This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: /95Xo8EnlSjpDkdgAOey4Erp9g7WTtj/ARXDOd8Z1p0= Subject key identifier: 9A:A5:27:6C:11:64:72:FE:D6:3A:F9:FD:6E:7F:2B:92:23:91:15:1B Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 307C34BA367BD7AE59021FDEA6AEDD5AEDA0A0EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 0337 Signing time: Wed 03 Dec 2025 00:41:53 +0000 Manifest this update: Wed 03 Dec 2025 00:36:53 +0000 Manifest next update: Sat 06 Dec 2025 06:16:53 +0000 Files and hashes: 1: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) 2: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 3: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 4: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: 3KO7bP7iVJEhsWUmvHHLPpFbymopojfejkbUl5y+3x0=) 5: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7c:34:ba:36:7b:d7:ae:59:02:1f:de:a6:ae:dd:5a:ed:a0:a0:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Dec 3 00:36:53 2025 GMT Not After : Dec 6 06:16:53 2025 GMT Subject: CN=9AA5276C116472FED63AF9FD6E7F2B922391151B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7b:5c:e8:15:a0:4a:38:80:b7:c3:95:a9:cf: bd:81:ed:1b:86:f5:0a:25:64:f0:77:1b:a9:f9:91: 15:20:e0:b6:a8:20:61:b7:74:db:0c:b5:48:05:4e: ff:2b:72:f5:bd:09:06:e4:90:0a:34:64:76:7f:33: fc:80:7f:00:70:ed:fa:06:9f:e9:f5:9a:a3:99:a9: 4f:66:0f:4d:79:ce:9c:a8:f5:91:f6:50:08:80:c7: fe:da:bd:9f:25:94:b3:7d:d0:91:7a:66:81:2c:70: aa:99:48:1e:b9:b9:1f:fa:4b:03:7c:90:a4:95:94: 33:aa:af:a4:b5:1f:95:6e:fc:88:6a:1b:dd:ed:40: d2:45:d0:b3:5a:46:40:d3:1e:7f:54:49:6b:97:45: 86:b2:52:72:d7:4e:45:52:b6:b8:0f:5d:f1:59:22: fa:ba:0e:2f:be:4a:80:87:18:4e:00:23:40:0d:e0: 79:f3:ae:04:ad:75:f9:f6:6e:90:56:a6:cf:3e:82: 3d:91:00:cc:a3:33:e2:6e:bb:ff:54:d2:7b:a0:fb: 57:4b:d7:ca:4c:2d:e9:91:96:54:cd:c3:42:57:80: ea:eb:26:62:26:46:29:94:28:3e:a6:bf:e0:b3:df: b8:4a:9b:8b:ab:f5:98:26:cc:78:ac:aa:fe:ec:c1: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A5:27:6C:11:64:72:FE:D6:3A:F9:FD:6E:7F:2B:92:23:91:15:1B X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:80:94:db:b4:0f:ae:23:77:15:b9:f7:7f:02:03:60:fc:3e: 6b:da:24:2f:e5:58:99:b0:fb:43:bf:dd:5d:95:ae:c9:8f:e2: ae:2d:9d:7c:79:c0:18:fc:ae:02:a2:64:c8:bd:72:f7:73:9c: c1:8d:fb:af:26:5d:f0:32:a6:9b:8c:c4:d9:44:ee:2a:9c:a6: 75:dc:81:e7:20:2d:ab:c9:3c:04:99:6e:00:fb:cb:6a:1a:18: 7e:ce:89:bd:cb:c0:37:df:18:2f:73:06:b1:5e:05:c3:ec:e7: a2:c7:3c:48:c3:63:07:88:fe:5a:d3:08:86:e8:85:88:c2:2c: cc:34:07:c3:22:c4:e4:19:54:8f:f1:7f:bd:41:3f:0c:78:24: ca:07:3c:fe:d6:ac:31:0c:e2:ac:94:52:c6:b0:cd:26:ed:c8: c4:12:07:5e:e7:0b:ec:f2:cf:cd:e4:c3:f4:88:14:69:79:c6: 5d:4e:27:e8:de:7d:e4:c2:04:44:2c:36:fd:32:68:15:3e:18: 18:5c:56:9e:f9:af:7c:25:07:40:5e:71:4b:e3:28:f8:e9:a3: 7d:c7:5c:2c:49:c2:20:b6:5c:74:58:ec:b9:60:a4:82:d8:f4: 5e:be:08:65:05:fa:a2:81:7e:82:7b:b6:f8:ef:c1:34:db:f8: 47:d8:ed:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMHw0ujZ7165ZAh/epq7dWu2goOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTEyMDMwMDM2NTNaFw0yNTEyMDYwNjE2NTNaMDMxMTAvBgNV BAMTKDlBQTUyNzZDMTE2NDcyRkVENjNBRjlGRDZFN0YyQjkyMjM5MTE1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCse1zoFaBKOIC3w5Wpz72B7RuG 9QolZPB3G6n5kRUg4LaoIGG3dNsMtUgFTv8rcvW9CQbkkAo0ZHZ/M/yAfwBw7foG n+n1mqOZqU9mD015zpyo9ZH2UAiAx/7avZ8llLN90JF6ZoEscKqZSB65uR/6SwN8 kKSVlDOqr6S1H5Vu/IhqG93tQNJF0LNaRkDTHn9USWuXRYayUnLXTkVStrgPXfFZ Ivq6Di++SoCHGE4AI0AN4HnzrgStdfn2bpBWps8+gj2RAMyjM+Juu/9U0nug+1dL 18pMLemRllTNw0JXgOrrJmImRimUKD6mv+Cz37hKm4ur9ZgmzHisqv7swe87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqUnbBFkcv7WOvn9bn8rkiORFRswHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABSAlNu0D64jdxW5938CA2D8PmvaJC/lWJmw +0O/3V2VrsmP4q4tnXx5wBj8rgKiZMi9cvdznMGN+68mXfAyppuMxNlE7iqcpnXc gecgLavJPASZbgD7y2oaGH7Oib3LwDffGC9zBrFeBcPs56LHPEjDYweI/lrTCIbo hYjCLMw0B8MixOQZVI/xf71BPwx4JMoHPP7WrDEM4qyUUsawzSbtyMQSB17nC+zy z83kw/SIFGl5xl1OJ+jefeTCBEQsNv0yaBU+GBhcVp75r3wlB0BecUvjKPjpo33H XCxJwiC2XHRY7LlgpILY9F6+CGUF+qKBfoJ7tvjvwTTb+EfY7UQ= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:26 2025 by rpki-client