This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft File: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft (raw, json) Hash identifier: DRS6NqcrfqrWCDlL3ucbuYN5i5au89/5gloyn+vuX8Q= Subject key identifier: F0:7C:00:7A:D8:C8:3C:DF:E3:16:17:E9:0C:93:AB:57:D8:1B:C7:B4 Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A Certificate issuer: /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Certificate serial: 1D1FF5D75BAEF2A078638A9C847BD9444E0098E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft Manifest number: 0423 Signing time: Tue 23 Dec 2025 20:23:22 +0000 Manifest this update: Tue 23 Dec 2025 20:18:22 +0000 Manifest next update: Fri 26 Dec 2025 22:34:22 +0000 Files and hashes: 1: 3130332e3134382e31392e302f32342d3234203d3e20313339393738.roa (hash: bezCvX8XgFSa6OMSK27HUjxxwyFifSYbogKsMqbTNHQ=) 2: 3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (hash: 4K0py4cnYyh8vI10iLQo1yG8FCXY4pSX4oMXyg6m2pw=) 3: 8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl (hash: jDkZLWR9wG6MLHSjEx/vwQTgQT6PNdPLhJjxPmHYbqQ=) 4: 323430353a633763303a3a2f33322d3332203d3e20313339393738.roa (hash: piwF7+ON2R793sJiaX+4aFfo5D7cOZdp7goWhivyjxE=) 5: 3130332e3134382e31382e302f32342d3234203d3e20313339393738.roa (hash: U5t1gz5Lu8bYdTDoG7TIErUjYPNGo4xQEu5agXugT3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 22:34:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1f:f5:d7:5b:ae:f2:a0:78:63:8a:9c:84:7b:d9:44:4e:00:98:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A Validity Not Before: Dec 23 20:18:22 2025 GMT Not After : Dec 26 22:34:22 2025 GMT Subject: CN=F07C007AD8C83CDFE31617E90C93AB57D81BC7B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:93:23:5f:18:08:5f:38:4f:37:d4:a8:86: 80:41:26:82:db:e5:65:bb:be:43:53:4f:f6:84:4c: b0:f6:1b:a8:39:af:af:c3:0b:ee:0b:5a:4d:bf:8b: 06:46:10:29:fa:c6:9a:96:1c:8a:3e:35:3e:7b:62: 93:79:8d:f4:bd:e8:7c:16:ff:60:82:68:2a:6e:65: c4:0e:3e:83:7b:30:a5:b0:5a:7e:e3:e0:96:5d:2a: 80:a8:55:86:c5:ee:6f:b0:96:2d:1a:5a:a2:0e:8f: f5:db:68:32:b7:6d:dc:4c:09:02:aa:83:0e:84:c3: 1d:cd:c6:bf:8f:c1:b2:0e:47:2c:67:c4:dd:86:a4: 63:74:9b:d1:64:3a:09:14:4e:e7:2f:d3:91:37:31: 54:42:31:77:1c:a2:3e:e9:c8:a8:aa:2f:80:08:9b: 54:9c:66:14:8b:21:53:45:7f:d1:86:e0:ed:ba:7d: e2:fb:16:ce:3b:7c:45:02:da:09:f6:41:77:b8:a8: 35:c8:dc:ed:93:e7:46:15:f2:93:61:2a:fa:26:91: b2:0c:0c:5f:0a:dd:ea:90:ad:53:a3:f5:a9:f5:bc: 6e:40:1d:d2:d9:43:a6:7b:5f:1c:a4:29:2d:39:ff: 3f:0e:a3:55:e5:2c:44:19:89:83:6b:24:8c:52:c3: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:7C:00:7A:D8:C8:3C:DF:E3:16:17:E9:0C:93:AB:57:D8:1B:C7:B4 