh/E 8ajlt+ediOZrKPpqPfG2r0FuBdL6R28cRaz+f7AT7Jsx+BvkJrFGzWfcdTBlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIOjKMfy2jV3TLKMW6uISTfG/cYwHwYDVR0j BBgwFoAUgoT2HHdGIv7GR1nm13yd7rTsacowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTgxNDUwNy03MTc0LTRmMWUtODU2My1lZjUwMzcwOTEzYzkvMC84Mjg0RjYxQzc3 NDYyMkZFQzY0NzU5RTZENzdDOURFRUI0RUM2OUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlERUVCNEVD NjlDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE4MTQ1MDctNzE3NC00ZjFlLTg1 NjMtZWY1MDM3MDkxM2M5LzAvODI4NEY2MUM3NzQ2MjJGRUM2NDc1OUU2RDc3QzlE RUVCNEVDNjlDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9qYFL14v7W88wCbtaBSV/Q0FhrLrWVyBj/ 0E5bOlMqqAB8yEWf3mlbDXfGIBfg6gGTnBSyUFKwmwQaiX5JZ0AckaActg/9GYXJ dKkBOIX0QowgR0JzkcbofVzq5oCdvcKH3RiBRjBXPCFwpUZ7OgH+yyb7bwZeAVDU JjocxechU+n8ZN74xxkaIjvuQ/tuecK7Kf52yxjJhJSRuAyNSVy5v+h9RINZKVWb EvpO/CE65bdF0LJZ2cT6dfKIQuujqZahU+uXUVdcu5fv8O44wwWD7jAvK+qavoUH R5abvOYm6NfZZ2nY4yRclU4EdBUBp1sKLIDeHFc4G+bI31qbR6I= -----END CERTIFICATE-----Generated at Fri Dec 19 06:25:55 2025 by rpki-client