This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft File: 82BBF3364DDD646942F4CAE0579F132D84194FE2.mft (raw, json) Hash identifier: 0hEnuRama7t817PZuqxY6kc2fol2+8nYd1BWjR46Rnk= Subject key identifier: 3C:5B:2E:21:45:EB:5E:78:4E:87:87:FE:EF:5C:1F:81:5A:95:58:29 Authority key identifier: 82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 Certificate issuer: /CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Certificate serial: 7BA31A4B2A8406A94EA9FC73DCD77EB832206CC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft Manifest number: DA Signing time: Thu 18 Dec 2025 18:41:02 +0000 Manifest this update: Thu 18 Dec 2025 18:36:02 +0000 Manifest next update: Sun 21 Dec 2025 20:47:02 +0000 Files and hashes: 1: 323030313a6466333a3738303a3a2f34382d3438203d3e20313430303235.roa (hash: peJ67ixLv6wOxbNwTzpazMnzEKzYxMtdAI8w89zlkC0=) 2: 82BBF3364DDD646942F4CAE0579F132D84194FE2.crl (hash: P/I46IMEHXputChU6Lw0eNUMqdwYCfjAZHNPfLtPOf0=) 3: 3130332e3134392e32322e302f32342d3234203d3e20313430303235.roa (hash: ANxlrE1JSxdjlT4kZZgX9Az8PSjhsbf6pSdaY8P2LXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a3:1a:4b:2a:84:06:a9:4e:a9:fc:73:dc:d7:7e:b8:32:20:6c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82BBF3364DDD646942F4CAE0579F132D84194FE2 Validity Not Before: Dec 18 18:36:02 2025 GMT Not After : Dec 21 20:47:02 2025 GMT Subject: CN=3C5B2E2145EB5E784E8787FEEF5C1F815A955829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:62:d3:1a:60:ad:61:91:3f:f3:9d:a5:52:5e: 7a:c2:40:00:70:b6:ae:41:08:74:0e:d8:97:56:36: 82:4e:c3:11:37:9c:d6:46:60:a1:01:ec:1c:72:5f: 83:b8:91:d3:1f:9f:3f:67:36:77:68:4e:66:d2:2a: 90:db:a3:b6:a0:74:cf:42:75:3d:d0:a7:d4:ad:d6: 33:39:b0:ce:f2:bd:32:20:ec:dd:03:62:df:31:e5: 72:77:be:02:b7:30:36:80:34:54:18:70:6b:f2:4d: d5:7b:be:c4:33:08:4e:6c:05:67:c0:7c:64:1c:c3: cf:e9:38:77:4b:a9:93:98:f2:b1:e9:58:ba:65:f3: bf:05:6e:6a:ce:c9:f1:da:81:90:c6:26:93:fb:5e: 99:b8:af:01:54:46:bb:88:04:d4:52:96:32:ed:a6: aa:a8:c6:13:0f:31:82:d6:91:cf:62:dc:09:2d:57: bd:33:ae:98:b7:0c:4b:78:3c:19:92:41:33:0d:7c: c7:5b:07:27:38:e5:83:c9:5e:84:c7:aa:70:4e:a0: a4:42:2c:4a:96:e0:d5:15:4b:9a:1d:83:2c:72:2a: fa:a0:f3:78:8d:f3:12:7c:6b:9f:56:87:e8:2f:60: 75:d3:43:53:d3:fc:7b:af:dd:55:61:4e:33:93:e0: 68:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5B:2E:21:45:EB:5E:78:4E:87:87:FE:EF:5C:1F:81:5A:95:58:29 X509v3 Authority Key Identifier: