This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft (raw, json) Hash identifier: CLGuY1cP88k2yYTlJby2FS30GjC/rvqUfSUQJUsaREo= Subject key identifier: 46:85:00:AE:4A:57:44:53:4F:EC:B1:D2:54:8C:7C:5F:18:06:96:8D Authority key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Certificate issuer: /CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Certificate serial: 2B0380F8F4A51D3D78EBBFDB699D4532B15D8390 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft Manifest number: F9 Signing time: Thu 18 Dec 2025 09:22:02 +0000 Manifest this update: Thu 18 Dec 2025 09:17:02 +0000 Manifest next update: Sun 21 Dec 2025 10:26:02 +0000 Files and hashes: 1: 3135372e36362e3133312e302f32342d3234203d3e20313339393337.roa (hash: i4JiZSoYZHLIwwO6OZUV0v9wdjo3Gmg5PRc7UcGllf8=) 2: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl (hash: 0gRcMJrQcfmvIH5UXrZzkkMoYYAGepW3X+Yz1Mdl3QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:03:80:f8:f4:a5:1d:3d:78:eb:bf:db:69:9d:45:32:b1:5d:83:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Validity Not Before: Dec 18 09:17:02 2025 GMT Not After : Dec 21 10:26:02 2025 GMT Subject: CN=468500AE4A5744534FECB1D2548C7C5F1806968D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9d:38:19:34:c6:62:4f:97:e7:06:da:da:9a: 5d:39:cc:54:12:bb:9d:98:54:f1:2b:4a:8d:5a:69: 01:a1:b8:9a:b1:5c:da:1f:2d:67:16:c1:e6:6e:e5: ce:ed:9b:3a:b0:ea:72:05:16:1f:01:6e:74:6d:aa: 8a:6a:39:44:63:34:03:89:9c:f2:49:93:72:c5:8f: 12:b8:b4:bd:75:bf:6e:65:77:22:cc:ff:ec:78:32: 4b:f7:8e:94:8d:b6:94:f3:50:bf:f0:86:24:5e:32: 33:4d:03:28:f0:c4:98:dd:d5:5a:ba:12:aa:50:80: e2:c2:ce:e7:7c:a4:23:1c:8e:b9:09:45:42:fa:b6: a8:46:15:a8:fd:cd:37:6b:f0:30:22:22:88:d4:3e: 6e:8a:8d:39:45:90:26:d8:8e:fc:65:26:da:73:47: a5:10:01:b6:6b:af:c8:1c:6d:08:a8:14:62:c9:fb: b0:c2:81:9a:8a:2f:c7:dc:9a:c7:57:8b:fa:a4:60: e7:8c:81:ba:70:61:4b:34:f3:cd:7e:1b:f3:bf:51: c3:c5:34:dd:24:9c:83:57:ca:c3:4d:0c:85:f1:a2: c0:71:07:cc:3c:1e:c6:05:5e:ea:1e:dc:3a:d6:52: d2:a6:da:a0:a3:ca:bb:8f:65:c3:38:ba:a6:dc:26: d8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:85:00:AE:4A:57:44:53:4F:EC:B1:D2:54:8C:7C:5F:18:06:96:8D X509v3 Authority Key Identifier: keyid:84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a2:84:52:18:ba:85:28:21:d5:49:36:80:e4:9b:4e:fe:5d: 20:c9:4c:8a:09:44:f9:a3:91:1e:24:7b:c4:06:c0:69:d5:7e: 9d:94:08:f8:95:f2:4b:1b:5d:4e:42:51:e0:df:3e:61:4f:5d: 5c:b6:6d:38:46:db:b7:95:d4:2f:77:a2:09:08:66:1c:88:49: fd:b7:59:91:56:8b:ca:40:af:e2:9b:94:2e:b1:a2:70:d1:3a: 88:fa:30:19:f7:8f:db:a5:05:3e:e8:bb:00:a9:a7:07:c4:62: 67:14:f7:85:52:e8:99:21:e6:76:70:37:ef:48:ac:66:9f:ca: b1:bd:ff:9e:9a:a0:e3:f5:aa:a6:6b:fa:bf:9a:c2:6e:9d:ff: 6c:9f:86:bb:07:66:65:3c:86:a7:53:be:5e:8f:e7:2e:fd:91: 9b:52:63:a9:b9:09:62:a6:85:33:8d:33:8c:47:fd:dc:b7:06: 19:d8:e3:1a:17:b4:fc:35:9c:34:5a:34:61:a5:ca:3c:c3:43: 8c:aa:28:79:30:76:fd:cf:20:a3:fb:e0:00:69:c6:f3:5f:26: 15:40:eb:af:2c:d6:c4:aa:cb:6a:67:5b:4c:35:3d:fa:8e:52: 81:47:f2:74:43:14:f8:7f:87:52:2a:37:1d:a9:b5:08:cc:aa: ea:c2:13:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwOA+PSlHT1467/baZ1FMrFdg5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0Yy ODFDQ0VCNDAeFw0yNTEyMTgwOTE3MDJaFw0yNTEyMjExMDI2MDJaMDMxMTAvBgNV BAMTKDQ2ODUwMEFFNEE1NzQ0NTM0RkVDQjFEMjU0OEM3QzVGMTgwNjk2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwnTgZNMZiT5fnBtraml05zFQS u52YVPErSo1aaQGhuJqxXNofLWcWweZu5c7tmzqw6nIFFh8BbnRtqopqOURjNAOJ nPJJk3LFjxK4tL11v25ldyLM/+x4Mkv3jpSNtpTzUL/whiReMjNNAyjwxJjd1Vq6 EqpQgOLCzud8pCMcjrkJRUL6tqhGFaj9zTdr8DAiIojUPm6KjTlFkCbYjvxlJtpz R6UQAbZrr8gcbQioFGLJ+7DCgZqKL8fcmsdXi/qkYOeMgbpwYUs0881+G/O/UcPF NN0knINXysNNDIXxosBxB8w8HsYFXuoe3DrWUtKm2qCjyruPZcM4uqbcJtgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURoUArkpXRFNP7LHSVIx8XxgGlo0wHwYDVR0j BBgwFoAUhNUyiWLQrcp3LsoqQn4JfygczrQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMC84NEQ1MzI4OTYy RDBBRENBNzcyRUNBMkE0MjdFMDk3RjI4MUNDRUI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5N0YyODFD Q0VCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY4ZDgyNGQtZDZhMS00NTQzLTlj ZjAtZDk5MjY4MzJmMjlmLzAvODRENTMyODk2MkQwQURDQTc3MkVDQTJBNDI3RTA5 N0YyODFDQ0VCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+ihFIYuoUoIdVJNoDkm07+XSDJTIoJRPmj kR4ke8QGwGnVfp2UCPiV8ksbXU5CUeDfPmFPXVy2bThG27eV1C93ogkIZhyISf23 WZFWi8pAr+KblC6xonDROoj6MBn3j9ulBT7ouwCppwfEYmcU94VS6Jkh5nZwN+9I rGafyrG9/56aoOP1qqZr+r+awm6d/2yfhrsHZmU8hqdTvl6P5y79kZtSY6m5CWKm hTONM4xH/dy3BhnY4xoXtPw1nDRaNGGlyjzDQ4yqKHkwdv3PIKP74ABpxvNfJhVA 668s1sSqy2pnW0w1PfqOUoFH8nRDFPh/h1IqNx2ptQjMqurCE+s= -----END CERTIFICATE-----Generated at Thu Dec 18 12:44:08 2025 by rpki-client