This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: UTcu3f6ecUKD0t3ma95r5DaUp77hFUIuTqhDEfxROQ4= Subject key identifier: D6:03:E3:54:5E:F5:49:B1:EA:3B:B1:5F:42:69:63:EB:8D:FF:E8:DE Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 79DFEBD8BF51AE199CEC4B9E2FCA942A7D577C33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0162 Signing time: Wed 03 Dec 2025 01:31:48 +0000 Manifest this update: Wed 03 Dec 2025 01:26:48 +0000 Manifest next update: Sat 06 Dec 2025 10:13:48 +0000 Files and hashes: 1: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) 2: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: pe+Hd1uUrmTNBxceifanWVtuOmB1/LPIaMmR56rTpbQ=) 3: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: dbxrQTgZv3GXn+UMmlKIl7zz9zo4NUqYuZDIWrYrKEU=) 4: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:13:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:df:eb:d8:bf:51:ae:19:9c:ec:4b:9e:2f:ca:94:2a:7d:57:7c:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Dec 3 01:26:48 2025 GMT Not After : Dec 6 10:13:48 2025 GMT Subject: CN=D603E3545EF549B1EA3BB15F426963EB8DFFE8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f1:06:9b:fd:f8:75:b8:ff:48:27:ff:9d:ec: d5:df:96:d1:8e:d4:ab:17:76:00:74:07:b3:43:77: c4:f0:33:22:45:cc:47:e3:71:1c:76:42:9a:c4:35: 54:9e:c0:73:f3:10:b3:86:1f:95:39:b7:f6:18:2c: 7e:d0:1e:fb:a8:25:e8:0e:ad:8e:75:cd:d1:5a:0a: 5c:e9:87:09:2f:3a:e1:4d:72:44:6e:ac:5b:e3:1d: ee:5c:79:e6:69:01:ca:49:71:1e:6b:a1:4e:2f:6b: 40:e1:d0:51:78:77:81:16:71:df:a3:3c:39:1a:b4: 63:7d:c7:85:b9:6a:9c:6f:c2:17:da:81:f6:80:15: b8:fd:2e:bc:b8:14:cb:b4:e3:9c:f0:41:21:03:9e: 53:55:91:fc:74:3b:a9:11:03:ca:ee:80:b3:68:63: 98:0c:5d:61:6e:34:0d:7d:61:ae:5f:ef:d8:52:1f: aa:3c:df:58:b3:ab:9a:c6:f8:e0:1e:cc:06:c6:2a: 7e:1d:9f:62:38:a3:9e:69:09:d4:98:03:de:70:ee: 37:bd:7a:48:c2:f6:58:6f:ce:a8:11:39:c5:15:12: 98:be:c9:e7:a0:5e:ba:47:7b:52:89:ec:78:6e:bf: b1:b1:a7:8b:aa:9f:2b:58:88:de:29:c2:1e:39:9c: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:03:E3:54:5E:F5:49:B1:EA:3B:B1:5F:42:69:63:EB:8D:FF:E8:DE X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b3:f7:3d:91:c2:df:d3:73:42:e4:93:cf:3e:e2:a9:e0:e6: 0b:21:27:14:e0:f3:9d:3f:ab:10:94:59:ac:4f:4f:9a:ac:7b: 07:1c:36:b3:d3:3e:3b:e0:90:c0:30:34:2b:12:e8:62:5e:f1: 42:ce:cb:46:c4:0b:7d:b6:9d:4b:31:6a:fe:e9:e4:82:a2:fc: 48:a4:07:d8:26:da:57:85:52:83:39:38:82:28:5d:45:6d:77: 4d:17:8d:b1:ba:c2:10:4d:90:1d:fe:66:51:3c:e0:40:2e:2d: 57:32:7c:8d:fe:41:fd:c6:fb:96:30:cd:12:a9:21:ca:6e:17: a1:cf:a2:3c:b8:5c:44:6e:ce:1c:20:c6:80:92:c8:aa:01:f9: ba:d0:08:44:a1:ff:b7:b7:85:d6:6c:de:2d:6e:62:96:17:78: 93:b8:0b:2c:c5:2e:c2:cf:75:e9:6f:43:a0:4b:3a:1b:c3:af: 18:b6:b8:1b:c5:37:9c:d1:48:ce:09:54:68:46:10:da:b7:01: 1a:03:18:9d:4f:1c:e7:f0:11:11:88:1f:e0:16:f0:35:d2:ab: 5a:0d:ad:bf:f5:c8:39:52:65:ba:72:a1:b9:cb:90:b4:92:8e: 39:e3:c0:f6:f2:64:48:36:d8:3f:a1:f5:84:ba:d0:69:db:43: 77:80:be:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUed/r2L9Rrhmc7EueL8qUKn1XfDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTEyMDMwMTI2NDhaFw0yNTEyMDYxMDEzNDhaMDMxMTAvBgNV BAMTKEQ2MDNFMzU0NUVGNTQ5QjFFQTNCQjE1RjQyNjk2M0VCOERGRkU4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8Qab/fh1uP9IJ/+d7NXfltGO 1KsXdgB0B7NDd8TwMyJFzEfjcRx2QprENVSewHPzELOGH5U5t/YYLH7QHvuoJegO rY51zdFaClzphwkvOuFNckRurFvjHe5ceeZpAcpJcR5roU4va0Dh0FF4d4EWcd+j PDkatGN9x4W5apxvwhfagfaAFbj9Lry4FMu045zwQSEDnlNVkfx0O6kRA8rugLNo Y5gMXWFuNA19Ya5f79hSH6o831izq5rG+OAezAbGKn4dn2I4o55pCdSYA95w7je9 ekjC9lhvzqgROcUVEpi+yeegXrpHe1KJ7Hhuv7Gxp4uqnytYiN4pwh45nCMvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1gPjVF71SbHqO7FfQmlj643/6N4wHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKz9z2Rwt/Tc0Lkk88+4qng5gshJxTg850/ qxCUWaxPT5qsewccNrPTPjvgkMAwNCsS6GJe8ULOy0bEC322nUsxav7p5IKi/Eik B9gm2leFUoM5OIIoXUVtd00XjbG6whBNkB3+ZlE84EAuLVcyfI3+Qf3G+5YwzRKp IcpuF6HPojy4XERuzhwgxoCSyKoB+brQCESh/7e3hdZs3i1uYpYXeJO4CyzFLsLP delvQ6BLOhvDrxi2uBvFN5zRSM4JVGhGENq3ARoDGJ1PHOfwERGIH+AW8DXSq1oN rb/1yDlSZbpyobnLkLSSjjnjwPbyZEg22D+h9YS60GnbQ3eAvr0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:17 2025 by rpki-client