This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft File: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft (raw, json) Hash identifier: NpyC/GLYikzumGB13uIjtxK2ChU+Zg4n9tIzxLjjZ3o= Subject key identifier: 15:BD:E7:7B:C8:BA:D8:63:79:A5:07:1E:93:23:35:7F:FA:33:B8:6A Authority key identifier: 80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A Certificate issuer: /CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Certificate serial: 46942DD96B50128D0A52D90472BBDE89E7BB1BE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft Manifest number: 035C Signing time: Wed 17 Dec 2025 19:31:10 +0000 Manifest this update: Wed 17 Dec 2025 19:26:10 +0000 Manifest next update: Sun 21 Dec 2025 04:34:10 +0000 Files and hashes: 1: 80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl (hash: Ordb3iY+PzF3YtktHVSKfiCXErpbMGEnH4+rvMJ50vY=) 2: 3130332e37382e3130342e302f32332d3234203d3e203634333134.roa (hash: H9wL101+fO+XAXjmdLy2BsE4Gk5B/qm3589qLKncPgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:94:2d:d9:6b:50:12:8d:0a:52:d9:04:72:bb:de:89:e7:bb:1b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A Validity Not Before: Dec 17 19:26:10 2025 GMT Not After : Dec 21 04:34:10 2025 GMT Subject: CN=15BDE77BC8BAD86379A5071E9323357FFA33B86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:33:c7:4d:6a:c6:39:c2:e6:da:7c:83:2c:80: 72:03:fa:c6:6f:f0:9e:88:61:b1:cd:02:8b:2a:87: ef:fc:56:e8:86:42:ee:f3:f7:52:20:5d:84:d9:d7: c5:fc:60:f3:c4:1a:6f:4a:40:4b:83:c8:fc:97:df: 44:72:5b:f0:15:47:0f:17:ce:c0:e2:f8:bd:36:89: 3f:59:6d:86:91:61:87:f5:e7:16:00:c1:00:be:34: 9b:b5:45:a9:5c:14:14:2b:b2:51:85:e7:87:70:ce: d4:71:1c:f2:0a:5d:cd:a9:0d:c4:d2:73:44:83:4c: db:ef:7a:05:e2:56:a4:54:59:96:00:6e:80:5e:3c: 8f:61:fe:09:7c:b3:11:eb:31:5c:ea:6a:db:26:92: 39:fb:e9:6f:5f:c4:fa:1a:80:f3:c0:79:a8:2f:44: 03:e7:46:5c:9c:43:f1:3f:db:d5:42:06:5d:8d:32: 07:31:a9:70:08:fe:6e:c4:6c:64:21:e7:67:11:39: 3d:2d:1d:34:47:44:79:45:c0:b6:f4:4b:9e:b0:fb: 19:89:23:53:89:44:cb:ce:20:dc:e1:3f:32:69:34: f2:37:23:4d:ef:dd:b7:18:ea:9e:1f:4f:37:8c:3f: b3:df:fb:25:8b:43:67:af:84:ac:65:d9:d3:eb:65: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:E7:7B:C8:BA:D8:63:79:A5:07:1E:93:23:35:7F:FA:33:B8:6A X509v3 Authority Key Identifier: keyid:80:D8:9E:42:9E:BB:AA:D9:E0:9C:35:0D:9D:D8:FA:DC:91:7C:BA:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7912ac88-033d-497e-bf63-5553d5dc6dc9/0/80D89E429EBBAAD9E09C350D9DD8FADC917CBA1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e9:a7:e1:d1:c5:73:4f:fd:dd:57:48:aa:46:d0:5f:ac:46: 