This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft File: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft (raw, json) Hash identifier: iawSPJaqIa4Y5jFaDWoUQzrNjaj0IM0eruhJnWJpFU8= Subject key identifier: F9:9D:53:E6:CC:13:3B:78:04:0A:92:30:DB:2C:54:E1:82:27:B5:90 Authority key identifier: C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7 Certificate issuer: /CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7 Certificate serial: 7C5AB66079C630A1E8D4BF93E0CB0D3CEF51588B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 04:01:47 +0000 Manifest this update: Thu 18 Dec 2025 03:56:47 +0000 Manifest next update: Sun 21 Dec 2025 08:08:47 +0000 Files and hashes: 1: 323430363a323163303a3a2f33322d3332203d3e20313430343239.roa (hash: ZpsXVRa1bGj6KGJ4JUiINsK5cebpyx4AuHAmoR4SCEQ=) 2: 3130332e3135312e3232372e302f32342d3234203d3e20313430343239.roa (hash: 2U9Zf0sqVfy0Kk4IRyy+SOT0VXzAWAUry3fc1mN2+RE=) 3: C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl (hash: s05u7FH9rS7oeTVXMrlvbZ2OJZVzAghfyYcy73cmY38=) 4: 3130332e3135312e3232362e302f32342d3234203d3e20313430343239.roa (hash: 95rrpHgHcYlBddvbgX3RJAAMir/2oNARNGF298XXujg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5a:b6:60:79:c6:30:a1:e8:d4:bf:93:e0:cb:0d:3c:ef:51:58:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7 Validity Not Before: Dec 18 03:56:47 2025 GMT Not After : Dec 21 08:08:47 2025 GMT Subject: CN=F99D53E6CC133B78040A9230DB2C54E18227B590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:f7:3f:bb:92:3e:89:45:60:f9:ce:94:6a: 6a:68:84:cd:95:cf:e4:81:93:b6:78:e5:cf:21:dd: 25:57:c9:70:d7:92:9a:46:10:67:e0:95:54:b8:ea: 62:cd:40:c3:a2:02:1b:98:db:dd:3e:6b:c2:b0:fc: c8:a9:3c:4f:bc:d9:a6:c0:d9:23:94:4c:49:ed:8e: 19:a9:61:2c:21:30:43:7f:c1:c2:b7:5a:22:e3:9a: c6:73:e0:fd:aa:91:b3:32:fb:00:d7:88:d1:a4:32: f6:89:4a:d0:7d:0d:bf:02:a7:07:cb:71:29:33:c6: 90:18:3a:a5:51:38:b2:64:0b:14:b4:c8:89:df:03: 8c:af:a9:a9:20:61:a9:12:05:27:02:ee:ad:ec:89: e0:bd:9a:02:20:f8:a7:6c:68:4b:6e:5a:eb:1f:b5: ef:96:27:fb:76:bb:04:05:eb:a2:be:0e:08:8f:c2: 71:4d:c7:49:41:0b:d9:f8:c2:d4:8c:4c:b5:69:ea: 1f:8a:93:a7:af:37:72:9c:68:db:70:f2:6e:fc:df: 21:b7:a1:63:53:e8:f4:72:fe:f0:c9:f4:e8:d6:70: 47:5d:61:1a:87:ac:e5:a1:da:76:ba:86:91:0d:ec: 62:2f:2d:ea:25:2c:e4:7d:72:22:7b:17:47:df:ab: e3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9D:53:E6:CC:13:3B:78:04:0A:92:30:DB:2C:54:E1:82:27:B5:90 X509v3 Authority Key Identifier: keyid:C8:2A:80:AD:CB:D8:36:F4:D8:D5:E4:E9:80:88:C3:EC:BC:AF:18:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc2ab062-8703-4da6-ad72-80d25ae8bf5f/0/C82A80ADCBD836F4D8D5E4E98088C3ECBCAF18D7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:8b:56:f1:02:4f:9d:0b:03:e4:a3:8e:bb:7a:6b:58:86:cc: