This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: ZgEtxWbR/poqQ5UDPiaE+PlGfaigcvXZLTtNmuRw+9c= Subject key identifier: 9D:47:96:48:78:40:47:AA:8D:1E:5E:6D:90:F7:99:63:F6:9D:AC:95 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 20D3204BF1018C6DA05D337EBA6A14277121C353 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 0311 Signing time: Sun 14 Dec 2025 18:50:41 +0000 Manifest this update: Sun 14 Dec 2025 18:45:41 +0000 Manifest next update: Thu 18 Dec 2025 05:43:41 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: BRyBpOyQm+kqMkDO2RiNK7ixSJ9TNaLKUpDiojKLSvk=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=) 3: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) 4: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 05:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d3:20:4b:f1:01:8c:6d:a0:5d:33:7e:ba:6a:14:27:71:21:c3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Dec 14 18:45:41 2025 GMT Not After : Dec 18 05:43:41 2025 GMT Subject: CN=9D479648784047AA8D1E5E6D90F79963F69DAC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:03:db:74:fa:67:3c:51:c8:d2:ff:74:8d: 24:a3:a4:6b:7b:45:03:3c:14:6b:06:37:a0:5b:dd: a3:87:2f:74:15:be:bd:47:03:8e:35:cc:0f:68:c0: b0:36:a0:27:38:04:43:85:15:85:dd:03:ee:fd:be: 65:ac:7f:52:62:9f:0e:c4:16:6f:82:82:7e:3d:ad: cb:52:ba:f7:74:83:0c:82:da:5e:0d:35:8e:e4:b4: 48:f1:66:0f:81:20:a4:da:1a:fe:9e:4d:dd:93:9c: c4:f7:f6:ce:ac:b4:14:ca:e8:25:9e:49:88:b6:b9: 4b:a0:da:89:90:44:cc:a8:89:54:39:57:d3:93:61: e8:0c:7c:72:26:a4:81:04:f9:3c:af:09:b4:c1:85: 6e:d8:f4:a2:c4:f7:9a:4e:42:34:f1:ce:0b:a7:62: 0c:ff:0e:bd:2f:91:aa:23:7a:9a:74:1e:e3:1a:64: d9:f1:17:7f:cd:70:84:03:a9:6d:a4:ba:1a:9d:6d: 11:88:9f:99:05:b5:29:de:f7:7f:b9:64:c1:ec:05: 63:58:34:db:dd:c9:3c:e4:52:02:63:80:2a:89:c8: 79:55:2a:9a:b6:37:e3:4f:84:42:1c:61:0e:bf:cd: d1:40:fe:7d:57:54:7f:1d:5c:e7:67:88:ee:7b:2c: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:47:96:48:78:40:47:AA:8D:1E:5E:6D:90:F7:99:63:F6:9D:AC:95 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a7:4c:aa:4d:f0:3f:94:25:7c:e7:54:c3:19:5a:8a:bf:bb: 95:7b:2a:66:67:d5:2b:ff:cc:26:56:69:e8:79:48:da:06:55: ab:81:55:a7:7d:59:db:b9:a8:cb:e9:27:98:0d:92:6d:59:a5: 14:2c:24:a8:14:2a:1d:04:fd:ac:66:bf:9b:f0:d4:3b:18:30: d1:34:56:3e:06:4a:94:ea:57:ec:05:40:9f:02:5b:1e:1f:b4: f0:7c:e8:fb:7a:a5:33:1b:c9:0c:4b:6a:c0:3d:99:5a:0a:97: 5a:94:d6:1d:15:48:a0:dc:d1:4f:5b:da:a7:2a:5c:41:34:07: 46:9e:7d:98:55:9f:3b:d2:04:40:89:da:45:2d:57:7c:6c:0f: 28:d6:d1:a6:c8:44:24:ad:8d:5d:b5:4d:91:53:75:ac:49:1a: 2c:2f:89:0d:e6:38:33:a7:c3:89:da:aa:28:52:82:31:0a:32: d5:8e:b7:bd:ce:4b:c8:a8:a3:cb:0a:f5:72:5b:c5:48:bb:7b: c2:b8:1f:05:03:ac:55:ad:fb:20:ca:35:cd:b3:7f:80:e9:1b: 27:19:8e:a7:fb:bf:26:47:56:0d:8b:03:f1:af:5c:28:b9:7c: 9e:36:dc:62:83:fd:ae:ef:8b:c5:3d:89:60:63:35:0f:d5:c4: 48:c6:b6:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINMgS/EBjG2gXTN+umoUJ3Ehw1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTEyMTQxODQ1NDFaFw0yNTEyMTgwNTQzNDFaMDMxMTAvBgNV BAMTKDlENDc5NjQ4Nzg0MDQ3QUE4RDFFNUU2RDkwRjc5OTYzRjY5REFDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7MAPbdPpnPFHI0v90jSSjpGt7 RQM8FGsGN6Bb3aOHL3QVvr1HA441zA9owLA2oCc4BEOFFYXdA+79vmWsf1Jinw7E Fm+Cgn49rctSuvd0gwyC2l4NNY7ktEjxZg+BIKTaGv6eTd2TnMT39s6stBTK6CWe SYi2uUug2omQRMyoiVQ5V9OTYegMfHImpIEE+TyvCbTBhW7Y9KLE95pOQjTxzgun Ygz/Dr0vkaojepp0HuMaZNnxF3/NcIQDqW2kuhqdbRGIn5kFtSne93+5ZMHsBWNY NNvdyTzkUgJjgCqJyHlVKpq2N+NPhEIcYQ6/zdFA/n1XVH8dXOdniO57LEgZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUeWSHhAR6qNHl5tkPeZY/adrJUwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEynTKpN8D+UJXznVMMZWoq/u5V7KmZn1Sv/ zCZWaeh5SNoGVauBVad9Wdu5qMvpJ5gNkm1ZpRQsJKgUKh0E/axmv5vw1DsYMNE0 Vj4GSpTqV+wFQJ8CWx4ftPB86Pt6pTMbyQxLasA9mVoKl1qU1h0VSKDc0U9b2qcq XEE0B0aefZhVnzvSBECJ2kUtV3xsDyjW0abIRCStjV21TZFTdaxJGiwviQ3mODOn w4naqihSgjEKMtWOt73OS8ioo8sK9XJbxUi7e8K4HwUDrFWt+yDKNc2zf4DpGycZ jqf7vyZHVg2LA/GvXCi5fJ423GKD/a7vi8U9iWBjNQ/VxEjGtlc= -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:22 2025 by rpki-client