This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: Dfwqdeh454jyIiszr8Si1PiJyYHEeQFqA19U0fbM1mc= Subject key identifier: 33:3E:6B:F4:AC:32:94:EE:B2:77:A6:8A:ED:26:34:BA:5B:16:D3:EC Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 563266DF68D7335268AB94E5CB2972882097B490 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 052C Signing time: Tue 02 Dec 2025 11:23:40 +0000 Manifest this update: Tue 02 Dec 2025 11:18:40 +0000 Manifest next update: Fri 05 Dec 2025 14:36:40 +0000 Files and hashes: 1: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 3: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) 4: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: fFVnY73eb6q7ixyWNgXFMw+1is0a8LIOR6zG+6GKTP0=) 5: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 14:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:32:66:df:68:d7:33:52:68:ab:94:e5:cb:29:72:88:20:97:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Dec 2 11:18:40 2025 GMT Not After : Dec 5 14:36:40 2025 GMT Subject: CN=333E6BF4AC3294EEB277A68AED2634BA5B16D3EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ad:7b:37:2f:ea:73:05:10:6b:30:36:f2:1b: e9:e4:87:3f:46:dd:32:08:a1:64:fb:a0:66:69:a0: 30:d3:8e:e3:3f:c6:46:09:02:a7:a7:57:19:76:14: 55:b1:50:ed:18:dc:28:bf:90:e0:8c:fc:35:4c:11: 43:47:64:e4:cc:a8:56:0c:b1:88:8b:6a:56:a3:89: b7:17:af:1a:cc:3a:d5:bc:5d:b7:ad:0b:48:32:70: 87:d7:65:45:0c:bd:ae:cb:45:0f:7e:98:2d:d0:e2: 33:c4:84:f4:94:3b:8e:4d:2f:b6:9e:f4:bf:48:d1: 23:4d:3f:c8:15:23:6f:a1:64:4e:26:7e:30:83:27: 5c:bb:c5:0f:ca:de:f0:ef:0c:9a:02:71:4c:dd:24: 15:1e:8e:42:71:d7:92:5a:4b:16:33:b2:7c:3c:48: 86:dc:8d:63:9a:84:cb:1e:60:24:87:14:91:ab:21: d8:c5:fb:c0:e1:4a:65:a9:38:ea:0d:ba:ea:c7:c5: ac:af:7c:6c:e9:49:92:1a:d6:cc:0f:d3:21:51:7c: 9c:2b:40:d4:c2:74:2c:80:e3:17:ae:e9:8e:7a:b3: 1b:a9:ef:53:bb:af:d8:35:2d:fc:1d:1a:e2:ca:ba: b4:be:42:da:c8:fe:6c:d8:bc:04:60:cf:4f:e4:a9: 96:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:6B:F4:AC:32:94:EE:B2:77:A6:8A:ED:26:34:BA:5B:16:D3:EC X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4b:d0:d8:c9:d8:4a:49:20:63:b6:22:79:85:3e:ec:5a:91: 35:f1:ac:75:52:1e:73:d0:7f:ef:51:37:f5:a3:16:4e:43:d8: 2f:d1:13:73:9f:f9:f6:35:57:61:ed:67:75:6e:d5:50:6e:5d: a1:c8:f4:0c:b1:9a:80:f5:36:51:87:30:b2:e7:91:98:ce:27: 68:ec:4e:6d:98:97:22:58:71:18:85:bf:cc:d0:0c:c6:fb:a7: 91:92:95:d8:ee:5b:ed:b5:a9:84:60:86:e8:6f:5e:a3:5d:31: 12:80:05:fb:60:f6:68:4e:50:b7:94:b4:6e:46:52:58:a8:62: ed:17:5c:c5:dc:c0:bb:c4:7f:8f:3c:f3:dc:b3:12:8e:95:22: 5f:0f:58:5f:be:34:68:e8:66:04:b4:fa:2f:3e:8b:bc:be:13: a8:81:fa:05:e4:e1:fd:fb:d1:25:7d:47:03:52:3a:8b:a9:5c: 8d:4d:a7:b9:9c:0f:68:27:1d:57:cc:88:1f:cd:8f:0f:84:50: 0c:df:79:7c:f2:3d:50:33:6a:4a:ce:9b:20:95:9f:2f:67:19: 72:7d:0a:68:32:0a:97:00:02:2b:66:82:a1:2f:6c:e0:94:53: 20:8a:a9:8a:c6:25:3d:f2:ae:c5:7d:df:6e:f1:bf:ab:92:82: d4:82:22:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVjJm32jXM1Joq5TlyylyiCCXtJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTEyMDIxMTE4NDBaFw0yNTEyMDUxNDM2NDBaMDMxMTAvBgNV BAMTKDMzM0U2QkY0QUMzMjk0RUVCMjc3QTY4QUVEMjYzNEJBNUIxNkQzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rXs3L+pzBRBrMDbyG+nkhz9G 3TIIoWT7oGZpoDDTjuM/xkYJAqenVxl2FFWxUO0Y3Ci/kOCM/DVMEUNHZOTMqFYM sYiLalajibcXrxrMOtW8XbetC0gycIfXZUUMva7LRQ9+mC3Q4jPEhPSUO45NL7ae 9L9I0SNNP8gVI2+hZE4mfjCDJ1y7xQ/K3vDvDJoCcUzdJBUejkJx15JaSxYzsnw8 SIbcjWOahMseYCSHFJGrIdjF+8DhSmWpOOoNuurHxayvfGzpSZIa1swP0yFRfJwr QNTCdCyA4xeu6Y56sxup71O7r9g1LfwdGuLKurS+QtrI/mzYvARgz0/kqZabAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMz5r9KwylO6yd6aK7SY0ulsW0+wwHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9L0NjJ2EpJIGO2InmFPuxakTXxrHVSHnPQ f+9RN/WjFk5D2C/RE3Of+fY1V2HtZ3Vu1VBuXaHI9AyxmoD1NlGHMLLnkZjOJ2js Tm2YlyJYcRiFv8zQDMb7p5GSldjuW+21qYRghuhvXqNdMRKABftg9mhOULeUtG5G UlioYu0XXMXcwLvEf48889yzEo6VIl8PWF++NGjoZgS0+i8+i7y+E6iB+gXk4f37 0SV9RwNSOoupXI1Np7mcD2gnHVfMiB/Njw+EUAzfeXzyPVAzakrOmyCVny9nGXJ9 CmgyCpcAAitmgqEvbOCUUyCKqYrGJT3yrsV9327xv6uSgtSCInc= -----END CERTIFICATE-----Generated at Wed Dec 3 13:59:46 2025 by rpki-client