This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: wg6eY2TVW/sf8xGxAszNRhtRCezXf/axmxl5KH8yl7c= Subject key identifier: 82:C2:A7:54:3A:48:8F:E6:96:9E:3E:37:E3:A5:EE:BB:56:E8:C9:F3 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 6081D8F03C772FAC9D1AF184E07A91CBF50083BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0480 Signing time: Tue 23 Dec 2025 14:12:39 +0000 Manifest this update: Tue 23 Dec 2025 14:07:39 +0000 Manifest next update: Sat 27 Dec 2025 01:36:39 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: ld22TH9wNx7vI3kkSc4NxfV4Eiojbw25/VtZcF5BZ5I=) 2: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) 3: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 4: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 01:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:81:d8:f0:3c:77:2f:ac:9d:1a:f1:84:e0:7a:91:cb:f5:00:83:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Dec 23 14:07:39 2025 GMT Not After : Dec 27 01:36:39 2025 GMT Subject: CN=82C2A7543A488FE6969E3E37E3A5EEBB56E8C9F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:54:94:68:83:7b:76:2c:f3:08:99:88:e7: 7b:7e:5b:59:a0:0a:6b:c9:b9:1a:e4:b0:39:a6:70: c9:f2:b5:65:eb:7b:26:8d:e4:1f:22:d2:ca:5b:99: bb:da:db:3c:1c:8f:84:ff:25:a6:ca:6b:e9:3a:57: 19:15:40:5c:7d:20:89:ce:25:fb:a0:83:71:ca:2b: f6:d6:94:9e:14:cb:be:51:ae:75:98:19:66:4a:30: 14:07:e7:99:96:0c:51:b7:28:77:99:0e:33:eb:c9: db:77:38:29:a9:53:e3:90:6c:e2:2d:75:bb:e7:ba: 73:70:f8:b3:db:3f:cc:fa:f7:35:6a:4e:62:0c:16: 7d:9e:82:3e:f5:f2:fb:15:fd:d5:e7:fe:8d:83:19: 40:dd:fb:17:4d:3c:a4:ff:c4:ce:30:82:23:14:d9: 79:c4:7d:46:31:c2:71:ba:c2:27:a0:d2:24:f6:69: 0e:92:2b:b3:d7:8a:e5:b2:c3:ac:dc:50:77:40:aa: d0:82:59:f1:ff:5c:3d:76:a6:64:7d:7e:e6:5c:bc: 81:6c:dd:fb:f0:bd:23:54:1c:6b:46:73:d1:99:47: 0a:8a:92:b7:77:cb:1f:8a:0d:57:81:1c:42:45:b1: de:d6:c5:86:1b:85:81:f5:c4:bc:26:54:6e:6b:5d: 6b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:A7:54:3A:48:8F:E6:96:9E:3E:37:E3:A5:EE:BB:56:E8:C9:F3 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:06:2f:05:b5:9f:9c:ac:84:b8:c2:19:93:8b:98:1e:72:a3: d7:25:8b:fc:88:6d:92:96:d7:78:3b:d9:84:ba:8e:e6:b4:c7: 7f:80:b0:40:0a:6f:a4:2b:33:89:0c:ba:53:4c:78:ce:9e:c0: 53:38:d6:fc:6d:74:99:c6:3d:70:eb:03:53:1a:9f:38:ef:e8: cb:e4:26:4b:db:3d:2a:5e:d6:a0:28:36:7e:68:e1:4d:de:e6: 64:c0:b2:be:b9:d7:9a:bb:d1:68:f9:69:7e:8c:68:e0:05:4a: 0c:29:ec:04:74:0e:03:dd:f3:73:d5:b4:fb:dd:93:ca:f0:60: 3a:82:5e:df:67:56:e6:84:c8:26:0b:fe:0b:f2:5a:d6:22:ea: 08:3d:9d:76:37:6c:3d:29:ba:35:74:6f:20:4b:3f:a4:b4:e5: 95:c5:d1:3b:ac:be:ad:4d:9c:f8:e8:24:ba:53:50:4d:0b:38: 0c:25:c5:52:e8:ed:59:a8:a8:cb:b9:2c:df:d8:6b:79:48:62: 4b:37:a5:fb:e5:31:a6:6b:90:b2:dd:d9:ad:40:38:f3:53:fa: df:1a:87:1e:53:c6:48:da:cf:10:36:b2:a5:ee:11:7c:fc:56: c6:18:97:bb:39:17:a9:86:29:cd:75:92:3f:e8:cb:d1:bf:3a: 33:33:ad:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYIHY8Dx3L6ydGvGE4HqRy/UAg74wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTEyMjMxNDA3MzlaFw0yNTEyMjcwMTM2MzlaMDMxMTAvBgNV BAMTKDgyQzJBNzU0M0E0ODhGRTY5NjlFM0UzN0UzQTVFRUJCNTZFOEM5RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCteFSUaIN7dizzCJmI53t+W1mg CmvJuRrksDmmcMnytWXreyaN5B8i0spbmbva2zwcj4T/JabKa+k6VxkVQFx9IInO Jfugg3HKK/bWlJ4Uy75RrnWYGWZKMBQH55mWDFG3KHeZDjPrydt3OCmpU+OQbOIt dbvnunNw+LPbP8z69zVqTmIMFn2egj718vsV/dXn/o2DGUDd+xdNPKT/xM4wgiMU 2XnEfUYxwnG6wieg0iT2aQ6SK7PXiuWyw6zcUHdAqtCCWfH/XD12pmR9fuZcvIFs 3fvwvSNUHGtGc9GZRwqKkrd3yx+KDVeBHEJFsd7WxYYbhYH1xLwmVG5rXWv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgsKnVDpIj+aWnj4346Xuu1boyfMwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4GLwW1n5yshLjCGZOLmB5yo9cli/yIbZKW 13g72YS6jua0x3+AsEAKb6QrM4kMulNMeM6ewFM41vxtdJnGPXDrA1Manzjv6Mvk JkvbPSpe1qAoNn5o4U3e5mTAsr6515q70Wj5aX6MaOAFSgwp7AR0DgPd83PVtPvd k8rwYDqCXt9nVuaEyCYL/gvyWtYi6gg9nXY3bD0pujV0byBLP6S05ZXF0Tusvq1N nPjoJLpTUE0LOAwlxVLo7VmoqMu5LN/Ya3lIYks3pfvlMaZrkLLd2a1AOPNT+t8a hx5TxkjazxA2sqXuEXz8VsYYl7s5F6mGKc11kj/oy9G/OjMzrUU= -----END CERTIFICATE-----Generated at Wed Dec 24 21:20:36 2025 by rpki-client