This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: C+F9T4ycgXwGZn0P8M7reCiTaNy+4bzdNC42kksrRLo= Subject key identifier: 80:BB:5D:A0:DE:6E:5C:62:6E:C8:AE:AC:A5:6E:A8:2C:81:0A:8F:C7 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 689A9D5A06B03B8FD6B4E451A54161D1860E6DF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 01BC Signing time: Tue 23 Dec 2025 20:23:37 +0000 Manifest this update: Tue 23 Dec 2025 20:18:37 +0000 Manifest next update: Sat 27 Dec 2025 05:25:37 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: iCmDr8oBK4EDfwUrT+6GveXFohDaVEha2HoNnJndg24=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 05:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:9a:9d:5a:06:b0:3b:8f:d6:b4:e4:51:a5:41:61:d1:86:0e:6d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Dec 23 20:18:37 2025 GMT Not After : Dec 27 05:25:37 2025 GMT Subject: CN=80BB5DA0DE6E5C626EC8AEACA56EA82C810A8FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d8:2c:3b:9e:da:f6:1a:b7:b5:0a:1c:57:b0: ef:16:b6:c6:27:ad:95:f9:84:a7:ce:62:fd:aa:67: bf:42:de:0d:48:24:f2:6a:0e:e1:8b:3b:73:85:49: 96:77:43:c3:13:13:22:a9:52:1a:0a:7d:d1:d1:85: 64:78:d4:1b:f4:8a:ed:69:7f:5c:90:1b:d1:6b:f1: b1:cd:4b:10:dd:24:c1:da:c2:99:56:22:48:70:e3: cd:7b:2f:a4:22:84:b3:62:75:cf:3f:1e:6a:cb:63: 91:4b:ad:31:4a:00:08:66:8d:25:1c:b6:38:8e:5e: 24:c5:a0:f5:df:f2:20:61:96:f3:fd:d4:28:b2:fd: bb:4c:6d:7f:67:f9:7c:b3:cd:fd:16:9c:e2:57:2b: cf:ae:0c:02:01:62:d9:94:f2:ac:0e:d5:99:a3:f0: 38:81:08:eb:3a:ae:fa:94:ab:5e:42:18:55:4b:ce: a8:e2:bf:ab:44:4a:c3:e6:f9:53:3e:ca:e2:62:6b: 82:e1:02:be:3f:aa:15:70:c1:bf:2b:3d:fb:89:45: ed:13:5c:2f:9b:93:a1:54:d7:bd:7c:aa:c3:46:ff: 26:4d:05:44:f2:81:ae:a7:a8:f5:97:9d:a8:7a:b6: a5:8e:14:08:89:7d:c4:2b:b6:0f:17:4a:61:ad:f1: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:BB:5D:A0:DE:6E:5C:62:6E:C8:AE:AC:A5:6E:A8:2C:81:0A:8F:C7 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:87:f2:41:5e:bf:3e:ee:87:2b:d2:54:c9:e1:1c:fe:51:69: a5:9f:3e:84:6a:c5:e3:ef:57:17:7b:1a:b6:12:e5:c9:97:7e: f7:5f:a1:34:df:07:c4:88:11:8f:76:6c:75:71:42:02:ac:ed: e1:98:d4:8c:a7:c1:67:44:24:ce:f3:d3:35:27:f4:7e:d4:b7: 3a:15:21:bf:c2:3f:19:ef:9f:37:ee:f4:10:92:f1:1e:23:90: ce:a8:e2:7d:bb:d1:09:76:9a:49:1a:c0:f8:34:2d:88:ef:71: f4:ee:65:da:87:ec:15:da:dd:57:6d:57:4c:69:33:4c:fc:9c: 56:73:aa:97:3e:2f:9a:6d:2d:39:16:37:77:fc:0a:ae:98:c0: c7:91:db:be:aa:c9:2f:fd:60:2e:62:54:2a:6c:b9:b7:6d:64: 48:fc:7b:8b:ae:a4:0a:a5:c8:8a:a6:48:6b:38:55:f6:7b:d8: f2:9c:a7:79:20:b3:69:37:ca:e0:0a:63:79:17:8f:6e:f4:ea: ff:a2:4e:bb:8b:a5:6d:1b:d5:03:d1:89:08:88:f5:89:91:8d: c5:07:47:f6:23:2f:14:d3:95:ed:ec:f9:e9:c7:38:59:c8:0a: 36:be:67:e7:48:83:9c:40:48:3e:a3:7e:67:80:40:51:2e:46: 17:80:92:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJqdWgawO4/WtORRpUFh0YYObfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTEyMjMyMDE4MzdaFw0yNTEyMjcwNTI1MzdaMDMxMTAvBgNV BAMTKDgwQkI1REEwREU2RTVDNjI2RUM4QUVBQ0E1NkVBODJDODEwQThGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp2Cw7ntr2Gre1ChxXsO8WtsYn rZX5hKfOYv2qZ79C3g1IJPJqDuGLO3OFSZZ3Q8MTEyKpUhoKfdHRhWR41Bv0iu1p f1yQG9Fr8bHNSxDdJMHawplWIkhw4817L6QihLNidc8/HmrLY5FLrTFKAAhmjSUc tjiOXiTFoPXf8iBhlvP91Ciy/btMbX9n+Xyzzf0WnOJXK8+uDAIBYtmU8qwO1Zmj 8DiBCOs6rvqUq15CGFVLzqjiv6tESsPm+VM+yuJia4LhAr4/qhVwwb8rPfuJRe0T XC+bk6FU1718qsNG/yZNBUTyga6nqPWXnah6tqWOFAiJfcQrtg8XSmGt8WfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgLtdoN5uXGJuyK6spW6oLIEKj8cwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2H8kFevz7uhyvSVMnhHP5RaaWfPoRqxePv Vxd7GrYS5cmXfvdfoTTfB8SIEY92bHVxQgKs7eGY1IynwWdEJM7z0zUn9H7UtzoV Ib/CPxnvnzfu9BCS8R4jkM6o4n270Ql2mkkawPg0LYjvcfTuZdqH7BXa3VdtV0xp M0z8nFZzqpc+L5ptLTkWN3f8Cq6YwMeR276qyS/9YC5iVCpsubdtZEj8e4uupAql yIqmSGs4VfZ72PKcp3kgs2k3yuAKY3kXj2706v+iTruLpW0b1QPRiQiI9YmRjcUH R/YjLxTTle3s+enHOFnICja+Z+dIg5xASD6jfmeAQFEuRheAksA= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:49 2025 by rpki-client