X509v3 Authority Key Identifier: keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7a:eb:67:37:cc:81:9c:bb:a4:43:70:45:4e:4e:16:1f:5e: 9a:35:d9:11:f1:5e:6c:13:08:82:6d:95:0b:f9:24:43:d4:a3: bb:74:12:dd:1f:a5:9a:af:f8:ba:d8:f1:03:e5:a8:8f:ad:e2: f8:8b:a6:ca:08:66:56:17:32:52:19:c7:0f:24:f4:4f:9e:93: 7a:d4:17:b0:ef:1d:b1:c7:76:30:89:a3:88:f1:c6:84:ba:f2: 3c:cf:a6:47:21:a4:96:03:cf:ff:3b:6e:a5:4d:64:32:18:66: 68:6d:49:c0:90:fa:10:bb:8c:4a:11:2f:96:25:48:0d:57:8b: 75:d7:b5:66:53:b1:cc:80:d3:6b:0a:fa:58:1b:19:4e:d2:ec: d0:1c:bd:f8:45:7f:4f:81:d6:ce:3c:32:09:4d:5d:fb:c0:63: c9:85:1e:ad:70:5f:dd:32:04:3c:83:ce:49:6d:8a:c9:dd:91: 59:78:10:41:c3:4e:19:2b:48:df:c6:2d:16:33:50:41:87:11: ea:f8:4a:bb:f2:82:f5:d5:2b:58:90:85:d0:8f:92:2f:f7:67: e0:f9:37:5f:34:a7:7b:81:18:85:3d:4b:98:14:be:08:ac:bf: 14:c3:be:d2:c1:fb:9b:8c:e8:26:a1:16:90:76:49:ce:b0:1e: 0f:3a:47:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHR/111uu8qB4Y4qchHvZRE4AmOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5 NjNBRkUxQTAeFw0yNTEyMjMyMDE4MjJaFw0yNTEyMjYyMjM0MjJaMDMxMTAvBgNV BAMTKEYwN0MwMDdBRDhDODNDREZFMzE2MTdFOTBDOTNBQjU3RDgxQkM3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6JMjXxgIXzhPN9SohoBBJoLb 5WW7vkNTT/aETLD2G6g5r6/DC+4LWk2/iwZGECn6xpqWHIo+NT57YpN5jfS96HwW /2CCaCpuZcQOPoN7MKWwWn7j4JZdKoCoVYbF7m+wli0aWqIOj/XbaDK3bdxMCQKq gw6Ewx3Nxr+PwbIORyxnxN2GpGN0m9FkOgkUTucv05E3MVRCMXccoj7pyKiqL4AI m1ScZhSLIVNFf9GG4O26feL7Fs47fEUC2gn2QXe4qDXI3O2T50YV8pNhKvomkbIM DF8K3eqQrVOj9an1vG5AHdLZQ6Z7XxykKS05/z8Oo1XlLEQZiYNrJIxSw75rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8HwAetjIPN/jFhfpDJOrV9gbx7QwHwYDVR0j BBgwFoAUhgOw9yagWrNW0Q2xcL2OJ5Y6/howDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2I4N2Y2ZC0yOWE3LTRiNGMtODFjNy01YjRjYmRiMmNiNmEvMC84NjAzQjBGNzI2 QTA1QUIzNTZEMTBEQjE3MEJEOEUyNzk2M0FGRTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhFMjc5NjNB RkUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdiODdmNmQtMjlhNy00YjRjLTgx YzctNWI0Y2JkYjJjYjZhLzAvODYwM0IwRjcyNkEwNUFCMzU2RDEwREIxNzBCRDhF Mjc5NjNBRkUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGt662c3zIGcu6RDcEVOThYfXpo12RHxXmwT CIJtlQv5JEPUo7t0Et0fpZqv+LrY8QPlqI+t4viLpsoIZlYXMlIZxw8k9E+ek3rU F7DvHbHHdjCJo4jxxoS68jzPpkchpJYDz/87bqVNZDIYZmhtScCQ+hC7jEoRL5Yl SA1Xi3XXtWZTscyA02sK+lgbGU7S7NAcvfhFf0+B1s48MglNXfvAY8mFHq1wX90y BDyDzkltisndkVl4EEHDThkrSN/GLRYzUEGHEer4SrvygvXVK1iQhdCPki/3Z+D5 N180p3uBGIU9S5gUvgisvxTDvtLB+5uM6CahFpB2Sc6wHg86R2o= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:07 2025 by rpki-client