This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft File: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft (raw, json) Hash identifier: 0P7c1fYrfHd0iZuvs3FCO0xkAuGK6v8RUaU1ZFTjJ+U= Subject key identifier: 91:8E:7A:90:D6:BD:8D:25:DB:43:A2:2E:58:8D:03:09:68:28:87:67 Authority key identifier: 83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 Certificate issuer: /CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Certificate serial: 7465549CF972F08C89BA6F89B47EC23120F5FC2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft Manifest number: 0162 Signing time: Wed 17 Dec 2025 15:21:20 +0000 Manifest this update: Wed 17 Dec 2025 15:16:20 +0000 Manifest next update: Sat 20 Dec 2025 18:31:20 +0000 Files and hashes: 1: 3130332e3232372e342e302f32332d3233203d3e20313531353134.roa (hash: KYg2eP+qnyahabsQS5xdyRs5Ya80Q1XBZpzh8eR7p5s=) 2: 83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl (hash: x1g51MamBDYpGllafEungVqSNq3+1wk9jAAm/H6lweM=) 3: 3130332e3232372e352e302f32342d3234203d3e20313531353134.roa (hash: MC2FHNE5WiXQAhloZ+T+wgfggYtEdxQ3c82BHu7jCHA=) 4: 3130332e3232372e342e302f32342d3234203d3e20313531353134.roa (hash: dY9Wzss484cDHvQy3+/U0nuyLvB8FHOPJZ4fbRc99IE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:65:54:9c:f9:72:f0:8c:89:ba:6f:89:b4:7e:c2:31:20:f5:fc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83FA427FFAE02D80047A8B5F44D938E2CA6DB609 Validity Not Before: Dec 17 15:16:20 2025 GMT Not After : Dec 20 18:31:20 2025 GMT Subject: CN=918E7A90D6BD8D25DB43A22E588D030968288767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:28:dc:9b:99:2d:a6:82:60:02:76:cb:0e:0f: 0b:ae:9c:67:3f:80:e3:aa:0d:bb:7c:c3:c6:e7:f1: e4:a6:bd:26:9f:22:cf:05:1d:bb:a4:34:d9:0a:91: 00:c1:6b:21:d4:2d:ce:d3:3d:8a:c5:d6:7e:2a:2b: f3:66:0e:6e:b9:4f:95:88:81:85:39:f2:08:95:aa: fb:5b:72:a9:32:c6:b8:45:4f:5e:b0:19:56:b3:ed: e6:b7:f8:10:8d:2b:a6:2a:69:5b:9f:b9:2f:64:f5: 8f:0f:41:ba:0a:c8:69:8d:ee:71:33:e4:16:5a:dc: 20:da:1f:cb:ab:20:b3:ad:ec:b5:80:b5:95:ed:43: 05:c3:ca:a4:d6:5d:d8:3c:15:80:fd:98:e1:8f:5b: 48:c7:07:1e:c8:75:0d:44:19:4e:54:59:be:78:dd: 94:ad:65:7f:ff:29:e8:41:59:4a:7e:89:63:e4:a2: ab:12:73:1c:4b:b4:d3:20:7b:34:19:a4:3c:a5:26: ed:f9:97:30:a0:d9:b6:82:d8:54:34:42:48:65:b3: cf:7a:cb:45:fb:69:44:b7:6a:12:eb:76:18:c0:de: 76:0f:08:e0:82:2a:df:10:6f:a5:19:4b:60:86:49: 0a:d8:db:67:f4:31:15:8c:d5:b1:ca:30:c3:7d:fc: 14:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:8E:7A:90:D6:BD:8D:25:DB:43:A2:2E:58:8D:03:09:68:28:87:67 X509v3 Authority Key Identifier: keyid:83:FA:42:7F:FA:E0:2D:80:04:7A:8B:5F:44:D9:38:E2:CA:6D:B6:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae7b9476-7e38-4c50-a624-b2443c70bb4d/0/83FA427FFAE02D80047A8B5F44D938E2CA6DB609.