This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: SWLk2S+pT1utUtGpNAOIn990KQJSOxjPt7AdgAYGCkg= Subject key identifier: 30:73:AC:79:F5:71:8E:80:FE:FB:B7:0A:19:62:CF:13:1A:AF:69:2E Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 53D104DD959BD28759D05CE627777F91B406DD09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0259 Signing time: Mon 01 Dec 2025 10:52:01 +0000 Manifest this update: Mon 01 Dec 2025 10:47:01 +0000 Manifest next update: Thu 04 Dec 2025 21:06:01 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: CSgmKUEVB9M/1VjVLIdaZCxElgnEWDzC7hy6FzyB0Pg=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d1:04:dd:95:9b:d2:87:59:d0:5c:e6:27:77:7f:91:b4:06:dd:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Dec 1 10:47:01 2025 GMT Not After : Dec 4 21:06:01 2025 GMT Subject: CN=3073AC79F5718E80FEFBB70A1962CF131AAF692E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c9:70:f6:3e:93:08:bb:b4:6c:3d:f5:ce:5c: e7:90:47:1a:bd:79:06:86:ac:65:1c:33:ab:f6:2c: 8c:f8:21:6d:f7:f2:85:9c:57:94:e4:3e:16:f1:50: fa:43:e7:85:68:35:78:8c:8b:b3:b1:0c:a4:c7:d6: 44:84:5b:01:3d:f2:a6:16:f0:8d:2a:30:e0:a2:3c: bc:1a:b6:d7:94:2b:5d:da:97:2f:38:c3:85:f5:ce: 22:0b:e2:ae:85:4c:52:57:42:53:7e:50:dd:51:1d: 91:dc:aa:6c:76:0b:85:14:37:37:55:30:28:32:c4: 9e:dc:8f:ba:85:eb:c2:84:6a:c0:f5:1a:f8:f4:1f: 79:24:ed:f5:2e:ad:d1:b9:99:f8:12:ae:b8:fd:b0: 2e:c2:4d:64:81:dd:3c:c0:35:2c:21:5f:bd:54:84: 97:f7:06:63:75:bb:ad:e9:d1:75:e9:63:8d:29:04: 71:61:66:56:c4:cc:4f:c3:94:de:b5:13:a9:d8:c6: 35:9d:00:80:1f:91:20:22:c8:13:41:ba:6e:a4:b9: 1b:28:81:f4:a6:21:7f:24:c0:ae:fb:54:e8:1a:9d: e1:1a:88:13:a8:d5:19:38:89:13:d3:03:7b:ed:57: 24:6d:6e:21:ce:36:90:68:3a:31:5b:10:07:3c:99: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:73:AC:79:F5:71:8E:80:FE:FB:B7:0A:19:62:CF:13:1A:AF:69:2E X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ca:e5:be:0e:62:25:2d:56:68:1b:31:b0:56:2b:09:6a:7d: 5c:52:65:c8:e7:ee:87:ec:fb:30:07:64:41:9b:ef:ad:73:17: 9e:72:b7:9e:ff:86:16:9b:df:b7:f0:16:55:1a:cb:35:8a:d0: b3:1c:12:8b:df:1e:7d:3f:32:b0:a1:9c:4a:85:55:96:92:35: c6:51:7c:73:49:57:4f:37:cd:02:95:ba:c9:02:61:d8:c7:56: 53:d2:cf:58:59:f3:e8:9f:09:3c:dc:76:85:31:ea:65:d3:f2: 38:d1:bc:83:7e:c5:43:fd:b9:5d:bd:91:1d:3e:c1:4e:05:a5: 74:20:a4:78:19:09:b9:90:d5:76:c0:e2:90:74:5e:b6:69:d4: e5:c1:00:e6:d4:b3:ca:1e:03:f0:cc:a0:24:54:fb:f7:25:92: c3:5a:24:bc:43:52:85:e7:f5:9a:06:39:54:8f:4c:8d:4c:4b: ac:c2:bc:87:60:40:bb:eb:28:4b:92:1d:6b:dc:6f:91:25:2e: c0:75:ac:25:27:09:76:de:85:0a:35:ff:a4:90:41:25:6a:e9: c2:c0:43:80:ff:f5:c5:ca:36:32:ea:d9:6b:b7:0e:5e:2b:89: 04:c4:e3:45:2f:25:c9:6b:4e:e8:3b:6c:c4:27:4b:91:89:80: 96:31:49:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9EE3ZWb0odZ0FzmJ3d/kbQG3QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTEyMDExMDQ3MDFaFw0yNTEyMDQyMTA2MDFaMDMxMTAvBgNV BAMTKDMwNzNBQzc5RjU3MThFODBGRUZCQjcwQTE5NjJDRjEzMUFBRjY5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yXD2PpMIu7RsPfXOXOeQRxq9 eQaGrGUcM6v2LIz4IW338oWcV5TkPhbxUPpD54VoNXiMi7OxDKTH1kSEWwE98qYW 8I0qMOCiPLwatteUK13aly84w4X1ziIL4q6FTFJXQlN+UN1RHZHcqmx2C4UUNzdV MCgyxJ7cj7qF68KEasD1Gvj0H3kk7fUurdG5mfgSrrj9sC7CTWSB3TzANSwhX71U hJf3BmN1u63p0XXpY40pBHFhZlbEzE/DlN61E6nYxjWdAIAfkSAiyBNBum6kuRso gfSmIX8kwK77VOganeEaiBOo1Rk4iRPTA3vtVyRtbiHONpBoOjFbEAc8mV51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMHOsefVxjoD++7cKGWLPExqvaS4wHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPK5b4OYiUtVmgbMbBWKwlqfVxSZcjn7ofs +zAHZEGb761zF55yt57/hhab37fwFlUayzWK0LMcEovfHn0/MrChnEqFVZaSNcZR fHNJV083zQKVuskCYdjHVlPSz1hZ8+ifCTzcdoUx6mXT8jjRvIN+xUP9uV29kR0+ wU4FpXQgpHgZCbmQ1XbA4pB0XrZp1OXBAObUs8oeA/DMoCRU+/clksNaJLxDUoXn 9ZoGOVSPTI1MS6zCvIdgQLvrKEuSHWvcb5ElLsB1rCUnCXbehQo1/6SQQSVq6cLA Q4D/9cXKNjLq2Wu3Dl4riQTE40UvJclrTug7bMQnS5GJgJYxSf4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:34 2025 by rpki-client