This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft File: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft (raw, json) Hash identifier: ER0Dm9de/OkCXltCIirNS9aCl5tYtrCpIOegQm+2vkg= Subject key identifier: 4D:4C:38:1F:A2:AD:5E:C8:F2:1F:21:0C:18:FB:CD:73:74:FC:CF:1D Authority key identifier: 86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D Certificate issuer: /CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Certificate serial: 6B412D5DAEC986DC2B9F46450C0DD47D22F3EE45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft Manifest number: 0155 Signing time: Mon 22 Dec 2025 23:11:24 +0000 Manifest this update: Mon 22 Dec 2025 23:06:24 +0000 Manifest next update: Fri 26 Dec 2025 04:57:24 +0000 Files and hashes: 1: 3137352e3131312e39392e302f32342d3234203d3e20313338313230.roa (hash: AghOU/pgzXbwtlWCSLhXHXuJqGUCoPtZzcPl6UwSVVA=) 2: 3137352e3131312e39382e302f32342d3234203d3e20313338313230.roa (hash: aia3nUPKEa96BWO7Pv3XlqoUwx8dHqiYGIZfz0yhZhg=) 3: 8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl (hash: aDu3qHfd9N9EebsnuBagGvDsGhOcste8pYwnrar+zIk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:41:2d:5d:ae:c9:86:dc:2b:9f:46:45:0c:0d:d4:7d:22:f3:ee:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D Validity Not Before: Dec 22 23:06:24 2025 GMT Not After : Dec 26 04:57:24 2025 GMT Subject: CN=4D4C381FA2AD5EC8F21F210C18FBCD7374FCCF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a7:86:77:73:4c:53:81:1d:d2:2a:c2:9f:ea: 0a:3c:01:a4:12:1f:d2:77:b2:31:7d:7c:58:bd:f4: cb:60:57:f4:fe:5f:85:22:81:d7:39:80:2f:ed:e9: 77:c7:87:87:9c:2b:d5:0c:6b:4e:4e:a0:97:fc:8a: 50:0b:a7:b0:51:c2:fa:33:ab:84:ca:f0:d7:bc:b3: 52:87:a6:2a:2c:ae:4b:ce:31:e2:37:f9:04:04:f0: 5e:3b:ee:7a:4e:b1:91:65:77:6f:bd:ef:69:ea:86: 82:72:f0:b0:41:61:df:b6:25:9a:a5:5f:ed:43:94: 37:61:26:96:38:6f:55:32:bf:a6:7b:7b:b0:5a:66: d9:cc:22:4b:51:9d:a4:61:ce:bc:4f:52:57:6e:61: c5:1e:94:fe:fe:04:2c:63:14:41:67:43:4f:6f:e2: de:f2:fb:ae:25:66:36:7c:20:45:7c:12:2f:9c:23: c0:98:bc:16:f0:08:5f:5e:15:2d:90:54:43:cd:05: be:6a:22:be:a4:fe:9a:8f:83:be:08:c8:df:51:8f: f7:40:3b:b8:8e:68:42:6b:3e:78:6b:c5:71:a3:b0: a6:77:23:f8:9b:a5:61:d1:46:78:f0:90:ee:f8:2b: fb:65:f6:43:c1:45:b8:c7:c2:c0:ba:9a:6d:e7:1f: 98:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4C:38:1F:A2:AD:5E:C8:F2:1F:21:0C:18:FB:CD:73:74:FC:CF:1D X509v3 Authority Key Identifier: