This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: AmYr2mZp3k/3ZD2AJhoDdNoJOyzWKeeGij3QobzRQHw= Subject key identifier: 4E:48:F0:7D:A4:75:F5:6F:AC:A8:96:FE:0C:B6:E3:CE:10:24:F0:9E Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 217252DE2210D87C3DDDE58E56E397EE512CD37E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: 010F Signing time: Tue 02 Dec 2025 02:41:37 +0000 Manifest this update: Tue 02 Dec 2025 02:36:37 +0000 Manifest next update: Fri 05 Dec 2025 03:00:37 +0000 Files and hashes: 1: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: IH3uXfVTABt/sJRQmqK3WNJSj4R0fiWnE1nfDWtsZkM=) 2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:72:52:de:22:10:d8:7c:3d:dd:e5:8e:56:e3:97:ee:51:2c:d3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Dec 2 02:36:37 2025 GMT Not After : Dec 5 03:00:37 2025 GMT Subject: CN=4E48F07DA475F56FACA896FE0CB6E3CE1024F09E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:14:59:47:3a:6c:24:71:8a:8c:2b:4d:fc:29: d1:b1:e6:47:2d:4b:e5:88:42:32:f0:71:0f:c9:2b: 4f:26:b5:b0:35:f2:7e:d3:9e:8f:e9:10:fb:63:fc: 52:0d:1f:11:e4:b7:43:03:28:70:28:b5:78:ba:4b: 40:c2:b2:d7:c3:a3:c6:f5:fe:a3:f1:26:0b:a0:d5: 8b:07:f2:df:9d:b7:5a:96:b4:bd:a3:ab:5d:5d:60: a6:dd:46:bd:3e:b0:cf:15:78:91:84:06:2d:74:c5: ac:4c:ca:b9:95:48:0c:50:ab:07:ac:c1:b8:9b:2c: ad:d6:4e:87:e3:d1:dd:ac:b7:b4:73:2d:e4:09:73: b1:5c:1f:f0:68:8d:56:69:f0:e3:2d:a7:57:67:df: be:ca:49:cf:8f:8f:54:d3:05:d3:71:71:a0:5d:d7: 19:55:d1:56:27:fc:9c:6a:03:59:98:d4:09:05:07: 6b:cf:fa:c1:f5:a2:ac:43:43:14:04:3d:6f:22:4b: b8:be:a3:0b:55:a1:7a:32:f5:04:41:89:99:9c:33: 01:b1:75:a5:f8:69:d8:d6:6e:65:01:a3:fb:2a:40: a4:5c:b8:da:d9:f4:60:ee:1e:8d:f7:f7:55:c9:ad: 12:83:8c:15:43:89:56:3b:79:ff:df:8d:13:31:95: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:F0:7D:A4:75:F5:6F:AC:A8:96:FE:0C:B6:E3:CE:10:24:F0:9E X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:3b:1e:f5:90:49:b6:a9:30:95:22:c4:b8:48:6b:e7:eb:d6: 07:48:63:22:2d:ca:db:89:6d:0b:56:a2:76:a0:11:2f:f1:cf: 47:32:bd:48:ef:af:e6:0f:6f:b2:d9:8c:60:31:05:f2:51:79: 2f:ee:7c:54:e7:64:1d:10:f8:01:83:d0:b6:ca:c4:db:10:a6: 1e:af:47:73:ba:f5:91:2d:c6:54:3e:7f:fb:54:0c:87:95:a2: 99:de:e8:4a:f7:ad:bf:f2:00:84:a4:23:31:be:a4:26:a2:9b: 34:2e:67:90:cc:71:38:02:45:62:12:0e:61:2d:5c:9a:0a:d5: b3:ee:51:c6:50:77:4e:26:f5:ce:d2:a5:62:f8:f9:b3:22:7f: 33:25:d5:97:aa:85:68:48:a4:92:e8:02:61:1b:0e:42:5e:73: d2:f7:71:f7:ce:06:ed:42:74:58:fb:f3:0d:79:51:70:91:41: 48:ee:2f:27:78:2e:f3:85:cf:b5:9a:3c:6e:4d:bd:82:6d:90: 8f:81:a8:97:dd:e3:33:c8:da:3e:75:51:f3:f3:e6:a3:2b:10: 1f:9e:4b:6e:bd:d4:1d:4f:25:f2:c1:11:06:4d:67:de:0d:24: 25:dc:25:b6:32:a2:c9:52:da:ee:b7:cc:c4:71:17:c9:ca:e9: 78:7e:81:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIXJS3iIQ2Hw93eWOVuOX7lEs034wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNTEyMDIwMjM2MzdaFw0yNTEyMDUwMzAwMzdaMDMxMTAvBgNV BAMTKDRFNDhGMDdEQTQ3NUY1NkZBQ0E4OTZGRTBDQjZFM0NFMTAyNEYwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFFlHOmwkcYqMK038KdGx5kct S+WIQjLwcQ/JK08mtbA18n7Tno/pEPtj/FINHxHkt0MDKHAotXi6S0DCstfDo8b1 /qPxJgug1YsH8t+dt1qWtL2jq11dYKbdRr0+sM8VeJGEBi10xaxMyrmVSAxQqwes wbibLK3WTofj0d2st7RzLeQJc7FcH/BojVZp8OMtp1dn377KSc+Pj1TTBdNxcaBd 1xlV0VYn/JxqA1mY1AkFB2vP+sH1oqxDQxQEPW8iS7i+owtVoXoy9QRBiZmcMwGx daX4adjWbmUBo/sqQKRcuNrZ9GDuHo3391XJrRKDjBVDiVY7ef/fjRMxlfFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTkjwfaR19W+sqJb+DLbjzhAk8J4wHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM07HvWQSbapMJUixLhIa+fr1gdIYyItytuJ bQtWonagES/xz0cyvUjvr+YPb7LZjGAxBfJReS/ufFTnZB0Q+AGD0LbKxNsQph6v R3O69ZEtxlQ+f/tUDIeVopne6Er3rb/yAISkIzG+pCaimzQuZ5DMcTgCRWISDmEt XJoK1bPuUcZQd04m9c7SpWL4+bMifzMl1ZeqhWhIpJLoAmEbDkJec9L3cffOBu1C dFj78w15UXCRQUjuLyd4LvOFz7WaPG5NvYJtkI+BqJfd4zPI2j51UfPz5qMrEB+e S2691B1PJfLBEQZNZ94NJCXcJbYyoslS2u63zMRxF8nK6Xh+gTo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:37 2025 by rpki-client