This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: U24YbLHNvj5DgDBgKDjhnyeiipt9uHgP2Kw0EHfpsyY= Subject key identifier: F9:6C:06:B5:56:99:19:5E:0D:63:88:44:61:48:58:05:22:C9:2B:34 Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 471484456140F0EDCD87427D67EBA79142A4845B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 020A Signing time: Tue 02 Dec 2025 10:32:18 +0000 Manifest this update: Tue 02 Dec 2025 10:27:18 +0000 Manifest next update: Fri 05 Dec 2025 11:33:18 +0000 Files and hashes: 1: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: m9+wO3pQLEKWz4fDFjgGc4mXDzPaIaqHejitZFc4QAs=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:14:84:45:61:40:f0:ed:cd:87:42:7d:67:eb:a7:91:42:a4:84:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Dec 2 10:27:18 2025 GMT Not After : Dec 5 11:33:18 2025 GMT Subject: CN=F96C06B55699195E0D6388446148580522C92B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:69:b0:25:ca:69:ae:02:e2:92:18:ef:eb:7a: 85:8f:bf:ca:3a:e7:0e:8b:f0:ef:1d:f2:f2:d6:54: fe:c3:78:c0:f5:83:91:49:89:6b:b6:76:5a:bc:5c: 3f:63:08:48:1e:42:65:d0:e0:cc:5d:ea:64:22:c4: 5f:a4:fb:7b:11:a8:ce:22:20:5f:dc:90:f9:e0:3c: f2:3c:c5:88:a4:55:e4:12:1e:86:6d:ba:3a:ea:7c: 1c:b3:aa:d4:03:ec:97:d6:26:9d:b8:6e:d0:2e:b2: 9c:20:65:74:23:46:bf:82:52:77:6b:3c:7f:18:58: 9d:5b:c2:03:1b:c8:d3:4d:9a:dd:1e:f0:8d:63:91: 3f:3a:36:7b:ec:37:f5:eb:0e:cc:4e:c6:e3:de:34: ad:da:c8:70:a7:9b:f0:f6:72:ff:fb:42:c4:e5:89: e5:d6:eb:ce:e2:74:b8:60:df:d4:b4:7e:b8:50:e8: d0:7a:c7:ab:39:38:fc:ff:59:bb:f7:2e:b8:23:8e: 6f:ae:d0:de:dd:e3:8a:cb:69:5f:2f:06:b4:7c:37: 40:b0:28:89:d0:f5:41:61:63:8a:6a:5a:f2:69:14: 7e:10:9f:6f:e6:f3:03:d4:94:37:92:8c:99:f4:9c: 0b:a4:09:8c:0b:cb:0d:5a:b6:b7:fb:a5:90:15:9e: 22:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6C:06:B5:56:99:19:5E:0D:63:88:44:61:48:58:05:22:C9:2B:34 X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:83:cb:88:9e:6a:69:bc:ae:5a:a7:d7:87:81:0e:c0:b7:be: 85:5b:b6:17:c7:a8:c3:fb:41:75:46:8a:c0:2e:2c:9e:b1:81: 01:f9:79:14:be:ef:e1:0f:84:82:5b:cd:00:83:6f:e5:38:8c: 3d:ef:d6:74:7c:dd:c6:27:f5:ad:0c:34:17:37:6d:cb:37:1c: 30:9e:6e:23:1c:8a:f9:6d:cb:be:5e:12:fd:e9:78:bd:26:b0: d3:aa:b9:ca:7c:55:36:d6:0b:60:a3:4b:47:01:e7:51:a6:5d: eb:9f:48:85:4c:22:cd:f6:6c:00:df:fa:ad:58:c6:ac:10:5f: 77:d1:ac:ab:81:98:51:b1:25:73:ac:28:40:fc:bf:02:1f:ec: 83:f6:95:42:80:f0:d1:fb:ae:86:e5:7d:3e:58:25:ef:fe:08: c9:d4:c3:ce:f2:cf:80:3a:cf:32:54:90:d8:4c:ae:08:e0:5d: eb:31:d4:39:68:0e:d7:7e:65:37:9f:8a:d6:f1:e4:26:83:94: 41:17:7a:79:62:f1:7f:cc:5e:a4:da:79:e9:cf:42:a6:df:3f: 4a:f8:72:c8:97:b0:85:ae:74:ca:19:6b:d8:56:1d:53:ac:d0: 03:91:5f:f4:0c:3b:fd:cb:67:9b:8b:3a:3e:41:35:bc:33:85: 35:4f:6b:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURxSERWFA8O3Nh0J9Z+unkUKkhFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNTEyMDIxMDI3MThaFw0yNTEyMDUxMTMzMThaMDMxMTAvBgNV BAMTKEY5NkMwNkI1NTY5OTE5NUUwRDYzODg0NDYxNDg1ODA1MjJDOTJCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEabAlymmuAuKSGO/reoWPv8o6 5w6L8O8d8vLWVP7DeMD1g5FJiWu2dlq8XD9jCEgeQmXQ4Mxd6mQixF+k+3sRqM4i IF/ckPngPPI8xYikVeQSHoZtujrqfByzqtQD7JfWJp24btAuspwgZXQjRr+CUndr PH8YWJ1bwgMbyNNNmt0e8I1jkT86NnvsN/XrDsxOxuPeNK3ayHCnm/D2cv/7QsTl ieXW687idLhg39S0frhQ6NB6x6s5OPz/Wbv3Lrgjjm+u0N7d44rLaV8vBrR8N0Cw KInQ9UFhY4pqWvJpFH4Qn2/m8wPUlDeSjJn0nAukCYwLyw1atrf7pZAVniL7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+WwGtVaZGV4NY4hEYUhYBSLJKzQwHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeDy4ieamm8rlqn14eBDsC3voVbthfHqMP7 QXVGisAuLJ6xgQH5eRS+7+EPhIJbzQCDb+U4jD3v1nR83cYn9a0MNBc3bcs3HDCe biMcivlty75eEv3peL0msNOqucp8VTbWC2CjS0cB51GmXeufSIVMIs32bADf+q1Y xqwQX3fRrKuBmFGxJXOsKED8vwIf7IP2lUKA8NH7roblfT5YJe/+CMnUw87yz4A6 zzJUkNhMrgjgXesx1DloDtd+ZTefitbx5CaDlEEXenli8X/MXqTaeenPQqbfP0r4 csiXsIWudMoZa9hWHVOs0AORX/QMO/3LZ5uLOj5BNbwzhTVPayg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:51 2025 by rpki-client