72:0d:e6:ef:5a:8c:c7:85:9b:ac:b7:32:a0:9d:64:e9:59:f2: c1:44:c6:5d:76:a0:fa:4f:5e:33:71:27:a7:d0:0d:7e:d9:89: 49:a5:11:2c:b7:ac:15:62:cf:0f:7d:14:b4:72:2f:1e:99:52: 56:c7:f3:54:3f:32:45:55:7d:64:38:15:f8:52:76:f6:19:6f: 6e:f5:3d:55:ca:58:f3:63:f4:7b:1a:36:fa:82:0e:1b:0b:49: e7:89:6d:b4:f6:19:e5:7d:6c:c4:8c:53:df:bb:9d:72:f3:9b: 08:e1:86:2f:8c:9c:96:59:4b:a0:0c:8a:4c:06:98:a9:54:19: 75:9b:f7:39:25:07:3d:c5:28:c1:0a:4b:75:61:3e:c2:5e:74: 92:33:9c:45:2a:c7:14:60:e8:92:66:c5:69:82:6e:79:d0:99: 66:b2:75:ab:ac:e1:35:bf:df:54:df:a2:72:64:c1:e5:7f:0b: 54:8b:7c:56:0f:c4:1b:ae:ff:e9:e8:1d:aa:27:e4:95:cd:ef: 75:d1:14:ce:93:e9:bf:2e:f4:4a:27:4d:03:d6:a3:22:bd:4c: 00:62:5e:42:b7:70:15:89:30:62:bd:c4:c4:d6:57:91:f9:a0: d5:8a:a3:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpQt2WtQEo0KUtkEcrveiee7G+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5 MTdDQkExQTAeFw0yNTEyMTcxOTI2MTBaFw0yNTEyMjEwNDM0MTBaMDMxMTAvBgNV BAMTKDE1QkRFNzdCQzhCQUQ4NjM3OUE1MDcxRTkzMjMzNTdGRkEzM0I4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8M8dNasY5wubafIMsgHID+sZv 8J6IYbHNAosqh+/8VuiGQu7z91IgXYTZ18X8YPPEGm9KQEuDyPyX30RyW/AVRw8X zsDi+L02iT9ZbYaRYYf15xYAwQC+NJu1RalcFBQrslGF54dwztRxHPIKXc2pDcTS c0SDTNvvegXiVqRUWZYAboBePI9h/gl8sxHrMVzqatsmkjn76W9fxPoagPPAeagv RAPnRlycQ/E/29VCBl2NMgcxqXAI/m7EbGQh52cROT0tHTRHRHlFwLb0S56w+xmJ I1OJRMvOINzhPzJpNPI3I03v3bcY6p4fTzeMP7Pf+yWLQ2evhKxl2dPrZRSxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFb3ne8i62GN5pQcekyM1f/ozuGowHwYDVR0j BBgwFoAUgNieQp67qtngnDUNndj63JF8uhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OTEyYWM4OC0wMzNkLTQ5N2UtYmY2My01NTUzZDVkYzZkYzkvMC84MEQ4OUU0MjlF QkJBQUQ5RTA5QzM1MEQ5REQ4RkFEQzkxN0NCQTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZBREM5MTdD QkExQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzkxMmFjODgtMDMzZC00OTdlLWJm NjMtNTU1M2Q1ZGM2ZGM5LzAvODBEODlFNDI5RUJCQUFEOUUwOUMzNTBEOUREOEZB REM5MTdDQkExQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErpp+HRxXNP/d1XSKpG0F+sRnIN5u9ajMeF m6y3MqCdZOlZ8sFExl12oPpPXjNxJ6fQDX7ZiUmlESy3rBVizw99FLRyLx6ZUlbH 81Q/MkVVfWQ4FfhSdvYZb271PVXKWPNj9HsaNvqCDhsLSeeJbbT2GeV9bMSMU9+7 nXLzmwjhhi+MnJZZS6AMikwGmKlUGXWb9zklBz3FKMEKS3VhPsJedJIznEUqxxRg 6JJmxWmCbnnQmWaydaus4TW/31TfonJkweV/C1SLfFYPxBuu/+noHaon5JXN73XR FM6T6b8u9EonTQPWoyK9TABiXkK3cBWJMGK9xMTWV5H5oNWKo5A= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:41 2025 by rpki-client