This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: 8OSCsaFYznN1BfNTFHi5vNRlUqID2qVFKqdFZW0bS50= Subject key identifier: 02:07:30:F8:86:A4:E9:B6:B9:43:00:68:B4:75:41:37:2A:F5:5F:D8 Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 1322322566830751FEB4C329180F5CA8B809F9B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 4A Signing time: Wed 03 Dec 2025 06:02:18 +0000 Manifest this update: Wed 03 Dec 2025 05:57:17 +0000 Manifest next update: Sat 06 Dec 2025 06:15:17 +0000 Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) 2: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: 3Giyc0OErw3zKXzonKIgXt+Ve+3B45DiTWqn/OShP74=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:22:32:25:66:83:07:51:fe:b4:c3:29:18:0f:5c:a8:b8:09:f9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Dec 3 05:57:17 2025 GMT Not After : Dec 6 06:15:17 2025 GMT Subject: CN=020730F886A4E9B6B9430068B47541372AF55FD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d3:a1:bb:7d:2b:10:1c:1f:6e:71:2a:2d:1c: 9f:d7:26:ee:42:20:9b:f0:72:ec:1f:86:e3:39:86: f3:01:86:35:bb:89:c2:05:53:29:06:96:6d:75:e8: b2:a3:5b:78:74:ab:ba:ea:8c:84:0c:21:05:cd:e5: 2e:d8:ab:15:77:e7:1e:4a:7a:59:2a:e1:19:7f:cc: 4b:ba:c1:fb:94:17:39:c4:a3:b9:01:70:7c:44:15: 75:cc:eb:a0:9d:9c:6b:e6:61:24:35:da:78:a9:1e: 60:89:5c:f3:6b:70:02:70:03:26:5c:28:77:6a:cd: 16:d8:06:c0:30:01:d6:9a:7f:ca:a5:53:78:74:bd: fc:08:59:f3:bf:01:38:d9:49:0e:2e:f7:06:0e:94: 30:19:a7:84:f7:03:89:41:64:cf:c9:a6:61:ee:51: 83:b4:c4:71:bb:6e:b2:db:2f:fb:67:8d:d0:45:40: bf:d9:4d:8a:a9:11:78:80:42:69:fd:c9:db:00:9c: 92:96:8b:5b:ec:fb:2c:a1:46:9f:0e:21:69:fb:40: 3d:11:f0:15:12:c8:87:e6:1c:60:6d:51:37:07:64: ea:72:d0:71:b4:26:16:d8:f7:fc:0f:8b:da:8d:6b: 2b:56:dd:f7:74:b7:17:8a:bd:e5:4f:a5:cb:01:8d: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:07:30:F8:86:A4:E9:B6:B9:43:00:68:B4:75:41:37:2A:F5:5F:D8 X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8a:c2:38:e4:a5:99:59:84:14:5a:85:82:55:47:f6:7f:41: fd:8c:d3:31:86:d7:dc:19:7c:f6:2c:35:9c:93:09:68:f3:b9: c4:9a:8f:bc:b5:cc:25:c6:15:49:b1:a0:09:e2:dd:43:32:10: 9e:37:54:4b:62:f4:83:05:a1:47:33:76:b4:4c:8e:d4:61:00: e0:8f:c1:7b:4d:62:8b:25:5f:b6:02:6a:93:95:17:86:b4:3c: 02:9b:80:e8:87:34:85:0f:8f:dc:35:19:f6:31:16:a2:f8:70: a6:1e:f4:87:85:cc:b4:64:2f:33:78:62:81:ea:73:22:2f:b4: 26:22:c1:b4:9f:82:08:c6:9d:df:0e:b3:cf:91:07:7e:6b:c3: 1d:34:ad:55:2c:84:59:3f:34:d4:07:06:e1:39:b6:44:61:2d: 58:7f:92:2a:1f:fb:f4:eb:f3:30:91:c6:dc:c0:f8:6d:ac:28: 8f:b9:d2:c0:6c:8f:8e:c8:8a:2f:59:ee:10:aa:0a:d0:7e:3d: 19:8e:bb:16:bb:0a:7a:87:02:fe:11:96:62:92:ca:70:3c:70: a2:aa:48:72:85:63:be:f0:19:04:58:06:9a:2a:fe:d0:72:11: c6:07:d3:bc:bd:94:e8:f3:00:42:d1:b9:ad:05:53:df:19:48: ab:3c:54:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEyIyJWaDB1H+tMMpGA9cqLgJ+bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNTEyMDMwNTU3MTdaFw0yNTEyMDYwNjE1MTdaMDMxMTAvBgNV BAMTKDAyMDczMEY4ODZBNEU5QjZCOTQzMDA2OEI0NzU0MTM3MkFGNTVGRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX06G7fSsQHB9ucSotHJ/XJu5C IJvwcuwfhuM5hvMBhjW7icIFUykGlm116LKjW3h0q7rqjIQMIQXN5S7YqxV35x5K elkq4Rl/zEu6wfuUFznEo7kBcHxEFXXM66CdnGvmYSQ12nipHmCJXPNrcAJwAyZc KHdqzRbYBsAwAdaaf8qlU3h0vfwIWfO/ATjZSQ4u9wYOlDAZp4T3A4lBZM/JpmHu UYO0xHG7brLbL/tnjdBFQL/ZTYqpEXiAQmn9ydsAnJKWi1vs+yyhRp8OIWn7QD0R 8BUSyIfmHGBtUTcHZOpy0HG0JhbY9/wPi9qNaytW3fd0txeKveVPpcsBjRmlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAgcw+Iak6ba5QwBotHVBNyr1X9gwHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeKwjjkpZlZhBRahYJVR/Z/Qf2M0zGG19wZ fPYsNZyTCWjzucSaj7y1zCXGFUmxoAni3UMyEJ43VEti9IMFoUczdrRMjtRhAOCP wXtNYoslX7YCapOVF4a0PAKbgOiHNIUPj9w1GfYxFqL4cKYe9IeFzLRkLzN4YoHq cyIvtCYiwbSfggjGnd8Os8+RB35rwx00rVUshFk/NNQHBuE5tkRhLVh/kiof+/Tr 8zCRxtzA+G2sKI+50sBsj47Iii9Z7hCqCtB+PRmOuxa7CnqHAv4RlmKSynA8cKKq SHKFY77wGQRYBpoq/tByEcYH07y9lOjzAELRua0FU98ZSKs8VMo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:37 2025 by rpki-client