This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: hIdcdFZzWPsb0bKPFf7oNLXZcrKuUCH2c5uHpU+aVtY= Subject key identifier: C5:F9:78:49:B6:37:79:35:7F:A7:EC:05:ED:3B:69:F8:C5:6D:A6:31 Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 768A18D26ADD5E65CA9D70A6FDC48F0F0D2C3798 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01DA Signing time: Mon 22 Dec 2025 18:33:00 +0000 Manifest this update: Mon 22 Dec 2025 18:28:00 +0000 Manifest next update: Thu 25 Dec 2025 20:46:00 +0000 Files and hashes: 1: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: ySrZZoGNfPWh7Z5h9AnnQnc8NFJ0cM5kArtTyYTC0Mg=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8a:18:d2:6a:dd:5e:65:ca:9d:70:a6:fd:c4:8f:0f:0d:2c:37:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Dec 22 18:28:00 2025 GMT Not After : Dec 25 20:46:00 2025 GMT Subject: CN=C5F97849B63779357FA7EC05ED3B69F8C56DA631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:af:e4:9b:af:4d:91:82:76:8e:48:96:7e:e3: 48:39:ca:ec:48:da:c4:60:cd:9f:91:71:68:ae:83: 89:08:87:50:99:1a:6e:a7:00:b9:9b:8f:25:a0:58: 3c:6a:88:ae:18:b6:f0:f6:7a:04:d3:79:fe:18:e4: 41:fb:95:bd:f2:45:2e:8a:72:a2:c7:25:4e:cd:57: ad:81:70:4d:bf:17:78:6b:a0:4e:04:67:7f:40:f1: c1:d7:b8:bb:6d:00:e7:d9:55:c4:4a:03:33:a3:a0: 74:6c:c5:df:45:fa:89:35:08:2e:75:63:fc:18:23: e5:60:69:06:8c:16:11:f3:76:a9:b3:6a:37:06:b7: e0:e7:9c:57:74:97:a3:a3:1a:a7:b4:6a:dc:3d:3b: f3:74:4a:61:3c:d7:5f:a9:a4:03:a1:88:38:07:1c: 5b:fd:7e:18:b4:9b:ca:3a:27:7e:6b:4a:18:71:0a: 2f:c4:fd:2c:82:9e:da:4b:df:3b:ca:c1:63:bf:66: 0a:0b:45:1d:66:96:3e:20:6a:60:45:2c:94:b8:0f: 43:f1:23:8d:d5:f1:ec:75:3a:cd:00:0d:98:b5:a6: 1b:e6:86:a6:8e:43:b1:27:3e:af:7a:64:75:c8:57: 2b:ff:82:9b:07:2e:3f:47:0c:9b:c8:a6:fb:1f:a5: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F9:78:49:B6:37:79:35:7F:A7:EC:05:ED:3B:69:F8:C5:6D:A6:31 X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:ac:0d:6c:ef:50:70:4e:4b:20:95:58:d6:13:23:00:81: 7d:2d:e5:66:5f:63:f4:2d:24:d6:58:68:16:e3:f6:45:5d:0f: b7:f1:2f:01:de:19:02:81:76:40:3f:86:e0:7c:e0:2e:e8:80: fa:f7:06:9e:b5:8f:51:41:ce:62:cc:37:d9:1d:e0:ec:58:0f: c0:1d:72:02:e8:eb:0d:b6:51:7c:37:ac:bd:6c:9b:02:14:7d: 0f:d7:94:94:4f:5c:5f:1f:94:2c:58:cb:9f:df:4a:b1:2b:a0: de:f8:a7:b8:2c:e3:f7:88:3e:a3:7c:e2:e5:a2:b0:fd:57:83: 4c:0a:3d:2e:da:47:b2:73:01:eb:02:60:18:79:4a:52:ad:be: db:13:e3:6b:d8:f8:3d:5e:1c:e2:aa:22:55:f1:c4:31:27:e3: b9:aa:eb:af:34:64:08:de:ba:26:11:c9:bd:43:a5:6d:52:07: e5:3a:76:4e:ff:0e:b7:db:eb:1b:c9:a0:bf:dd:19:9c:b4:24: 05:cd:b1:c5:9b:e1:dd:0c:aa:4f:ca:57:f3:b5:22:23:8f:20: 2e:d6:69:1d:01:51:0f:87:8e:50:4c:fa:ef:a3:c1:8f:49:02: cf:84:a4:2c:d6:98:f5:6f:b4:8c:19:a8:e8:46:0b:b4:3f:b9: d6:e6:0d:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdooY0mrdXmXKnXCm/cSPDw0sN5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTEyMjIxODI4MDBaFw0yNTEyMjUyMDQ2MDBaMDMxMTAvBgNV BAMTKEM1Rjk3ODQ5QjYzNzc5MzU3RkE3RUMwNUVEM0I2OUY4QzU2REE2MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/r+Sbr02RgnaOSJZ+40g5yuxI 2sRgzZ+RcWiug4kIh1CZGm6nALmbjyWgWDxqiK4YtvD2egTTef4Y5EH7lb3yRS6K cqLHJU7NV62BcE2/F3hroE4EZ39A8cHXuLttAOfZVcRKAzOjoHRsxd9F+ok1CC51 Y/wYI+VgaQaMFhHzdqmzajcGt+DnnFd0l6OjGqe0atw9O/N0SmE811+ppAOhiDgH HFv9fhi0m8o6J35rShhxCi/E/SyCntpL3zvKwWO/ZgoLRR1mlj4gamBFLJS4D0Px I43V8ex1Os0ADZi1phvmhqaOQ7EnPq96ZHXIVyv/gpsHLj9HDJvIpvsfpWJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfl4SbY3eTV/p+wF7Ttp+MVtpjEwHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFszrA1s71BwTksglVjWEyMAgX0t5WZfY/Qt JNZYaBbj9kVdD7fxLwHeGQKBdkA/huB84C7ogPr3Bp61j1FBzmLMN9kd4OxYD8Ad cgLo6w22UXw3rL1smwIUfQ/XlJRPXF8flCxYy5/fSrEroN74p7gs4/eIPqN84uWi sP1Xg0wKPS7aR7JzAesCYBh5SlKtvtsT42vY+D1eHOKqIlXxxDEn47mq6680ZAje uiYRyb1DpW1SB+U6dk7/Drfb6xvJoL/dGZy0JAXNscWb4d0Mqk/KV/O1IiOPIC7W aR0BUQ+HjlBM+u+jwY9JAs+EpCzWmPVvtIwZqOhGC7Q/udbmDXU= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:20 2025 by rpki-client