This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft File: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft (raw, json) Hash identifier: 1WFWzCr4n6HJ3IZXnatgRPmaK+suGUG7SSczBz2PHZc= Subject key identifier: 6E:A3:8E:85:14:7C:0B:8C:AE:2D:F3:77:AB:3C:08:43:1E:1A:E6:97 Authority key identifier: 8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 Certificate issuer: /CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Certificate serial: 264FD1590043D1074C132BAB7DA67CAA61DF62AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft Manifest number: D7 Signing time: Wed 17 Dec 2025 21:20:50 +0000 Manifest this update: Wed 17 Dec 2025 21:15:50 +0000 Manifest next update: Sun 21 Dec 2025 02:48:50 +0000 Files and hashes: 1: 3136302e32322e3235302e302f32332d3233203d3e20313430343536.roa (hash: NLnyyxEhnshl8M0vZmmh6y422VBLzdBQzG682UNLOQc=) 2: 8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl (hash: ZrCaLfOFDZP1UaT8YtO9dR/wWGoHVsM1+7FwMaziDvE=) 3: 3136302e32322e3235302e302f32342d3234203d3e20313430343536.roa (hash: OJeztSNPa6Ny2Jrl9pv1yxSSkQT/t6rbcjh/ieoX/VA=) 4: 3136302e32322e3235312e302f32342d3234203d3e20313430343536.roa (hash: 9NuukBIDDZ7f6DuKuIwjkGDhtnMzcPyVVkUYuDF3dPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:4f:d1:59:00:43:d1:07:4c:13:2b:ab:7d:a6:7c:aa:61:df:62:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36 Validity Not Before: Dec 17 21:15:50 2025 GMT Not After : Dec 21 02:48:50 2025 GMT Subject: CN=6EA38E85147C0B8CAE2DF377AB3C08431E1AE697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ec:f2:0b:05:ea:9a:78:5b:87:76:66:f2:9b: d4:ef:b4:77:1e:57:f3:5b:eb:cf:64:06:d5:bb:3a: 5b:91:da:4e:52:aa:ff:50:45:8b:a3:90:d9:53:cf: 2a:ce:95:7a:51:36:aa:f1:9e:1b:1e:33:4f:85:ca: d4:78:cf:7b:b9:8a:ee:91:f9:c6:fb:83:aa:60:86: c2:9f:ae:46:8a:14:ad:59:18:14:f2:fe:7d:f7:b6: 39:d7:11:78:c9:2b:fd:bf:a7:47:18:e6:cd:49:8b: f6:fa:2f:76:54:94:15:b5:8b:f8:58:94:85:49:26: 1c:46:18:0b:d3:66:01:50:b7:7d:90:cf:b9:2f:f7: 8b:a0:21:41:6d:2a:dc:ca:fb:b5:38:98:59:22:e6: b8:5b:9a:ca:09:27:f1:2a:ba:81:ea:65:27:91:ea: 9a:a3:3b:da:8e:90:bf:d7:71:90:1a:bb:5e:57:32: 48:31:90:14:f4:90:d5:7a:1c:67:ce:fd:3b:ef:4f: ca:e9:8a:2a:e4:e5:0d:19:da:82:0a:a9:84:a9:15: c2:50:d9:72:63:62:5b:f4:50:2d:b2:53:4c:1e:af: 9c:09:f5:32:ac:6d:47:fc:86:e6:17:c0:46:ab:d7: 82:26:f4:3a:f3:89:28:2c:50:d9:68:70:77:79:a6: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A3:8E:85:14:7C:0B:8C:AE:2D:F3:77:AB:3C:08:43:1E:1A:E6:97 X509v3 Authority Key Identifier: