This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: qOf/TNtva3iCm3tdJtOdcJHhZeIQPddL4Fc8SfuF/B0= Subject key identifier: BA:8A:C2:72:23:A1:AF:E9:81:BA:CC:EF:74:2F:4E:49:2B:D2:94:0B Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 7590E9C9A68B53D8D2B0CE65AC04D5DACA2CF333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 0130 Signing time: Thu 18 Dec 2025 08:13:55 +0000 Manifest this update: Thu 18 Dec 2025 08:08:55 +0000 Manifest next update: Sun 21 Dec 2025 15:30:55 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: im73J4Xq0y8PaQ7hLb45jHnltMOn9jW95djnqYrkiHU=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: 26Hr94IvTPNWLtyGYpXVN8+IvP+74Uco2RJ0Tu/T2Wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:90:e9:c9:a6:8b:53:d8:d2:b0:ce:65:ac:04:d5:da:ca:2c:f3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Dec 18 08:08:55 2025 GMT Not After : Dec 21 15:30:55 2025 GMT Subject: CN=BA8AC27223A1AFE981BACCEF742F4E492BD2940B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0f:dc:f7:b7:e5:12:5b:9f:1b:bc:5d:e5:fd: 62:65:8c:e9:50:15:d3:16:3b:2f:97:26:7e:e5:ac: b1:b5:f5:32:e1:ec:ca:a7:50:a6:34:85:26:30:f3: 35:60:da:70:f5:88:85:9d:0c:a7:66:66:d1:3e:11: 8c:5d:91:b5:b2:22:22:72:89:16:ae:d7:d9:f1:ac: f5:b4:29:e4:a5:ff:b4:e5:c3:78:31:62:e3:51:f8: 73:44:d3:72:d2:94:d3:5c:a6:6e:73:17:8a:33:ce: a6:62:ab:f1:3a:99:5a:f1:c5:ec:b8:b8:85:31:69: 5e:d0:5a:11:25:fa:48:36:dc:3d:0d:93:03:fc:de: b4:21:12:f1:32:bb:63:a4:e4:36:5e:7a:a9:75:1b: 8d:9e:6f:76:ea:b9:c5:5a:8c:63:0e:8a:9a:4f:91: 16:88:fb:f5:6d:2f:36:49:14:5b:6c:0e:55:c7:f0: 8f:63:83:3b:e9:67:03:d4:71:e3:c0:87:b2:47:08: 49:91:62:e6:c1:a4:57:be:0c:e8:77:b9:18:5e:66: 63:0b:63:ce:c5:dc:ab:23:20:08:c4:eb:65:ba:39: eb:d1:55:79:5b:72:19:9e:42:97:34:fa:bc:ec:25: 54:e6:9f:3d:da:08:f4:af:b5:93:72:da:27:88:73: b8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:C2:72:23:A1:AF:E9:81:BA:CC:EF:74:2F:4E:49:2B:D2:94:0B X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:52:e3:95:80:0b:43:f5:e7:13:f5:bc:a1:3c:70:8c:18:61: 30:1e:3e:83:4e:a2:05:84:45:41:37:28:9b:49:2f:2d:e1:5d: 8c:df:85:1b:5d:90:1d:74:41:ac:e6:85:d6:3d:c0:76:80:79: 22:08:0e:4d:02:2f:d9:b0:bf:9e:5e:25:41:84:79:fa:6d:23: 96:d2:dc:68:ce:05:a2:6d:d1:43:32:2e:79:ef:2a:11:96:0b: b2:c0:2e:06:9d:fb:df:49:be:3a:b9:ab:60:a7:b4:f3:83:c3: 75:f9:fa:7c:8e:ac:35:c3:ad:48:4a:aa:1a:75:71:13:39:2f: a7:ab:83:b8:5a:94:27:95:8a:70:67:e5:db:d6:94:04:a6:9f: dc:4b:43:ba:a0:ef:5a:05:4d:65:0e:bf:63:02:a4:46:a9:16: ed:5f:16:bb:be:07:6b:ec:55:80:e4:e4:48:00:41:e9:dc:e8: 55:f4:06:13:f1:17:ec:a1:83:d1:b6:bf:09:a3:60:fe:87:39: a3:da:2e:fe:83:da:3e:e4:47:65:6b:43:f6:a6:42:58:7d:34: e6:6a:45:b8:b4:a2:51:f6:28:e2:1a:01:53:ed:49:64:d6:58: 27:ee:55:83:58:75:e4:2c:49:e1:5c:c9:4d:0a:0d:9b:c9:29: 4d:7c:19:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZDpyaaLU9jSsM5lrATV2sos8zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTEyMTgwODA4NTVaFw0yNTEyMjExNTMwNTVaMDMxMTAvBgNV BAMTKEJBOEFDMjcyMjNBMUFGRTk4MUJBQ0NFRjc0MkY0RTQ5MkJEMjk0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPD9z3t+USW58bvF3l/WJljOlQ FdMWOy+XJn7lrLG19TLh7MqnUKY0hSYw8zVg2nD1iIWdDKdmZtE+EYxdkbWyIiJy iRau19nxrPW0KeSl/7Tlw3gxYuNR+HNE03LSlNNcpm5zF4ozzqZiq/E6mVrxxey4 uIUxaV7QWhEl+kg23D0NkwP83rQhEvEyu2Ok5DZeeql1G42eb3bqucVajGMOippP kRaI+/VtLzZJFFtsDlXH8I9jgzvpZwPUcePAh7JHCEmRYubBpFe+DOh3uRheZmML Y87F3KsjIAjE62W6OevRVXlbchmeQpc0+rzsJVTmnz3aCPSvtZNy2ieIc7hvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuorCciOhr+mBuszvdC9OSSvSlAswHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1S45WAC0P15xP1vKE8cIwYYTAePoNOogWE RUE3KJtJLy3hXYzfhRtdkB10QazmhdY9wHaAeSIIDk0CL9mwv55eJUGEefptI5bS 3GjOBaJt0UMyLnnvKhGWC7LALgad+99Jvjq5q2CntPODw3X5+nyOrDXDrUhKqhp1 cRM5L6erg7halCeVinBn5dvWlASmn9xLQ7qg71oFTWUOv2MCpEapFu1fFru+B2vs VYDk5EgAQenc6FX0BhPxF+yhg9G2vwmjYP6HOaPaLv6D2j7kR2VrQ/amQlh9NOZq Rbi0olH2KOIaAVPtSWTWWCfuVYNYdeQsSeFcyU0KDZvJKU18Gb8= -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:08 2025 by rpki-client