keyid:86:50:DE:F1:B1:C8:9D:70:1C:2B:B9:9C:A9:07:9E:ED:BC:CC:04:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba8cf65-d468-4309-9f30-9b9f26d9ce2d/0/8650DEF1B1C89D701C2BB99CA9079EEDBCCC046D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:74:b9:b3:29:6b:50:d1:c7:61:aa:56:6d:48:4a:cb:85:97: 09:ee:c1:0a:d0:0e:30:54:b8:78:e0:44:8d:f9:1b:46:05:ef: b0:49:04:f5:7c:81:fb:62:c2:5e:f1:9e:03:36:07:77:4d:31: c5:a0:29:b9:23:5e:3e:7f:43:12:07:6b:6e:23:52:60:51:18: 07:a3:29:8e:af:15:94:09:07:fc:dd:38:6d:5d:84:d1:39:21: 87:bd:0f:70:28:bb:f8:45:45:ec:3f:23:5f:f5:02:84:63:54: 4a:5b:1b:00:b5:b5:11:55:03:55:df:4a:07:74:3a:f5:73:95: 50:c9:67:8e:59:4d:f4:8b:1b:c6:85:0f:5f:dd:35:7a:e0:b0: 9a:83:ee:be:c6:72:2d:be:eb:0f:5e:32:2c:ff:3a:2c:e5:cb: ef:be:7e:db:76:8e:08:72:22:59:89:0d:83:c9:4d:8c:87:58: 2e:35:e8:6f:46:90:47:77:ab:50:ab:5d:cc:11:02:3b:07:ca: 0e:b1:de:04:f6:30:0b:b2:bc:ca:d2:83:87:79:ac:60:d3:e8: b8:ad:b5:60:df:40:ba:45:d4:e9:be:15:a7:fa:08:4d:86:e5: 2d:f8:ca:d9:22:18:5c:54:a7:c8:48:2d:db:6e:9f:93:72:8e: 1a:4f:0e:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0EtXa7Jhtwrn0ZFDA3UfSLz7kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURC Q0NDMDQ2RDAeFw0yNTEyMjIyMzA2MjRaFw0yNTEyMjYwNDU3MjRaMDMxMTAvBgNV BAMTKDRENEMzODFGQTJBRDVFQzhGMjFGMjEwQzE4RkJDRDczNzRGQ0NGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6p4Z3c0xTgR3SKsKf6go8AaQS H9J3sjF9fFi99MtgV/T+X4Uigdc5gC/t6XfHh4ecK9UMa05OoJf8ilALp7BRwvoz q4TK8Ne8s1KHpiosrkvOMeI3+QQE8F477npOsZFld2+972nqhoJy8LBBYd+2JZql X+1DlDdhJpY4b1Uyv6Z7e7BaZtnMIktRnaRhzrxPUlduYcUelP7+BCxjFEFnQ09v 4t7y+64lZjZ8IEV8Ei+cI8CYvBbwCF9eFS2QVEPNBb5qIr6k/pqPg74IyN9Rj/dA O7iOaEJrPnhrxXGjsKZ3I/ibpWHRRnjwkO74K/tl9kPBRbjHwsC6mm3nH5i/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTUw4H6KtXsjyHyEMGPvNc3T8zx0wHwYDVR0j BBgwFoAUhlDe8bHInXAcK7mcqQee7bzMBG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE4Y2Y2NS1kNDY4LTQzMDktOWYzMC05YjlmMjZkOWNlMmQvMC84NjUwREVGMUIx Qzg5RDcwMUMyQkI5OUNBOTA3OUVFREJDQ0MwNDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlFRURCQ0ND MDQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOGNmNjUtZDQ2OC00MzA5LTlm MzAtOWI5ZjI2ZDljZTJkLzAvODY1MERFRjFCMUM4OUQ3MDFDMkJCOTlDQTkwNzlF RURCQ0NDMDQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ0ubMpa1DRx2GqVm1ISsuFlwnuwQrQDjBU uHjgRI35G0YF77BJBPV8gftiwl7xngM2B3dNMcWgKbkjXj5/QxIHa24jUmBRGAej KY6vFZQJB/zdOG1dhNE5IYe9D3Aou/hFRew/I1/1AoRjVEpbGwC1tRFVA1XfSgd0 OvVzlVDJZ45ZTfSLG8aFD1/dNXrgsJqD7r7Gci2+6w9eMiz/Oizly+++ftt2jghy IlmJDYPJTYyHWC416G9GkEd3q1CrXcwRAjsHyg6x3gT2MAuyvMrSg4d5rGDT6Lit tWDfQLpF1Om+Faf6CE2G5S34ytkiGFxUp8hILdtun5NyjhpPDlE= -----END CERTIFICATE-----Generated at Tue Dec 23 09:21:00 2025 by rpki-client