This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: 3NL1qV7iwAH+Se2xNyF6SGA5Pyijf48Vj/E2Ovk2pd0= Subject key identifier: A6:30:4C:56:BF:3D:39:72:1A:E1:89:47:ED:17:8B:20:8E:21:F4:91 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 22AE3EB3CD61F63FB6CEAEDFD36FCFC5C5BCDBD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: C1 Signing time: Mon 01 Dec 2025 06:30:56 +0000 Manifest this update: Mon 01 Dec 2025 06:25:56 +0000 Manifest next update: Thu 04 Dec 2025 17:44:56 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: LzpN62jKyvhriyHw42JTP/clCoCYC0zAGLmAGu14K18=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ae:3e:b3:cd:61:f6:3f:b6:ce:ae:df:d3:6f:cf:c5:c5:bc:db:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Dec 1 06:25:56 2025 GMT Not After : Dec 4 17:44:56 2025 GMT Subject: CN=A6304C56BF3D39721AE18947ED178B208E21F491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:76:a5:26:7d:c2:f0:42:fc:8e:3b:52:21: c4:cc:73:e5:c4:33:9c:c6:d3:a7:7d:a6:98:75:c1: ad:e5:7d:e8:f1:fa:83:da:c7:84:3e:38:89:3f:39: c1:0d:b3:7f:10:fa:d4:13:6a:ed:eb:63:19:05:4b: 6a:7e:e3:34:df:bd:18:04:86:7d:99:83:d8:82:91: 3d:a3:6f:ac:2a:58:a3:57:48:b3:8a:03:57:6e:63: 8a:c7:6f:7c:1f:55:67:bd:ee:7c:dc:92:75:be:95: fd:8c:80:e6:84:75:11:5e:08:b4:19:4d:12:56:d4: a7:b8:81:e2:4c:d0:df:96:8a:d4:e0:ac:4e:c7:28: 50:dc:47:72:48:56:da:d6:e5:c5:53:16:53:f9:5e: ca:ad:c0:07:b4:b8:a2:1f:cf:0e:9f:d6:e5:f0:a6: 36:a2:7d:26:ff:c9:e9:37:cf:dc:60:71:48:ea:3f: b7:07:b4:25:fe:22:82:4a:16:a7:16:bb:e0:11:82: 0d:f1:e4:c3:70:3a:e2:3a:73:a1:57:4a:e4:bb:52: 93:66:53:d9:74:95:5c:f9:96:57:a8:8e:ea:c2:cb: d2:38:ff:77:b9:d8:62:42:61:f6:6f:a9:dc:4b:e6: 88:4f:08:3e:b4:13:ce:35:4e:c1:60:22:e0:3c:85: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:30:4C:56:BF:3D:39:72:1A:E1:89:47:ED:17:8B:20:8E:21:F4:91 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1c:85:6e:8b:1d:ee:79:65:78:8c:35:d6:b2:6e:86:7f:ba: a7:5d:a6:7c:b5:17:68:16:e3:73:7f:f8:2c:a3:d3:99:1b:dd: cd:2f:a2:58:af:80:5b:63:08:00:a4:60:18:34:6a:fc:92:84: 95:f6:93:27:71:3d:ee:4e:57:82:fb:e1:71:ac:c1:f2:11:b9: 41:cd:41:f0:89:00:28:4e:1f:f2:c7:c3:19:e9:8a:dd:51:e3: db:98:86:14:3b:16:34:ef:dc:98:45:79:44:c6:28:40:23:fa: 93:fa:f1:f1:42:14:74:b3:4a:9b:fe:e3:9e:b2:79:f5:53:ca: 51:a9:3e:c3:a9:8d:d9:10:ef:22:ad:85:b2:42:46:1b:aa:25: cf:8a:61:f6:5f:0e:05:e4:1d:af:10:d9:37:b2:25:7a:67:bf: c2:bb:e0:20:0c:2b:bb:cf:71:5b:54:9e:94:b7:47:e1:ca:b1: d8:13:7e:bd:34:65:f1:a5:6e:f4:77:5d:f7:82:b6:21:57:5d: e1:d9:50:04:1d:86:86:b0:86:b2:89:81:c5:3e:98:95:68:9e: e8:03:d9:e3:bc:ee:a7:44:69:31:ef:a7:95:83:d6:43:57:0e: 9e:5b:4f:4d:6c:36:8d:e2:b5:85:65:fc:52:00:aa:b0:51:11: 98:f6:2f:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIq4+s81h9j+2zq7f02/PxcW829YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTEyMDEwNjI1NTZaFw0yNTEyMDQxNzQ0NTZaMDMxMTAvBgNV BAMTKEE2MzA0QzU2QkYzRDM5NzIxQUUxODk0N0VEMTc4QjIwOEUyMUY0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Q3alJn3C8EL8jjtSIcTMc+XE M5zG06d9pph1wa3lfejx+oPax4Q+OIk/OcENs38Q+tQTau3rYxkFS2p+4zTfvRgE hn2Zg9iCkT2jb6wqWKNXSLOKA1duY4rHb3wfVWe97nzcknW+lf2MgOaEdRFeCLQZ TRJW1Ke4geJM0N+WitTgrE7HKFDcR3JIVtrW5cVTFlP5XsqtwAe0uKIfzw6f1uXw pjaifSb/yek3z9xgcUjqP7cHtCX+IoJKFqcWu+ARgg3x5MNwOuI6c6FXSuS7UpNm U9l0lVz5lleojurCy9I4/3e52GJCYfZvqdxL5ohPCD60E841TsFgIuA8hZMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpjBMVr89OXIa4YlH7ReLII4h9JEwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMchW6LHe55ZXiMNdayboZ/uqddpny1F2gW 43N/+Cyj05kb3c0volivgFtjCACkYBg0avyShJX2kydxPe5OV4L74XGswfIRuUHN QfCJAChOH/LHwxnpit1R49uYhhQ7FjTv3JhFeUTGKEAj+pP68fFCFHSzSpv+456y efVTylGpPsOpjdkQ7yKthbJCRhuqJc+KYfZfDgXkHa8Q2TeyJXpnv8K74CAMK7vP cVtUnpS3R+HKsdgTfr00ZfGlbvR3XfeCtiFXXeHZUAQdhoawhrKJgcU+mJVonugD 2eO87qdEaTHvp5WD1kNXDp5bT01sNo3itYVl/FIAqrBREZj2L84= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:05 2025 by rpki-client