This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: 5xAuvtsAnwVnJ7fIvg9ZEi1TLtwG6rJgxdtpPfVVXJg= Subject key identifier: 1F:69:50:97:57:26:A2:7F:F5:77:21:5E:7F:9D:F4:EC:4F:9D:4C:C0 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 7CE8F9D6380E8B5984135F0BCB741B7178215FE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01EB Signing time: Wed 03 Dec 2025 13:21:46 +0000 Manifest this update: Wed 03 Dec 2025 13:16:46 +0000 Manifest next update: Sat 06 Dec 2025 18:49:46 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) 2: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: gKXEkM/vJTF7WtEOhTQVQvQtG05nHk3or3mzco7Ecs0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e8:f9:d6:38:0e:8b:59:84:13:5f:0b:cb:74:1b:71:78:21:5f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Dec 3 13:16:46 2025 GMT Not After : Dec 6 18:49:46 2025 GMT Subject: CN=1F6950975726A27FF577215E7F9DF4EC4F9D4CC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ff:33:a7:4b:5d:7a:1e:02:4a:d6:4b:57:57: 5a:b5:d1:af:5d:5b:27:d5:53:ab:ee:b4:64:b9:b8: 6b:05:55:27:f2:b6:1e:3c:9f:03:c4:98:df:6a:f9: 56:88:e8:33:ba:65:cc:87:23:41:bf:07:24:fd:18: c2:36:47:28:80:69:b3:01:be:6c:f9:f7:33:b3:58: 27:db:a0:ba:f5:ad:92:28:33:81:e4:cd:23:d1:c1: 83:d9:c2:91:e3:66:3d:6e:21:a4:ac:ca:ef:57:af: 76:9e:4a:6b:07:82:48:a1:56:ee:c6:98:c0:81:25: 58:35:50:2c:0d:80:ad:ea:b8:7a:54:1d:db:80:1a: 25:1c:cc:2b:6d:13:15:dd:12:49:44:bd:c5:5c:3d: 01:2a:69:0e:6b:83:81:f1:39:27:db:80:7b:63:b7: e6:2a:0b:41:b2:4c:fe:8b:46:1b:df:39:94:59:26: 2c:a6:09:b5:0d:ff:07:05:d1:76:a2:70:f3:83:25: b1:2b:29:41:0e:6f:20:3b:48:44:0b:76:4e:1b:be: b3:3c:a1:17:90:a8:40:0f:87:d4:94:52:3b:ad:8b: 48:f4:c6:84:5c:c1:e6:3e:49:04:7f:34:c5:fe:7b: 57:e0:ba:63:25:9b:4c:d1:86:e7:35:a7:5e:ff:fd: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:69:50:97:57:26:A2:7F:F5:77:21:5E:7F:9D:F4:EC:4F:9D:4C:C0 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:e3:5a:b6:96:46:4d:c9:db:6d:78:60:c9:9b:30:2f:f1:6d: 07:12:33:38:6f:bb:b0:c0:40:0d:0c:60:f8:20:22:a8:58:e8: 05:ab:65:08:97:eb:d7:7b:cd:a7:dd:45:08:7b:9e:b1:7f:d6: fe:b3:17:f5:d1:d9:d4:90:06:83:0a:dd:cf:a3:b6:cd:71:3b: df:85:08:58:61:c5:aa:98:6b:e2:16:d2:ff:1b:f2:d6:33:da: 5a:11:d3:52:a2:55:d0:be:35:ab:92:58:f8:5b:c7:10:fc:18: d3:ed:49:bb:10:64:fc:fa:16:8d:e2:21:03:e7:40:18:a9:05: 86:84:22:1e:17:43:a7:b9:85:a1:d7:ac:af:82:37:fa:4e:35: 9a:be:44:2f:b4:67:3d:15:d6:ac:29:2e:d3:9d:27:d8:3a:7d: b2:85:73:19:f6:f1:69:9b:19:8a:05:4c:44:f3:63:db:e9:3e: 33:0c:82:a1:48:c1:0b:dc:dc:1f:7b:9c:44:15:4b:21:50:6a: de:8f:e7:22:f3:68:d3:98:54:e7:27:09:ef:33:22:83:8f:19: b0:2a:38:ec:87:5b:de:6b:c0:11:c1:67:96:7b:5d:7e:6f:96: 5d:14:71:bb:15:d4:b7:ff:db:96:d9:44:42:51:14:e3:68:f8: 5d:32:da:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOj51jgOi1mEE18Ly3QbcXghX+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTEyMDMxMzE2NDZaFw0yNTEyMDYxODQ5NDZaMDMxMTAvBgNV BAMTKDFGNjk1MDk3NTcyNkEyN0ZGNTc3MjE1RTdGOURGNEVDNEY5RDRDQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd/zOnS116HgJK1ktXV1q10a9d WyfVU6vutGS5uGsFVSfyth48nwPEmN9q+VaI6DO6ZcyHI0G/ByT9GMI2RyiAabMB vmz59zOzWCfboLr1rZIoM4HkzSPRwYPZwpHjZj1uIaSsyu9Xr3aeSmsHgkihVu7G mMCBJVg1UCwNgK3quHpUHduAGiUczCttExXdEklEvcVcPQEqaQ5rg4HxOSfbgHtj t+YqC0GyTP6LRhvfOZRZJiymCbUN/wcF0XaicPODJbErKUEObyA7SEQLdk4bvrM8 oReQqEAPh9SUUjuti0j0xoRcweY+SQR/NMX+e1fgumMlm0zRhuc1p17//ck9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH2lQl1cmon/1dyFef5307E+dTMAwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7jWraWRk3J2214YMmbMC/xbQcSMzhvu7DA QA0MYPggIqhY6AWrZQiX69d7zafdRQh7nrF/1v6zF/XR2dSQBoMK3c+jts1xO9+F CFhhxaqYa+IW0v8b8tYz2loR01KiVdC+NauSWPhbxxD8GNPtSbsQZPz6Fo3iIQPn QBipBYaEIh4XQ6e5haHXrK+CN/pONZq+RC+0Zz0V1qwpLtOdJ9g6fbKFcxn28Wmb GYoFTETzY9vpPjMMgqFIwQvc3B97nEQVSyFQat6P5yLzaNOYVOcnCe8zIoOPGbAq OOyHW95rwBHBZ5Z7XX5vll0UcbsV1Lf/25bZREJRFONo+F0y2pg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:49 2025 by rpki-client