This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: LoDbvcFMcEMKU2K6L+ePfzcbo79l+PhbN0wnTlpumzk= Subject key identifier: 03:22:01:9C:DA:85:E8:33:55:18:9D:48:75:A5:A3:8D:91:18:16:E0 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 1D7F5550ED059DD071B90A3CF1508CF42D2DB680 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 02CA Signing time: Fri 19 Dec 2025 18:11:44 +0000 Manifest this update: Fri 19 Dec 2025 18:06:44 +0000 Manifest next update: Mon 22 Dec 2025 23:48:44 +0000 Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: gonve5wIJ3O85bDiwHHm2xjnNdsU9xH6JAbxD3Ax5a8=) 2: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: j83huLAfY/m8Mup7MUTdVUfbJOL8vHRa2w1fDseQqp8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 23:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7f:55:50:ed:05:9d:d0:71:b9:0a:3c:f1:50:8c:f4:2d:2d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Dec 19 18:06:44 2025 GMT Not After : Dec 22 23:48:44 2025 GMT Subject: CN=0322019CDA85E83355189D4875A5A38D911816E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0a:23:e3:85:a8:f0:31:d9:93:4c:0f:9f:c7: f7:99:f1:b4:fc:07:e2:0e:e6:d0:3c:1b:0a:ac:34: a4:18:6d:ce:5e:24:a8:1f:08:94:11:eb:a9:cd:a5: ad:76:62:2f:ef:ec:45:b9:12:0b:d6:a8:17:d5:8f: 5e:9c:93:b2:f9:76:d0:b1:75:ec:8f:69:97:23:4f: 5e:5b:96:65:e9:2a:86:dd:08:42:93:d8:14:0a:5b: af:6a:6c:d1:3a:8d:12:d4:b5:77:5c:0b:e6:7a:6c: a2:05:ba:07:73:fc:05:64:9d:49:57:0c:d9:6b:dc: 30:de:08:1c:db:98:d5:71:79:82:88:63:68:c5:45: cf:23:8e:9c:1b:05:c6:30:02:7c:91:51:21:47:39: 68:c6:9f:4b:b4:8b:b7:42:9d:9e:49:ac:3b:af:9b: e2:8a:9b:b5:58:57:15:a0:ac:b7:dd:c3:1f:0f:67: cc:e5:bb:36:6e:82:bc:83:31:de:49:c7:68:46:4c: 99:d0:eb:ec:0c:c6:a0:cb:7d:6d:c7:55:19:aa:4d: b1:57:f6:4b:e2:69:e0:69:e3:79:ff:67:31:f7:2c: b7:2a:8d:43:98:4a:78:52:0e:08:43:3e:7e:dd:3d: 66:54:ff:b1:0d:1d:9b:bb:25:07:33:e7:25:2d:23: 47:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:01:9C:DA:85:E8:33:55:18:9D:48:75:A5:A3:8D:91:18:16:E0 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:80:cb:f4:7d:6f:eb:e8:8f:6c:dd:6b:94:73:da:4d:bf:4d: b8:93:77:2c:a5:8a:5b:d2:fc:da:93:d3:61:85:76:03:d0:36: 1e:08:a6:10:0d:61:3e:d5:c6:7e:ed:77:0b:9f:69:a1:11:46: e1:2f:a8:00:dd:bb:f9:72:8a:7c:9c:5b:f7:86:78:b7:35:53: c4:fb:c4:6e:85:6c:5c:c7:dc:e0:95:27:8d:f8:d2:62:d3:53: c4:cf:7c:5d:9e:24:b5:4d:5c:c9:c0:b1:af:ed:3b:85:cd:c6: 8d:b2:d5:c1:92:d8:1e:96:34:04:3e:a7:ad:24:9e:82:14:73: f9:ba:e2:cf:36:d8:25:75:fb:80:f9:03:47:d2:f6:5f:4d:5b: 21:4c:1a:eb:ef:bd:49:36:03:a7:cd:86:b0:a5:38:9d:77:65: 57:92:ba:3a:c4:6d:c4:fd:98:d7:81:4d:22:ea:09:6f:62:8a: dc:cb:01:f8:1f:73:1d:25:52:4e:fa:7d:85:fe:e2:7e:95:dc: d3:5d:83:40:8a:e3:ed:57:1a:8c:93:7c:c5:1a:3b:39:9d:fb: 95:40:96:a8:fd:56:fc:6b:c8:d5:d1:96:92:a4:7e:7c:4c:f7: 45:e5:33:85:40:62:5a:03:f7:e1:c9:d5:a1:9a:1c:8b:49:06: cc:1a:93:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHX9VUO0FndBxuQo88VCM9C0ttoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTEyMTkxODA2NDRaFw0yNTEyMjIyMzQ4NDRaMDMxMTAvBgNV BAMTKDAzMjIwMTlDREE4NUU4MzM1NTE4OUQ0ODc1QTVBMzhEOTExODE2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACiPjhajwMdmTTA+fx/eZ8bT8 B+IO5tA8GwqsNKQYbc5eJKgfCJQR66nNpa12Yi/v7EW5EgvWqBfVj16ck7L5dtCx deyPaZcjT15blmXpKobdCEKT2BQKW69qbNE6jRLUtXdcC+Z6bKIFugdz/AVknUlX DNlr3DDeCBzbmNVxeYKIY2jFRc8jjpwbBcYwAnyRUSFHOWjGn0u0i7dCnZ5JrDuv m+KKm7VYVxWgrLfdwx8PZ8zluzZugryDMd5Jx2hGTJnQ6+wMxqDLfW3HVRmqTbFX 9kviaeBp43n/ZzH3LLcqjUOYSnhSDghDPn7dPWZU/7ENHZu7JQcz5yUtI0exAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAyIBnNqF6DNVGJ1IdaWjjZEYFuAwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2Ay/R9b+voj2zda5Rz2k2/TbiTdyylilvS /NqT02GFdgPQNh4IphANYT7Vxn7tdwufaaERRuEvqADdu/lyinycW/eGeLc1U8T7 xG6FbFzH3OCVJ4340mLTU8TPfF2eJLVNXMnAsa/tO4XNxo2y1cGS2B6WNAQ+p60k noIUc/m64s822CV1+4D5A0fS9l9NWyFMGuvvvUk2A6fNhrClOJ13ZVeSujrEbcT9 mNeBTSLqCW9iitzLAfgfcx0lUk76fYX+4n6V3NNdg0CK4+1XGoyTfMUaOzmd+5VA lqj9VvxryNXRlpKkfnxM90XlM4VAYloD9+HJ1aGaHItJBswak3g= -----END CERTIFICATE-----Generated at Sat Dec 20 19:45:53 2025 by rpki-client