This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: GIL1Ki6wNFgKNF/gRdQHrJRA06LH53kjL3kUUWq/B8A= Subject key identifier: 90:DC:1E:2E:80:60:A8:41:A5:AC:BE:63:73:A2:A2:BD:B3:01:C0:40 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 223A89FF2D6762498B8439F3722B5E1AD3CE1443 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 024F Signing time: Sat 13 Dec 2025 22:31:37 +0000 Manifest this update: Sat 13 Dec 2025 22:26:37 +0000 Manifest next update: Wed 17 Dec 2025 07:18:37 +0000 Files and hashes: 1: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) 2: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 3: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 4: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: /kSxJ9VIrx+XaW/WiclP5o2UQItHGJyVC/R0Iw4/eiU=) 5: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 6: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 07:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:89:ff:2d:67:62:49:8b:84:39:f3:72:2b:5e:1a:d3:ce:14:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Dec 13 22:26:37 2025 GMT Not After : Dec 17 07:18:37 2025 GMT Subject: CN=90DC1E2E8060A841A5ACBE6373A2A2BDB301C040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5b:d3:1e:a4:66:36:49:b7:1d:e9:96:bb:bc: f8:b2:11:96:50:4f:74:d1:0e:1d:7b:77:e7:91:46: 07:0d:12:39:4b:12:2c:d6:76:50:0d:dd:e8:23:e2: 3b:bc:0f:6d:69:fb:89:1d:d9:fd:80:e2:09:36:ba: e3:95:95:2d:ec:a9:cf:e1:67:59:2e:03:7c:7f:e6: a5:55:e5:fc:e6:60:57:3f:95:1b:f4:ca:d0:ad:9f: b3:d1:a4:d9:5d:43:e2:7a:7c:71:63:73:b3:a4:1e: 5d:c1:1f:67:1b:74:ae:9b:00:2b:99:01:67:f0:b6: 89:b4:03:83:e3:d3:66:46:9a:9e:3a:fd:56:8b:06: 2e:65:3b:ba:96:36:6e:13:a8:81:94:94:57:ca:70: 28:93:5a:b2:17:2c:25:24:7b:8e:1c:60:5e:5d:5a: 2a:e2:16:e0:2b:19:28:73:35:6c:74:0f:8c:2c:65: 52:29:64:71:76:fd:88:78:43:ac:9f:69:78:20:ab: 5b:e2:e4:54:22:84:0e:dc:f8:b6:ad:08:33:be:2d: 97:7c:57:4f:20:8b:7f:96:7e:90:0e:90:22:2d:a0: d1:9f:4a:6e:87:39:9e:49:cd:0e:7d:e4:68:79:40: b6:3c:e4:95:e8:dd:22:c7:df:c0:d4:a7:48:6c:f7: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DC:1E:2E:80:60:A8:41:A5:AC:BE:63:73:A2:A2:BD:B3:01:C0:40 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:4d:75:f5:59:a4:38:7a:16:53:99:6a:65:2d:0c:95:7d:86: ac:57:2e:b3:24:1f:8b:48:6f:7d:d1:04:53:d9:c1:a7:ac:63: b0:47:aa:f7:45:bd:a4:4e:40:e3:9d:bf:9f:44:02:3b:72:63: fa:e4:e3:85:42:87:ac:2b:29:80:7d:64:d7:6c:7f:f8:77:99: 02:e1:90:23:f6:fa:4b:9b:3d:dd:e8:06:1d:a4:52:e7:96:88: 09:d7:98:1a:80:2e:be:d1:f9:08:93:f8:5c:9d:4f:da:3d:31: bf:a8:a7:b4:fd:b5:cb:c0:81:a5:eb:90:fe:57:59:50:34:d1: 68:72:c9:1a:cc:3a:fe:94:3a:3e:77:58:29:19:0a:f9:4b:46: 11:26:95:7f:d2:1c:d4:ed:39:5c:d1:f7:a1:17:83:24:35:54: c2:64:ae:12:3e:6c:e7:41:13:87:20:55:aa:b5:ad:3c:ab:4a: 9f:9a:60:c4:a4:a0:53:9a:4d:d9:33:4e:9a:0b:6e:7c:6a:d6: 5f:3e:a1:72:59:04:d5:09:3f:64:28:80:e7:48:ef:2d:11:40: da:08:09:ea:86:14:ea:18:96:5c:aa:3c:47:2e:23:d9:14:12: 52:6c:f2:ac:82:9b:07:6f:93:3c:2a:be:d2:42:19:e0:d6:8d: be:49:14:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjqJ/y1nYkmLhDnzciteGtPOFEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTEyMTMyMjI2MzdaFw0yNTEyMTcwNzE4MzdaMDMxMTAvBgNV BAMTKDkwREMxRTJFODA2MEE4NDFBNUFDQkU2MzczQTJBMkJEQjMwMUMwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiW9MepGY2Sbcd6Za7vPiyEZZQ T3TRDh17d+eRRgcNEjlLEizWdlAN3egj4ju8D21p+4kd2f2A4gk2uuOVlS3sqc/h Z1kuA3x/5qVV5fzmYFc/lRv0ytCtn7PRpNldQ+J6fHFjc7OkHl3BH2cbdK6bACuZ AWfwtom0A4Pj02ZGmp46/VaLBi5lO7qWNm4TqIGUlFfKcCiTWrIXLCUke44cYF5d WiriFuArGShzNWx0D4wsZVIpZHF2/Yh4Q6yfaXggq1vi5FQihA7c+LatCDO+LZd8 V08gi3+WfpAOkCItoNGfSm6HOZ5JzQ595Gh5QLY85JXo3SLH38DUp0hs99ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkNweLoBgqEGlrL5jc6KivbMBwEAwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpNdfVZpDh6FlOZamUtDJV9hqxXLrMkH4tI b33RBFPZwaesY7BHqvdFvaROQOOdv59EAjtyY/rk44VCh6wrKYB9ZNdsf/h3mQLh kCP2+kubPd3oBh2kUueWiAnXmBqALr7R+QiT+FydT9o9Mb+op7T9tcvAgaXrkP5X WVA00WhyyRrMOv6UOj53WCkZCvlLRhEmlX/SHNTtOVzR96EXgyQ1VMJkrhI+bOdB E4cgVaq1rTyrSp+aYMSkoFOaTdkzTpoLbnxq1l8+oXJZBNUJP2QogOdI7y0RQNoI CeqGFOoYllyqPEcuI9kUElJs8qyCmwdvkzwqvtJCGeDWjb5JFEM= -----END CERTIFICATE-----Generated at Sun Dec 14 15:04:12 2025 by rpki-client