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c7:0e:28:37:3a:bd:74:6f:8b:e6:7e:83:bf:3b:5b:b5:ae: 91:66:04:ea:b8:9a:8e:fe:c3:c3:6f:c4:56:fd:d1:e1:c0:1c: 24:e6:bc:bf:41:59:b6:e2:17:dc:36:f7:68:a9:be:43:2c:cf: 5d:8a:3c:10:11:45:54:64:15:31:49:30:35:e0:14:9d:f9:ab: 51:28:2d:87:c3:ce:1f:59:2a:e1:e7:34:5d:c3:9d:db:62:13: a9:46:ab:4c:a2:3e:fd:be:46:c8:dc:59:30:3f:cc:72:72:78: 9e:ba:29:43:1e:f5:57:67:85:8e:42:9e:eb:03:e7:a3:e7:82: 0a:cc:f6:f6:99:95:aa:61:2a:ee:bb:89:24:7b:89:42:7e:b4: e6:d3:49:95:9e:6b:04:10:ee:39:5f:4a:b0:7c:15:51:6e:2c: 57:27:24:d9:94:27:09:f5:71:a5:92:ec:07:70:d8:93:40:09: 2b:9e:c0:d7:3f:b6:ba:cb:5b:4a:cf:70:2b:22:1f:c5:3a:a2: 37:68:27:37:23:bb:c5:64:51:c1:55:4c:59:4f:56:ce:68:f3: 6c:20:04:1e:62:e6:80:56:e7:a6:db:b1:78:42:9f:8b:6f:2a: 5c:52:93:4d:dd:e9:af:e6:08:3e:5e:8f:79:df:7b:57:c9:36: 19:e3:3b:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGVUnPly8IyJum+JtH7CMSD1/CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJD QTZEQjYwOTAeFw0yNTEyMTcxNTE2MjBaFw0yNTEyMjAxODMxMjBaMDMxMTAvBgNV BAMTKDkxOEU3QTkwRDZCRDhEMjVEQjQzQTIyRTU4OEQwMzA5NjgyODg3NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKNybmS2mgmACdssODwuunGc/ gOOqDbt8w8bn8eSmvSafIs8FHbukNNkKkQDBayHULc7TPYrF1n4qK/NmDm65T5WI gYU58giVqvtbcqkyxrhFT16wGVaz7ea3+BCNK6YqaVufuS9k9Y8PQboKyGmN7nEz 5BZa3CDaH8urILOt7LWAtZXtQwXDyqTWXdg8FYD9mOGPW0jHBx7IdQ1EGU5UWb54 3ZStZX//KehBWUp+iWPkoqsScxxLtNMgezQZpDylJu35lzCg2baC2FQ0Qkhls896 y0X7aUS3ahLrdhjA3nYPCOCCKt8Qb6UZS2CGSQrY22f0MRWM1bHKMMN9/BQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkY56kNa9jSXbQ6IuWI0DCWgoh2cwHwYDVR0j BBgwFoAUg/pCf/rgLYAEeotfRNk44spttgkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTdiOTQ3Ni03ZTM4LTRjNTAtYTYyNC1iMjQ0M2M3MGJiNGQvMC84M0ZBNDI3RkZB RTAyRDgwMDQ3QThCNUY0NEQ5MzhFMkNBNkRCNjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4RTJDQTZE QjYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU3Yjk0NzYtN2UzOC00YzUwLWE2 MjQtYjI0NDNjNzBiYjRkLzAvODNGQTQyN0ZGQUUwMkQ4MDA0N0E4QjVGNDREOTM4 RTJDQTZEQjYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETHDig3Or10b4vmfoO/O1u1rpFmBOq4mo7+ w8NvxFb90eHAHCTmvL9BWbbiF9w292ipvkMsz12KPBARRVRkFTFJMDXgFJ35q1Eo LYfDzh9ZKuHnNF3DndtiE6lGq0yiPv2+RsjcWTA/zHJyeJ66KUMe9VdnhY5CnusD 56PnggrM9vaZlaphKu67iSR7iUJ+tObTSZWeawQQ7jlfSrB8FVFuLFcnJNmUJwn1 caWS7Adw2JNACSuewNc/trrLW0rPcCsiH8U6ojdoJzcju8VkUcFVTFlPVs5o82wg BB5i5oBW56bbsXhCn4tvKlxSk03d6a/mCD5ej3nfe1fJNhnjO5Q= -----END CERTIFICATE-----Generated at Thu Dec 18 20:54:28 2025 by rpki-client