b0:26:58:1a:4a:51:33:43:cf:64:05:b9:26:44:cd:de:26:9f: 6f:e9:be:fd:55:b8:6b:f5:75:59:16:9b:5e:89:0c:e4:2f:51: f1:19:0b:b1:8d:55:ee:ba:93:1e:58:27:31:5f:f5:35:07:3e: 8a:f9:96:8a:83:87:cb:5e:c4:91:58:7a:ef:23:67:bc:c2:85: 0f:59:37:76:79:9b:4d:40:a7:31:a0:53:2b:38:e4:e0:6b:be: 59:cf:ee:2f:50:14:43:d1:ff:61:94:42:4d:11:95:ad:85:9a: 7b:4e:d7:76:a1:8c:fd:22:10:f0:c1:c9:a0:a4:8a:9f:17:06: 49:67:ae:8f:f5:41:0c:94:c0:ec:aa:ad:05:b0:65:48:93:24: 74:8f:28:3f:db:20:fc:10:a2:d3:6f:e1:fa:d3:60:40:ec:b7: 4c:27:36:f5:d8:ce:9c:db:08:d1:c5:23:27:93:70:d4:03:0b: 49:f7:0a:f7:0b:43:e3:9d:ff:fd:37:8e:9f:09:81:3e:86:d9: dd:09:59:30:f7:b5:00:b6:ed:35:7d:62:5b:45:f9:dd:6e:79: d7:55:dc:df:8b:22:92:47:76:f6:5e:bb:6f:57:ee:7e:60:3d: 4d:13:9a:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFq2YHnGMKHo1L+T4MsNPO9RWIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyQTgwQURDQkQ4MzZGNEQ4RDVFNEU5ODA4OEMzRUNC Q0FGMThENzAeFw0yNTEyMTgwMzU2NDdaFw0yNTEyMjEwODA4NDdaMDMxMTAvBgNV BAMTKEY5OUQ1M0U2Q0MxMzNCNzgwNDBBOTIzMERCMkM1NEUxODIyN0I1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49vc/u5I+iUVg+c6UampohM2V z+SBk7Z45c8h3SVXyXDXkppGEGfglVS46mLNQMOiAhuY290+a8Kw/MipPE+82abA 2SOUTEntjhmpYSwhMEN/wcK3WiLjmsZz4P2qkbMy+wDXiNGkMvaJStB9Db8CpwfL cSkzxpAYOqVROLJkCxS0yInfA4yvqakgYakSBScC7q3sieC9mgIg+KdsaEtuWusf te+WJ/t2uwQF66K+DgiPwnFNx0lBC9n4wtSMTLVp6h+Kk6evN3KcaNtw8m783yG3 oWNT6PRy/vDJ9OjWcEddYRqHrOWh2na6hpEN7GIvLeolLOR9ciJ7F0ffq+NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Z1T5swTO3gECpIw2yxU4YIntZAwHwYDVR0j BBgwFoAUyCqArcvYNvTY1eTpgIjD7LyvGNcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzJhYjA2Mi04NzAzLTRkYTYtYWQ3Mi04MGQyNWFlOGJmNWYvMC9DODJBODBBRENC RDgzNkY0RDhENUU0RTk4MDg4QzNFQ0JDQUYxOEQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgyQTgwQURDQkQ4MzZGNEQ4RDVFNEU5ODA4OEMzRUNCQ0FG MThENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmMyYWIwNjItODcwMy00ZGE2LWFk NzItODBkMjVhZThiZjVmLzAvQzgyQTgwQURDQkQ4MzZGNEQ4RDVFNEU5ODA4OEMz RUNCQ0FGMThENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWLVvECT50LA+Sjjrt6a1iGzLAmWBpKUTND z2QFuSZEzd4mn2/pvv1VuGv1dVkWm16JDOQvUfEZC7GNVe66kx5YJzFf9TUHPor5 loqDh8texJFYeu8jZ7zChQ9ZN3Z5m01ApzGgUys45OBrvlnP7i9QFEPR/2GUQk0R la2FmntO13ahjP0iEPDByaCkip8XBklnro/1QQyUwOyqrQWwZUiTJHSPKD/bIPwQ otNv4frTYEDst0wnNvXYzpzbCNHFIyeTcNQDC0n3CvcLQ+Od//03jp8JgT6G2d0J WTD3tQC27TV9YltF+d1ueddV3N+LIpJHdvZeu29X7n5gPU0Tmsg= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:42 2025 by rpki-client