This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: UPLwcHyPldU/6VptSYX94eGjavxrL10CDZObBSbiHGc= Subject key identifier: DC:F6:27:DB:E1:BC:79:66:95:24:15:36:E5:EC:B9:AF:FB:85:28:66 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 9106D3084A5149938B20C64A71B393023BB397 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 03A9 Signing time: Mon 01 Dec 2025 07:30:44 +0000 Manifest this update: Mon 01 Dec 2025 07:25:44 +0000 Manifest next update: Thu 04 Dec 2025 16:04:44 +0000 Files and hashes: 1: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: /k4Be47q0hOEKUONcsS+9pRsoeO+rZwc1QgiJMCKHZU=) 2: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91:06:d3:08:4a:51:49:93:8b:20:c6:4a:71:b3:93:02:3b:b3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Dec 1 07:25:44 2025 GMT Not After : Dec 4 16:04:44 2025 GMT Subject: CN=DCF627DBE1BC796695241536E5ECB9AFFB852866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3f:c9:31:13:25:66:0d:f4:c4:c9:21:65:ea: 7e:0a:a6:97:71:49:5a:26:c2:00:a0:d2:83:ac:ca: f3:46:73:b0:b2:73:28:bf:c4:41:1b:cd:47:b3:5d: 89:15:8e:37:1e:64:34:70:cc:b2:ca:be:6e:2a:1d: 1c:7a:ec:6e:df:dd:4b:ea:be:e1:45:cd:7b:41:ac: f2:41:45:52:3a:72:c4:1c:b9:67:22:96:7b:00:58: 46:d6:13:05:ea:44:36:83:a9:8e:31:ab:29:23:bb: 91:94:e9:1a:d7:79:5f:6e:ec:60:c3:26:c1:43:1d: 26:dc:1c:e2:bd:b4:e7:c8:6e:83:53:2e:7c:dc:f5: da:d0:45:96:86:dc:3f:21:42:98:bf:ff:db:72:66: cf:0b:e2:0c:91:b5:77:f8:e3:48:46:96:a7:68:db: 7b:b8:4e:35:6a:c0:03:49:61:eb:af:08:39:56:f1: f0:71:c5:94:ea:fa:b2:6f:8d:d4:b6:d3:76:5c:fa: 42:f4:5a:2b:80:aa:4d:97:3d:2e:ae:9d:47:c8:1f: 67:d3:85:65:b5:f1:97:bc:db:82:00:3d:ed:67:6a: a0:97:24:15:78:66:b3:a6:b2:31:ae:0a:2b:4e:e3: 13:d4:3e:d7:1e:8c:3f:83:2a:84:b1:2b:01:b5:6e: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F6:27:DB:E1:BC:79:66:95:24:15:36:E5:EC:B9:AF:FB:85:28:66 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:82:72:19:c7:f2:e3:c7:65:92:ec:59:3c:6b:19:4c:27:32: e2:f0:cd:5b:63:40:4f:67:71:bd:43:2b:59:f0:ff:90:36:46: 59:61:55:0e:d5:a2:92:b8:e2:a2:58:83:ca:33:76:9b:a1:1b: f6:02:0d:3e:60:e7:94:f9:fb:30:d7:21:7e:e8:4b:7f:db:d7: e5:f5:90:c6:7c:5f:49:34:b7:86:00:23:f5:a2:a3:31:d6:98: 95:11:a6:77:f3:a1:02:58:3b:b9:e5:3f:33:e8:e5:15:bc:8c: c8:7b:83:c3:43:95:6f:86:3c:71:40:24:4e:d5:ca:b3:1c:1c: 43:2d:80:1c:13:fd:c3:a2:c9:34:a7:b3:25:55:94:b1:fa:cb: 33:a5:47:a5:d9:de:2e:c8:b3:69:09:7d:e9:1b:5b:2b:3f:a7: 21:f8:58:35:17:5c:1e:0a:33:49:2e:48:b0:9f:1b:c9:c0:f2: 25:18:4a:5f:70:50:06:a0:cf:de:6e:bb:3c:fb:84:19:48:0c: d2:7c:6c:4a:f2:99:6e:6c:3c:dc:fa:66:d7:da:6f:a4:f0:93: 6d:4e:7a:4a:c3:61:95:9b:0f:fb:3b:4c:b5:7d:9e:1c:f8:33: 6f:ed:ef:36:72:f6:59:1c:de:b3:4b:c6:fd:54:66:22:4d:56: b5:50:d2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJEG0whKUUmTiyDGSnGzkwI7s5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTEyMDEwNzI1NDRaFw0yNTEyMDQxNjA0NDRaMDMxMTAvBgNV BAMTKERDRjYyN0RCRTFCQzc5NjY5NTI0MTUzNkU1RUNCOUFGRkI4NTI4NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXP8kxEyVmDfTEySFl6n4Kppdx SVomwgCg0oOsyvNGc7Cycyi/xEEbzUezXYkVjjceZDRwzLLKvm4qHRx67G7f3Uvq vuFFzXtBrPJBRVI6csQcuWcilnsAWEbWEwXqRDaDqY4xqykju5GU6RrXeV9u7GDD JsFDHSbcHOK9tOfIboNTLnzc9drQRZaG3D8hQpi//9tyZs8L4gyRtXf440hGlqdo 23u4TjVqwANJYeuvCDlW8fBxxZTq+rJvjdS203Zc+kL0WiuAqk2XPS6unUfIH2fT hWW18Ze824IAPe1naqCXJBV4ZrOmsjGuCitO4xPUPtcejD+DKoSxKwG1bj9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3PYn2+G8eWaVJBU25ey5r/uFKGYwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeCchnH8uPHZZLsWTxrGUwnMuLwzVtjQE9n cb1DK1nw/5A2RllhVQ7VopK44qJYg8ozdpuhG/YCDT5g55T5+zDXIX7oS3/b1+X1 kMZ8X0k0t4YAI/WiozHWmJURpnfzoQJYO7nlPzPo5RW8jMh7g8NDlW+GPHFAJE7V yrMcHEMtgBwT/cOiyTSnsyVVlLH6yzOlR6XZ3i7Is2kJfekbWys/pyH4WDUXXB4K M0kuSLCfG8nA8iUYSl9wUAagz95uuzz7hBlIDNJ8bErymW5sPNz6Ztfab6Twk21O ekrDYZWbD/s7TLV9nhz4M2/t7zZy9lkc3rNLxv1UZiJNVrVQ0s8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:51:28 2025 by rpki-client