This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft File: 82EE517606C76902159E8886F875EF96B0327C72.mft (raw, json) Hash identifier: o/rXGTu/Z900Bu13k6Mfh6cvxb+V9sJXAxY/trm2x68= Subject key identifier: 15:A6:1C:3D:18:F9:52:CC:2D:FF:B7:48:A4:2C:6B:92:C7:B9:F4:65 Authority key identifier: 82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72 Certificate issuer: /CN=82EE517606C76902159E8886F875EF96B0327C72 Certificate serial: 5F274F7CE1C18F46A965AFBB816482DA1BEDE059 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft Manifest number: 04A1 Signing time: Tue 23 Dec 2025 16:03:55 +0000 Manifest this update: Tue 23 Dec 2025 15:58:55 +0000 Manifest next update: Fri 26 Dec 2025 16:29:55 +0000 Files and hashes: 1: 3130332e3135372e32342e302f32342d3234203d3e20313431313035.roa (hash: FVu5gfgONBZ7sWK+LAVs/QfdHmaFroCRqFvOUkdZviM=) 2: 82EE517606C76902159E8886F875EF96B0327C72.crl (hash: qYHJ+b7/DvMnrqC5huZZSoDJBxU8i3hmLtQx+vOMQY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 16:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:27:4f:7c:e1:c1:8f:46:a9:65:af:bb:81:64:82:da:1b:ed:e0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82EE517606C76902159E8886F875EF96B0327C72 Validity Not Before: Dec 23 15:58:55 2025 GMT Not After : Dec 26 16:29:55 2025 GMT Subject: CN=15A61C3D18F952CC2DFFB748A42C6B92C7B9F465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:1e:98:ef:7a:06:5b:58:2d:b9:4c:be:89: 03:0b:e7:a1:31:0e:5c:61:30:80:cf:f1:4a:26:de: e6:14:19:0e:92:ed:85:77:1b:ec:5d:d7:a5:84:71: 92:71:45:02:fa:b2:48:8f:b1:0e:5e:04:ab:d9:44: 8e:64:2e:3b:2f:e1:95:9e:59:5c:f2:bd:c8:79:7f: 0f:70:45:51:3c:ab:04:c9:d8:ac:02:58:51:83:b1: fd:cd:a9:5b:da:c0:21:4d:e3:b9:6f:73:4c:25:2e: 0d:a7:0b:7f:75:ac:d7:0c:b3:9b:2d:bc:22:aa:02: 2f:a2:6c:e7:f4:88:17:07:2e:60:16:9d:6b:e9:31: 22:d7:b1:75:b2:ef:7c:03:fe:71:39:2c:e6:a9:c8: 23:00:0d:51:9c:ae:42:f0:e4:6a:26:af:50:05:a5: 2a:78:ce:60:b0:ca:d5:09:bd:05:76:f8:45:da:18: 18:fb:a7:df:ad:eb:c2:5e:c3:1d:e7:b3:e1:45:22: 24:26:1f:d4:66:14:64:0d:f4:32:b1:a4:47:72:d9: f2:9a:60:62:b4:5d:64:8f:39:af:06:f4:0c:41:ab: 4e:ea:99:1c:3f:85:1b:ea:96:57:89:97:68:8f:cd: c2:e8:32:dd:b8:ca:48:a4:92:54:f1:7e:b8:a9:56: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A6:1C:3D:18:F9:52:CC:2D:FF:B7:48:A4:2C:6B:92:C7:B9:F4:65 X509v3 Authority Key Identifier: keyid:82:EE:51:76:06:C7:69:02:15:9E:88:86:F8:75:EF:96:B0:32:7C:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82EE517606C76902159E8886F875EF96B0327C72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bc65b8c-39e9-478d-8742-c535b61bae59/0/82EE517606C76902159E8886F875EF96B0327C72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:a3:a8:c6:c1:c8:60:4d:e6:9c:bc:39:b8:b2:58:18:0f:01: 