This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: 0ekZqFsO0A0eZzoD9Nw4kB9TJGNxn5zzObLm2o6OQrk= Subject key identifier: E6:EB:88:81:58:1F:5C:6E:CE:4F:DF:FB:14:6A:9D:FC:1C:5C:E3:79 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 6E905AE86784790E6269ABF66BA593B4B7A31952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01D6 Signing time: Tue 23 Dec 2025 08:00:50 +0000 Manifest this update: Tue 23 Dec 2025 07:55:50 +0000 Manifest next update: Fri 26 Dec 2025 10:49:50 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: xWqKfciZTwDdmwp4GduwtRoc4a5a0vez9vvn/3YXKvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 10:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:90:5a:e8:67:84:79:0e:62:69:ab:f6:6b:a5:93:b4:b7:a3:19:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Dec 23 07:55:50 2025 GMT Not After : Dec 26 10:49:50 2025 GMT Subject: CN=E6EB8881581F5C6ECE4FDFFB146A9DFC1C5CE379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:d5:94:0d:6e:9a:69:c2:cb:a7:f0:1d:84:58: 2c:86:38:5c:d2:04:28:e9:99:b3:37:81:7b:8e:63: c5:f7:c2:68:cc:37:00:a5:be:69:46:21:3b:31:0c: 82:26:c2:df:70:8f:3b:70:63:f5:e2:2d:8a:2f:01: 20:a5:34:70:d2:47:31:47:9e:9d:81:d7:f5:74:cc: ac:70:0a:f5:33:5d:ca:d0:1d:a2:25:e3:67:d7:c4: 49:31:44:f3:8d:10:9f:8b:2e:fd:aa:25:09:79:f2: 78:3d:f7:b0:bc:f0:5f:89:af:ed:20:6c:68:41:39: ef:21:3e:ee:8c:ba:6a:dc:0c:33:4a:57:5c:e7:f0: 5c:1d:ab:bf:1a:e1:37:55:52:1f:1e:b2:ab:44:8a: a3:ce:88:c6:14:17:77:03:86:a2:29:b2:85:05:bf: 28:2a:c8:e8:9f:12:87:17:4a:7d:d3:c5:f4:26:fc: 79:10:23:74:10:f8:8b:7b:d4:30:07:df:61:55:92: 33:8a:39:89:6d:e4:70:f7:2f:ee:f5:17:2b:f6:c4: 70:c8:86:1d:93:66:69:c0:83:ca:26:7b:a0:d4:e8: 0b:98:3d:bd:8a:4c:87:28:66:40:1e:79:b2:70:e2: cf:c4:38:d8:4b:27:eb:ff:54:35:b6:ba:b8:ce:2d: df:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EB:88:81:58:1F:5C:6E:CE:4F:DF:FB:14:6A:9D:FC:1C:5C:E3:79 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:df:14:0e:39:8e:38:4f:77:b3:c1:6b:29:d6:a9:f9:32:84: fd:d5:74:fd:13:66:65:65:12:c0:66:a4:b5:b1:0d:b0:c8:7e: 23:b3:2e:14:0b:00:e7:c8:e6:7c:3d:9e:66:cf:ea:0f:df:53: 6e:3a:19:90:78:72:94:90:f0:ae:15:81:3f:7a:14:d7:28:ac: 3a:86:bb:d8:75:85:ed:92:d8:4a:b3:37:28:d3:f5:b4:6e:00: 9f:71:7f:91:eb:20:a4:bf:69:f7:84:a7:a1:85:b8:f2:17:f2: e9:8f:67:ed:d3:2f:f0:1e:c9:45:28:9f:92:b5:e5:0d:ee:43: 56:7c:f6:b8:c3:6e:a6:03:22:0c:20:44:05:71:19:08:4c:88: 4c:c2:8f:13:da:2d:0e:da:c8:38:79:38:1c:b8:c8:56:d7:a1: 35:9b:f5:5b:c5:06:55:fb:85:b5:45:71:ce:80:1b:2d:85:cf: a1:61:cc:5f:d4:ad:71:89:d9:73:b1:53:64:39:36:a6:5e:d5: 0b:d7:a1:d8:7b:82:61:77:0f:9b:b1:d0:ad:18:69:8d:04:69: c2:ba:9b:3e:8e:57:90:e6:65:32:9b:14:36:a8:9a:f2:35:63: e2:b7:7a:0c:db:68:f8:e3:79:63:67:71:dd:11:c5:68:f7:ef: 5b:ee:d9:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpBa6GeEeQ5iaav2a6WTtLejGVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTEyMjMwNzU1NTBaFw0yNTEyMjYxMDQ5NTBaMDMxMTAvBgNV BAMTKEU2RUI4ODgxNTgxRjVDNkVDRTRGREZGQjE0NkE5REZDMUM1Q0UzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx1ZQNbpppwsun8B2EWCyGOFzS BCjpmbM3gXuOY8X3wmjMNwClvmlGITsxDIImwt9wjztwY/XiLYovASClNHDSRzFH np2B1/V0zKxwCvUzXcrQHaIl42fXxEkxRPONEJ+LLv2qJQl58ng997C88F+Jr+0g bGhBOe8hPu6MumrcDDNKV1zn8Fwdq78a4TdVUh8esqtEiqPOiMYUF3cDhqIpsoUF vygqyOifEocXSn3TxfQm/HkQI3QQ+It71DAH32FVkjOKOYlt5HD3L+71Fyv2xHDI hh2TZmnAg8ome6DU6AuYPb2KTIcoZkAeebJw4s/EONhLJ+v/VDW2urjOLd9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5uuIgVgfXG7OT9/7FGqd/Bxc43kwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJffFA45jjhPd7PBaynWqfkyhP3VdP0TZmVl EsBmpLWxDbDIfiOzLhQLAOfI5nw9nmbP6g/fU246GZB4cpSQ8K4VgT96FNcorDqG u9h1he2S2EqzNyjT9bRuAJ9xf5HrIKS/afeEp6GFuPIX8umPZ+3TL/AeyUUon5K1 5Q3uQ1Z89rjDbqYDIgwgRAVxGQhMiEzCjxPaLQ7ayDh5OBy4yFbXoTWb9VvFBlX7 hbVFcc6AGy2Fz6FhzF/UrXGJ2XOxU2Q5NqZe1QvXodh7gmF3D5ux0K0YaY0EacK6 mz6OV5DmZTKbFDaomvI1Y+K3egzbaPjjeWNncd0RxWj371vu2bY= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:18 2025 by rpki-client