This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: s/QeI/UsDQqeZkglT1U4bJDlWuPPBXdomL3ClZ47voo= Subject key identifier: BC:89:AB:AB:C2:6B:62:5C:77:B5:06:C6:69:2D:5F:64:FC:5E:D6:ED Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 65EB0C892B3B7E318775D04C665B463BB7A4457B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01B5 Signing time: Tue 02 Dec 2025 18:01:47 +0000 Manifest this update: Tue 02 Dec 2025 17:56:47 +0000 Manifest next update: Sat 06 Dec 2025 00:29:47 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: 7Fo6tUYaCgGf/fypWar9gxANYuB4GmnaWTV2MFS6TX4=) 3: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) 4: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:eb:0c:89:2b:3b:7e:31:87:75:d0:4c:66:5b:46:3b:b7:a4:45:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Dec 2 17:56:47 2025 GMT Not After : Dec 6 00:29:47 2025 GMT Subject: CN=BC89ABABC26B625C77B506C6692D5F64FC5ED6ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:a5:ca:d6:38:23:ff:d7:db:9c:e7:ff:93: 7b:21:73:e8:9c:96:6f:a0:95:b7:a3:c5:80:94:14: 3d:f1:fe:b2:86:18:b9:ef:c5:33:16:11:60:49:3e: 60:ef:04:16:28:2f:eb:ad:0e:a1:19:0f:7f:f2:0b: f5:d0:48:ea:a0:99:f2:7e:42:bb:d7:fd:cf:d9:3f: a2:84:6a:12:e8:0d:ee:01:b6:48:c0:3c:be:af:4a: 3c:98:45:a3:fe:9d:6b:96:d0:95:ea:7f:d2:f3:3c: 20:c3:25:7c:f2:3d:92:f8:93:21:76:5a:ea:b9:e4: 82:80:62:55:4b:db:cc:b1:cc:96:b1:44:9f:65:e8: 87:26:96:76:54:3c:9f:8d:1c:6e:c1:55:7f:35:d2: 0d:b0:d8:18:ed:e8:2d:2d:f0:2d:39:28:ef:ae:51: f8:c5:e4:16:f3:6a:44:46:24:30:db:68:49:55:90: 55:5e:60:1f:8f:8a:0c:24:88:dd:68:13:a3:e2:2c: 47:7c:45:7b:7c:c8:7a:de:d9:9f:26:03:a6:eb:53: fd:0e:14:58:f5:38:f5:31:9e:a7:88:e9:00:08:57: 93:00:74:8f:95:21:3b:7f:76:2f:9c:ad:df:5d:a0: 28:07:9b:ac:97:ec:67:89:72:38:39:30:27:a4:25: a4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:89:AB:AB:C2:6B:62:5C:77:B5:06:C6:69:2D:5F:64:FC:5E:D6:ED X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:21:a9:32:9d:0d:1b:24:e8:3e:99:de:69:54:6b:da:7c:c2: 64:98:85:77:3f:89:b8:3d:7c:ff:99:9a:16:cb:90:13:cb:bb: d0:21:41:44:d4:cf:ba:91:51:52:a6:5f:b3:08:24:a6:2d:86: 0f:ec:45:c0:4a:fe:98:af:ff:e3:17:40:ec:a7:5c:49:47:62: ad:73:90:02:ad:41:63:5c:6b:94:9e:bd:6c:d8:b1:3f:b2:00: d7:27:6a:75:c5:89:ff:bf:ae:3a:cd:23:2b:b9:a5:28:e9:16: 98:aa:3a:7c:12:0a:96:1a:52:d0:37:3a:64:80:5f:bc:0a:8e: 7b:05:ef:62:32:5a:79:39:02:9e:3b:d4:7f:f3:66:80:e9:ca: 1c:28:93:bd:87:a5:d2:bd:56:2d:28:00:ae:26:f2:e6:66:30: 94:18:0f:67:3a:bf:e4:c9:9f:f4:7c:47:9a:ed:76:77:e4:45: 45:4b:0d:70:5b:89:de:8f:01:26:37:e3:b6:5e:a2:f8:e7:0a: aa:84:51:3c:4c:9c:49:8c:db:fe:90:54:61:60:c7:2c:87:9e: e5:1a:eb:95:0f:a7:95:a7:85:39:e6:03:bb:ea:03:f4:e3:1c: bd:69:93:3f:d4:d0:f3:20:61:35:c1:24:dd:39:f7:1d:82:d3: 41:19:e6:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZesMiSs7fjGHddBMZltGO7ekRXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTEyMDIxNzU2NDdaFw0yNTEyMDYwMDI5NDdaMDMxMTAvBgNV BAMTKEJDODlBQkFCQzI2QjYyNUM3N0I1MDZDNjY5MkQ1RjY0RkM1RUQ2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7KXK1jgj/9fbnOf/k3shc+ic lm+glbejxYCUFD3x/rKGGLnvxTMWEWBJPmDvBBYoL+utDqEZD3/yC/XQSOqgmfJ+ QrvX/c/ZP6KEahLoDe4BtkjAPL6vSjyYRaP+nWuW0JXqf9LzPCDDJXzyPZL4kyF2 Wuq55IKAYlVL28yxzJaxRJ9l6IcmlnZUPJ+NHG7BVX810g2w2Bjt6C0t8C05KO+u UfjF5BbzakRGJDDbaElVkFVeYB+PigwkiN1oE6PiLEd8RXt8yHre2Z8mA6brU/0O FFj1OPUxnqeI6QAIV5MAdI+VITt/di+crd9doCgHm6yX7GeJcjg5MCekJaQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvImrq8JrYlx3tQbGaS1fZPxe1u0wHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAQhqTKdDRsk6D6Z3mlUa9p8wmSYhXc/ibg9 fP+ZmhbLkBPLu9AhQUTUz7qRUVKmX7MIJKYthg/sRcBK/piv/+MXQOynXElHYq1z kAKtQWNca5SevWzYsT+yANcnanXFif+/rjrNIyu5pSjpFpiqOnwSCpYaUtA3OmSA X7wKjnsF72IyWnk5Ap471H/zZoDpyhwok72HpdK9Vi0oAK4m8uZmMJQYD2c6v+TJ n/R8R5rtdnfkRUVLDXBbid6PASY347ZeovjnCqqEUTxMnEmM2/6QVGFgxyyHnuUa 65UPp5WnhTnmA7vqA/TjHL1pkz/U0PMgYTXBJN059x2C00EZ5ik= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:02 2025 by rpki-client