This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: foDTl8QU05ucuePspZ0Fs9HaPolE2GeexCLe0R1xxjI= Subject key identifier: DB:F0:DA:1C:38:37:08:10:07:A7:15:CE:E0:97:EA:2C:A8:8B:23:4E Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 44EFF133D57CBDF85D9BF2E791892DA970C0B9DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 051C Signing time: Mon 01 Dec 2025 23:11:26 +0000 Manifest this update: Mon 01 Dec 2025 23:06:26 +0000 Manifest next update: Fri 05 Dec 2025 06:13:26 +0000 Files and hashes: 1: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) 2: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: oy7BNWDxEMajYOEaBh/zcyhwdx0hbrFtbvpcmR6G/ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ef:f1:33:d5:7c:bd:f8:5d:9b:f2:e7:91:89:2d:a9:70:c0:b9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Dec 1 23:06:26 2025 GMT Not After : Dec 5 06:13:26 2025 GMT Subject: CN=DBF0DA1C3837081007A715CEE097EA2CA88B234E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:9b:54:86:48:d9:22:14:69:2c:f2:44:fb: 24:c6:de:83:c7:99:43:30:29:41:33:dc:e3:ec:b2: 2d:7a:da:8a:08:21:9f:90:52:89:8c:b2:aa:db:b7: b7:f0:ba:37:77:5e:b3:39:3d:de:75:86:91:a3:16: 33:6b:54:98:87:ba:1d:ec:bd:c5:de:c5:e4:7d:ba: 51:71:3d:64:44:f7:5d:8d:90:5c:17:fc:cb:25:c2: f1:e3:d0:35:47:f3:7e:b8:41:d7:e5:87:5d:e1:ac: dc:24:a6:cd:44:3d:b0:9a:4e:dc:66:62:8f:71:b7: 89:84:e6:3a:01:cc:aa:2d:f4:84:89:22:80:0d:b4: d7:94:a5:dd:df:3e:d6:f5:23:f9:cc:d0:cb:a9:eb: e1:ff:84:b8:26:4d:b2:d1:dc:28:de:9d:a1:9f:3c: e8:5a:bd:4c:7d:19:b1:f8:29:7c:58:7f:9a:d1:0f: e0:cf:2c:99:d4:0a:79:4b:98:e0:d8:6b:43:5d:e3: c5:56:e0:3e:91:6a:17:be:cb:b3:35:57:59:87:30: a8:a9:22:d8:2e:67:5b:10:48:14:10:4e:79:ea:e5: 43:aa:33:56:7f:44:2f:ec:2e:0e:af:04:66:fd:0e: 14:61:15:1b:d9:56:63:cc:49:e3:64:98:ee:07:3a: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:DA:1C:38:37:08:10:07:A7:15:CE:E0:97:EA:2C:A8:8B:23:4E X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:ff:ff:16:b5:09:02:96:05:99:dc:49:80:03:85:4c:06: 07:e6:25:29:cf:cd:e3:cf:f6:ed:48:10:c8:55:ae:60:0d:cb: 99:e9:15:75:cb:56:a3:7d:c1:fd:26:bb:53:9e:03:74:d4:b4: 8a:04:cc:ea:b2:86:d0:10:a2:eb:d2:bb:4b:84:d3:c0:da:84: f6:4b:91:bd:c7:f6:81:ad:98:60:60:d5:7c:bb:cb:32:82:ba: 06:94:20:eb:ce:f7:66:fe:57:26:bf:d8:7e:c7:42:5c:dc:e7: 79:bd:3b:7b:2d:28:8b:b0:a3:c1:cc:54:8b:ca:2e:03:73:25: 83:a8:2c:1b:56:62:ea:a2:95:43:eb:fb:9c:55:c0:aa:f6:ec: 40:3c:e1:ad:29:d6:ed:4a:2e:93:f0:b6:01:0f:94:47:b0:3b: d4:5d:5f:b8:d1:53:db:2a:45:d3:64:78:0a:50:7a:be:52:0f: 7b:89:e6:23:f6:92:6f:8f:3b:a0:a2:d4:7f:ef:ab:aa:39:75: 84:05:ed:b2:d1:5b:26:f1:51:e9:4a:e9:6b:1b:b7:76:f7:5c: cb:f8:5b:24:f3:15:0d:8b:62:44:d5:d1:66:e6:d3:38:3a:f5: 83:9f:90:73:d0:e8:af:0e:aa:06:16:f3:12:a5:71:25:86:81: 9f:67:64:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURO/xM9V8vfhdm/LnkYktqXDAudwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTEyMDEyMzA2MjZaFw0yNTEyMDUwNjEzMjZaMDMxMTAvBgNV BAMTKERCRjBEQTFDMzgzNzA4MTAwN0E3MTVDRUUwOTdFQTJDQTg4QjIzNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkZtUhkjZIhRpLPJE+yTG3oPH mUMwKUEz3OPssi162ooIIZ+QUomMsqrbt7fwujd3XrM5Pd51hpGjFjNrVJiHuh3s vcXexeR9ulFxPWRE912NkFwX/MslwvHj0DVH8364Qdflh13hrNwkps1EPbCaTtxm Yo9xt4mE5joBzKot9ISJIoANtNeUpd3fPtb1I/nM0Mup6+H/hLgmTbLR3CjenaGf POhavUx9GbH4KXxYf5rRD+DPLJnUCnlLmODYa0Nd48VW4D6Rahe+y7M1V1mHMKip ItguZ1sQSBQQTnnq5UOqM1Z/RC/sLg6vBGb9DhRhFRvZVmPMSeNkmO4HOiL1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2/DaHDg3CBAHpxXO4JfqLKiLI04wHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWs//8WtQkClgWZ3EmAA4VMBgfmJSnPzePP 9u1IEMhVrmANy5npFXXLVqN9wf0mu1OeA3TUtIoEzOqyhtAQouvSu0uE08DahPZL kb3H9oGtmGBg1Xy7yzKCugaUIOvO92b+Vya/2H7HQlzc53m9O3stKIuwo8HMVIvK LgNzJYOoLBtWYuqilUPr+5xVwKr27EA84a0p1u1KLpPwtgEPlEewO9RdX7jRU9sq RdNkeApQer5SD3uJ5iP2km+PO6Ci1H/vq6o5dYQF7bLRWybxUelK6Wsbt3b3XMv4 WyTzFQ2LYkTV0Wbm0zg69YOfkHPQ6K8OqgYW8xKlcSWGgZ9nZCc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:51 2025 by rpki-client