keyid:82:BB:F3:36:4D:DD:64:69:42:F4:CA:E0:57:9F:13:2D:84:19:4F:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82BBF3364DDD646942F4CAE0579F132D84194FE2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c93c25c-ce55-4870-8169-5eae8d9dfbc1/0/82BBF3364DDD646942F4CAE0579F132D84194FE2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:b6:9b:af:4b:16:51:b8:8d:48:f9:99:a2:79:2e:e0:13:70: 02:b8:b5:dd:27:32:37:16:c7:44:83:b5:96:1c:49:e9:47:e0: 92:a8:9f:2f:dd:fa:7a:d4:34:f7:ff:6a:76:68:20:a1:ba:d9: 02:18:15:d9:36:4e:02:ba:97:4d:ec:29:60:a0:be:31:ab:b3: 72:bf:87:a9:57:b9:e0:10:3e:c3:f2:e6:b2:c5:f8:a4:de:64: e5:17:9c:6b:32:67:e0:cd:16:81:59:46:b8:ed:2d:87:88:37: 26:73:de:d9:35:5f:c4:fe:e8:ba:1f:07:75:9b:16:75:30:25: c7:54:24:27:d2:c8:d4:84:f6:9b:75:e9:04:84:a2:f0:ad:67: 21:b8:2b:76:38:02:cd:73:b4:49:7f:ee:cf:1c:b7:c9:ee:76: 8e:c0:e2:b1:75:ff:2a:34:db:15:d8:9d:e4:d6:0d:70:d5:ec: 6d:89:b8:06:ee:6f:21:8b:9b:52:ed:2e:07:6c:f0:68:51:1a: ff:3b:17:8d:a6:5c:47:93:a6:0e:26:31:66:91:eb:bb:74:1d: b9:f4:93:21:b0:05:34:ce:c0:a1:33:3b:81:a7:ee:83:95:44: e0:93:ac:f8:d0:32:2e:d3:5d:ff:71:2d:81:93:8c:8f:78:f0: ae:bd:b2:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6MaSyqEBqlOqfxz3Nd+uDIgbMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4 NDE5NEZFMjAeFw0yNTEyMTgxODM2MDJaFw0yNTEyMjEyMDQ3MDJaMDMxMTAvBgNV BAMTKDNDNUIyRTIxNDVFQjVFNzg0RTg3ODdGRUVGNUMxRjgxNUE5NTU4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+YtMaYK1hkT/znaVSXnrCQABw tq5BCHQO2JdWNoJOwxE3nNZGYKEB7BxyX4O4kdMfnz9nNndoTmbSKpDbo7agdM9C dT3Qp9St1jM5sM7yvTIg7N0DYt8x5XJ3vgK3MDaANFQYcGvyTdV7vsQzCE5sBWfA fGQcw8/pOHdLqZOY8rHpWLpl878FbmrOyfHagZDGJpP7Xpm4rwFURruIBNRSljLt pqqoxhMPMYLWkc9i3AktV70zrpi3DEt4PBmSQTMNfMdbByc45YPJXoTHqnBOoKRC LEqW4NUVS5odgyxyKvqg83iN8xJ8a59Wh+gvYHXTQ1PT/Huv3VVhTjOT4GhLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFsuIUXrXnhOh4f+71wfgVqVWCkwHwYDVR0j BBgwFoAUgrvzNk3dZGlC9MrgV58TLYQZT+IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzkzYzI1Yy1jZTU1LTQ4NzAtODE2OS01ZWFlOGQ5ZGZiYzEvMC84MkJCRjMzNjRE REQ2NDY5NDJGNENBRTA1NzlGMTMyRDg0MTk0RkUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEzMkQ4NDE5 NEZFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M5M2MyNWMtY2U1NS00ODcwLTgx NjktNWVhZThkOWRmYmMxLzAvODJCQkYzMzY0RERENjQ2OTQyRjRDQUUwNTc5RjEz MkQ4NDE5NEZFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIW2m69LFlG4jUj5maJ5LuATcAK4td0nMjcW x0SDtZYcSelH4JKony/d+nrUNPf/anZoIKG62QIYFdk2TgK6l03sKWCgvjGrs3K/ h6lXueAQPsPy5rLF+KTeZOUXnGsyZ+DNFoFZRrjtLYeINyZz3tk1X8T+6LofB3Wb FnUwJcdUJCfSyNSE9pt16QSEovCtZyG4K3Y4As1ztEl/7s8ct8nudo7A4rF1/yo0 2xXYneTWDXDV7G2JuAbubyGLm1LtLgds8GhRGv87F42mXEeTpg4mMWaR67t0Hbn0 kyGwBTTOwKEzO4Gn7oOVROCTrPjQMi7TXf9xLYGTjI948K69ssw= -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:56 2025 by rpki-client