This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: 8BQOpIqPZn3z2o8ftppnhRP3XSnfDrm2ioq/bRddgcU= Subject key identifier: 34:07:B8:BC:1A:EF:8C:44:35:F1:FC:9D:9C:FC:09:4C:14:44:02:16 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 2873E6D4C51C1B7ECD202198A3EB4A787B8D2C5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 0226 Signing time: Tue 02 Dec 2025 11:00:38 +0000 Manifest this update: Tue 02 Dec 2025 10:55:38 +0000 Manifest next update: Fri 05 Dec 2025 13:43:38 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: 1//68jQQ3swt4N2Q2QVejo21xCoaf+YTipq1uLOcsCQ=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:73:e6:d4:c5:1c:1b:7e:cd:20:21:98:a3:eb:4a:78:7b:8d:2c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Dec 2 10:55:38 2025 GMT Not After : Dec 5 13:43:38 2025 GMT Subject: CN=3407B8BC1AEF8C4435F1FC9D9CFC094C14440216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:fb:95:17:68:e4:86:7f:ee:24:62:cd:e3: b0:7d:a4:e5:24:f3:84:20:a5:cf:63:fc:ac:ad:9d: 82:a7:77:8a:9e:5d:b4:28:5f:ec:7e:7c:b2:09:24: 2d:38:1b:b1:2e:84:eb:63:46:56:02:c7:86:54:24: 86:71:78:99:3b:e5:49:f0:30:47:47:db:dd:d0:92: 93:eb:eb:ee:4b:dc:b2:42:de:bd:cf:06:be:e7:96: 29:88:3c:66:7b:6c:e2:43:81:af:e8:09:c9:3f:d7: 9b:76:5d:20:25:73:1c:b9:22:37:c7:4d:db:49:98: bc:81:d2:ec:9e:5e:35:58:47:2b:1c:15:14:15:9d: 83:eb:a7:ff:70:ef:26:c0:84:b1:37:87:ba:8e:80: 6e:70:1e:61:3a:2b:b1:c4:62:fb:7e:35:17:1d:16: ae:3f:6d:37:f8:eb:ed:48:45:e6:e1:1a:f0:5d:42: 03:f8:35:a0:1a:df:60:e9:4e:e3:4d:21:6d:75:8e: 23:c7:a7:2b:3c:c0:e7:f5:c4:79:5a:6d:b9:60:90: c7:66:2b:c0:1e:49:f2:58:1c:ab:a7:07:0f:fe:14: ea:94:f8:66:22:0a:fd:8c:53:38:ca:74:55:eb:2e: 96:56:92:48:f9:ab:c6:63:01:c1:6c:ef:36:ee:d4: 4b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:B8:BC:1A:EF:8C:44:35:F1:FC:9D:9C:FC:09:4C:14:44:02:16 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:26:12:ac:85:80:37:62:12:44:57:a5:cc:70:1b:3c:96:96: 19:14:9d:ef:4f:a9:10:13:2a:56:d9:e2:05:6e:1c:1a:2e:8a: 88:e7:7c:e4:34:c9:91:45:5a:27:cd:ac:43:66:32:c9:5e:44: 23:d4:db:53:4c:fb:89:c5:41:83:fb:0b:82:e0:13:03:ef:6a: 00:00:51:2a:7a:f4:8a:de:86:ef:f9:87:0c:1e:e3:b4:b1:19: 10:a3:49:f6:d5:2e:46:65:da:08:c3:45:0c:9c:a4:a8:53:6f: 60:9f:06:9e:56:94:f9:e9:27:81:f7:67:ad:ce:42:08:e5:ee: a4:e8:28:7f:12:7a:6f:1c:e3:47:0d:5b:21:da:79:f1:c2:5d: 46:56:5b:76:f7:7f:17:37:8b:d1:c1:53:d0:91:34:fd:05:ec: 0e:62:3a:5a:e1:08:0b:a9:f6:e4:9e:4d:28:42:1e:07:46:e9: 38:0c:ce:3c:53:7b:64:99:9d:7c:c5:6d:34:1e:7a:f9:99:2d: cf:f3:71:f6:2c:e8:61:76:43:21:d4:38:d5:59:62:43:0b:4b: 03:4e:43:be:ea:34:41:be:49:0f:ec:ee:9c:75:46:3a:9d:c3: c7:8c:52:77:1f:58:e4:5a:36:0e:b6:77:9b:7d:6f:af:d3:4f: 16:64:d8:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHPm1MUcG37NICGYo+tKeHuNLF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTEyMDIxMDU1MzhaFw0yNTEyMDUxMzQzMzhaMDMxMTAvBgNV BAMTKDM0MDdCOEJDMUFFRjhDNDQzNUYxRkM5RDlDRkMwOTRDMTQ0NDAyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAfuVF2jkhn/uJGLN47B9pOUk 84Qgpc9j/KytnYKnd4qeXbQoX+x+fLIJJC04G7EuhOtjRlYCx4ZUJIZxeJk75Unw MEdH293QkpPr6+5L3LJC3r3PBr7nlimIPGZ7bOJDga/oCck/15t2XSAlcxy5IjfH TdtJmLyB0uyeXjVYRyscFRQVnYPrp/9w7ybAhLE3h7qOgG5wHmE6K7HEYvt+NRcd Fq4/bTf46+1IRebhGvBdQgP4NaAa32DpTuNNIW11jiPHpys8wOf1xHlabblgkMdm K8AeSfJYHKunBw/+FOqU+GYiCv2MUzjKdFXrLpZWkkj5q8ZjAcFs7zbu1EvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNAe4vBrvjEQ18fydnPwJTBREAhYwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwmEqyFgDdiEkRXpcxwGzyWlhkUne9PqRAT KlbZ4gVuHBouiojnfOQ0yZFFWifNrENmMsleRCPU21NM+4nFQYP7C4LgEwPvagAA USp69Irehu/5hwwe47SxGRCjSfbVLkZl2gjDRQycpKhTb2CfBp5WlPnpJ4H3Z63O Qgjl7qToKH8Sem8c40cNWyHaefHCXUZWW3b3fxc3i9HBU9CRNP0F7A5iOlrhCAup 9uSeTShCHgdG6TgMzjxTe2SZnXzFbTQeevmZLc/zcfYs6GF2QyHUONVZYkMLSwNO Q77qNEG+SQ/s7px1Rjqdw8eMUncfWORaNg62d5t9b6/TTxZk2Ec= -----END CERTIFICATE-----Generated at Wed Dec 3 16:09:18 2025 by rpki-client