This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: kT0gTxP2nkKHJUnlSz0iPCov5V8mbAYR08Dysic5PwM= Subject key identifier: DD:5F:3B:10:01:6E:B3:C0:EF:CE:2E:9D:BA:39:7A:63:AB:A2:9D:0E Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 50BD37B279ED77FC8100558C48E3D79E4C387862 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04D7 Signing time: Wed 03 Dec 2025 04:03:12 +0000 Manifest this update: Wed 03 Dec 2025 03:58:12 +0000 Manifest next update: Sat 06 Dec 2025 10:07:12 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: yZdB1+Hb4ph9w/wvrnMAOAc9P831jd2qxlkZfuEjv8w=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: rjohJmgPIu1cEeQ3dNZ8joFLuUlYzJDIJqDxGU/6dqo=) 3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: shtmTa57+pxWxFUP615U/s617hiWKy/m/Dpc5lxTH4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bd:37:b2:79:ed:77:fc:81:00:55:8c:48:e3:d7:9e:4c:38:78:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Dec 3 03:58:12 2025 GMT Not After : Dec 6 10:07:12 2025 GMT Subject: CN=DD5F3B10016EB3C0EFCE2E9DBA397A63ABA29D0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:1a:5d:98:e1:f2:d3:8e:89:bd:bf:6c:6b: ae:54:f3:35:1e:ca:00:57:7f:04:32:39:e1:39:32: 04:b0:24:8c:03:10:11:dc:1f:22:30:cb:17:e8:a0: d6:8d:51:68:05:e7:10:24:5a:ea:24:84:40:c2:7f: 8a:4d:65:f0:12:25:77:ce:71:67:7c:68:b6:49:9d: e5:1e:77:f8:2c:12:ac:91:f0:51:c6:ce:6b:5a:ca: 08:ad:16:bf:f3:4f:ad:87:ab:ac:05:e2:12:13:66: ec:3a:63:38:58:9e:ee:da:83:d6:a0:93:c4:77:14: 22:74:d8:1b:d9:ee:90:4b:b8:11:e1:19:3b:71:6b: 07:cf:b8:46:12:54:fa:50:19:c7:b9:4b:15:a9:82: e3:6c:63:7d:68:f1:9d:99:ea:f7:5a:2e:9d:fe:c9: 8f:da:3b:f4:10:00:f5:b2:b5:4b:80:73:98:da:a5: 06:fd:2c:7d:b5:7d:c9:f4:e0:ba:b4:d6:00:12:38: 04:5a:60:1b:a3:1c:56:6c:66:9e:59:db:a2:05:1c: a8:e8:4c:5f:f8:9c:cd:44:ff:16:c0:7d:92:15:18: e9:a6:f2:25:77:37:24:96:bc:c0:95:95:2a:49:b2: 16:f5:13:89:d3:51:8c:42:52:18:0b:67:c7:24:f7: 13:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5F:3B:10:01:6E:B3:C0:EF:CE:2E:9D:BA:39:7A:63:AB:A2:9D:0E X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2f:04:6e:33:7a:8a:67:04:71:19:30:e3:8b:b7:62:a4:86: f0:fe:f6:94:7c:12:bc:39:37:b2:1b:1f:25:79:d7:7b:3c:aa: ee:02:66:48:4e:d0:2e:b3:56:b4:01:54:78:1f:f6:16:92:09: 85:5d:63:64:8c:71:9e:4e:57:5e:f7:fe:3d:fc:bf:ff:19:e5: aa:0f:d4:2c:03:26:6c:da:09:5e:77:ce:03:8a:81:9b:d5:7d: f9:6b:c3:27:f3:00:fd:93:7b:a1:47:92:29:50:d6:14:0e:70: d4:6f:87:54:1e:2a:a1:72:0a:01:fc:98:ec:e6:67:45:ad:f1: bc:a4:cc:31:83:f9:d9:83:b8:59:17:76:15:15:57:af:dc:7a: ad:c5:12:98:4c:8a:c2:d6:7b:5d:d6:0d:b7:fa:5d:b6:63:c8: c7:5b:69:6d:09:0a:92:ef:b7:44:1d:b5:be:35:ee:d8:c5:bb: 2d:36:73:9d:af:d7:40:bc:f9:e0:c0:14:58:14:39:a8:c1:9f: be:8c:98:5c:99:18:68:e4:a0:91:a5:44:4c:92:83:b2:bd:96: e8:24:12:8b:ae:96:51:ef:02:25:40:e8:6f:95:9d:21:50:a7: f6:7a:67:90:6b:a6:ca:b8:de:3c:31:c1:b3:1c:a0:1c:cc:67: 39:e6:a3:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUL03snntd/yBAFWMSOPXnkw4eGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTEyMDMwMzU4MTJaFw0yNTEyMDYxMDA3MTJaMDMxMTAvBgNV BAMTKERENUYzQjEwMDE2RUIzQzBFRkNFMkU5REJBMzk3QTYzQUJBMjlEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3oxpdmOHy046Jvb9sa65U8zUe ygBXfwQyOeE5MgSwJIwDEBHcHyIwyxfooNaNUWgF5xAkWuokhEDCf4pNZfASJXfO cWd8aLZJneUed/gsEqyR8FHGzmtaygitFr/zT62Hq6wF4hITZuw6YzhYnu7ag9ag k8R3FCJ02BvZ7pBLuBHhGTtxawfPuEYSVPpQGce5SxWpguNsY31o8Z2Z6vdaLp3+ yY/aO/QQAPWytUuAc5japQb9LH21fcn04Lq01gASOARaYBujHFZsZp5Z26IFHKjo TF/4nM1E/xbAfZIVGOmm8iV3NySWvMCVlSpJshb1E4nTUYxCUhgLZ8ck9xPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3V87EAFus8Dvzi6dujl6Y6uinQ4wHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgvBG4zeopnBHEZMOOLt2KkhvD+9pR8Erw5 N7IbHyV513s8qu4CZkhO0C6zVrQBVHgf9haSCYVdY2SMcZ5OV173/j38v/8Z5aoP 1CwDJmzaCV53zgOKgZvVfflrwyfzAP2Te6FHkilQ1hQOcNRvh1QeKqFyCgH8mOzm Z0Wt8bykzDGD+dmDuFkXdhUVV6/ceq3FEphMisLWe13WDbf6XbZjyMdbaW0JCpLv t0Qdtb417tjFuy02c52v10C8+eDAFFgUOajBn76MmFyZGGjkoJGlREySg7K9lugk EouullHvAiVA6G+VnSFQp/Z6Z5Brpsq43jwxwbMcoBzMZznmoyo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:55 2025 by rpki-client