This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: +wxrKttSqJ4PBYQCAegb5NaN3/rV5wyQlAB3k0VNn8w= Subject key identifier: 83:A5:E7:BD:4F:2F:98:CF:C8:49:37:BD:4D:90:8E:46:FC:82:C5:B3 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 767B1518A5FA194B7FC8487D880A3CF14E1C5065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 0188 Signing time: Tue 16 Dec 2025 17:10:50 +0000 Manifest this update: Tue 16 Dec 2025 17:05:50 +0000 Manifest next update: Sat 20 Dec 2025 03:11:50 +0000 Files and hashes: 1: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: E88NOdblpNOROamcHz52uFXc3fDSJs+MsgBv97RVkWU=) 2: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:7b:15:18:a5:fa:19:4b:7f:c8:48:7d:88:0a:3c:f1:4e:1c:50:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Dec 16 17:05:50 2025 GMT Not After : Dec 20 03:11:50 2025 GMT Subject: CN=83A5E7BD4F2F98CFC84937BD4D908E46FC82C5B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f3:be:61:b2:07:8a:d1:0a:50:cf:ad:84:41: 11:29:3b:eb:9e:f1:4f:7c:db:76:ab:8b:f0:a8:04: 8a:51:39:ff:95:ba:0f:19:4e:93:f0:03:3e:1c:9c: 36:26:9d:a7:ad:6d:6d:76:26:2c:a1:14:c0:a3:cb: 2a:92:c5:38:9f:2f:bc:4f:af:bd:86:40:71:c1:fa: 16:1a:52:79:f8:f5:82:91:18:17:59:84:9d:0f:10: 8d:25:f1:78:56:51:21:24:95:7d:9c:9b:bb:c8:4d: 74:81:13:bf:5e:eb:77:d5:09:65:17:76:ed:ac:f8: fc:34:b1:eb:08:9a:2e:56:3d:ba:99:79:67:1d:f0: 67:a4:f9:1f:06:5b:be:58:9a:71:e5:d6:fa:6f:82: e5:a5:1b:bf:b8:72:89:f1:d6:02:53:2c:a5:12:d2: c4:62:3d:8f:5d:29:f8:c7:a3:95:cd:3e:a2:6d:92: 97:d4:f2:0f:47:db:4a:37:66:22:51:59:e7:3f:80: 17:eb:a8:5a:b0:9b:3d:6f:41:f5:83:21:f3:ea:8c: df:85:63:be:1c:e3:a8:2e:b9:22:7d:dd:b2:ea:c4: 4a:e1:70:aa:be:cb:1e:a2:61:6c:f9:f8:a8:45:cf: 13:b7:35:7b:0f:5c:75:64:bd:1c:6b:0a:3d:75:6f: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A5:E7:BD:4F:2F:98:CF:C8:49:37:BD:4D:90:8E:46:FC:82:C5:B3 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:3f:08:bf:10:0b:d2:ce:72:c8:b8:0e:19:95:89:aa:d4:39: 34:ba:98:44:3a:13:58:36:e5:59:64:02:5e:0e:45:1e:fc:8e: b7:93:28:09:88:80:92:9a:8f:da:76:15:92:48:73:53:23:33: 23:3c:06:dc:ae:3a:ea:a3:a2:cd:9d:19:c3:78:72:e2:98:16: 5e:33:c0:19:5f:4e:37:a9:b1:6c:27:f3:db:a6:81:60:7e:7b: 80:a7:77:00:9a:a3:46:06:30:87:81:cd:1d:46:5f:1f:10:17: 2c:42:a9:a4:b8:d2:fd:14:1c:73:ab:08:d5:24:fa:18:51:5a: db:53:40:28:44:5e:40:d6:cd:9e:7b:a6:db:7f:52:b2:97:a0: 78:b4:fb:a7:f7:3c:14:c2:35:a0:35:c7:fa:3d:e3:3a:1c:d9: ab:98:31:b1:ee:a3:7e:bb:cb:25:0c:9f:87:0d:5c:79:25:f1: 51:17:9f:0b:e3:c2:aa:25:f8:e5:b8:9b:7c:da:8d:5c:93:03: 6e:c7:a6:ea:78:2e:3f:21:04:3e:08:c0:7d:bb:ac:84:3e:6e: da:da:f2:03:ee:2f:54:ac:28:a5:ee:23:80:ff:19:14:c7:10: 63:ad:e9:dc:c9:94:78:9a:ac:63:3f:dc:de:cc:24:93:5a:c9: b2:91:53:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdnsVGKX6GUt/yEh9iAo88U4cUGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNTEyMTYxNzA1NTBaFw0yNTEyMjAwMzExNTBaMDMxMTAvBgNV BAMTKDgzQTVFN0JENEYyRjk4Q0ZDODQ5MzdCRDREOTA4RTQ2RkM4MkM1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5875hsgeK0QpQz62EQREpO+ue 8U9823ari/CoBIpROf+Vug8ZTpPwAz4cnDYmnaetbW12JiyhFMCjyyqSxTifL7xP r72GQHHB+hYaUnn49YKRGBdZhJ0PEI0l8XhWUSEklX2cm7vITXSBE79e63fVCWUX du2s+Pw0sesImi5WPbqZeWcd8Gek+R8GW75YmnHl1vpvguWlG7+4conx1gJTLKUS 0sRiPY9dKfjHo5XNPqJtkpfU8g9H20o3ZiJRWec/gBfrqFqwmz1vQfWDIfPqjN+F Y74c46guuSJ93bLqxErhcKq+yx6iYWz5+KhFzxO3NXsPXHVkvRxrCj11b/jFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg6XnvU8vmM/ISTe9TZCORvyCxbMwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEE/CL8QC9LOcsi4DhmViarUOTS6mEQ6E1g2 5VlkAl4ORR78jreTKAmIgJKaj9p2FZJIc1MjMyM8BtyuOuqjos2dGcN4cuKYFl4z wBlfTjepsWwn89umgWB+e4CndwCao0YGMIeBzR1GXx8QFyxCqaS40v0UHHOrCNUk +hhRWttTQChEXkDWzZ57ptt/UrKXoHi0+6f3PBTCNaA1x/o94zoc2auYMbHuo367 yyUMn4cNXHkl8VEXnwvjwqol+OW4m3zajVyTA27Hpup4Lj8hBD4IwH27rIQ+btra 8gPuL1SsKKXuI4D/GRTHEGOt6dzJlHiarGM/3N7MJJNaybKRU+o= -----END CERTIFICATE-----Generated at Wed Dec 17 22:04:58 2025 by rpki-client