keyid:8E:20:59:B2:D2:44:85:85:D1:1E:D2:B0:14:3F:EF:C0:E9:B2:DA:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/908ab157-d827-49a8-bb86-28be131c3d26/0/8E2059B2D2448585D11ED2B0143FEFC0E9B2DA36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:1a:42:be:db:f6:67:a1:93:ee:c9:83:84:9f:88:37:58:65: 83:f8:83:1a:19:a8:c0:9d:ec:43:4e:8a:68:c3:91:49:af:36: 55:6a:7a:9c:bb:37:22:ab:14:ee:0d:8f:fb:20:56:be:94:ac: 2e:d8:dc:83:d7:c2:b0:64:b9:78:89:a7:52:4c:b3:4a:32:75: 9d:81:d7:6a:03:88:8e:aa:5d:60:f7:b4:2f:98:74:27:de:89: 10:f0:42:ce:7b:a4:25:bc:2f:df:4a:ac:55:1c:4b:38:73:cc: fa:2e:51:90:db:0c:9e:50:0c:e5:0b:68:71:82:01:7e:ce:8c: 53:12:4e:3b:a7:9e:35:66:72:80:6c:3e:21:0b:28:b0:8f:56: 6f:75:87:cc:e9:10:be:a7:0f:6f:d5:55:96:3b:f9:53:9b:b6: 69:32:b5:c0:42:aa:50:e4:91:2d:3a:a0:f0:af:fe:52:1c:2f: 4f:f0:d1:c9:6a:d6:3d:bf:65:a9:0c:50:84:00:89:2d:1c:d9: 36:0d:b4:44:b9:bc:13:cd:d6:80:33:e4:6f:ec:55:7b:33:d5: 9d:a0:2a:ec:6a:9f:88:36:bc:83:24:f4:90:57:d9:9e:5b:35: bc:24:a2:c2:f8:f7:63:fe:10:a3:f7:73:ef:4f:d3:e6:12:79: 28:78:1d:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJk/RWQBD0QdMEyurfaZ8qmHfYq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBF OUIyREEzNjAeFw0yNTEyMTcyMTE1NTBaFw0yNTEyMjEwMjQ4NTBaMDMxMTAvBgNV BAMTKDZFQTM4RTg1MTQ3QzBCOENBRTJERjM3N0FCM0MwODQzMUUxQUU2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq7PILBeqaeFuHdmbym9TvtHce V/Nb689kBtW7OluR2k5Sqv9QRYujkNlTzyrOlXpRNqrxnhseM0+FytR4z3u5iu6R +cb7g6pghsKfrkaKFK1ZGBTy/n33tjnXEXjJK/2/p0cY5s1Ji/b6L3ZUlBW1i/hY lIVJJhxGGAvTZgFQt32Qz7kv94ugIUFtKtzK+7U4mFki5rhbmsoJJ/EquoHqZSeR 6pqjO9qOkL/XcZAau15XMkgxkBT0kNV6HGfO/TvvT8rpiirk5Q0Z2oIKqYSpFcJQ 2XJjYlv0UC2yU0wer5wJ9TKsbUf8huYXwEar14Im9DrziSgsUNlocHd5ppajAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbqOOhRR8C4yuLfN3qzwIQx4a5pcwHwYDVR0j BBgwFoAUjiBZstJEhYXRHtKwFD/vwOmy2jYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDhhYjE1Ny1kODI3LTQ5YTgtYmI4Ni0yOGJlMTMxYzNkMjYvMC84RTIwNTlCMkQy NDQ4NTg1RDExRUQyQjAxNDNGRUZDMEU5QjJEQTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVGQzBFOUIy REEzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA4YWIxNTctZDgyNy00OWE4LWJi ODYtMjhiZTEzMWMzZDI2LzAvOEUyMDU5QjJEMjQ0ODU4NUQxMUVEMkIwMTQzRkVG QzBFOUIyREEzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAaQr7b9mehk+7Jg4SfiDdYZYP4gxoZqMCd 7ENOimjDkUmvNlVqepy7NyKrFO4Nj/sgVr6UrC7Y3IPXwrBkuXiJp1JMs0oydZ2B 12oDiI6qXWD3tC+YdCfeiRDwQs57pCW8L99KrFUcSzhzzPouUZDbDJ5QDOULaHGC AX7OjFMSTjunnjVmcoBsPiELKLCPVm91h8zpEL6nD2/VVZY7+VObtmkytcBCqlDk kS06oPCv/lIcL0/w0clq1j2/ZakMUIQAiS0c2TYNtES5vBPN1oAz5G/sVXsz1Z2g Kuxqn4g2vIMk9JBX2Z5bNbwkosL492P+EKP3c+9P0+YSeSh4HS4= -----END CERTIFICATE-----Generated at Fri Dec 19 09:15:43 2025 by rpki-client