This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: joSgY8/APArH9WKBHrYGfLUCaO+P3WYDEh2L4SqE5fo= Subject key identifier: B1:A8:85:1F:35:5A:FB:B6:1A:A3:6B:9D:BC:BF:85:A7:5B:0B:77:0B Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 41B5DAC5DA1E48A0AB2718E4FCDFE8F5201FD0C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 0281 Signing time: Wed 24 Dec 2025 18:10:50 +0000 Manifest this update: Wed 24 Dec 2025 18:05:50 +0000 Manifest next update: Sun 28 Dec 2025 03:04:50 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: ry1Y2UCh72oUEqEK7bZmBto3DDvRqucWOY75i4sryw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b5:da:c5:da:1e:48:a0:ab:27:18:e4:fc:df:e8:f5:20:1f:d0:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: Dec 24 18:05:50 2025 GMT Not After : Dec 28 03:04:50 2025 GMT Subject: CN=B1A8851F355AFBB61AA36B9DBCBF85A75B0B770B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:38:92:0b:4b:33:9c:e4:bc:d1:3e:9b:c4: e3:6b:4f:4f:52:1b:ec:21:f4:44:75:ab:05:2f:b7: 5f:b2:b5:dc:09:d7:8a:e6:9c:2b:0d:d5:36:d2:e7: 4e:4b:9c:f5:8f:56:83:9f:97:ed:b7:53:c1:d2:7e: e7:b2:a9:34:66:11:e9:f6:15:cd:c9:0a:9f:ed:b9: a2:c1:62:49:02:1a:98:6e:8a:b8:59:88:d4:71:5f: 20:f9:c5:5d:f1:28:12:c2:39:f6:28:38:dc:73:61: 40:1e:e6:a6:de:3c:dc:8d:2e:39:0b:ef:7d:6c:7a: c2:f4:5c:d1:cb:dc:e0:94:e9:b1:22:1a:56:20:b1: 7f:36:96:32:02:ea:57:b3:90:8f:9c:2b:a7:b3:45: 58:85:a6:31:5d:ce:9e:aa:62:5a:b5:ac:f7:7c:29: bf:39:d6:0d:3d:2b:f1:fa:9d:7c:5d:ca:1b:40:6e: 3d:75:e7:7e:44:63:71:38:97:82:0f:c4:42:12:59: 7d:b7:c6:14:fb:78:b8:f5:e6:ce:8d:68:05:b9:dd: 6d:20:22:19:c5:59:42:75:32:54:85:20:a9:be:3b: e4:a6:e6:0c:5c:38:2f:2d:bf:7c:47:2b:ab:b5:40: 5a:69:0c:35:0b:a4:50:f9:25:7f:cd:88:bb:b9:1e: d0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:85:1F:35:5A:FB:B6:1A:A3:6B:9D:BC:BF:85:A7:5B:0B:77:0B X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c3:94:3b:ad:86:c2:98:51:1b:91:75:cc:4f:f8:96:08:4d: cb:ce:1c:5e:2b:eb:5f:93:13:8e:1e:b2:c9:2e:05:b7:03:cc: 90:a7:54:94:27:90:f4:34:9e:c4:21:af:24:2e:db:4b:5b:d1: 2c:55:aa:81:3c:86:2b:29:08:b0:28:54:22:6b:82:43:c6:8f: 49:63:48:8c:86:da:a8:ec:1a:4c:99:69:8b:63:d5:c4:a9:56: c1:15:05:48:26:f8:38:fc:b3:c0:fb:65:3e:38:45:6a:81:c2: 32:ef:61:43:db:02:0e:64:63:5b:78:d2:64:59:44:2a:8d:b8: 5e:dc:43:34:e8:43:fb:f4:0a:05:4a:78:a3:2e:a7:a6:41:d6: fe:87:7f:a0:5b:b6:f0:e9:a7:fc:6a:4a:06:c7:3e:20:47:c2: 1c:30:89:ba:93:ef:d1:8e:41:cc:bd:6a:17:18:46:67:a6:d4: 33:3b:46:0c:f3:db:6a:29:49:46:ec:e2:1c:21:14:c2:0e:13: bb:97:20:43:02:b1:66:8d:79:cc:a1:d5:ce:09:c4:22:01:ab: a5:51:c5:8b:5d:2f:2c:51:42:aa:bb:b6:cc:06:7a:e3:51:90: ec:d0:20:70:da:1b:c5:c3:04:2b:58:72:90:82:1b:9a:89:92: 7b:94:ab:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbXaxdoeSKCrJxjk/N/o9SAf0MQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTEyMjQxODA1NTBaFw0yNTEyMjgwMzA0NTBaMDMxMTAvBgNV BAMTKEIxQTg4NTFGMzU1QUZCQjYxQUEzNkI5REJDQkY4NUE3NUIwQjc3MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjTiSC0sznOS80T6bxONrT09S G+wh9ER1qwUvt1+ytdwJ14rmnCsN1TbS505LnPWPVoOfl+23U8HSfueyqTRmEen2 Fc3JCp/tuaLBYkkCGphuirhZiNRxXyD5xV3xKBLCOfYoONxzYUAe5qbePNyNLjkL 731sesL0XNHL3OCU6bEiGlYgsX82ljIC6lezkI+cK6ezRViFpjFdzp6qYlq1rPd8 Kb851g09K/H6nXxdyhtAbj11535EY3E4l4IPxEISWX23xhT7eLj15s6NaAW53W0g IhnFWUJ1MlSFIKm+O+Sm5gxcOC8tv3xHK6u1QFppDDULpFD5JX/NiLu5HtDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsaiFHzVa+7Yao2udvL+Fp1sLdwswHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXDlDuthsKYURuRdcxP+JYITcvOHF4r61+T E44esskuBbcDzJCnVJQnkPQ0nsQhryQu20tb0SxVqoE8hispCLAoVCJrgkPGj0lj SIyG2qjsGkyZaYtj1cSpVsEVBUgm+Dj8s8D7ZT44RWqBwjLvYUPbAg5kY1t40mRZ RCqNuF7cQzToQ/v0CgVKeKMup6ZB1v6Hf6BbtvDpp/xqSgbHPiBHwhwwibqT79GO Qcy9ahcYRmem1DM7Rgzz22opSUbs4hwhFMIOE7uXIEMCsWaNecyh1c4JxCIBq6VR xYtdLyxRQqq7tswGeuNRkOzQIHDaG8XDBCtYcpCCG5qJknuUq8E= -----END CERTIFICATE-----Generated at Wed Dec 24 20:22:16 2025 by rpki-client