This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: D+Kgck94iHAlbBmDPEUteIuFZidMCuunWBERCswC7FM= Subject key identifier: A2:A7:2A:50:57:D0:5B:97:60:E9:B3:90:7C:ED:B4:77:A3:A6:A0:61 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 69899D4E68DBDB0D71A4863A374E08E70B824697 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 030B Signing time: Tue 02 Dec 2025 11:40:42 +0000 Manifest this update: Tue 02 Dec 2025 11:35:42 +0000 Manifest next update: Fri 05 Dec 2025 23:28:42 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 2: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: JDU71kxCIzLL/b3NzRCEX8i7dNpKRFxw7FIyDHppbsE=) 3: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) 4: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 8iqd/DLPSKXzm6qMwrWasV0WJDuso56p2m5ElmgcTDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:89:9d:4e:68:db:db:0d:71:a4:86:3a:37:4e:08:e7:0b:82:46:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Dec 2 11:35:42 2025 GMT Not After : Dec 5 23:28:42 2025 GMT Subject: CN=A2A72A5057D05B9760E9B3907CEDB477A3A6A061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:a2:17:06:a3:18:28:62:c1:8f:81:6f:52: 8a:04:52:cc:0b:cf:d9:86:44:de:97:33:ee:a5:1c: 81:48:07:ed:c7:69:af:57:bb:80:90:99:63:0e:5e: 79:68:15:4d:30:bd:b9:38:55:14:25:0d:41:b2:66: 8f:0c:32:f7:74:82:ac:1e:02:e1:52:7a:5c:9d:b5: 83:a3:c2:2b:64:90:f4:7b:90:73:09:47:09:b3:4e: 19:60:75:ed:cc:07:52:ff:39:1a:a1:43:83:15:a2: d9:80:94:bf:80:58:da:7e:de:b7:38:4c:54:4c:37: 91:22:54:60:a7:ee:53:06:78:e3:64:55:cd:51:b6: 00:65:74:88:72:b1:46:1b:9c:e5:c9:7e:68:55:ad: 6f:dd:c5:c0:34:87:f9:9a:17:7a:b2:5d:56:c8:cc: c7:6d:40:fd:2a:19:1e:27:f8:3e:61:69:ab:fc:95: eb:7c:e1:b0:b9:58:29:1b:cf:1b:20:e2:26:ea:b8: 23:76:9e:6b:3c:f0:62:41:0c:48:bf:6a:4d:14:c7: c3:30:79:58:d2:fd:2d:d1:4a:06:70:86:91:8a:b5: f1:ac:87:d2:0b:29:20:50:51:47:58:5d:9c:25:58: e4:aa:73:67:88:7a:6a:2b:de:57:3e:12:3f:84:77: 42:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:2A:50:57:D0:5B:97:60:E9:B3:90:7C:ED:B4:77:A3:A6:A0:61 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:c1:b4:9d:bf:ce:83:e6:d7:f8:fa:01:1e:d8:d3:0b:de:ac: 91:17:fa:50:40:b9:71:9d:47:84:2d:08:40:74:bc:b1:82:7e: f9:78:b2:f9:9e:df:2f:25:b6:b0:7c:ae:6e:80:92:16:0e:83: 35:02:c7:c0:8c:34:4c:a8:f1:bb:d5:3e:72:3f:9b:3c:54:f3: 2d:72:a0:a2:2d:59:ab:63:ca:2e:07:14:06:0d:be:ed:81:6e: e6:b4:08:ae:5d:66:e4:c3:d3:29:86:6f:c7:df:0d:53:ed:9e: 25:28:b8:2a:58:c2:69:cd:53:c8:3e:2a:f4:2d:9a:d6:48:e1: 27:d2:d2:53:3e:9d:90:db:0b:03:b5:8d:fb:64:b6:b7:e9:4f: c6:2f:7c:48:ad:b6:2a:25:37:56:82:fa:7c:d5:70:4a:48:18: e5:1f:f6:82:d0:bb:09:1b:b6:f2:4a:db:a2:2b:a4:c1:74:d8: db:ae:35:7a:8f:de:ea:e1:0a:54:0c:c8:93:ac:2f:10:e8:7e: 17:5a:fa:52:7b:26:ec:cf:e0:a8:5b:9c:b4:53:c9:63:ce:c9: 65:c9:2a:b1:e4:a4:d2:15:6d:c7:4a:02:19:29:ce:73:84:b9: 25:cd:1d:95:3d:70:5f:68:05:60:7f:c6:d6:96:25:4d:e9:43: 58:29:f8:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaYmdTmjb2w1xpIY6N04I5wuCRpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTEyMDIxMTM1NDJaFw0yNTEyMDUyMzI4NDJaMDMxMTAvBgNV BAMTKEEyQTcyQTUwNTdEMDVCOTc2MEU5QjM5MDdDRURCNDc3QTNBNkEwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYaIXBqMYKGLBj4FvUooEUswL z9mGRN6XM+6lHIFIB+3Haa9Xu4CQmWMOXnloFU0wvbk4VRQlDUGyZo8MMvd0gqwe AuFSelydtYOjwitkkPR7kHMJRwmzThlgde3MB1L/ORqhQ4MVotmAlL+AWNp+3rc4 TFRMN5EiVGCn7lMGeONkVc1RtgBldIhysUYbnOXJfmhVrW/dxcA0h/maF3qyXVbI zMdtQP0qGR4n+D5haav8let84bC5WCkbzxsg4ibquCN2nms88GJBDEi/ak0Ux8Mw eVjS/S3RSgZwhpGKtfGsh9ILKSBQUUdYXZwlWOSqc2eIemor3lc+Ej+Ed0JRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoqcqUFfQW5dg6bOQfO20d6OmoGEwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDBtJ2/zoPm1/j6AR7Y0wverJEX+lBAuXGd R4QtCEB0vLGCfvl4svme3y8ltrB8rm6AkhYOgzUCx8CMNEyo8bvVPnI/mzxU8y1y oKItWatjyi4HFAYNvu2Bbua0CK5dZuTD0ymGb8ffDVPtniUouCpYwmnNU8g+KvQt mtZI4SfS0lM+nZDbCwO1jftktrfpT8YvfEittiolN1aC+nzVcEpIGOUf9oLQuwkb tvJK26IrpMF02NuuNXqP3urhClQMyJOsLxDofhda+lJ7JuzP4KhbnLRTyWPOyWXJ KrHkpNIVbcdKAhkpznOEuSXNHZU9cF9oBWB/xtaWJU3pQ1gp+Hg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:37 2025 by rpki-client