This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: 4LEyH8ooBebklz7e587YYdoRSo/IHM4kQ0btLgxskGs= Subject key identifier: 16:FE:03:56:D0:F8:CD:29:7A:9E:46:8B:D3:1F:AD:CB:C0:47:FC:AA Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 1C29D44F971446E5E4CB52ECDAA096A926F207DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 04E9 Signing time: Tue 16 Dec 2025 20:31:41 +0000 Manifest this update: Tue 16 Dec 2025 20:26:41 +0000 Manifest next update: Sat 20 Dec 2025 07:12:41 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: i+I7dMrh5Z+wCNCLdoK/mVS9AQVHWivqv2lRzBBVFv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:29:d4:4f:97:14:46:e5:e4:cb:52:ec:da:a0:96:a9:26:f2:07:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Dec 16 20:26:41 2025 GMT Not After : Dec 20 07:12:41 2025 GMT Subject: CN=16FE0356D0F8CD297A9E468BD31FADCBC047FCAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d4:bc:73:fc:a4:da:53:48:b9:fe:02:30:89: 9e:54:b8:ed:04:44:44:fc:06:fe:4d:c2:0d:8f:fd: ab:51:20:99:5f:b3:35:1e:bd:0d:6c:57:a0:bd:41: 77:35:56:51:e7:29:5f:99:94:35:8c:a3:db:46:7e: 9f:23:f6:57:17:2e:13:b4:07:1b:bd:6a:ad:97:e0: 35:a3:30:e2:72:f9:d9:ad:54:5f:72:31:3d:3b:3a: 04:4d:30:6b:d3:37:55:58:53:cb:06:d3:ef:4a:13: 58:79:9d:7e:89:39:7f:a2:f6:51:47:93:9b:24:98: bb:9f:93:a1:e8:ba:4b:be:9a:8b:1c:a1:bc:6f:02: 15:91:22:b8:a0:e6:0c:08:ce:b2:5b:39:b2:de:15: 32:81:2e:73:15:d9:10:d5:19:7e:1a:63:ce:9d:1e: c1:1a:a2:cb:74:32:c4:9d:df:0a:05:bf:35:d0:61: 89:92:fc:dd:a9:10:74:7b:e1:1e:42:1f:14:6d:09: be:ec:f7:75:61:a2:be:88:25:6f:61:32:f9:4f:9b: 09:11:45:43:0c:ca:51:34:1a:ba:e0:3f:0b:9c:b3: e7:ec:70:4c:aa:1e:1f:93:87:ca:84:fb:ea:41:c8: 62:20:53:75:3d:e4:e4:9a:78:c1:00:90:d4:05:fe: e7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FE:03:56:D0:F8:CD:29:7A:9E:46:8B:D3:1F:AD:CB:C0:47:FC:AA X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:d9:5d:6e:c2:92:59:0b:cf:65:99:4e:e7:64:1c:51:6e: 99:e7:61:f7:45:65:1c:7c:10:2d:52:32:6b:94:90:0f:d4:3a: 19:9d:d4:1a:da:4f:dd:9c:76:f8:09:84:4e:c1:c5:07:7d:9c: 79:4c:7b:ca:09:af:24:53:9b:6a:d6:15:de:e5:54:7a:c7:08: aa:4c:64:4f:4f:ef:2b:af:7d:98:38:a5:34:98:17:dc:79:ed: cc:05:3a:45:e7:29:25:3d:36:f9:7d:9f:85:76:98:a6:19:b8: 3d:f4:e7:4b:ba:99:a9:36:de:53:55:57:03:c6:24:51:3b:df: e7:e9:f2:33:64:ea:3c:a5:f9:06:8f:8a:03:63:d1:5b:26:e4: 73:cd:1b:1f:cb:2d:91:3a:65:42:5c:7d:d9:3a:52:7e:a6:3d: d1:e3:7f:2c:24:d0:7e:5f:a9:1d:e5:cb:93:f9:62:3b:08:d1: b3:f2:d0:04:78:71:be:62:8c:f8:34:d3:e0:e7:c5:0a:64:64: e4:64:42:93:d3:fb:fc:1c:e9:78:fe:b3:76:06:fa:f4:df:a6: 44:cc:6b:a6:ac:15:31:3f:5a:8e:64:24:b5:1c:49:cf:79:86: 37:43:be:26:2a:cb:51:5a:60:2c:3c:09:4b:2b:1b:5c:c0:32: ad:ec:2c:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHCnUT5cURuXky1Ls2qCWqSbyB9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTEyMTYyMDI2NDFaFw0yNTEyMjAwNzEyNDFaMDMxMTAvBgNV BAMTKDE2RkUwMzU2RDBGOENEMjk3QTlFNDY4QkQzMUZBRENCQzA0N0ZDQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs1Lxz/KTaU0i5/gIwiZ5UuO0E RET8Bv5Nwg2P/atRIJlfszUevQ1sV6C9QXc1VlHnKV+ZlDWMo9tGfp8j9lcXLhO0 Bxu9aq2X4DWjMOJy+dmtVF9yMT07OgRNMGvTN1VYU8sG0+9KE1h5nX6JOX+i9lFH k5skmLufk6Houku+moscobxvAhWRIrig5gwIzrJbObLeFTKBLnMV2RDVGX4aY86d HsEaost0MsSd3woFvzXQYYmS/N2pEHR74R5CHxRtCb7s93Vhor6IJW9hMvlPmwkR RUMMylE0GrrgPwucs+fscEyqHh+Th8qE++pByGIgU3U95OSaeMEAkNQF/udjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFv4DVtD4zSl6nkaL0x+ty8BH/KowHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/z2V1uwpJZC89lmU7nZBxRbpnnYfdFZRx8 EC1SMmuUkA/UOhmd1BraT92cdvgJhE7BxQd9nHlMe8oJryRTm2rWFd7lVHrHCKpM ZE9P7yuvfZg4pTSYF9x57cwFOkXnKSU9Nvl9n4V2mKYZuD3050u6mak23lNVVwPG JFE73+fp8jNk6jyl+QaPigNj0Vsm5HPNGx/LLZE6ZUJcfdk6Un6mPdHjfywk0H5f qR3ly5P5YjsI0bPy0AR4cb5ijPg00+DnxQpkZORkQpPT+/wc6Xj+s3YG+vTfpkTM a6asFTE/Wo5kJLUcSc95hjdDviYqy1FaYCw8CUsrG1zAMq3sLJU= -----END CERTIFICATE-----Generated at Fri Dec 19 11:20:36 2025 by rpki-client