This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft (raw, json) Hash identifier: e7ccGXgrN2HlbcBlHH1rRa6go7yYkOS7nODUDcuSCIE= Subject key identifier: A2:8C:FC:76:EE:54:DD:91:64:4E:2E:FD:68:2E:F8:79:15:27:41:1F Authority key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Certificate issuer: /CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Certificate serial: 0A1CB02FF694A6121B33DD6CC41D1BC5E4DC9C0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft Manifest number: 42 Signing time: Mon 22 Dec 2025 16:01:28 +0000 Manifest this update: Mon 22 Dec 2025 15:56:28 +0000 Manifest next update: Fri 26 Dec 2025 03:00:28 +0000 Files and hashes: 1: 3130332e3231352e31332e302f32342d3234203d3e203634303332.roa (hash: 1rWJxz836YQXiB6Pa0fvf0nrGvPfgfX0x9BpbqaqFBk=) 2: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl (hash: uidApFckMcdxhoXsYHmXTZtBDUuI056FbhQrk0Gerdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1c:b0:2f:f6:94:a6:12:1b:33:dd:6c:c4:1d:1b:c5:e4:dc:9c:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Validity Not Before: Dec 22 15:56:28 2025 GMT Not After : Dec 26 03:00:28 2025 GMT Subject: CN=A28CFC76EE54DD91644E2EFD682EF8791527411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:4c:5c:43:84:a8:3c:2c:2f:4a:8d:9b:9c: 4b:ee:aa:f5:11:10:73:5d:52:66:3e:08:ea:94:39: 2d:32:e2:0a:8f:0d:25:85:19:1c:0c:24:68:e3:e0: 6b:f2:b5:18:e0:34:23:b7:6b:2c:e6:5b:76:e9:45: 02:2c:b7:b5:00:6c:03:86:db:50:da:2b:d2:64:aa: 00:e3:ca:43:50:97:4f:90:4e:61:8c:fe:d4:99:de: 36:31:ef:1a:c0:a5:bf:ca:64:b8:08:f5:48:c5:a5: 92:ef:9b:a6:11:94:f9:42:9c:15:8d:32:3d:7d:7b: 89:f7:2c:54:e6:31:fe:61:96:cd:1d:24:f5:ca:24: ca:a2:b2:00:a1:ba:a8:18:a7:ec:a3:e3:9b:98:0d: 5d:ed:30:47:6d:59:eb:7d:d9:3c:17:08:83:c3:b0: a4:5b:08:de:7e:12:45:93:49:33:16:13:78:d9:5d: 19:fb:60:91:e0:f7:46:14:dc:2b:ac:d5:55:e6:2d: 64:e0:46:b9:6d:ef:05:84:6c:db:3d:5f:f1:8c:e6: 50:82:77:58:fe:00:c7:46:60:5a:2c:35:bc:8d:04: 82:b7:cf:4e:30:09:98:54:e6:d5:94:19:85:a2:07: fa:0c:a2:52:61:0e:cc:48:93:51:99:62:0d:0a:b6: 48:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8C:FC:76:EE:54:DD:91:64:4E:2E:FD:68:2E:F8:79:15:27:41:1F X509v3 Authority Key Identifier: keyid:84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:fd:d2:20:9d:5b:f9:92:83:ff:fd:9b:ef:54:79:7e:19:7b: 0e:a3:31:89:bd:b5:c2:a7:44:6b:ad:eb:19:b5:23:db:dd:74: 50:34:fa:a8:a2:58:9d:15:4d:da:17:de:8c:d7:03:ea:cd:24: 02:de:a6:2f:4a:7f:dd:56:e9:a8:63:6d:fa:59:92:93:66:80: a5:bc:02:0f:94:66:ee:56:f3:aa:51:4c:94:36:c8:cd:f9:53: d7:52:5b:b7:f2:60:40:51:af:54:df:a2:ba:eb:52:8f:d0:29: 9a:4b:bd:54:47:73:2d:5b:a9:17:74:57:5c:0b:31:76:8e:a7: 97:03:af:57:92:56:b7:a0:92:a0:42:85:ff:ff:0e:bf:9f:f7: f5:13:d5:a7:f3:87:15:0c:1d:05:3d:b3:7e:6f:88:9b:65:53: b5:cb:17:2b:0c:be:66:1a:35:8b:7b:e7:8d:f2:f6:01:1e:d3: 01:b2:0f:9c:a9:f6:df:83:88:2d:c4:ae:d8:20:0f:5e:b1:2a: fb:7a:84:79:42:b4:6c:5c:2f:f0:1f:81:75:2e:fc:b5:04:fb: f5:94:37:b1:47:87:08:da:9d:1f:db:ef:4d:79:31:38:0f:7a: 9f:d1:e2:f1:db:43:22:10:d8:d3:d8:50:98:a1:ac:ba:80:af: 5e:9e:d7:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChywL/aUphIbM91sxB0bxeTcnAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYy NkI5RUE2MDAeFw0yNTEyMjIxNTU2MjhaFw0yNTEyMjYwMzAwMjhaMDMxMTAvBgNV BAMTKEEyOENGQzc2RUU1NEREOTE2NDRFMkVGRDY4MkVGODc5MTUyNzQxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq+ExcQ4SoPCwvSo2bnEvuqvUR EHNdUmY+COqUOS0y4gqPDSWFGRwMJGjj4GvytRjgNCO3ayzmW3bpRQIst7UAbAOG 21DaK9JkqgDjykNQl0+QTmGM/tSZ3jYx7xrApb/KZLgI9UjFpZLvm6YRlPlCnBWN Mj19e4n3LFTmMf5hls0dJPXKJMqisgChuqgYp+yj45uYDV3tMEdtWet92TwXCIPD sKRbCN5+EkWTSTMWE3jZXRn7YJHg90YU3Cus1VXmLWTgRrlt7wWEbNs9X/GM5lCC d1j+AMdGYFosNbyNBIK3z04wCZhU5tWUGYWiB/oMolJhDsxIk1GZYg0KtkhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUooz8du5U3ZFkTi79aC74eRUnQR8wHwYDVR0j BBgwFoAUhLgm/tTx2PcdCLqMDUodZia56mAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMC84NEI4MjZGRUQ0 RjFEOEY3MUQwOEJBOEMwRDRBMUQ2NjI2QjlFQTYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFENjYyNkI5 RUE2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ1NTY4MTUtYTQ0NS00OTg4LTlm YTgtMjQ2ODZkOTM2Zjg0LzAvODRCODI2RkVENEYxRDhGNzFEMDhCQThDMEQ0QTFE NjYyNkI5RUE2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACj90iCdW/mSg//9m+9UeX4Zew6jMYm9tcKn RGut6xm1I9vddFA0+qiiWJ0VTdoX3ozXA+rNJALepi9Kf91W6ahjbfpZkpNmgKW8 Ag+UZu5W86pRTJQ2yM35U9dSW7fyYEBRr1TforrrUo/QKZpLvVRHcy1bqRd0V1wL MXaOp5cDr1eSVregkqBChf//Dr+f9/UT1afzhxUMHQU9s35viJtlU7XLFysMvmYa NYt7543y9gEe0wGyD5yp9t+DiC3ErtggD16xKvt6hHlCtGxcL/AfgXUu/LUE+/WU N7FHhwjanR/b7015MTgPep/R4vHbQyIQ2NPYUJihrLqAr16e12I= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:55 2025 by rpki-client