This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: wfjVYaJrEj8BPo7OIkRXKkcOyU0KFjWi/9p3YCnQDYE= Subject key identifier: F0:26:21:61:6B:44:9E:63:4E:AC:3B:66:23:0E:5B:56:F9:DF:CE:A4 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 5D3B9220EED7138303FB7BD4CE28791F3245A1FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 012F Signing time: Wed 03 Dec 2025 11:10:04 +0000 Manifest this update: Wed 03 Dec 2025 11:05:04 +0000 Manifest next update: Sat 06 Dec 2025 15:47:04 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: dSCDLGJ58A2ntlqEly0HoPpIygYXEDQxdUcvvLK3aD4=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:3b:92:20:ee:d7:13:83:03:fb:7b:d4:ce:28:79:1f:32:45:a1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Dec 3 11:05:04 2025 GMT Not After : Dec 6 15:47:04 2025 GMT Subject: CN=F02621616B449E634EAC3B66230E5B56F9DFCEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e8:ce:69:88:96:e7:1d:51:f0:43:db:cf:84: b0:2b:7f:41:62:29:5f:22:c9:62:6f:2c:69:68:e0: 18:c8:88:d7:00:3d:bd:fc:3a:4c:7b:33:11:f9:1c: b8:01:84:10:09:c0:3f:1e:55:4f:81:9f:62:2a:14: 22:dc:1a:37:4b:0b:b1:32:45:4f:da:85:e6:00:8f: d3:c7:75:00:13:5f:bc:0d:a6:03:23:61:64:44:79: 2f:56:82:42:fe:6b:8d:1e:4f:e4:3c:7d:7f:f2:bd: e8:45:49:09:2f:96:2d:cd:1d:84:fb:68:b0:07:a8: b7:65:5d:2c:a0:1c:8e:d1:3a:ea:7b:e8:f4:83:6d: c7:71:cd:e4:d1:b5:a6:19:dc:cb:d8:7f:4f:76:3c: c8:88:89:1a:40:7b:d0:db:cb:4c:d2:54:aa:f6:f2: 4d:07:d9:10:bb:1c:57:c0:a8:1f:b6:4d:65:af:64: d1:62:dc:f4:cd:7f:65:49:94:f2:77:ff:12:b8:22: 00:79:17:f1:ee:46:62:65:05:06:c0:8d:ea:28:ec: b2:06:42:22:56:a2:5c:00:4c:7a:9e:28:22:1f:6b: 65:b9:b6:63:5e:4f:fa:d5:cc:db:1e:53:95:81:43: 22:85:e4:5a:3e:7d:c1:96:a9:62:d3:a3:95:91:8e: 2d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:26:21:61:6B:44:9E:63:4E:AC:3B:66:23:0E:5B:56:F9:DF:CE:A4 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6f:a6:6d:31:95:01:96:80:4a:f5:2e:44:e6:96:fd:71:90: e2:c0:51:11:56:c8:80:a6:4d:a5:9a:4f:68:56:a9:f4:5b:e0: 9a:06:d8:8b:d4:0b:29:23:5b:0b:27:eb:55:be:d2:e1:dd:43: 5d:33:98:90:eb:69:b1:07:77:3e:95:2c:14:98:c4:3a:5a:52: b3:d8:ae:cc:c7:ff:d4:49:c8:f8:9f:26:06:0c:c8:33:6d:5a: da:cf:13:c5:cb:07:f6:ce:47:43:ce:09:ec:8b:25:ea:63:1d: 3c:54:1e:bc:02:49:fe:35:2b:c6:1b:7f:4a:32:74:9c:8f:89: b1:26:bc:db:72:19:0a:12:3e:31:c6:62:2f:3e:3a:aa:74:a1: cf:4a:93:e2:b5:02:31:14:41:2f:05:9f:ef:5c:1c:19:35:4c: a5:6e:ab:76:ef:10:13:e0:f4:5b:f7:7f:48:2c:41:c3:f4:ff: 48:fc:8a:a8:ff:a9:7a:09:48:2f:22:aa:8b:e4:6d:5b:c6:eb: 89:40:ee:8a:67:a0:07:5a:69:8b:57:47:bd:b4:9d:8c:4e:7b: 51:35:81:da:ff:10:6f:a3:f5:39:9b:a5:ea:12:94:db:64:aa: ac:1f:8e:6d:cc:6e:47:16:8b:08:65:58:d9:38:82:fb:6c:e3: aa:fa:fb:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXTuSIO7XE4MD+3vUzih5HzJFofowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTEyMDMxMTA1MDRaFw0yNTEyMDYxNTQ3MDRaMDMxMTAvBgNV BAMTKEYwMjYyMTYxNkI0NDlFNjM0RUFDM0I2NjIzMEU1QjU2RjlERkNFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR6M5piJbnHVHwQ9vPhLArf0Fi KV8iyWJvLGlo4BjIiNcAPb38Okx7MxH5HLgBhBAJwD8eVU+Bn2IqFCLcGjdLC7Ey RU/aheYAj9PHdQATX7wNpgMjYWREeS9WgkL+a40eT+Q8fX/yvehFSQkvli3NHYT7 aLAHqLdlXSygHI7ROup76PSDbcdxzeTRtaYZ3MvYf092PMiIiRpAe9Dby0zSVKr2 8k0H2RC7HFfAqB+2TWWvZNFi3PTNf2VJlPJ3/xK4IgB5F/HuRmJlBQbAjeoo7LIG QiJWolwATHqeKCIfa2W5tmNeT/rVzNseU5WBQyKF5Fo+fcGWqWLTo5WRji1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8CYhYWtEnmNOrDtmIw5bVvnfzqQwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAVvpm0xlQGWgEr1LkTmlv1xkOLAURFWyICm TaWaT2hWqfRb4JoG2IvUCykjWwsn61W+0uHdQ10zmJDrabEHdz6VLBSYxDpaUrPY rszH/9RJyPifJgYMyDNtWtrPE8XLB/bOR0POCeyLJepjHTxUHrwCSf41K8Ybf0oy dJyPibEmvNtyGQoSPjHGYi8+Oqp0oc9Kk+K1AjEUQS8Fn+9cHBk1TKVuq3bvEBPg 9Fv3f0gsQcP0/0j8iqj/qXoJSC8iqovkbVvG64lA7opnoAdaaYtXR720nYxOe1E1 gdr/EG+j9TmbpeoSlNtkqqwfjm3MbkcWiwhlWNk4gvts46r6+xc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:57 2025 by rpki-client