This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: rQE20y9mmGU6tO4c7FdrCpvpznBVmsYRXHYVRgIORdo= Subject key identifier: 15:5A:9B:49:0A:0A:72:AB:89:33:70:2B:C6:06:86:6F:A1:3E:BA:0A Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 29AB9036EA9C5362D839809A09C37C2EC05AD156 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 0136 Signing time: Thu 25 Dec 2025 01:41:39 +0000 Manifest this update: Thu 25 Dec 2025 01:36:39 +0000 Manifest next update: Sun 28 Dec 2025 08:57:39 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: /2jJPO3Er6sewDinbJyZDHA9B3o2kNcba+XnPeftBr0=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: Lw/0ScVChf5tiM7RvEqPmU39IKlUyvTuOtMPZoxEjDs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ab:90:36:ea:9c:53:62:d8:39:80:9a:09:c3:7c:2e:c0:5a:d1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Dec 25 01:36:39 2025 GMT Not After : Dec 28 08:57:39 2025 GMT Subject: CN=155A9B490A0A72AB8933702BC606866FA13EBA0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:a5:e2:a4:29:ca:2a:4b:a2:1d:eb:aa:b1: fb:08:ed:83:1a:39:7e:19:43:23:27:54:e0:01:47: 95:8a:5a:53:e6:ba:5b:a9:f4:ef:bb:7a:a3:af:e9: 78:7f:a8:52:89:b1:a3:81:7d:ce:a4:74:28:c3:6c: 6c:fc:ef:7a:16:ef:40:13:9f:66:4e:d2:33:de:f2: ed:d3:40:99:9f:46:38:cf:c7:b4:bf:25:4f:27:4b: 5e:e9:2d:25:5f:53:8e:86:87:a7:49:86:61:ee:41: 45:5d:c6:a1:c6:0f:13:56:df:f7:28:b8:0f:b7:92: 6a:73:f8:1a:3f:ff:a9:bf:d0:52:07:e3:e6:a6:bd: cb:15:0d:4d:2b:d2:7d:9c:76:40:6a:f4:09:61:f8: 6a:46:49:6a:c5:fe:4b:e1:4e:0d:f7:bb:cf:94:f9: 15:69:18:06:6b:db:4e:91:7a:bb:7a:d1:46:40:4d: b3:99:77:6b:52:d3:c7:6b:40:a8:49:cd:1a:d0:02: bf:10:47:5c:aa:38:5f:d8:b3:e4:7a:75:e3:17:00: f9:b6:00:0b:c3:81:1f:c9:98:5c:02:97:91:a9:44: c1:e2:b2:e8:ce:2f:ac:c1:cc:6d:63:25:c6:31:ce: 33:cf:6c:3d:9c:30:81:e7:14:26:9a:08:76:2e:38: ff:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5A:9B:49:0A:0A:72:AB:89:33:70:2B:C6:06:86:6F:A1:3E:BA:0A X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:42:a5:07:97:40:73:65:91:59:3a:7c:d5:32:88:d7:2e:75: 03:3c:36:ed:79:7d:f4:48:73:3c:ee:bf:76:2e:26:5a:dc:62: 14:15:b0:99:42:1c:2b:05:35:4c:ed:73:97:51:5e:c0:cf:a7: 1e:ad:88:08:0e:4d:50:11:00:c3:aa:82:fb:12:3b:27:c3:54: 6e:1f:62:e2:79:42:44:b9:b3:79:34:92:1b:77:7d:f2:7c:d7: 8a:d8:5b:94:d9:a8:85:aa:bb:30:5a:8c:88:0f:17:dc:bb:58: d6:f7:61:e8:a2:b8:80:11:96:46:29:4d:0e:4e:97:fe:fe:26: 5d:cd:8f:cd:22:b5:6e:4a:b2:f8:96:dd:44:12:e1:4a:3e:dc: 0e:e9:64:16:c0:c3:f5:90:0a:f4:b2:ac:8d:81:d9:4b:5d:c8: 0f:7c:61:09:de:97:0b:e9:fe:0d:d1:02:7c:e2:0b:32:70:c3: 5f:e1:a0:1a:c6:f0:8e:be:91:b4:1d:ed:82:e5:4b:3a:d1:d7: ab:75:a8:6e:d1:39:d9:ce:eb:5d:49:00:d2:4b:56:35:d6:de: 9e:a2:b4:08:11:a9:0b:05:32:1d:5b:98:f2:37:3b:88:72:96: 7c:50:28:18:09:fa:c5:3a:80:f0:b0:76:fc:da:19:1f:ca:98: 66:cb:25:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKauQNuqcU2LYOYCaCcN8LsBa0VYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTEyMjUwMTM2MzlaFw0yNTEyMjgwODU3MzlaMDMxMTAvBgNV BAMTKDE1NUE5QjQ5MEEwQTcyQUI4OTMzNzAyQkM2MDY4NjZGQTEzRUJBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKKXipCnKKkuiHeuqsfsI7YMa OX4ZQyMnVOABR5WKWlPmulup9O+7eqOv6Xh/qFKJsaOBfc6kdCjDbGz873oW70AT n2ZO0jPe8u3TQJmfRjjPx7S/JU8nS17pLSVfU46Gh6dJhmHuQUVdxqHGDxNW3/co uA+3kmpz+Bo//6m/0FIH4+amvcsVDU0r0n2cdkBq9Alh+GpGSWrF/kvhTg33u8+U +RVpGAZr206Rert60UZATbOZd2tS08drQKhJzRrQAr8QR1yqOF/Ys+R6deMXAPm2 AAvDgR/JmFwCl5GpRMHisujOL6zBzG1jJcYxzjPPbD2cMIHnFCaaCHYuOP+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVqbSQoKcquJM3ArxgaGb6E+ugowHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5CpQeXQHNlkVk6fNUyiNcudQM8Nu15ffRI czzuv3YuJlrcYhQVsJlCHCsFNUztc5dRXsDPpx6tiAgOTVARAMOqgvsSOyfDVG4f YuJ5QkS5s3k0kht3ffJ814rYW5TZqIWquzBajIgPF9y7WNb3YeiiuIARlkYpTQ5O l/7+Jl3Nj80itW5KsviW3UQS4Uo+3A7pZBbAw/WQCvSyrI2B2UtdyA98YQnelwvp /g3RAnziCzJww1/hoBrG8I6+kbQd7YLlSzrR16t1qG7ROdnO611JANJLVjXW3p6i tAgRqQsFMh1bmPI3O4hylnxQKBgJ+sU6gPCwdvzaGR/KmGbLJWQ= -----END CERTIFICATE-----Generated at Thu Dec 25 06:57:37 2025 by rpki-client