This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft File: D8F283D13C79D458461D8E83A481638975B3D90B.mft (raw, json) Hash identifier: Lc6nPYxrzxqDpqCZ0FzPsApX+eqzeA5cPMdcCKa6HnY= Subject key identifier: B8:3A:D2:18:4E:50:FD:9D:B7:3F:93:37:1B:7A:A2:1E:A9:02:3F:24 Authority key identifier: D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B Certificate issuer: /CN=D8F283D13C79D458461D8E83A481638975B3D90B Certificate serial: 0808D5750CBAF014E6FADFA8334CEF451F003C92 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft Manifest number: 02D3 Signing time: Tue 23 Dec 2025 17:03:59 +0000 Manifest this update: Tue 23 Dec 2025 16:58:59 +0000 Manifest next update: Sat 27 Dec 2025 02:47:59 +0000 Files and hashes: 1: 3130332e3134392e3136342e302f32342d3234203d3e20313430303232.roa (hash: K0k+hTBsNJncES2akZnEP3mlQpVqZGGF0g7QmATvqxQ=) 2: D8F283D13C79D458461D8E83A481638975B3D90B.crl (hash: Yh0wJoT4Y294eecLj01q9mULajU8kxs9Q0pk4tRI0c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:08:d5:75:0c:ba:f0:14:e6:fa:df:a8:33:4c:ef:45:1f:00:3c:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8F283D13C79D458461D8E83A481638975B3D90B Validity Not Before: Dec 23 16:58:59 2025 GMT Not After : Dec 27 02:47:59 2025 GMT Subject: CN=B83AD2184E50FD9DB73F93371B7AA21EA9023F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:94:46:61:41:49:f4:e8:f7:50:36:99:3f:d0: ff:e0:08:65:58:8e:39:a4:02:c5:f4:3c:32:5c:1c: 52:79:29:17:e0:d5:4c:5b:5e:a6:44:31:53:c3:a4: 2c:76:03:ff:bc:39:9a:70:5e:20:d9:b3:6f:39:fa: 6d:a3:7a:60:72:a0:d3:b1:b6:07:83:98:e2:b4:f8: d5:24:04:e1:94:45:54:e8:81:37:0d:8f:12:7c:76: 05:15:28:57:f9:9c:57:c5:45:14:48:6a:fc:ae:1b: 57:98:f0:37:06:fd:d4:f4:0a:cc:5d:48:31:f4:f3: e7:35:46:e5:5b:bc:63:bb:f7:fb:66:58:4f:a0:f9: 65:d7:89:3a:2e:0a:e2:da:20:a4:0f:27:78:8a:3c: c3:49:42:4d:a4:ba:de:d7:a6:21:8e:bd:c4:90:89: bd:8d:32:9a:97:5a:e4:c9:7e:e2:9f:43:a4:15:a0: b8:59:9f:09:38:9b:79:c5:85:a9:45:1e:4e:0d:f4: 84:f2:95:a4:3f:f1:ae:bd:67:ea:dd:f9:ff:5b:57: b6:c3:a2:12:15:e2:88:ed:5b:40:de:d4:74:68:f0: 79:72:31:8b:67:89:2d:11:aa:b6:71:fa:4c:3d:28: ec:dc:56:8c:5c:1f:19:b1:a0:e9:be:7f:80:b7:a6: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:3A:D2:18:4E:50:FD:9D:B7:3F:93:37:1B:7A:A2:1E:A9:02:3F:24 X509v3 Authority Key Identifier: keyid:D8:F2:83:D1:3C:79:D4:58:46:1D:8E:83:A4:81:63:89:75:B3:D9:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D8F283D13C79D458461D8E83A481638975B3D90B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f9c446f-d971-4b5e-b269-1e83d3a14fef/0/D8F283D13C79D458461D8E83A481638975B3D90B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:4a:54:6c:64:42:43:06:f2:19:f1:fa:db:e0:ac:70:a0:b2: 