This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.mft (raw, json) Hash identifier: cxbhsRW7RRDcO88Y0JMcGEhLzMN5s//HS833IBDqO9E= Subject key identifier: 52:5D:40:A0:F7:60:99:6A:04:82:99:74:C8:28:E4:95:B7:A7:98:9F Authority key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Certificate issuer: /CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Certificate serial: 34F458265FC87EB88DFEECD3E6AB90A035FE2951 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft Manifest number: 0367 Signing time: Wed 03 Dec 2025 07:42:22 +0000 Manifest this update: Wed 03 Dec 2025 07:37:22 +0000 Manifest next update: Sat 06 Dec 2025 15:47:22 +0000 Files and hashes: 1: 3130332e3137322e3131382e302f32332d3234203d3e20313432333935.roa (hash: HP+xeHwMe/Q1Tf4Xq/63+A27OrwucM8iR00HxSt8dQE=) 2: 082F7822D1C63E1ED5DA833913215FE68925FF6E.crl (hash: Kkl57kT+DYVWy3a+9g1tzOAhqJs9NfqQ6gr9Yk6l0vk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f4:58:26:5f:c8:7e:b8:8d:fe:ec:d3:e6:ab:90:a0:35:fe:29:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Validity Not Before: Dec 3 07:37:22 2025 GMT Not After : Dec 6 15:47:22 2025 GMT Subject: CN=525D40A0F760996A04829974C828E495B7A7989F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:02:f5:ac:91:6f:53:cb:07:6a:af:d8:45: 34:2b:fc:30:cb:2f:12:39:3a:9f:01:12:86:65:6b: ce:0c:2c:4f:b5:7f:25:ad:ef:82:bc:76:c8:68:5e: fe:12:bb:37:dd:57:a1:72:b5:64:11:78:6d:48:62: 12:90:93:6d:44:87:e9:5c:f4:37:88:6f:1b:1d:6d: b4:f8:ee:e9:12:1f:b5:78:07:00:dc:b3:d6:70:e7: 06:7d:cc:59:2a:1f:2d:08:74:e2:8d:fe:52:f5:77: 94:58:fe:b9:bd:c1:61:86:93:bb:14:24:65:27:81: 67:c3:56:fd:f4:15:bf:ab:db:50:99:26:ba:62:77: ec:29:01:b4:21:13:9a:10:16:ec:1f:18:78:0e:cf: e1:68:84:a0:c4:cb:47:ff:a6:92:64:e6:5c:60:a9: 24:b1:a2:ee:78:72:ee:1b:77:09:a6:da:81:78:c2: eb:bd:11:67:e9:a0:4f:46:33:70:7f:3b:fe:68:8e: 3f:1e:69:3c:cb:9b:18:3a:00:2a:89:3c:f5:01:7a: 5e:67:ff:c6:fc:03:ef:5b:d9:d0:1d:c5:7b:62:dc: 52:4c:89:1a:a5:99:1e:4c:15:29:ca:4b:7a:fb:e8: c3:ec:e6:3d:0e:4a:f0:de:f1:a6:37:1a:ad:2f:20: 90:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5D:40:A0:F7:60:99:6A:04:82:99:74:C8:28:E4:95:B7:A7:98:9F X509v3 Authority Key Identifier: keyid:08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:22:23:fe:6d:94:01:bf:75:5d:66:bd:d1:3f:cc:a5:8c:61: 60:f9:cc:8c:f2:b0:b3:66:1c:37:5e:ab:fa:27:54:a9:3b:1a: 54:a6:18:29:c0:d7:dc:69:7c:03:af:f0:52:1c:98:37:b9:5c: 53:3e:50:14:03:27:0e:a5:05:80:86:cd:39:08:58:44:09:35: 6c:ae:4f:9a:7d:1a:bc:50:93:3c:99:c5:2c:e6:3b:46:8b:48: 5a:21:d1:1c:47:59:d9:fa:7c:2f:45:5e:4e:e8:51:fe:5f:15: c2:7e:6b:6e:47:9d:ae:32:6f:9a:1e:36:00:be:b3:a3:3b:68: 8c:ac:6a:3e:e3:23:c9:30:b1:04:6d:29:f7:4c:e1:cd:72:cd: 60:70:2c:90:7a:a3:dd:09:19:50:14:0a:a8:97:49:a1:b8:7b: 79:93:85:6e:d1:bd:f3:f1:4c:04:8c:63:0d:05:5d:1b:af:10: e7:6a:f3:88:17:17:4c:d3:1c:ab:85:8e:bf:1f:96:c9:91:92: ed:7f:e6:ea:f6:6c:4a:86:dd:34:25:d4:57:73:b3:3c:96:a4: f2:e5:52:47:7a:ca:8d:2a:5d:6b:d0:42:1c:d4:71:83:f5:cf: aa:73:e0:20:a3:e0:f6:e5:f6:09:26:6a:65:0d:f7:da:77:3e: e1:46:90:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPRYJl/IfriN/uzT5quQoDX+KVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4 OTI1RkY2RTAeFw0yNTEyMDMwNzM3MjJaFw0yNTEyMDYxNTQ3MjJaMDMxMTAvBgNV BAMTKDUyNUQ0MEEwRjc2MDk5NkEwNDgyOTk3NEM4MjhFNDk1QjdBNzk4OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlwL1rJFvU8sHaq/YRTQr/DDL LxI5Op8BEoZla84MLE+1fyWt74K8dshoXv4SuzfdV6FytWQReG1IYhKQk21Eh+lc 9DeIbxsdbbT47ukSH7V4BwDcs9Zw5wZ9zFkqHy0IdOKN/lL1d5RY/rm9wWGGk7sU JGUngWfDVv30Fb+r21CZJrpid+wpAbQhE5oQFuwfGHgOz+FohKDEy0f/ppJk5lxg qSSxou54cu4bdwmm2oF4wuu9EWfpoE9GM3B/O/5ojj8eaTzLmxg6ACqJPPUBel5n /8b8A+9b2dAdxXti3FJMiRqlmR5MFSnKS3r76MPs5j0OSvDe8aY3Gq0vIJD3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUl1AoPdgmWoEgpl0yCjklbenmJ8wHwYDVR0j BBgwFoAUCC94ItHGPh7V2oM5EyFf5okl/24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMC8wODJGNzgyMkQx QzYzRTFFRDVEQTgzMzkxMzIxNUZFNjg5MjVGRjZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVGRTY4OTI1 RkY2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA0ZTk3ZDMtNzFjMy00ZDBhLThi MDQtNzA4OGZlMzgyYmMzLzAvMDgyRjc4MjJEMUM2M0UxRUQ1REE4MzM5MTMyMTVG RTY4OTI1RkY2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANciI/5tlAG/dV1mvdE/zKWMYWD5zIzysLNm HDdeq/onVKk7GlSmGCnA19xpfAOv8FIcmDe5XFM+UBQDJw6lBYCGzTkIWEQJNWyu T5p9GrxQkzyZxSzmO0aLSFoh0RxHWdn6fC9FXk7oUf5fFcJ+a25Hna4yb5oeNgC+ s6M7aIysaj7jI8kwsQRtKfdM4c1yzWBwLJB6o90JGVAUCqiXSaG4e3mThW7RvfPx TASMYw0FXRuvEOdq84gXF0zTHKuFjr8flsmRku1/5ur2bEqG3TQl1FdzszyWpPLl Ukd6yo0qXWvQQhzUcYP1z6pz4CCj4Pbl9gkmamUN99p3PuFGkAY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:30 2025 by rpki-client