This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: tITnnNy0brs8opVxo43A/XnTrD3pAGoGB+7hpOS/nZQ= Subject key identifier: 3D:97:94:25:73:26:55:B6:D9:1C:DE:3E:82:E8:12:E2:25:1A:DB:75 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 4489A04EC106139622E960A8DAAF510F27E596F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02F5 Signing time: Mon 01 Dec 2025 14:21:00 +0000 Manifest this update: Mon 01 Dec 2025 14:16:00 +0000 Manifest next update: Thu 04 Dec 2025 15:30:00 +0000 Files and hashes: 1: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: y8Tavx7YZVh1ctoEaDHtUQR3QOK40zfIZ280C2AaEJ0=) 2: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:89:a0:4e:c1:06:13:96:22:e9:60:a8:da:af:51:0f:27:e5:96:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Dec 1 14:16:00 2025 GMT Not After : Dec 4 15:30:00 2025 GMT Subject: CN=3D979425732655B6D91CDE3E82E812E2251ADB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:63:e0:fb:36:eb:19:4a:36:a6:23:2e:79:e6: 56:3e:ed:9a:3d:73:d4:31:44:02:58:4d:c1:53:6a: f3:05:55:76:45:fe:ea:f0:d4:ec:22:fc:68:1a:3a: 30:cc:13:de:88:aa:d4:92:c3:df:29:6d:c9:1d:00: 06:ed:9d:37:60:a9:fa:41:6d:dd:dd:f0:b4:fe:da: d1:47:2f:02:5c:8f:22:44:88:26:49:41:38:9a:65: a9:e1:6a:4f:ba:90:e6:4f:de:0b:ca:13:2a:66:ac: e8:c8:cf:67:27:55:d7:e1:20:8b:88:b7:10:e8:aa: 80:86:a5:1f:81:e3:dd:5a:32:c3:2e:79:3f:93:7d: a4:1c:68:21:0b:9a:41:66:c0:45:39:d7:0a:e1:ee: dc:08:87:61:26:80:38:17:bc:95:aa:ab:fd:25:48: 43:0d:b7:e6:2a:d2:c2:ff:3f:a1:8e:85:ed:e3:2e: 1e:93:20:fe:0f:c0:4b:57:20:a2:9b:ba:f8:7e:64: 59:2f:f3:70:d7:f4:2d:1b:6e:61:5d:c0:1d:92:f1: 40:39:7f:e4:77:d5:f6:09:2e:13:e0:d3:31:da:ec: 21:25:9d:25:da:be:8f:1a:cd:ce:0e:66:0f:5c:9c: 47:6b:78:ec:d6:34:dd:c0:79:97:02:20:ed:85:e0: 18:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:97:94:25:73:26:55:B6:D9:1C:DE:3E:82:E8:12:E2:25:1A:DB:75 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:30:65:0f:9d:bc:e2:09:c9:97:b6:22:3e:cc:69:14:62: b8:3f:71:ba:a5:9a:5e:e6:48:49:b5:91:c0:28:b3:82:50:17: d4:16:28:43:9e:c0:62:d8:c0:e6:6c:0b:64:4b:68:59:b0:c4: 05:76:05:6c:c9:68:e8:53:d7:e4:62:2d:95:1c:ed:cf:c0:ef: 16:4a:db:97:e8:e0:a4:76:ac:35:1c:51:4c:29:5b:f5:fe:dc: 5b:01:c0:9b:93:a3:06:22:b0:dc:1d:59:af:25:54:5f:e2:c7: 86:6a:3e:63:d5:ea:ad:e2:25:4a:d0:4f:bc:3a:8b:70:d0:2a: 64:e0:68:10:dd:65:08:56:a5:2a:2b:dc:3b:0f:8e:f3:f1:a6: 5c:e4:c8:67:53:9e:ee:2c:b3:0b:df:d6:4f:15:c4:b2:f2:60: 54:21:2f:5a:a5:9d:8f:7a:8e:bf:f2:1b:0a:0a:1c:ed:7f:c9: 81:ac:c1:3b:95:7e:4f:99:29:22:d4:4c:44:d3:e8:b2:6a:28: a5:94:98:00:48:8e:9a:24:4f:72:14:fc:b8:a7:d2:4c:0c:90: f7:17:a7:6f:f6:08:6f:03:7f:b9:1b:4b:eb:72:aa:31:40:44: 12:06:89:39:10:4c:a4:c2:4e:21:7d:19:f7:95:f8:bf:d8:3e: fd:20:95:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURImgTsEGE5Yi6WCo2q9RDyfllvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTEyMDExNDE2MDBaFw0yNTEyMDQxNTMwMDBaMDMxMTAvBgNV BAMTKDNEOTc5NDI1NzMyNjU1QjZEOTFDREUzRTgyRTgxMkUyMjUxQURCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqY+D7NusZSjamIy555lY+7Zo9 c9QxRAJYTcFTavMFVXZF/urw1Owi/GgaOjDME96IqtSSw98pbckdAAbtnTdgqfpB bd3d8LT+2tFHLwJcjyJEiCZJQTiaZanhak+6kOZP3gvKEypmrOjIz2cnVdfhIIuI txDoqoCGpR+B491aMsMueT+TfaQcaCELmkFmwEU51wrh7twIh2EmgDgXvJWqq/0l SEMNt+Yq0sL/P6GOhe3jLh6TIP4PwEtXIKKbuvh+ZFkv83DX9C0bbmFdwB2S8UA5 f+R31fYJLhPg0zHa7CElnSXavo8azc4OZg9cnEdreOzWNN3AeZcCIO2F4Bg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPZeUJXMmVbbZHN4+gugS4iUa23UwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEuMGUPnbziCcmXtiI+zGkUYrg/cbqlml7m SEm1kcAos4JQF9QWKEOewGLYwOZsC2RLaFmwxAV2BWzJaOhT1+RiLZUc7c/A7xZK 25fo4KR2rDUcUUwpW/X+3FsBwJuTowYisNwdWa8lVF/ix4ZqPmPV6q3iJUrQT7w6 i3DQKmTgaBDdZQhWpSor3DsPjvPxplzkyGdTnu4sswvf1k8VxLLyYFQhL1qlnY96 jr/yGwoKHO1/yYGswTuVfk+ZKSLUTETT6LJqKKWUmABIjpokT3IU/Lin0kwMkPcX p2/2CG8Df7kbS+tyqjFARBIGiTkQTKTCTiF9GfeV+L/YPv0glW4= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:07 2025 by rpki-client