90:bb:c9:ff:da:a4:bf:0b:07:75:3b:7f:4c:d1:53:6a:d8:0c: 13:cc:4a:31:2d:f9:ba:73:9b:53:98:eb:26:ff:e7:c4:bb:f9: bd:ab:bb:09:3c:3d:6b:17:35:bd:8b:1d:e6:77:d6:52:9c:8b: 78:f9:58:0b:f7:52:62:c9:15:09:70:37:e4:ac:ca:a3:24:b2: 22:93:dd:10:06:ae:28:7a:c3:a5:f9:23:7e:19:13:58:8e:81: 5c:19:2b:dd:14:97:b0:4d:41:c5:9d:49:93:79:9e:e6:bc:cd: 38:08:0e:89:b2:59:a0:88:2d:31:a4:20:66:9e:ce:7f:0f:72: d3:e9:31:2c:c8:05:a4:78:04:bb:7f:5c:33:7b:38:7a:25:89: a6:20:7c:01:7b:a4:ed:54:ae:e6:a0:b6:85:29:b6:12:9e:10: 67:f5:f7:0e:ea:5d:7a:ea:11:ab:5d:00:41:c2:44:0b:a7:3d: 12:04:01:6b:7c:61:01:80:85:6d:b5:95:ce:2c:42:0d:1f:51: de:52:38:3e:87:ba:2e:f9:df:d5:ff:d8:de:e9:cf:e6:e1:55: 0c:79:36:12:10:ea:6b:63:63:05:97:09:20:ae:52:44:45:af: 90:2b:4d:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAjVdQy68BTm+t+oM0zvRR8APJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3 NUIzRDkwQjAeFw0yNTEyMjMxNjU4NTlaFw0yNTEyMjcwMjQ3NTlaMDMxMTAvBgNV BAMTKEI4M0FEMjE4NEU1MEZEOURCNzNGOTMzNzFCN0FBMjFFQTkwMjNGMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDflEZhQUn06PdQNpk/0P/gCGVY jjmkAsX0PDJcHFJ5KRfg1UxbXqZEMVPDpCx2A/+8OZpwXiDZs285+m2jemByoNOx tgeDmOK0+NUkBOGURVTogTcNjxJ8dgUVKFf5nFfFRRRIavyuG1eY8DcG/dT0Csxd SDH08+c1RuVbvGO79/tmWE+g+WXXiTouCuLaIKQPJ3iKPMNJQk2kut7XpiGOvcSQ ib2NMpqXWuTJfuKfQ6QVoLhZnwk4m3nFhalFHk4N9ITylaQ/8a69Z+rd+f9bV7bD ohIV4ojtW0De1HRo8HlyMYtniS0RqrZx+kw9KOzcVoxcHxmxoOm+f4C3pi/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuDrSGE5Q/Z23P5M3G3qiHqkCPyQwHwYDVR0j BBgwFoAU2PKD0Tx51FhGHY6DpIFjiXWz2QswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjljNDQ2Zi1kOTcxLTRiNWUtYjI2OS0xZTgzZDNhMTRmZWYvMC9EOEYyODNEMTND NzlENDU4NDYxRDhFODNBNDgxNjM4OTc1QjNEOTBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYzODk3NUIz RDkwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWY5YzQ0NmYtZDk3MS00YjVlLWIy NjktMWU4M2QzYTE0ZmVmLzAvRDhGMjgzRDEzQzc5RDQ1ODQ2MUQ4RTgzQTQ4MTYz ODk3NUIzRDkwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpKVGxkQkMG8hnx+tvgrHCgspC7yf/apL8L B3U7f0zRU2rYDBPMSjEt+bpzm1OY6yb/58S7+b2ruwk8PWsXNb2LHeZ31lKci3j5 WAv3UmLJFQlwN+SsyqMksiKT3RAGrih6w6X5I34ZE1iOgVwZK90Ul7BNQcWdSZN5 nua8zTgIDomyWaCILTGkIGaezn8PctPpMSzIBaR4BLt/XDN7OHoliaYgfAF7pO1U ruagtoUpthKeEGf19w7qXXrqEatdAEHCRAunPRIEAWt8YQGAhW21lc4sQg0fUd5S OD6Hui7539X/2N7pz+bhVQx5NhIQ6mtjYwWXCSCuUkRFr5ArTdI= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:41 2025 by rpki-client