This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: T0x7NpMzTfKHuGWQ3Eujv/+nQ0C83JUiDauy4o5/3sM= Subject key identifier: C5:11:EE:8F:15:76:B9:B1:7F:69:36:49:4A:F3:20:BC:73:FF:43:FE Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 6D13884574A1B35AEBEEA3B6D373D08AFAC04EDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01DA Signing time: Tue 30 Dec 2025 10:00:45 +0000 Manifest this update: Tue 30 Dec 2025 09:55:45 +0000 Manifest next update: Fri 02 Jan 2026 18:42:45 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=) 2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: DCWOkPEVXzhe0YtCnOVT170+EBXJnYBDc8IIJeuiaok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 18:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:13:88:45:74:a1:b3:5a:eb:ee:a3:b6:d3:73:d0:8a:fa:c0:4e:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Dec 30 09:55:45 2025 GMT Not After : Jan 2 18:42:45 2026 GMT Subject: CN=C511EE8F1576B9B17F6936494AF320BC73FF43FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3b:a7:6b:43:24:6d:fe:89:25:11:29:25:79: 61:80:1c:47:11:e7:cd:c8:e6:fd:13:57:11:34:89: 16:bb:5f:90:3e:72:7f:1e:99:55:49:01:53:4b:c2: a3:64:e9:64:e4:8f:68:1f:00:ca:a8:6c:45:0b:cd: 89:de:60:11:0f:a1:12:ca:53:02:71:df:42:15:97: 17:6d:9d:07:a6:ff:26:fb:76:de:7c:41:98:a5:16: 86:d8:ec:fa:bd:20:2c:12:5c:9a:a2:6a:e3:ed:57: 19:09:fc:0e:7a:fb:14:67:c7:29:c6:1e:99:98:18: 6a:dc:01:36:6f:86:f1:85:ca:45:01:42:b9:f1:0f: 32:7f:a4:37:fb:56:69:74:24:ab:bf:57:60:a0:52: 58:ca:4b:04:cc:4d:c7:35:26:e8:e0:60:4d:72:49: b5:5e:14:25:5c:8d:80:64:04:97:15:3b:8b:c0:2a: b3:ca:74:38:77:de:4c:ea:29:3b:1e:2a:79:a5:7d: 82:d7:e8:7d:17:55:ff:08:90:47:b8:47:19:c5:13: 1d:fb:6e:cb:6b:e6:8e:c6:d9:1e:e2:6b:b2:fb:a2: 81:64:c0:00:4e:f5:ee:57:5a:9d:69:30:a4:1b:9b: 4f:9b:a0:c8:1e:ec:43:5c:4e:8d:c4:23:7d:01:1b: fe:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:11:EE:8F:15:76:B9:B1:7F:69:36:49:4A:F3:20:BC:73:FF:43:FE X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b9:6f:3e:06:6c:15:81:a5:74:4f:0b:82:39:1f:42:27:08: 7f:67:45:21:26:1e:10:aa:1c:48:df:e8:66:23:37:da:38:3d: 9f:ae:f1:68:03:a9:1e:b5:51:ba:2b:76:ff:9d:82:8b:dc:8a: eb:8e:a4:13:c2:80:12:72:ed:06:c4:5a:05:f2:92:17:f7:06: 5c:ba:f0:a8:39:f4:c4:26:d0:0e:84:77:a5:79:54:d2:27:6c: 63:3e:eb:62:ab:bd:af:f7:eb:e1:7a:50:d5:1f:6b:9f:06:08: 67:c7:fc:f3:16:e3:77:34:ac:e1:68:f7:2d:64:a4:f1:47:b3: b8:3e:b1:4d:65:3b:d5:10:6a:7d:2b:7f:ef:18:77:02:6d:98: 6f:83:c8:df:d2:00:46:9a:0a:92:28:4c:77:1d:9c:da:ff:70: df:a6:17:e6:b2:27:9f:1c:a2:e3:10:26:ab:07:9b:33:b0:48: 86:92:f1:7a:49:a1:99:43:7d:79:72:89:de:18:57:08:9e:ef: 71:e5:eb:56:2a:45:8b:eb:25:a8:db:0e:89:7b:48:4e:5c:1f: 4c:0d:75:34:95:8e:ff:1f:a7:52:34:c4:1c:20:f8:c8:38:c4: d2:df:11:8c:9f:4b:65:4a:6a:8c:b5:8c:4d:cc:ca:22:a1:9e: 1c:60:8e:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbROIRXShs1rr7qO203PQivrATt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTEyMzAwOTU1NDVaFw0yNjAxMDIxODQyNDVaMDMxMTAvBgNV BAMTKEM1MTFFRThGMTU3NkI5QjE3RjY5MzY0OTRBRjMyMEJDNzNGRjQzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoO6drQyRt/oklESkleWGAHEcR 583I5v0TVxE0iRa7X5A+cn8emVVJAVNLwqNk6WTkj2gfAMqobEULzYneYBEPoRLK UwJx30IVlxdtnQem/yb7dt58QZilFobY7Pq9ICwSXJqiauPtVxkJ/A56+xRnxynG HpmYGGrcATZvhvGFykUBQrnxDzJ/pDf7Vml0JKu/V2CgUljKSwTMTcc1JujgYE1y SbVeFCVcjYBkBJcVO4vAKrPKdDh33kzqKTseKnmlfYLX6H0XVf8IkEe4RxnFEx37 bstr5o7G2R7ia7L7ooFkwABO9e5XWp1pMKQbm0+boMge7ENcTo3EI30BG/7bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRHujxV2ubF/aTZJSvMgvHP/Q/4wHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa5bz4GbBWBpXRPC4I5H0InCH9nRSEmHhCq HEjf6GYjN9o4PZ+u8WgDqR61Ubordv+dgovciuuOpBPCgBJy7QbEWgXykhf3Bly6 8Kg59MQm0A6Ed6V5VNInbGM+62Krva/36+F6UNUfa58GCGfH/PMW43c0rOFo9y1k pPFHs7g+sU1lO9UQan0rf+8YdwJtmG+DyN/SAEaaCpIoTHcdnNr/cN+mF+ayJ58c ouMQJqsHmzOwSIaS8XpJoZlDfXlyid4YVwie73Hl61YqRYvrJajbDol7SE5cH0wN dTSVjv8fp1I0xBwg+Mg4xNLfEYyfS2VKaoy1jE3MyiKhnhxgjks= -----END CERTIFICATE-----Generated at Wed Dec 31 21:50:55 2025 by rpki-client