This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: KY3tojyN2OLOHc71wI9oFVcbOU0gKaq6TM7AuXoc9Ks= Subject key identifier: 25:8A:99:02:D1:D9:98:7F:5E:12:D2:5B:C6:F3:7F:DE:02:A0:78:D4 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 32F105167A4D142D7B9EA98BCECD22383F2CC2F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 035F Signing time: Tue 16 Dec 2025 19:10:03 +0000 Manifest this update: Tue 16 Dec 2025 19:05:03 +0000 Manifest next update: Sat 20 Dec 2025 04:42:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: qtXvsOFYfkK4AqMLRVmM2nlFPFuKUutk2r+9Pi3AjzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 04:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f1:05:16:7a:4d:14:2d:7b:9e:a9:8b:ce:cd:22:38:3f:2c:c2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Dec 16 19:05:03 2025 GMT Not After : Dec 20 04:42:03 2025 GMT Subject: CN=258A9902D1D9987F5E12D25BC6F37FDE02A078D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:48:2b:4a:4e:ee:df:77:4a:6a:d3:3d:7d:ed: 46:7c:b6:55:9c:8f:bf:9a:01:c8:58:d8:a1:d8:56: f2:4a:e2:00:7f:e6:4f:f4:93:98:1c:a0:ac:32:57: 13:7a:9b:d1:5b:7b:c0:6d:f4:5e:7a:de:33:0e:3f: 6d:d1:bc:be:d4:15:13:50:8b:ed:54:38:6c:5c:d8: ac:fa:c1:a0:f0:0f:8b:bd:bf:56:87:76:27:f2:8b: b9:13:2e:a9:8f:53:bd:88:cd:8d:fc:3c:c0:f6:81: 76:f6:d7:3e:ee:5d:cb:01:92:ee:ea:8e:04:ef:dc: 2b:96:49:b9:3e:0e:aa:db:1d:88:7a:27:2b:94:dd: cb:33:6c:17:f6:a0:a9:b7:76:fc:5d:8e:c0:31:0e: df:c9:78:b4:e8:37:d6:fa:03:e8:d4:3c:69:4c:82: f9:8a:21:31:c2:99:61:10:c2:fd:2b:c4:74:f4:73: f5:81:9d:af:bd:fe:6b:09:6b:c8:91:9f:20:21:45: cc:01:86:c5:4f:3d:1b:c8:fc:44:dc:3d:80:a6:11: 26:eb:11:4b:93:0f:a0:11:25:c1:82:db:a6:8c:68: 08:b1:62:5b:42:ed:28:a1:0b:59:32:43:11:2a:42: 38:15:da:07:2d:f9:84:1f:c9:32:1a:54:8f:8a:9e: 99:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:8A:99:02:D1:D9:98:7F:5E:12:D2:5B:C6:F3:7F:DE:02:A0:78:D4 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:19:a3:6a:45:cb:0c:c9:f3:fa:7d:e2:53:8e:41:f3:7c:0e: e2:d1:fb:fa:5b:bc:67:f8:d2:07:34:89:cd:6f:8c:bb:0e:4a: 0f:82:b3:27:99:25:dc:af:50:1f:fb:82:4f:93:80:a3:b8:2b: 26:eb:2e:61:f0:3a:ac:68:08:f1:9f:54:21:4e:82:ad:74:41: f6:1d:31:c8:32:65:e1:81:7f:bf:23:da:ee:a5:22:bd:1e:fc: 1c:86:e5:48:b4:6d:a5:b2:9c:9b:76:31:71:f6:23:a2:be:d7: db:94:92:e3:24:db:9b:fd:50:fa:64:86:8b:0e:fe:28:49:91: df:bc:03:2f:84:f9:76:48:b6:86:9d:95:58:74:3a:7c:4d:f4: 7c:db:8c:f9:32:bb:b9:5d:00:6f:63:5a:91:77:49:7d:99:68: 4e:79:d2:63:63:b6:1c:6a:1a:74:43:1e:ed:90:b7:b8:4a:94: 06:64:7b:a6:25:9d:6c:4d:c6:41:9e:f7:79:7b:9b:6e:8c:3a: 71:6c:2d:81:cd:ab:0a:e0:77:84:f9:92:ed:ed:73:38:88:f7: 08:40:60:37:3f:c5:80:70:8c:07:bc:37:a4:b7:15:20:4f:fb: 73:dd:f1:ec:0f:54:94:83:5e:f8:ba:ea:94:f6:41:10:eb:2f: 56:fc:e1:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvEFFnpNFC17nqmLzs0iOD8swvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTEyMTYxOTA1MDNaFw0yNTEyMjAwNDQyMDNaMDMxMTAvBgNV BAMTKDI1OEE5OTAyRDFEOTk4N0Y1RTEyRDI1QkM2RjM3RkRFMDJBMDc4RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSCtKTu7fd0pq0z197UZ8tlWc j7+aAchY2KHYVvJK4gB/5k/0k5gcoKwyVxN6m9Fbe8Bt9F563jMOP23RvL7UFRNQ i+1UOGxc2Kz6waDwD4u9v1aHdifyi7kTLqmPU72IzY38PMD2gXb21z7uXcsBku7q jgTv3CuWSbk+DqrbHYh6JyuU3cszbBf2oKm3dvxdjsAxDt/JeLToN9b6A+jUPGlM gvmKITHCmWEQwv0rxHT0c/WBna+9/msJa8iRnyAhRcwBhsVPPRvI/ETcPYCmESbr EUuTD6ARJcGC26aMaAixYltC7SihC1kyQxEqQjgV2gct+YQfyTIaVI+KnpktAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYqZAtHZmH9eEtJbxvN/3gKgeNQwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYZo2pFywzJ8/p94lOOQfN8DuLR+/pbvGf4 0gc0ic1vjLsOSg+CsyeZJdyvUB/7gk+TgKO4KybrLmHwOqxoCPGfVCFOgq10QfYd McgyZeGBf78j2u6lIr0e/ByG5Ui0baWynJt2MXH2I6K+19uUkuMk25v9UPpkhosO /ihJkd+8Ay+E+XZItoadlVh0OnxN9HzbjPkyu7ldAG9jWpF3SX2ZaE550mNjthxq GnRDHu2Qt7hKlAZke6YlnWxNxkGe93l7m26MOnFsLYHNqwrgd4T5ku3tcziI9whA YDc/xYBwjAe8N6S3FSBP+3Pd8ewPVJSDXvi66pT2QRDrL1b84V4= -----END CERTIFICATE-----Generated at Thu Dec 18 01:14:17 2025 by rpki-client