This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: JHkONzPQvCJ0eEzQQ0vXLFzJ49Hf9Df12XS+HkCbqsc= Subject key identifier: B0:D8:B9:95:73:08:3C:A2:D5:BD:C2:F3:5E:27:FE:89:4F:19:42:E9 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 386B4E2447DA907C50A5061CB9793D34AC14C490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 025D Signing time: Mon 01 Dec 2025 18:41:42 +0000 Manifest this update: Mon 01 Dec 2025 18:36:42 +0000 Manifest next update: Thu 04 Dec 2025 21:12:42 +0000 Files and hashes: 1: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) 2: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) 3: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: G4tsmEcokHTZu3aDbnEkpRZYcz+pa24eoqybBxRfD6A=) 4: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 5: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) 6: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 7: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:6b:4e:24:47:da:90:7c:50:a5:06:1c:b9:79:3d:34:ac:14:c4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Dec 1 18:36:42 2025 GMT Not After : Dec 4 21:12:42 2025 GMT Subject: CN=B0D8B99573083CA2D5BDC2F35E27FE894F1942E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b6:fa:15:3c:ce:28:67:a1:39:21:34:0a:57: 53:5f:4c:64:a3:de:52:ad:80:71:f9:80:62:9c:25: 14:30:bb:9a:9c:40:ae:b9:b7:8b:c9:1a:82:44:c4: f9:fb:ea:57:28:48:a6:c1:c4:97:e2:2a:28:d0:b8: f8:12:6a:ac:78:90:76:d0:a4:0c:ac:17:bb:95:9b: b0:a4:60:94:6a:b4:dd:c4:10:9e:1f:fb:a3:49:b5: 99:8e:97:80:c2:7a:4a:bb:b2:a3:8b:17:99:08:38: 41:b5:50:17:02:fc:92:3a:24:62:73:ce:76:5e:30: e3:20:b5:18:56:d5:ab:29:a7:d2:56:1f:df:e8:bd: 19:0c:03:aa:82:76:4c:3f:2f:3c:9a:cf:44:e7:b2: d0:39:cf:87:f5:5a:41:95:a1:dc:22:08:6a:bb:ef: c0:0d:fe:0c:f3:a2:39:c5:fb:46:e1:12:ca:cd:93: bc:0d:73:69:d2:11:6a:31:5d:43:bf:79:01:10:40: 8f:65:33:d7:03:d8:bd:7c:85:14:43:09:a8:17:89: 76:1d:e0:5a:75:3c:be:d0:e1:ad:9c:8b:06:09:ba: ce:d8:2c:18:cd:94:9e:2c:97:d9:0d:64:15:f7:81: 32:a2:28:3b:e2:22:49:15:0b:26:65:a0:dd:46:e6: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D8:B9:95:73:08:3C:A2:D5:BD:C2:F3:5E:27:FE:89:4F:19:42:E9 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:d1:bf:19:44:68:ea:1b:e0:34:0f:dc:d5:c6:7d:53:f4:f0: 48:7d:8b:a5:0d:0b:62:e1:71:54:4a:ef:f5:71:fe:68:3e:41: cc:5e:c6:34:ab:ea:a7:de:af:3e:36:09:ab:d7:fc:8a:38:72: e1:c8:9a:e5:e5:7d:b8:8a:10:00:b5:60:47:1c:97:ac:7e:5f: e3:9b:ec:e4:81:0b:ed:c1:b9:e9:95:49:fb:c4:cd:96:6b:fd: 6f:c5:f4:af:c0:7f:b3:de:29:b2:0f:60:ec:f0:c7:b0:70:c2: ea:cf:c9:1d:0e:65:19:b4:9a:ec:69:f7:f0:36:5f:bf:39:70: 77:15:e9:13:95:b0:08:74:87:3f:ab:89:e6:2b:a1:ab:d3:b0: b9:01:0c:47:46:90:fa:ae:55:b3:a0:eb:7a:b6:8c:98:ed:e0: 05:e8:d4:f4:e8:96:d2:db:28:06:9e:d7:60:24:d0:ff:70:9f: 35:d9:a1:2a:5e:58:98:ed:59:28:00:81:69:9b:a7:fc:4b:f9: cf:58:1f:a9:84:70:32:f2:62:3d:38:43:9f:4e:06:cd:7f:fa: e7:42:c3:c7:fe:11:0f:25:7c:64:9a:46:40:a1:66:76:8b:6c: bd:a6:34:07:00:b8:75:cb:1e:37:3a:45:54:b1:e3:2a:bc:53: db:aa:b9:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGtOJEfakHxQpQYcuXk9NKwUxJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTEyMDExODM2NDJaFw0yNTEyMDQyMTEyNDJaMDMxMTAvBgNV BAMTKEIwRDhCOTk1NzMwODNDQTJENUJEQzJGMzVFMjdGRTg5NEYxOTQyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCtvoVPM4oZ6E5ITQKV1NfTGSj 3lKtgHH5gGKcJRQwu5qcQK65t4vJGoJExPn76lcoSKbBxJfiKijQuPgSaqx4kHbQ pAysF7uVm7CkYJRqtN3EEJ4f+6NJtZmOl4DCekq7sqOLF5kIOEG1UBcC/JI6JGJz znZeMOMgtRhW1aspp9JWH9/ovRkMA6qCdkw/Lzyaz0TnstA5z4f1WkGVodwiCGq7 78AN/gzzojnF+0bhEsrNk7wNc2nSEWoxXUO/eQEQQI9lM9cD2L18hRRDCagXiXYd 4Fp1PL7Q4a2ciwYJus7YLBjNlJ4sl9kNZBX3gTKiKDviIkkVCyZloN1G5jG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsNi5lXMIPKLVvcLzXif+iU8ZQukwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDRvxlEaOob4DQP3NXGfVP08Eh9i6UNC2Lh cVRK7/Vx/mg+QcxexjSr6qferz42CavX/Io4cuHImuXlfbiKEAC1YEccl6x+X+Ob 7OSBC+3BuemVSfvEzZZr/W/F9K/Af7PeKbIPYOzwx7BwwurPyR0OZRm0muxp9/A2 X785cHcV6ROVsAh0hz+rieYroavTsLkBDEdGkPquVbOg63q2jJjt4AXo1PToltLb KAae12Ak0P9wnzXZoSpeWJjtWSgAgWmbp/xL+c9YH6mEcDLyYj04Q59OBs1/+udC w8f+EQ8lfGSaRkChZnaLbL2mNAcAuHXLHjc6RVSx4yq8U9uquZA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:27 2025 by rpki-client