This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: ThPSpQGBDEIz+dJ53SiFAMO8ve/Wjd7hy1jzRiGYYmY= Subject key identifier: 8C:F7:F3:FA:AA:F5:4C:FF:2C:F2:74:48:1E:F4:4E:C9:22:FB:A1:27 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 2DA53B1E21F2267B50D8C03AF25E4C6CE5045294 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 023D Signing time: Fri 12 Dec 2025 15:01:35 +0000 Manifest this update: Fri 12 Dec 2025 14:56:35 +0000 Manifest next update: Tue 16 Dec 2025 00:40:35 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: VBO8z4/5X4m5GseRcJlqdwTR41BnNxefpmUf6LEiYk0=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a5:3b:1e:21:f2:26:7b:50:d8:c0:3a:f2:5e:4c:6c:e5:04:52:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Dec 12 14:56:35 2025 GMT Not After : Dec 16 00:40:35 2025 GMT Subject: CN=8CF7F3FAAAF54CFF2CF274481EF44EC922FBA127 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:3c:3d:b3:0f:f0:98:6a:ba:4a:95:50:83: c8:0e:70:ef:73:df:f1:06:1a:76:fb:89:9c:e3:56: 9c:9b:4c:87:4b:22:b7:62:d0:df:cf:3d:31:62:01: 0a:2e:47:d7:58:66:0e:25:79:96:44:c9:58:f1:c9: 90:b1:a2:3e:fd:78:e9:47:ea:07:bf:70:b2:b8:70: 20:0f:57:00:96:a5:c6:ec:36:b5:d7:97:3d:91:f9: b0:8e:97:d6:a3:7e:3a:c8:31:39:4b:13:b3:3f:ab: fb:5b:d9:8c:0e:5d:34:b0:ab:78:9f:79:b9:a0:28: 41:7a:43:90:95:fa:f4:e6:1e:13:84:56:43:26:f6: f3:0b:f5:c5:ed:18:c9:48:08:09:9f:c1:ca:8b:81: 17:28:ed:32:5e:4d:c4:a3:e6:86:d2:33:7a:14:32: ca:b9:a5:7e:e9:89:68:52:7a:9c:bf:7f:22:44:a1: 7e:7b:8a:4f:6e:71:ff:44:c7:5c:f7:1c:0d:2f:52: 2f:1a:4c:3f:5c:f6:74:44:40:3e:08:97:81:cd:41: 70:43:cb:56:cf:00:f9:5c:7a:b4:4d:f0:8d:f6:ec: 3c:c2:5a:b8:58:bf:f1:0f:cc:25:24:ff:8c:80:21: 32:10:50:33:ca:8d:e9:de:ab:f0:75:fc:87:54:78: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F7:F3:FA:AA:F5:4C:FF:2C:F2:74:48:1E:F4:4E:C9:22:FB:A1:27 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b3:b0:8b:18:1c:09:67:5c:1a:9d:60:b5:21:13:05:81:1c: 64:ae:41:e7:11:cb:ec:4a:d5:e6:a0:02:2a:a8:f1:bc:03:65: e1:a2:c6:ac:0c:27:22:8c:26:b7:ea:cb:70:b6:d3:e2:5b:8d: 2e:9a:b8:0e:37:08:f1:ab:cd:f9:5e:67:2e:1d:a9:b8:98:a5: 7c:65:0b:ce:52:a5:7d:56:1e:79:ff:11:b9:3c:f1:0d:16:15: 55:92:75:62:6b:e5:32:7f:34:6a:f2:ee:48:a8:a6:2f:9c:45: 4e:45:3e:7b:c9:50:f1:41:0f:90:e5:7d:19:2b:b2:7f:87:6d: f0:fd:0e:64:fe:fb:cb:1d:08:44:aa:08:78:64:d8:b0:39:f4: 93:fc:c6:aa:37:f1:6e:3b:f5:0e:c3:5c:31:ca:a2:94:87:e3: d8:ca:47:fa:60:d3:60:50:ad:8e:8f:97:d1:eb:57:7a:20:ad: 4b:29:27:17:d8:25:44:4f:bf:bc:cd:f7:e6:6f:2e:b1:32:36: 8d:24:e1:92:c0:4e:2f:0a:5e:4e:24:14:46:87:a4:c1:6a:ba: c5:0d:5e:18:f3:fd:f7:2d:17:46:3f:7e:c2:48:e8:f7:7d:fc: d1:74:ad:69:d3:ac:c0:22:b2:7d:1f:52:7c:87:cd:31:43:95: f2:08:d7:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaU7HiHyJntQ2MA68l5MbOUEUpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTEyMTIxNDU2MzVaFw0yNTEyMTYwMDQwMzVaMDMxMTAvBgNV BAMTKDhDRjdGM0ZBQUFGNTRDRkYyQ0YyNzQ0ODFFRjQ0RUM5MjJGQkExMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirjw9sw/wmGq6SpVQg8gOcO9z 3/EGGnb7iZzjVpybTIdLIrdi0N/PPTFiAQouR9dYZg4leZZEyVjxyZCxoj79eOlH 6ge/cLK4cCAPVwCWpcbsNrXXlz2R+bCOl9ajfjrIMTlLE7M/q/tb2YwOXTSwq3if ebmgKEF6Q5CV+vTmHhOEVkMm9vML9cXtGMlICAmfwcqLgRco7TJeTcSj5obSM3oU Msq5pX7piWhSepy/fyJEoX57ik9ucf9Ex1z3HA0vUi8aTD9c9nREQD4Il4HNQXBD y1bPAPlcerRN8I327DzCWrhYv/EPzCUk/4yAITIQUDPKjeneq/B1/IdUeG0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjPfz+qr1TP8s8nRIHvROySL7oScwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmzsIsYHAlnXBqdYLUhEwWBHGSuQecRy+xK 1eagAiqo8bwDZeGixqwMJyKMJrfqy3C20+JbjS6auA43CPGrzfleZy4dqbiYpXxl C85SpX1WHnn/Ebk88Q0WFVWSdWJr5TJ/NGry7kiopi+cRU5FPnvJUPFBD5DlfRkr sn+HbfD9DmT++8sdCESqCHhk2LA59JP8xqo38W479Q7DXDHKopSH49jKR/pg02BQ rY6Pl9HrV3ogrUspJxfYJURPv7zN9+ZvLrEyNo0k4ZLATi8KXk4kFEaHpMFqusUN Xhjz/fctF0Y/fsJI6Pd9/NF0rWnTrMAisn0fUnyHzTFDlfII1xg= -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:32 2025 by rpki-client