This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: 2rRPN7bDT6/1/ULEJtU4DeJj2RXA9VyUa+VbbfvZDlw= Subject key identifier: F4:7E:16:6F:AC:51:0C:5C:78:13:E9:55:F0:8E:A0:39:B4:65:7C:FA Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 14B85785F312935ABB6BB7FEB704BA7232C8E600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 0235 Signing time: Thu 25 Dec 2025 21:21:56 +0000 Manifest this update: Thu 25 Dec 2025 21:16:56 +0000 Manifest next update: Mon 29 Dec 2025 01:04:56 +0000 Files and hashes: 1: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: 3tei4My3jyaTXg2OzjXCw9gOml9LBn8L5emMnfrj8CI=) 2: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 20:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b8:57:85:f3:12:93:5a:bb:6b:b7:fe:b7:04:ba:72:32:c8:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Dec 25 21:16:56 2025 GMT Not After : Dec 29 01:04:56 2025 GMT Subject: CN=F47E166FAC510C5C7813E955F08EA039B4657CFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:33:4d:b7:4a:39:e8:86:f0:cc:cb:af:0c:63: ee:1b:a7:d2:d8:dd:e2:e7:0a:e8:00:d4:b0:c9:2c: 36:65:14:4b:5b:95:1d:f2:d6:c0:b3:36:1f:7e:03: 7d:38:99:e9:19:70:57:66:42:c6:57:88:a1:4a:e4: 23:41:67:1b:e7:4a:33:3a:c3:76:96:a8:25:d3:06: cd:42:51:53:03:30:c1:63:99:fe:be:1c:70:ae:33: 65:b7:c5:4a:51:c9:15:f8:90:f6:56:d3:12:d2:ca: 39:a6:a0:f8:e2:08:48:4f:76:b5:2b:84:f2:32:f1: 70:29:d8:17:2a:3b:5c:7c:99:8b:55:cb:ba:a9:e8: 08:e6:97:87:3c:b4:7b:3d:e5:46:a9:21:66:b4:45: a2:f4:29:18:ff:85:ff:3b:0a:6b:32:dc:fe:15:47: c8:4c:75:90:bc:8f:14:dc:dc:ee:7f:59:50:94:28: 85:d2:db:dc:4f:e6:f5:15:53:5c:d4:4a:29:85:05: 28:54:3b:4e:c3:5c:7f:45:ac:40:e0:98:47:ca:24: d5:fc:08:c6:b3:53:fb:5d:ba:a6:a9:c8:62:b7:93: f1:14:2d:0b:52:cf:8b:17:ff:db:d3:71:16:80:2e: ff:62:75:9b:07:76:d2:73:ad:cc:d9:84:8b:b2:8f: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:16:6F:AC:51:0C:5C:78:13:E9:55:F0:8E:A0:39:B4:65:7C:FA X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a4:3e:fb:54:04:70:60:9b:5c:76:c5:bc:7d:b8:2b:a5:b6: 79:88:c7:63:b2:4f:b5:f6:75:8a:68:61:db:9f:d4:b3:fc:d4: bd:91:87:eb:97:d9:36:6d:f5:1c:86:d7:b7:f0:b0:e6:62:9f: 73:f5:5c:2d:d1:65:15:a5:fe:01:f3:4e:0b:f1:bf:79:b3:3e: 69:a0:ce:3d:93:1b:cc:ea:31:19:c7:8b:22:6c:a5:b5:c2:1b: a6:d3:7d:04:f8:8d:f3:13:f1:f9:3d:1d:2e:0f:0e:48:bd:12: 0f:9b:c7:9c:bc:45:b1:b3:d8:9b:d3:d2:01:f2:8a:7b:fa:56: b9:d3:9c:a4:d3:a6:66:e4:d2:33:bc:fa:6a:c2:6c:c5:9d:ab: 2f:b6:12:55:c2:19:37:5e:3d:5e:e4:0c:1b:c5:01:1f:c6:9e: 1c:c7:a9:dd:84:bd:5a:10:75:51:fa:53:70:0e:d0:13:2a:67: ad:9a:53:47:6f:58:0d:a1:a1:fd:5c:6e:87:08:c4:3a:68:ef: 73:0f:13:f9:b4:9f:8e:7c:f5:69:c8:ac:10:49:b2:a1:55:d2: 11:04:b4:cd:8c:4e:4d:ee:06:12:89:d5:b6:a8:c3:ae:36:7f: a0:d7:e7:f3:a0:8e:5d:ca:48:ee:d2:e8:8e:72:42:23:ba:86: b1:75:e2:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLhXhfMSk1q7a7f+twS6cjLI5gAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTEyMjUyMTE2NTZaFw0yNTEyMjkwMTA0NTZaMDMxMTAvBgNV BAMTKEY0N0UxNjZGQUM1MTBDNUM3ODEzRTk1NUYwOEVBMDM5QjQ2NTdDRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/M023SjnohvDMy68MY+4bp9LY 3eLnCugA1LDJLDZlFEtblR3y1sCzNh9+A304mekZcFdmQsZXiKFK5CNBZxvnSjM6 w3aWqCXTBs1CUVMDMMFjmf6+HHCuM2W3xUpRyRX4kPZW0xLSyjmmoPjiCEhPdrUr hPIy8XAp2BcqO1x8mYtVy7qp6Ajml4c8tHs95UapIWa0RaL0KRj/hf87Cmsy3P4V R8hMdZC8jxTc3O5/WVCUKIXS29xP5vUVU1zUSimFBShUO07DXH9FrEDgmEfKJNX8 CMazU/tduqapyGK3k/EULQtSz4sX/9vTcRaALv9idZsHdtJzrczZhIuyj1d1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9H4Wb6xRDFx4E+lV8I6gObRlfPowHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6kPvtUBHBgm1x2xbx9uCultnmIx2OyT7X2 dYpoYduf1LP81L2Rh+uX2TZt9RyG17fwsOZin3P1XC3RZRWl/gHzTgvxv3mzPmmg zj2TG8zqMRnHiyJspbXCG6bTfQT4jfMT8fk9HS4PDki9Eg+bx5y8RbGz2JvT0gHy inv6VrnTnKTTpmbk0jO8+mrCbMWdqy+2ElXCGTdePV7kDBvFAR/GnhzHqd2EvVoQ dVH6U3AO0BMqZ62aU0dvWA2hof1cbocIxDpo73MPE/m0n4589WnIrBBJsqFV0hEE tM2MTk3uBhKJ1baow642f6DX5/Ogjl3KSO7S6I5yQiO6hrF14h4= -----END CERTIFICATE-----Generated at Fri Dec 26 04:53:13 2025 by rpki-client