77:dd:d0:e1:a6:bc:40:55:27:95:01:8f:66:be:5f:53:10:a9: 64:3c:a7:5f:6b:30:c5:25:e5:da:d7:3b:c2:92:2f:84:6b:f4: 3d:9e:ba:e8:25:90:c4:11:32:37:6f:f4:1a:57:11:16:a7:c6: 85:4d:f3:71:b2:75:86:cb:86:2a:9b:d0:eb:2a:3a:70:f7:2d: 66:ff:ba:f7:1a:39:e1:7f:6c:d6:6d:6e:c4:26:cb:9e:5c:57: 63:6a:df:5d:94:46:5a:ec:d4:a9:8f:e8:d1:22:d7:da:42:d3: 05:b7:63:f1:ed:5c:eb:39:92:64:cd:91:80:ee:6b:91:cf:37: 6f:7d:4b:19:c6:74:9b:09:b1:7d:40:b2:39:46:42:76:35:9a: 02:3d:8d:e2:d7:9e:34:62:b3:a4:2c:d5:cf:c0:c7:7f:9d:01: b3:0c:01:e9:a2:72:c6:2c:85:a8:77:8a:14:71:dc:3c:09:a4: 25:91:c5:50:c4:bc:41:54:b3:a5:34:7b:59:09:0b:14:57:29: 3e:03:15:97:bd:9c:3a:b4:fd:43:45:85:c2:9a:27:4b:0a:66: 72:43:df:d1:9d:47:28:26:dd:c8:26:ac:cb:15:c5:22:c4:0f: ef:e3:4d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXydPfOHBj0apZa+7gWSC2hvt4FkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVGOTZC MDMyN0M3MjAeFw0yNTEyMjMxNTU4NTVaFw0yNTEyMjYxNjI5NTVaMDMxMTAvBgNV BAMTKDE1QTYxQzNEMThGOTUyQ0MyREZGQjc0OEE0MkM2QjkyQzdCOUY0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYXR6Y73oGW1gtuUy+iQML56Ex DlxhMIDP8Uom3uYUGQ6S7YV3G+xd16WEcZJxRQL6skiPsQ5eBKvZRI5kLjsv4ZWe WVzyvch5fw9wRVE8qwTJ2KwCWFGDsf3NqVvawCFN47lvc0wlLg2nC391rNcMs5st vCKqAi+ibOf0iBcHLmAWnWvpMSLXsXWy73wD/nE5LOapyCMADVGcrkLw5Gomr1AF pSp4zmCwytUJvQV2+EXaGBj7p9+t68Jewx3ns+FFIiQmH9RmFGQN9DKxpEdy2fKa YGK0XWSPOa8G9AxBq07qmRw/hRvqlleJl2iPzcLoMt24ykikklTxfripVqCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFaYcPRj5Uswt/7dIpCxrkse59GUwHwYDVR0j BBgwFoAUgu5RdgbHaQIVnoiG+HXvlrAyfHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmM2NWI4Yy0zOWU5LTQ3OGQtODc0Mi1jNTM1YjYxYmFlNTkvMC84MkVFNTE3NjA2 Qzc2OTAyMTU5RTg4ODZGODc1RUY5NkIwMzI3QzcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVGOTZCMDMy N0M3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJjNjViOGMtMzllOS00NzhkLTg3 NDItYzUzNWI2MWJhZTU5LzAvODJFRTUxNzYwNkM3NjkwMjE1OUU4ODg2Rjg3NUVG OTZCMDMyN0M3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKujqMbByGBN5py8ObiyWBgPAXfd0OGmvEBV J5UBj2a+X1MQqWQ8p19rMMUl5drXO8KSL4Rr9D2euuglkMQRMjdv9BpXERanxoVN 83GydYbLhiqb0OsqOnD3LWb/uvcaOeF/bNZtbsQmy55cV2Nq312URlrs1KmP6NEi 19pC0wW3Y/HtXOs5kmTNkYDua5HPN299SxnGdJsJsX1AsjlGQnY1mgI9jeLXnjRi s6Qs1c/Ax3+dAbMMAemicsYshah3ihRx3DwJpCWRxVDEvEFUs6U0e1kJCxRXKT4D FZe9nDq0/UNFhcKaJ0sKZnJD39GdRygm3cgmrMsVxSLED+/jTVE= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:39 2025 by rpki-client