This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: 26wNgpDfwycTrzME4lWl3sFfkZnQbVdudhvj4f8ODCo= Subject key identifier: 99:A0:03:6A:3A:1D:99:24:9B:3E:2D:E5:A2:3B:83:DF:EB:97:25:BF Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 45F015A26156C96631517E3EE16B9387D0F4B526 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 022A Signing time: Tue 02 Dec 2025 13:21:35 +0000 Manifest this update: Tue 02 Dec 2025 13:16:35 +0000 Manifest next update: Fri 05 Dec 2025 17:56:35 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: zVqo2HpHx+twXb1FWbiE4U0oHW/j78k6C/3I5bBEqc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:56:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f0:15:a2:61:56:c9:66:31:51:7e:3e:e1:6b:93:87:d0:f4:b5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Dec 2 13:16:35 2025 GMT Not After : Dec 5 17:56:35 2025 GMT Subject: CN=99A0036A3A1D99249B3E2DE5A23B83DFEB9725BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7c:56:02:cf:8d:39:86:95:de:c5:c7:11:3d: 2d:bd:f0:44:1d:de:e7:fd:e7:2a:b7:b0:75:df:ad: 12:dd:1c:6f:38:2e:ac:d6:41:02:f2:48:26:c5:4d: 14:d4:b7:5b:ea:6c:6b:8d:5f:c1:01:8b:50:73:e8: 0a:71:49:8c:0b:33:03:30:34:62:88:03:eb:a1:f4: 5a:24:97:f7:4f:b5:fe:34:f3:26:05:d4:4a:73:38: bb:46:b4:8b:ea:cc:36:92:91:08:d9:38:61:2c:40: 4f:90:b4:09:aa:8a:d7:df:42:99:d7:d2:22:ab:6a: 29:a4:67:4b:bf:0f:f7:ca:5d:9b:b1:0e:8e:fd:e2: 51:17:3d:e9:06:f9:cf:d9:25:72:8e:ab:98:83:72: 86:6f:df:25:5b:6e:03:f4:4f:06:0c:3d:0f:31:f7: 47:bf:88:d9:98:b9:f5:3a:71:77:ee:d0:62:93:72: 66:4d:a8:02:98:61:38:67:87:ad:f4:74:96:6d:e5: 69:7e:39:86:f5:29:71:25:b3:03:e3:f7:64:39:9b: 20:93:9d:20:a8:63:59:bf:6a:bb:1b:5b:e8:22:24: 76:95:0b:d4:8b:fe:69:ce:50:48:6d:f6:4b:49:48: 6d:af:3c:fb:06:0e:59:68:d6:aa:00:3a:59:46:9e: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A0:03:6A:3A:1D:99:24:9B:3E:2D:E5:A2:3B:83:DF:EB:97:25:BF X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:35:f8:24:45:c9:78:59:b1:45:82:58:78:80:d1:37:af:b8: e7:d9:e3:f9:5e:88:5a:ba:4c:e4:ed:2c:62:00:18:95:37:5e: 49:a3:60:04:88:58:e2:67:fc:83:4f:b9:04:2f:06:37:ae:97: 7a:a7:f2:c6:4c:c7:a7:67:52:e8:75:4d:d4:ee:61:18:fc:30: 9e:f4:09:a1:c4:97:db:4b:6d:0a:a6:87:fc:a5:b3:d3:f2:95: 83:dd:b8:56:9c:46:1a:c7:99:3d:51:c0:83:dc:1f:7e:6a:9b: 29:0e:c4:56:a0:68:fe:11:ac:07:c6:9f:1b:bc:61:42:35:7f: 26:4b:0a:b8:34:19:fb:8b:21:19:e6:ee:c1:b9:aa:7f:75:7d: 64:68:2b:e8:f1:ec:9e:75:6c:3e:e4:45:ed:c3:dd:5c:ff:52: 09:0d:a3:6e:c2:ab:a1:10:b3:e5:f6:84:11:7c:18:c3:20:17: f4:78:04:27:a5:25:9d:e3:eb:33:4a:0d:d8:a3:be:57:e0:3c: 47:47:a5:e9:04:78:05:4a:92:d8:3a:c4:f0:87:32:45:fb:6c: 0b:f5:e3:b6:92:dc:4b:f6:f1:bd:ea:6a:6b:db:94:fc:ba:8a: 72:0b:9c:78:b2:92:1e:8a:57:39:f9:6f:5a:fc:6c:6d:63:1a: 7f:19:1c:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfAVomFWyWYxUX4+4WuTh9D0tSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTEyMDIxMzE2MzVaFw0yNTEyMDUxNzU2MzVaMDMxMTAvBgNV BAMTKDk5QTAwMzZBM0ExRDk5MjQ5QjNFMkRFNUEyM0I4M0RGRUI5NzI1QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUfFYCz405hpXexccRPS298EQd 3uf95yq3sHXfrRLdHG84LqzWQQLySCbFTRTUt1vqbGuNX8EBi1Bz6ApxSYwLMwMw NGKIA+uh9Fokl/dPtf408yYF1EpzOLtGtIvqzDaSkQjZOGEsQE+QtAmqitffQpnX 0iKraimkZ0u/D/fKXZuxDo794lEXPekG+c/ZJXKOq5iDcoZv3yVbbgP0TwYMPQ8x 90e/iNmYufU6cXfu0GKTcmZNqAKYYThnh630dJZt5Wl+OYb1KXElswPj92Q5myCT nSCoY1m/arsbW+giJHaVC9SL/mnOUEht9ktJSG2vPPsGDllo1qoAOllGnowBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmaADajodmSSbPi3lojuD3+uXJb8wHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQ1+CRFyXhZsUWCWHiA0TevuOfZ4/leiFq6 TOTtLGIAGJU3XkmjYASIWOJn/INPuQQvBjeul3qn8sZMx6dnUuh1TdTuYRj8MJ70 CaHEl9tLbQqmh/yls9PylYPduFacRhrHmT1RwIPcH35qmykOxFagaP4RrAfGnxu8 YUI1fyZLCrg0GfuLIRnm7sG5qn91fWRoK+jx7J51bD7kRe3D3Vz/UgkNo27Cq6EQ s+X2hBF8GMMgF/R4BCelJZ3j6zNKDdijvlfgPEdHpekEeAVKktg6xPCHMkX7bAv1 47aS3Ev28b3qamvblPy6inILnHiykh6KVzn5b1r8bG1jGn8ZHEo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:52:42 2025 by rpki-client