This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: 2s7ECzUJ9HMGxoyPsiYAwXFMyApI4Y64B6rpxsP1a/Q= Subject key identifier: 9B:B1:67:3F:1B:83:02:D0:AD:CE:DA:3D:9A:FD:7C:DB:51:00:3A:D5 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 199C16A93143CC5674D5F33A011E4ED8DF7751B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0555 Signing time: Thu 25 Dec 2025 03:02:35 +0000 Manifest this update: Thu 25 Dec 2025 02:57:35 +0000 Manifest next update: Sun 28 Dec 2025 03:28:35 +0000 Files and hashes: 1: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 2: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 3: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 4: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 5: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 6: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 7: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 8: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 9: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 10: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 11: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 12: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 13: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 14: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 15: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 16: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 17: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 18: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 19: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: 8rLhPZ1kO1OPhZMtRSj4vbuT69WDh/TKZCdll2MOUmQ=) 20: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: bZIz402y8HeI28WEFFpDnjFVUP7vZBGPQIM5w8kbN1g=) 21: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: wjB0B7XqN8X+iUsEoax/jQs6wBPS77jIVQKb4cjEBJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9c:16:a9:31:43:cc:56:74:d5:f3:3a:01:1e:4e:d8:df:77:51:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 25 02:57:35 2025 GMT Not After : Dec 28 03:28:35 2025 GMT Subject: CN=9BB1673F1B8302D0ADCEDA3D9AFD7CDB51003AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4b:f8:95:cb:2d:23:af:32:44:8e:e2:e2:16: c4:a0:c0:51:f8:49:16:c4:d7:d0:05:12:41:a2:4d: a0:b1:57:b4:b1:75:81:3b:33:db:b2:32:4f:9d:47: 85:b6:03:1d:d5:2c:61:07:8f:1f:1a:bf:27:d0:f9: 50:ec:3a:86:c7:8b:04:07:bb:6d:2f:19:6a:f5:fe: c4:6c:d3:b4:c5:87:dc:af:62:d9:d8:2f:1f:7d:bf: 39:68:bc:59:e9:63:87:c7:cf:6a:10:03:0e:95:77: 49:bb:34:3c:da:3c:cf:f4:db:2c:16:d6:21:0e:ba: 8a:26:24:f4:51:35:bd:a4:9e:37:b1:e7:cc:19:c1: 2f:72:cf:fe:9a:2b:b3:24:77:1e:78:91:d6:bd:71: 29:45:65:2d:eb:b2:73:ee:ec:23:bf:99:dc:7b:96: f8:6a:e6:91:a6:19:02:0b:c5:cf:9a:df:f7:e7:f2: ac:2c:a0:be:77:ea:9b:fa:95:b6:d8:6d:05:31:e5: b6:28:50:29:c5:43:ae:cd:f0:1c:2b:7e:2c:23:a2: 7e:cf:f2:02:34:af:3e:97:a6:dd:94:b2:a4:04:83: 4c:e8:69:30:ab:9a:45:3b:14:43:cc:13:9b:5a:e9: 99:10:ea:93:ac:fa:c9:04:e8:8a:17:b8:a8:64:43: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B1:67:3F:1B:83:02:D0:AD:CE:DA:3D:9A:FD:7C:DB:51:00:3A:D5 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5c:96:71:e1:c0:31:cc:b9:00:24:78:b1:30:77:f7:a9:bd: 33:8e:cc:e5:01:a8:11:66:f6:1b:d2:cb:71:ff:29:ec:21:38: c9:f8:77:cd:d1:20:53:59:ea:90:7c:a0:ed:ca:bf:1f:6b:af: 57:ac:2e:80:a4:a5:92:18:58:be:3c:cb:32:b1:78:d7:bd:8f: 29:33:c6:20:a4:f4:5f:d7:cd:7c:87:8c:04:41:38:0a:cb:2e: 52:05:d2:6d:97:59:28:e1:bf:0c:1e:a1:0c:f6:3b:4a:11:fe: 91:4d:27:81:95:ed:4a:19:19:3c:31:7e:ac:9b:af:64:6c:db: 0e:ea:10:83:4e:80:ea:f1:24:fd:5a:2e:7e:29:67:38:b4:1a: ff:9b:9f:d0:b3:a9:46:aa:5b:e4:01:96:55:c5:6a:4a:b5:bb: cd:90:db:b5:3b:7e:f8:0f:63:b9:20:16:f6:a5:89:48:fc:f7: 30:86:bc:96:48:fb:f5:fa:54:a6:eb:6c:6f:48:89:97:ae:77: 52:75:74:99:20:65:ee:d0:54:e0:df:8d:47:51:03:1c:5d:7c: c9:1c:33:5e:a6:a7:34:17:a3:79:b0:cc:c5:5b:9b:7a:a9:87: eb:d4:d3:7c:8f:61:8b:bf:cc:bc:f2:04:7b:8e:fa:94:6a:5b: da:cc:40:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZwWqTFDzFZ01fM6AR5O2N93UbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMjUwMjU3MzVaFw0yNTEyMjgwMzI4MzVaMDMxMTAvBgNV BAMTKDlCQjE2NzNGMUI4MzAyRDBBRENFREEzRDlBRkQ3Q0RCNTEwMDNBRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmS/iVyy0jrzJEjuLiFsSgwFH4 SRbE19AFEkGiTaCxV7SxdYE7M9uyMk+dR4W2Ax3VLGEHjx8avyfQ+VDsOobHiwQH u20vGWr1/sRs07TFh9yvYtnYLx99vzlovFnpY4fHz2oQAw6Vd0m7NDzaPM/02ywW 1iEOuoomJPRRNb2knjex58wZwS9yz/6aK7Mkdx54kda9cSlFZS3rsnPu7CO/mdx7 lvhq5pGmGQILxc+a3/fn8qwsoL536pv6lbbYbQUx5bYoUCnFQ67N8Bwrfiwjon7P 8gI0rz6Xpt2UsqQEg0zoaTCrmkU7FEPME5ta6ZkQ6pOs+skE6IoXuKhkQ5o7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7FnPxuDAtCtzto9mv1821EAOtUwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxclnHhwDHMuQAkeLEwd/epvTOOzOUBqBFm 9hvSy3H/KewhOMn4d83RIFNZ6pB8oO3Kvx9rr1esLoCkpZIYWL48yzKxeNe9jykz xiCk9F/XzXyHjARBOArLLlIF0m2XWSjhvwweoQz2O0oR/pFNJ4GV7UoZGTwxfqyb r2Rs2w7qEINOgOrxJP1aLn4pZzi0Gv+bn9CzqUaqW+QBllXFakq1u82Q27U7fvgP Y7kgFvaliUj89zCGvJZI+/X6VKbrbG9IiZeud1J1dJkgZe7QVODfjUdRAxxdfMkc M16mpzQXo3mwzMVbm3qph+vU03yPYYu/zLzyBHuO+pRqW9rMQO0= -----END CERTIFICATE-----Generated at Fri Dec 26 04:53:12 2025 by rpki-client