This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: BQpVkdOZ1Z4zKcXpKFgl3gpZBEqwLXM3yFn9wkk+mPU= Subject key identifier: 27:10:AB:45:9C:59:8C:0D:DE:31:80:7C:BF:F7:6F:A4:0F:9F:72:B1 Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 5289EF8159BB2FC5D695C57F6C5017A6E5DB280F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04AF Signing time: Fri 12 Dec 2025 22:00:54 +0000 Manifest this update: Fri 12 Dec 2025 21:55:54 +0000 Manifest next update: Tue 16 Dec 2025 04:24:54 +0000 Files and hashes: 1: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: lQ1261Fo2IvW0GAJ7r/gVzVms5FtZEbo8Ikj63k4kXM=) 2: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 3: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 4: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 04:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:89:ef:81:59:bb:2f:c5:d6:95:c5:7f:6c:50:17:a6:e5:db:28:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Dec 12 21:55:54 2025 GMT Not After : Dec 16 04:24:54 2025 GMT Subject: CN=2710AB459C598C0DDE31807CBFF76FA40F9F72B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:db:9d:2d:2a:86:5f:14:df:86:87:03:95:3c: d4:90:19:ec:51:ff:88:a5:3f:68:02:01:fa:e0:41: 30:88:e1:52:55:1b:e2:1e:1b:f8:a4:cc:bc:cd:1c: 63:56:63:f5:34:27:69:e5:5f:34:44:06:8c:9f:7f: 04:4b:51:63:68:a6:05:39:b6:c6:28:4a:4e:49:de: 93:6b:b7:e9:ac:33:63:68:a0:c8:03:eb:d0:cf:5e: e0:54:8c:32:ce:46:de:54:9b:47:08:58:76:2e:39: 65:8e:b4:ae:d4:c1:1e:ba:0a:72:0a:7a:2a:fd:92: 19:5b:c1:fe:97:54:9f:d5:8f:4a:ee:70:f9:ff:17: d5:6a:80:3c:1b:8b:a3:e9:17:dc:40:14:3b:ed:65: 09:23:e4:c9:6a:32:61:03:f7:7b:99:5f:f3:56:7f: 53:e8:ce:f1:ad:14:ba:1f:d0:6e:67:26:e7:84:4a: cf:51:3b:4a:46:6a:e5:b8:1c:e0:40:cb:04:9f:74: 16:97:ef:db:e7:35:93:83:25:14:77:f1:0c:df:b3: 7c:0d:46:79:88:43:16:3d:15:11:1a:2a:75:27:ff: c3:73:b0:2a:43:5d:01:5e:c6:00:5f:10:dd:6d:c0: 74:8d:44:6f:80:98:13:2c:a1:12:f9:07:0d:55:1e: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:AB:45:9C:59:8C:0D:DE:31:80:7C:BF:F7:6F:A4:0F:9F:72:B1 X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ad:1a:05:b7:57:94:6e:f0:4c:77:d1:6e:93:1c:c6:2d:c2: bd:f6:8a:5b:c2:0c:35:5b:bf:da:95:eb:4d:64:c2:f2:27:58: f6:65:f6:0d:09:dc:5a:0b:a6:43:5a:89:c6:7f:1c:54:97:ec: a3:76:b9:f9:5d:b6:47:64:c8:21:c0:56:fa:2f:7c:70:a2:76: 5c:f6:2a:6a:43:e8:0a:27:be:91:c1:82:5d:da:8b:3d:2e:d5: af:1a:98:5b:fd:d6:60:e1:6e:4b:b4:95:59:77:ef:a7:f3:26: 44:08:6d:d5:e0:2b:39:9f:07:5b:6e:a9:01:16:0f:d7:f7:5c: ad:6c:2e:c6:6a:91:cd:1f:fe:c1:83:21:e2:c8:87:83:75:91: 76:da:4d:e9:f3:07:04:54:e6:fc:5f:d5:24:1a:2e:95:92:1a: 37:f8:8b:81:ea:8d:be:bc:44:95:b8:f2:69:cc:c6:2d:9f:34: cc:cb:23:56:a8:d5:fb:e3:6d:f1:cd:82:13:28:52:28:7c:3a: 24:06:17:76:c3:f0:38:0c:53:69:0e:c6:1b:5c:8e:fc:b5:59: 74:53:95:b6:10:df:a9:0b:5f:c1:9b:25:77:bc:ca:4d:4a:d7: 3e:40:33:57:9c:53:dd:ee:78:8e:e8:b4:2f:a6:1d:2f:7e:72: d8:df:f1:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUonvgVm7L8XWlcV/bFAXpuXbKA8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTEyMTIyMTU1NTRaFw0yNTEyMTYwNDI0NTRaMDMxMTAvBgNV BAMTKDI3MTBBQjQ1OUM1OThDMERERTMxODA3Q0JGRjc2RkE0MEY5RjcyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi250tKoZfFN+GhwOVPNSQGexR /4ilP2gCAfrgQTCI4VJVG+IeG/ikzLzNHGNWY/U0J2nlXzREBoyffwRLUWNopgU5 tsYoSk5J3pNrt+msM2NooMgD69DPXuBUjDLORt5Um0cIWHYuOWWOtK7UwR66CnIK eir9khlbwf6XVJ/Vj0rucPn/F9VqgDwbi6PpF9xAFDvtZQkj5MlqMmED93uZX/NW f1PozvGtFLof0G5nJueESs9RO0pGauW4HOBAywSfdBaX79vnNZODJRR38Qzfs3wN RnmIQxY9FREaKnUn/8NzsCpDXQFexgBfEN1twHSNRG+AmBMsoRL5Bw1VHspHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxCrRZxZjA3eMYB8v/dvpA+fcrEwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmtGgW3V5Ru8Ex30W6THMYtwr32ilvCDDVb v9qV601kwvInWPZl9g0J3FoLpkNaicZ/HFSX7KN2ufldtkdkyCHAVvovfHCidlz2 KmpD6AonvpHBgl3aiz0u1a8amFv91mDhbku0lVl376fzJkQIbdXgKzmfB1tuqQEW D9f3XK1sLsZqkc0f/sGDIeLIh4N1kXbaTenzBwRU5vxf1SQaLpWSGjf4i4Hqjb68 RJW48mnMxi2fNMzLI1ao1fvjbfHNghMoUih8OiQGF3bD8DgMU2kOxhtcjvy1WXRT lbYQ36kLX8GbJXe8yk1K1z5AM1ecU93ueI7otC+mHS9+ctjf8Wo= -----END CERTIFICATE-----Generated at Sun Dec 14 09:34:42 2025 by rpki-client