This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: 9Dd0RE270ef3+M7A9xilduEdIQOvN/NL3m9pAKPBQYI= Subject key identifier: 7D:EB:0E:89:80:CF:75:54:76:FA:62:CC:1A:C2:54:0D:91:48:D7:CB Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 3C0C75F1FBC5BBC2F90E62B2020ACC0D4FBFC7E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 0205 Signing time: Tue 02 Dec 2025 17:51:29 +0000 Manifest this update: Tue 02 Dec 2025 17:46:29 +0000 Manifest next update: Sat 06 Dec 2025 03:35:29 +0000 Files and hashes: 1: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: KVflWt/9ZHNF144a2DoGIB+DnI2K8Uep4cCtz003+NU=) 2: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0c:75:f1:fb:c5:bb:c2:f9:0e:62:b2:02:0a:cc:0d:4f:bf:c7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Dec 2 17:46:29 2025 GMT Not After : Dec 6 03:35:29 2025 GMT Subject: CN=7DEB0E8980CF755476FA62CC1AC2540D9148D7CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3a:2d:24:34:92:3c:8f:bc:94:7c:dc:ca:e1: ab:5c:cf:fe:70:24:08:22:f9:10:b3:f2:80:11:cf: 4b:8d:50:ec:19:2b:dd:4d:3e:cf:b8:d2:c8:cd:e9: 0d:26:e5:69:03:b6:60:a8:d0:90:99:97:ec:63:a5: 9d:66:76:8a:9b:5f:06:79:34:29:92:3a:98:0b:99: be:9c:46:e0:69:d2:0b:04:17:f6:91:d3:9b:08:af: 49:de:94:4d:ca:11:63:f5:3d:40:33:c2:7d:b7:cd: 11:21:65:78:33:57:46:72:fa:ef:c0:b2:e7:92:62: d7:64:c8:8f:ee:46:f7:97:97:16:77:66:f3:12:85: f1:3d:6b:56:63:eb:65:0f:a9:d7:9c:a7:8e:ef:03: d0:86:93:0c:95:69:dd:83:9a:e5:db:5a:74:6e:03: 71:20:1e:31:a1:1f:0a:fa:16:8e:79:9c:66:94:a5: 04:94:00:13:43:a4:09:4c:f8:0d:9c:3f:22:53:d8: a4:9c:03:ea:3f:cf:6e:37:b8:3e:fc:1e:0d:b6:f8: 5f:34:8a:59:27:0e:56:b3:43:cd:59:5c:85:58:50: b9:60:4a:75:88:c3:18:80:c5:f7:84:96:62:83:67: cb:56:47:f7:0c:8e:69:6a:fc:bd:29:e8:34:13:d8: f3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EB:0E:89:80:CF:75:54:76:FA:62:CC:1A:C2:54:0D:91:48:D7:CB X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:09:d2:26:ef:ec:02:38:08:28:bf:e9:9c:a2:47:15:27:bc: aa:3f:0d:53:24:a2:b8:21:09:6c:df:c6:db:78:d3:39:10:04: 51:b6:db:6d:74:e8:4b:8b:0f:22:a7:e7:a3:df:e1:8d:38:ed: 2b:20:1b:8b:4f:4e:13:dd:98:9d:8e:c9:e6:ea:03:dd:b7:e7: 15:03:82:4e:d5:7c:67:e2:40:7d:af:e2:3a:f8:58:96:5d:f7: c5:0f:df:76:d1:2a:1b:e4:44:fc:f8:70:1f:b6:d2:6f:0e:0d: 1d:c5:61:23:c7:9c:82:c7:9c:d9:c9:49:30:3d:0d:97:75:99: c5:14:a8:74:01:58:57:f0:1e:22:ec:5f:28:e9:32:9d:46:04: 44:ba:1f:98:3b:e3:a0:4c:bc:50:2e:f5:e0:d6:a3:5c:7d:21: 67:61:ab:72:7a:37:34:16:fd:a7:26:da:6e:4d:7c:7f:9f:4d: 7c:2a:35:ed:d3:fc:85:08:2e:d5:a8:66:e9:fb:95:6e:79:cd: ee:87:99:81:ae:9d:cb:82:dd:bf:87:e0:c4:79:f6:d8:e4:84: 0d:9c:cf:9c:76:a5:2c:5b:ed:5c:88:7f:38:3d:4d:57:b0:5f: 0c:49:bc:cc:59:2e:75:a7:e3:95:a1:84:42:e7:22:21:a4:4d: a6:dc:96:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAx18fvFu8L5DmKyAgrMDU+/x+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTEyMDIxNzQ2MjlaFw0yNTEyMDYwMzM1MjlaMDMxMTAvBgNV BAMTKDdERUIwRTg5ODBDRjc1NTQ3NkZBNjJDQzFBQzI1NDBEOTE0OEQ3Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnOi0kNJI8j7yUfNzK4atcz/5w JAgi+RCz8oARz0uNUOwZK91NPs+40sjN6Q0m5WkDtmCo0JCZl+xjpZ1mdoqbXwZ5 NCmSOpgLmb6cRuBp0gsEF/aR05sIr0nelE3KEWP1PUAzwn23zREhZXgzV0Zy+u/A sueSYtdkyI/uRveXlxZ3ZvMShfE9a1Zj62UPqdecp47vA9CGkwyVad2DmuXbWnRu A3EgHjGhHwr6Fo55nGaUpQSUABNDpAlM+A2cPyJT2KScA+o/z243uD78Hg22+F80 ilknDlazQ81ZXIVYULlgSnWIwxiAxfeElmKDZ8tWR/cMjmlq/L0p6DQT2PPPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfesOiYDPdVR2+mLMGsJUDZFI18swHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4J0ibv7AI4CCi/6ZyiRxUnvKo/DVMkorgh CWzfxtt40zkQBFG222106EuLDyKn56Pf4Y047SsgG4tPThPdmJ2OyebqA9235xUD gk7VfGfiQH2v4jr4WJZd98UP33bRKhvkRPz4cB+20m8ODR3FYSPHnILHnNnJSTA9 DZd1mcUUqHQBWFfwHiLsXyjpMp1GBES6H5g746BMvFAu9eDWo1x9IWdhq3J6NzQW /acm2m5NfH+fTXwqNe3T/IUILtWoZun7lW55ze6HmYGuncuC3b+H4MR59tjkhA2c z5x2pSxb7VyIfzg9TVewXwxJvMxZLnWn45WhhELnIiGkTabcltc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:17 2025 by rpki-client