This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: 93ojPVA7w1/ANLvQ1nQdfX8dFMtIu0jeArMDAz0pY9c= Subject key identifier: C9:A4:C9:7C:ED:22:A1:38:C4:55:8D:2C:AB:26:A9:B1:DE:CA:42:B7 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 439801DBDFEFBBBB73F4C2A9F899AB5DC5E1D18A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 05EE Signing time: Wed 10 Dec 2025 12:50:40 +0000 Manifest this update: Wed 10 Dec 2025 12:45:40 +0000 Manifest next update: Sat 13 Dec 2025 15:12:40 +0000 Files and hashes: 1: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 2: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) 3: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) 4: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 5: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 6: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) 7: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: StJOka0osy/oyfLqNFwa1YkM6EpWGGLTMYaxbsBwVl8=) 8: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 9: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 10: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 12:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:98:01:db:df:ef:bb:bb:73:f4:c2:a9:f8:99:ab:5d:c5:e1:d1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Dec 10 12:45:40 2025 GMT Not After : Dec 13 15:12:40 2025 GMT Subject: CN=C9A4C97CED22A138C4558D2CAB26A9B1DECA42B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:e5:36:87:a1:13:ae:51:b3:d5:e7:32:4f: 04:09:ca:ea:f7:46:57:9a:19:be:47:30:df:71:e9: 1f:e0:36:57:43:b9:65:34:70:92:bf:a3:05:0f:96: a2:40:69:a9:89:ef:5c:8a:a9:52:53:f6:1b:63:e2: 65:e8:86:74:0a:ae:e1:f0:1f:98:33:c8:b2:21:1d: 84:71:35:78:38:6e:46:b3:2e:7a:ef:91:5f:da:6b: 9d:5d:b4:77:04:4b:8a:e0:de:72:ed:4e:cb:5e:b1: bd:5c:12:1c:26:7f:d5:8c:8a:b1:e4:2a:88:ed:48: 9c:48:9d:ff:2e:a2:de:a3:57:b2:71:d0:b4:39:e1: b7:a3:b7:fa:dd:26:96:84:aa:6c:9d:0a:58:06:37: d7:0e:99:98:99:d5:a7:21:08:fd:d2:8d:4e:9c:1f: 94:e4:fd:a2:44:83:13:6d:2d:2f:93:7f:6f:d6:39: c5:e7:ca:47:ed:97:c7:77:f5:0f:4a:40:6e:56:29: a6:b5:ff:e3:05:15:1f:31:ed:50:53:f4:46:7d:cc: 3c:1c:19:87:0b:e4:73:fb:86:18:cd:97:dc:b7:3f: bf:ed:b2:2b:dd:a7:f2:80:e5:29:25:63:f4:b7:fb: 80:2c:3e:96:bb:92:6b:cb:60:6c:6e:b9:d8:62:29: 6f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A4:C9:7C:ED:22:A1:38:C4:55:8D:2C:AB:26:A9:B1:DE:CA:42:B7 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bd:e2:bb:38:9e:c6:42:5d:cf:0f:08:5f:65:02:01:73:59: 65:84:dc:a8:09:90:51:e5:27:8b:ab:78:df:66:9d:f3:67:a9: a0:a3:23:44:0e:95:6d:5c:71:99:25:f6:61:04:f8:44:f0:1c: 9d:84:81:5b:c9:62:12:45:b5:41:cd:3c:81:2d:76:c3:c7:84: 5f:f6:34:2d:e1:06:a1:d4:c4:a6:3a:2f:e4:80:09:32:3e:f0: 0f:a9:78:0f:2d:1c:f3:6e:eb:39:56:f7:e7:29:2b:ce:70:05: 6d:33:cb:ab:a2:05:2c:23:e7:43:bc:08:04:16:ee:3a:fc:c9: 67:85:96:1a:84:bd:96:2d:b9:be:3b:2c:c9:e4:a8:62:5b:51: 75:e4:21:24:ea:fe:d5:ca:e4:b0:c3:67:fb:9c:88:a7:59:a1: 61:f8:73:e2:92:5d:07:2e:1d:08:de:f8:80:c7:8a:8f:a5:c7: 35:b7:58:4c:7a:be:04:9c:c3:1c:77:a0:d6:a2:21:8c:d0:e9: ee:5f:62:db:71:8c:42:05:f7:e9:e3:db:fa:b2:54:4a:b4:72: db:e9:c2:06:5a:26:d4:f7:93:35:fd:3a:51:ed:a4:32:a8:44: 1e:f6:9d:ca:53:07:f2:4e:ca:6d:cc:64:5f:ec:bc:85:ca:af: ce:2d:f2:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5gB29/vu7tz9MKp+JmrXcXh0YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTEyMTAxMjQ1NDBaFw0yNTEyMTMxNTEyNDBaMDMxMTAvBgNV BAMTKEM5QTRDOTdDRUQyMkExMzhDNDU1OEQyQ0FCMjZBOUIxREVDQTQyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2i+U2h6ETrlGz1ecyTwQJyur3 RleaGb5HMN9x6R/gNldDuWU0cJK/owUPlqJAaamJ71yKqVJT9htj4mXohnQKruHw H5gzyLIhHYRxNXg4bkazLnrvkV/aa51dtHcES4rg3nLtTstesb1cEhwmf9WMirHk KojtSJxInf8uot6jV7Jx0LQ54bejt/rdJpaEqmydClgGN9cOmZiZ1achCP3SjU6c H5Tk/aJEgxNtLS+Tf2/WOcXnykftl8d39Q9KQG5WKaa1/+MFFR8x7VBT9EZ9zDwc GYcL5HP7hhjNl9y3P7/tsivdp/KA5SklY/S3+4AsPpa7kmvLYGxuudhiKW+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyaTJfO0ioTjEVY0sqyapsd7KQrcwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa94rs4nsZCXc8PCF9lAgFzWWWE3KgJkFHl J4ureN9mnfNnqaCjI0QOlW1ccZkl9mEE+ETwHJ2EgVvJYhJFtUHNPIEtdsPHhF/2 NC3hBqHUxKY6L+SACTI+8A+peA8tHPNu6zlW9+cpK85wBW0zy6uiBSwj50O8CAQW 7jr8yWeFlhqEvZYtub47LMnkqGJbUXXkISTq/tXK5LDDZ/uciKdZoWH4c+KSXQcu HQje+IDHio+lxzW3WEx6vgScwxx3oNaiIYzQ6e5fYttxjEIF9+nj2/qyVEq0ctvp wgZaJtT3kzX9OlHtpDKoRB72ncpTB/JOym3MZF/svIXKr84t8g0= -----END CERTIFICATE-----Generated at Wed Dec 10 16:12:11 2025 by rpki-client