This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: UD9OPKWR+fHW8QSCREOtpFXYlUKEITXBg8oEaY76Wqw= Subject key identifier: 56:F9:1F:4D:EA:5C:D7:4C:74:46:D7:E9:F1:92:FD:EC:B8:70:B1:0F Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 3FEC4C82607223EC0370B095FC98965FD444A12B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 0231 Signing time: Mon 15 Dec 2025 06:12:22 +0000 Manifest this update: Mon 15 Dec 2025 06:07:22 +0000 Manifest next update: Thu 18 Dec 2025 14:12:22 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: YnH+2cEVLClA8Q3lFBeWQpDx+VGyRy8XpSVh/hfv/yQ=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 14:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ec:4c:82:60:72:23:ec:03:70:b0:95:fc:98:96:5f:d4:44:a1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Dec 15 06:07:22 2025 GMT Not After : Dec 18 14:12:22 2025 GMT Subject: CN=56F91F4DEA5CD74C7446D7E9F192FDECB870B10F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:81:b0:07:13:37:32:41:7b:34:e1:e8:4e:0a: 50:af:65:c0:f1:20:60:b5:0d:47:60:6b:2b:29:5a: 11:ac:5d:49:ad:79:5e:4e:ab:6e:ab:16:3b:65:05: 5c:46:df:1e:ff:ea:d0:4e:85:d4:5b:c4:0b:28:2e: db:6e:7c:81:c2:c8:ca:55:45:7a:e1:8c:60:1b:03: c3:5c:5e:0d:ce:4c:17:2c:d2:da:30:39:15:6e:fa: 31:71:e5:68:c5:d8:cc:df:6b:ca:70:fb:93:2b:89: 5a:dd:94:d6:d2:59:3f:dd:0a:05:70:98:87:d8:7c: 15:15:ae:9a:7b:f5:77:33:04:ca:dd:4e:70:ec:33: e6:76:f0:cd:fe:8f:28:1a:f7:41:00:e0:09:e9:94: 63:ec:65:50:7f:e0:5b:8d:f5:19:bf:20:47:5c:f9: f5:80:33:a0:67:28:96:c1:34:43:60:72:03:89:d8: 43:c4:97:35:f0:4e:a6:96:6f:81:33:ce:cb:2f:5e: 4e:4e:fc:83:fa:73:99:9b:12:43:44:9e:60:d0:da: 6e:9c:41:e4:27:6a:ec:74:35:34:6f:89:dc:ac:d3: ec:07:35:9d:49:b5:f8:43:a8:a7:9b:9a:02:83:19: 3b:ef:9d:cd:a2:a3:ca:64:8d:81:ba:85:66:f4:3a: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F9:1F:4D:EA:5C:D7:4C:74:46:D7:E9:F1:92:FD:EC:B8:70:B1:0F X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:df:f0:b1:94:8b:a0:79:1e:e6:d8:c0:3f:63:67:af:7b:92: 6d:26:07:01:36:e7:ad:24:9f:b2:cc:63:8e:3c:4e:22:b4:93: 7d:72:ea:68:aa:43:15:08:6b:54:38:0c:80:e4:83:19:a1:d6: 1d:d0:72:64:88:b6:17:4f:07:b6:b0:83:d9:a4:46:d8:12:29: 0f:5b:c7:5e:f4:09:1e:13:fd:cb:f1:84:9d:7e:7c:51:d2:ed: 5c:28:0a:b7:72:43:fd:74:d4:5b:25:7b:50:58:4b:2e:d7:74: 11:9e:d0:e4:77:98:e7:ee:47:bb:b2:a3:27:89:30:62:77:f4: ee:59:19:37:34:f6:85:2a:54:9c:23:7a:27:ab:b7:47:9b:30: ba:f5:ba:44:e2:1e:f6:9e:31:27:d6:71:83:29:e3:23:1c:ce: a2:05:95:62:52:e3:a8:ad:0f:2c:10:19:33:b2:ca:5d:b2:45: 14:f1:1a:ab:9b:2f:a6:31:ff:ce:30:f8:ad:35:92:65:65:cd: 23:e3:e5:71:8e:ee:40:30:aa:91:32:17:ed:c8:46:60:76:f4: 5f:62:19:66:93:be:68:dd:df:e5:a8:36:03:2b:82:d7:58:44: 19:6a:09:ce:da:d9:01:19:e2:9d:44:8c:0b:b6:a7:66:16:99: c7:71:3b:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+xMgmByI+wDcLCV/JiWX9REoSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTEyMTUwNjA3MjJaFw0yNTEyMTgxNDEyMjJaMDMxMTAvBgNV BAMTKDU2RjkxRjRERUE1Q0Q3NEM3NDQ2RDdFOUYxOTJGREVDQjg3MEIxMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEgbAHEzcyQXs04ehOClCvZcDx IGC1DUdgayspWhGsXUmteV5Oq26rFjtlBVxG3x7/6tBOhdRbxAsoLttufIHCyMpV RXrhjGAbA8NcXg3OTBcs0towORVu+jFx5WjF2Mzfa8pw+5MriVrdlNbSWT/dCgVw mIfYfBUVrpp79XczBMrdTnDsM+Z28M3+jyga90EA4AnplGPsZVB/4FuN9Rm/IEdc +fWAM6BnKJbBNENgcgOJ2EPElzXwTqaWb4EzzssvXk5O/IP6c5mbEkNEnmDQ2m6c QeQnaux0NTRvidys0+wHNZ1JtfhDqKebmgKDGTvvnc2io8pkjYG6hWb0OjW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVvkfTepc10x0Rtfp8ZL97LhwsQ8wHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETf8LGUi6B5HubYwD9jZ697km0mBwE2560k n7LMY448TiK0k31y6miqQxUIa1Q4DIDkgxmh1h3QcmSIthdPB7awg9mkRtgSKQ9b x170CR4T/cvxhJ1+fFHS7VwoCrdyQ/101Fsle1BYSy7XdBGe0OR3mOfuR7uyoyeJ MGJ39O5ZGTc09oUqVJwjeiert0ebMLr1ukTiHvaeMSfWcYMp4yMczqIFlWJS46it DywQGTOyyl2yRRTxGqubL6Yx/84w+K01kmVlzSPj5XGO7kAwqpEyF+3IRmB29F9i GWaTvmjd3+WoNgMrgtdYRBlqCc7a2QEZ4p1EjAu2p2YWmcdxO6o= -----END CERTIFICATE-----Generated at Tue Dec 16 06:21:41 2025 by rpki-client