This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: JBPZctDEGh0tu00paRrUL48F0RDbU9TJMMfRaXahjBU= Subject key identifier: 38:91:C7:37:30:EA:9E:E4:95:9A:13:C0:58:A7:58:D9:B0:38:BE:4D Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 193B36701744FB61BAF5969327822997D872B277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 0232 Signing time: Thu 18 Dec 2025 17:10:03 +0000 Manifest this update: Thu 18 Dec 2025 17:05:03 +0000 Manifest next update: Sun 21 Dec 2025 17:53:03 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: 6+aFkrZJJtLcZhfgB3cu7tQiAgFnTDTFna3ufzBHW+k=) 2: 3130332e3137342e37392e302f32342d3234203d3e20313331363939.roa (hash: gMUmsfmmNczaAd+9ZeeQYOcgGDct+Ydmufmg2U5oVEk=) 3: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:53:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:3b:36:70:17:44:fb:61:ba:f5:96:93:27:82:29:97:d8:72:b2:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Dec 18 17:05:03 2025 GMT Not After : Dec 21 17:53:03 2025 GMT Subject: CN=3891C73730EA9EE4959A13C058A758D9B038BE4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:92:c5:0e:5c:b4:21:06:49:96:0c:48:07: 4e:99:8b:95:e3:cb:1c:69:b2:8c:b3:1a:30:ce:41: 15:49:28:80:b4:17:df:33:bd:cb:54:8a:94:01:d3: 7d:ea:3e:6f:2c:7a:61:1a:61:58:b7:3c:24:fa:de: 6e:cf:26:59:53:38:12:55:b0:ec:f1:18:ce:c9:39: f7:ac:69:25:63:26:67:e2:df:30:f3:9f:90:a5:38: 63:43:dd:48:70:b1:d2:ff:57:77:09:61:7a:89:33: 6c:6e:45:cc:b4:7d:53:ae:60:a9:b6:b9:6b:93:65: d9:61:c0:ab:d5:8b:5f:14:54:1b:f0:c9:11:db:5b: a4:75:35:20:cc:91:2d:83:da:13:d8:59:62:42:3a: b0:f5:23:60:3a:51:6f:97:63:a5:14:ff:6e:64:72: 15:51:5b:cf:10:f8:92:28:50:36:74:2b:80:fb:9e: c1:29:ea:a7:12:f6:7e:46:4b:91:3f:a5:c8:8e:86: c0:00:47:c6:72:ff:9e:ac:f9:c2:0f:a4:4f:90:6c: dd:15:7d:10:ee:8a:e8:a3:66:2e:32:d1:07:53:15: d1:98:24:17:7a:d2:f4:f4:b8:4b:34:9e:11:e5:0a: 30:3a:5d:46:51:1d:8e:48:5c:5c:ca:a1:06:34:ac: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:91:C7:37:30:EA:9E:E4:95:9A:13:C0:58:A7:58:D9:B0:38:BE:4D X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:60:58:47:a3:6a:46:f8:55:b4:96:1b:91:34:ef:04:5f:16: 15:1a:ca:b2:5f:fa:02:cd:6c:9a:a7:66:e9:03:c3:be:40:e6: 47:34:00:07:41:b1:6f:b5:e9:4b:fa:69:0b:43:82:70:2b:1c: 7a:a1:13:23:25:a4:4b:63:89:2d:28:5a:b2:33:4b:bc:64:58: 5f:de:56:6f:6e:98:98:c1:d9:72:6e:4e:8b:1c:b0:56:78:bf: b5:6a:68:c8:21:9b:d8:6f:cd:c3:dc:f3:48:ee:56:9a:3c:d3: 0c:fe:c7:13:39:7c:e0:f8:4d:7b:a1:68:8d:00:c4:f4:3b:64: 29:cd:53:8c:0a:18:94:32:e7:90:27:dd:3d:57:62:c3:a8:27: 64:55:06:28:53:0e:73:58:8a:06:7c:23:3b:93:b3:f8:c9:84: 80:c3:7c:12:65:a3:40:ea:02:a1:96:68:c7:1e:b4:25:60:e6: ce:d5:28:48:ed:65:ee:d6:1b:e5:ea:c6:a7:09:78:c6:0c:c5: 85:3b:12:6e:36:77:03:1f:79:7b:9f:0c:fb:81:67:af:89:2b: b6:f9:81:0b:a3:8b:29:be:ef:7e:4a:48:6a:2c:d7:32:47:b2: 8d:56:7b:3b:34:ad:97:d4:01:c8:64:4c:76:85:03:bd:bc:f0: 71:e7:01:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTs2cBdE+2G69ZaTJ4Ipl9hysncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTEyMTgxNzA1MDNaFw0yNTEyMjExNzUzMDNaMDMxMTAvBgNV BAMTKDM4OTFDNzM3MzBFQTlFRTQ5NTlBMTNDMDU4QTc1OEQ5QjAzOEJFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QpLFDly0IQZJlgxIB06Zi5Xj yxxpsoyzGjDOQRVJKIC0F98zvctUipQB033qPm8semEaYVi3PCT63m7PJllTOBJV sOzxGM7JOfesaSVjJmfi3zDzn5ClOGND3UhwsdL/V3cJYXqJM2xuRcy0fVOuYKm2 uWuTZdlhwKvVi18UVBvwyRHbW6R1NSDMkS2D2hPYWWJCOrD1I2A6UW+XY6UU/25k chVRW88Q+JIoUDZ0K4D7nsEp6qcS9n5GS5E/pciOhsAAR8Zy/56s+cIPpE+QbN0V fRDuiuijZi4y0QdTFdGYJBd60vT0uEs0nhHlCjA6XUZRHY5IXFzKoQY0rLRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJHHNzDqnuSVmhPAWKdY2bA4vk0wHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9gWEejakb4VbSWG5E07wRfFhUayrJf+gLN bJqnZukDw75A5kc0AAdBsW+16Uv6aQtDgnArHHqhEyMlpEtjiS0oWrIzS7xkWF/e Vm9umJjB2XJuToscsFZ4v7VqaMghm9hvzcPc80juVpo80wz+xxM5fOD4TXuhaI0A xPQ7ZCnNU4wKGJQy55An3T1XYsOoJ2RVBihTDnNYigZ8IzuTs/jJhIDDfBJlo0Dq AqGWaMcetCVg5s7VKEjtZe7WG+XqxqcJeMYMxYU7Em42dwMfeXufDPuBZ6+JK7b5 gQujiym+735KSGos1zJHso1Wezs0rZfUAchkTHaFA7288HHnAe0= -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:35 2025 by rpki-client