This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: DlryHwVwBqR+SOVlSliL88XPqoxsqopfAGfKBhgs4QA= Subject key identifier: 34:A7:1B:A2:B0:C1:D9:D5:10:05:09:D0:F8:42:56:A9:AB:61:4D:EA Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 309526063476853ECF06DC11BA2453AE19CDFB8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 01FD Signing time: Tue 02 Dec 2025 03:42:00 +0000 Manifest this update: Tue 02 Dec 2025 03:37:00 +0000 Manifest next update: Fri 05 Dec 2025 11:05:00 +0000 Files and hashes: 1: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: P8mwoCw0e6KpeOLatrorIppf6KUgcIpcgZObNInEaLI=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: AlVmqpfL/WFpHYoBKjxWx/LAHevtz/DHHIwmIJ22kko=) 3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2CDFzM/b08FBAmMsE5mkOznd4mOppWCjC4ZNYfj8Grs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:95:26:06:34:76:85:3e:cf:06:dc:11:ba:24:53:ae:19:cd:fb:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Dec 2 03:37:00 2025 GMT Not After : Dec 5 11:05:00 2025 GMT Subject: CN=34A71BA2B0C1D9D5100509D0F84256A9AB614DEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:29:00:85:bb:4a:13:80:40:33:65:96:c6: c5:05:3f:84:ce:18:68:d3:cb:c0:aa:ba:70:da:12: d7:df:1d:99:bb:b1:a3:6b:a1:90:11:4e:b2:31:e1: 19:53:11:01:c1:3e:1d:98:5f:2d:f3:66:4a:e1:0a: 00:50:bb:e4:38:38:f5:89:19:78:54:5d:31:93:ca: e5:c1:7b:c5:32:80:18:1f:86:4b:8b:b9:97:48:d7: 35:57:08:15:89:85:38:d9:e8:b1:78:49:81:66:6a: 6e:e6:df:a1:f8:d9:38:5c:61:e0:c5:6d:86:79:31: 64:4f:a9:b1:63:3d:61:a8:b6:2c:65:3c:06:7f:2a: 3d:4c:80:17:35:17:ed:01:4e:be:f3:a8:f6:e7:98: 2d:e2:8b:1f:db:04:3a:16:fe:11:49:ef:49:30:12: e4:ef:ec:cb:51:6b:b1:08:69:d6:78:a1:7a:10:bb: b4:92:cf:af:94:ab:ff:4d:b3:54:7c:59:6e:ef:30: 1b:31:72:ed:bf:e2:aa:44:17:51:7c:64:36:dc:7b: a8:b9:98:a9:50:8f:9f:cc:22:63:f3:26:29:a2:ce: d7:c6:25:a7:82:9b:32:2c:44:25:62:35:09:f7:18: 91:5e:4d:ef:51:de:ea:45:8a:97:57:7d:d8:93:6e: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A7:1B:A2:B0:C1:D9:D5:10:05:09:D0:F8:42:56:A9:AB:61:4D:EA X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:d7:d4:21:cc:e6:9a:9c:80:05:20:b4:2c:f2:00:da:25:10: f1:59:38:89:c4:4e:e2:b4:91:7e:28:af:f3:5b:94:86:18:80: 93:b5:4b:c3:f8:ca:33:09:6e:14:9d:4e:08:8a:5c:73:89:da: 91:d0:f4:0c:15:20:b0:b6:13:ac:fd:dc:9b:9f:71:b6:5e:8e: 16:e1:96:5c:56:90:9b:63:97:3e:4d:e7:cd:ba:05:4c:b6:64: b9:22:51:07:c6:9f:fa:26:86:ee:99:bf:4a:37:b9:3c:e0:06: ef:aa:54:6e:05:04:9c:f1:79:bd:ee:5c:9f:52:5f:c0:34:d6: 05:e1:89:b6:34:1a:f9:25:ca:10:a0:82:0b:3e:af:7f:28:1a: df:20:53:9e:77:79:33:d6:b9:62:bb:bb:81:f0:fa:b4:f2:9c: e7:c4:bf:6f:bf:a6:be:46:5f:10:cf:67:d8:6e:ed:34:15:65: 7a:d4:de:12:13:4e:70:7a:14:6f:ef:d9:b6:df:0d:e1:15:8e: 95:da:3f:23:6f:d3:1e:97:d7:d0:65:fd:26:5d:7b:53:b0:13: ba:43:7b:76:f5:09:c7:84:d9:5c:78:46:f3:76:16:89:67:95: de:1f:0a:ab:1c:58:8a:36:81:6e:f8:c0:cc:d7:05:fc:e1:50: bc:1f:8e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMJUmBjR2hT7PBtwRuiRTrhnN+40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNTEyMDIwMzM3MDBaFw0yNTEyMDUxMTA1MDBaMDMxMTAvBgNV BAMTKDM0QTcxQkEyQjBDMUQ5RDUxMDA1MDlEMEY4NDI1NkE5QUI2MTRERUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWikAhbtKE4BAM2WWxsUFP4TO GGjTy8CqunDaEtffHZm7saNroZARTrIx4RlTEQHBPh2YXy3zZkrhCgBQu+Q4OPWJ GXhUXTGTyuXBe8UygBgfhkuLuZdI1zVXCBWJhTjZ6LF4SYFmam7m36H42ThcYeDF bYZ5MWRPqbFjPWGotixlPAZ/Kj1MgBc1F+0BTr7zqPbnmC3iix/bBDoW/hFJ70kw EuTv7MtRa7EIadZ4oXoQu7SSz6+Uq/9Ns1R8WW7vMBsxcu2/4qpEF1F8ZDbce6i5 mKlQj5/MImPzJimiztfGJaeCmzIsRCViNQn3GJFeTe9R3upFipdXfdiTbrZbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNKcborDB2dUQBQnQ+EJWqathTeowHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD/X1CHM5pqcgAUgtCzyANolEPFZOInETuK0 kX4or/NblIYYgJO1S8P4yjMJbhSdTgiKXHOJ2pHQ9AwVILC2E6z93JufcbZejhbh llxWkJtjlz5N5826BUy2ZLkiUQfGn/omhu6Zv0o3uTzgBu+qVG4FBJzxeb3uXJ9S X8A01gXhibY0GvklyhCgggs+r38oGt8gU553eTPWuWK7u4Hw+rTynOfEv2+/pr5G XxDPZ9hu7TQVZXrU3hITTnB6FG/v2bbfDeEVjpXaPyNv0x6X19Bl/SZde1OwE7pD e3b1CceE2Vx4RvN2Folnld4fCqscWIo2gW74wMzXBfzhULwfjlw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:11 2025 by rpki-client