This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: nbW81sAEGwJRhj/7XzTKteBKB/2Q/1JotKSWl8nZxak= Subject key identifier: D3:0A:00:6F:F0:1E:85:1A:2F:CA:F8:E5:1E:CE:FF:E2:CB:E6:08:96 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 56F09C629F02043C7441ACFC0C3BFF9484CAE6AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 0536 Signing time: Thu 18 Dec 2025 11:22:22 +0000 Manifest this update: Thu 18 Dec 2025 11:17:22 +0000 Manifest next update: Sun 21 Dec 2025 20:34:22 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: hYPR7cJrCpb4UKUaisCk48xj1+zOixqB4sfvYFBFNDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 20:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f0:9c:62:9f:02:04:3c:74:41:ac:fc:0c:3b:ff:94:84:ca:e6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Dec 18 11:17:22 2025 GMT Not After : Dec 21 20:34:22 2025 GMT Subject: CN=D30A006FF01E851A2FCAF8E51ECEFFE2CBE60896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:61:da:fe:fa:9a:bb:12:d9:26:c7:b8:3d:8a: 0d:44:0c:73:70:67:f0:cd:37:53:7f:94:3d:52:81: 1b:a5:71:ca:14:fb:49:0c:04:f1:88:6b:3a:05:ff: f9:41:2e:00:5f:58:4b:ce:38:68:43:2c:bd:9a:f8: 6a:e7:02:0a:4f:22:33:86:fb:81:92:52:a4:d1:3b: f9:6b:fc:b2:43:84:54:bc:b4:67:37:f4:41:58:1e: 1c:db:35:0f:6d:23:f5:17:c6:82:58:7a:ef:4c:1e: 4f:88:d7:5a:d4:f3:78:1d:67:76:4d:16:62:7a:16: 52:dc:73:40:d5:60:12:43:f9:13:cc:45:0b:9f:c1: e7:76:83:60:3a:f7:7a:66:2a:b5:d2:20:b6:12:88: 5c:a9:dd:01:ab:18:7c:72:76:44:e6:09:3d:f5:a8: 35:f4:3c:f9:9b:5e:3e:39:b9:11:24:3e:09:b1:7f: 7e:bf:40:4f:66:1b:39:74:fc:e5:8d:64:dc:51:af: 49:ee:41:ad:05:de:75:e3:a1:9b:e8:98:36:52:2f: 3f:6a:be:6c:36:67:e2:5f:07:f8:21:61:96:5f:14: 28:f1:64:fd:4c:b5:45:d3:cd:3f:7f:19:22:61:14: 7f:a0:10:94:a4:5d:ad:23:4a:32:53:2f:5b:2b:f7: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:0A:00:6F:F0:1E:85:1A:2F:CA:F8:E5:1E:CE:FF:E2:CB:E6:08:96 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:48:82:bd:31:7c:0b:e2:f2:b5:a4:cf:89:32:24:04:f2:16: d7:6b:15:39:b5:a5:4c:a1:2f:c4:b6:d8:f1:35:89:b4:09:48: b2:75:0a:70:89:c6:f5:ef:97:0f:7b:4a:f0:63:eb:7c:7a:58: a2:bd:67:77:d7:e2:57:37:2a:6b:56:ce:0c:93:79:00:eb:7a: a9:db:65:a6:43:95:5e:45:e9:d4:01:bc:04:c1:e7:06:fd:b7: cb:ad:13:58:e5:04:da:ab:95:05:52:c6:88:8e:08:cd:84:5a: ba:66:69:10:d3:1f:bd:20:57:14:85:48:5b:70:f2:96:2e:d5: e1:c8:e5:5a:e0:a4:65:3e:b1:6e:e9:71:80:9c:d3:8f:2f:16: c2:f7:5b:95:f2:d4:59:09:9f:06:bf:eb:8e:d9:42:98:9f:1e: 0b:3f:b9:e6:4b:b2:e6:a1:45:a6:d9:46:3c:dd:5b:64:ba:36: c2:d2:b3:4b:be:51:68:1a:57:f1:81:95:ea:36:db:cb:79:c7: ab:38:c0:ba:d6:d9:a2:cb:2d:41:8d:af:01:92:1b:fa:d8:a6: d5:1b:a4:ab:69:a5:62:8d:84:c8:38:ed:4b:f8:e8:08:8d:05: 07:f9:73:8d:81:a5:9b:19:8d:ba:b6:66:33:f4:54:4b:d4:1e: 5a:3b:dc:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvCcYp8CBDx0Qaz8DDv/lITK5qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTEyMTgxMTE3MjJaFw0yNTEyMjEyMDM0MjJaMDMxMTAvBgNV BAMTKEQzMEEwMDZGRjAxRTg1MUEyRkNBRjhFNTFFQ0VGRkUyQ0JFNjA4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQYdr++pq7Etkmx7g9ig1EDHNw Z/DNN1N/lD1SgRulccoU+0kMBPGIazoF//lBLgBfWEvOOGhDLL2a+GrnAgpPIjOG +4GSUqTRO/lr/LJDhFS8tGc39EFYHhzbNQ9tI/UXxoJYeu9MHk+I11rU83gdZ3ZN FmJ6FlLcc0DVYBJD+RPMRQufwed2g2A693pmKrXSILYSiFyp3QGrGHxydkTmCT31 qDX0PPmbXj45uREkPgmxf36/QE9mGzl0/OWNZNxRr0nuQa0F3nXjoZvomDZSLz9q vmw2Z+JfB/ghYZZfFCjxZP1MtUXTzT9/GSJhFH+gEJSkXa0jSjJTL1sr94yTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0woAb/AehRovyvjlHs7/4svmCJYwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZIgr0xfAvi8rWkz4kyJATyFtdrFTm1pUyh L8S22PE1ibQJSLJ1CnCJxvXvlw97SvBj63x6WKK9Z3fX4lc3KmtWzgyTeQDreqnb ZaZDlV5F6dQBvATB5wb9t8utE1jlBNqrlQVSxoiOCM2EWrpmaRDTH70gVxSFSFtw 8pYu1eHI5VrgpGU+sW7pcYCc048vFsL3W5Xy1FkJnwa/647ZQpifHgs/ueZLsuah RabZRjzdW2S6NsLSs0u+UWgaV/GBleo228t5x6s4wLrW2aLLLUGNrwGSG/rYptUb pKtppWKNhMg47Uv46AiNBQf5c42BpZsZjbq2ZjP0VEvUHlo73EQ= -----END CERTIFICATE-----Generated at Fri Dec 19 11:34:49 2025 by rpki-client