This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: BXim1qSkp/Ycust3u+vvgF8oUdXddKF62lOtA/uLDuY= Subject key identifier: 51:4E:97:E2:E6:9B:DE:AE:BD:FB:3F:04:66:59:72:48:B4:3B:63:CE Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 11A1BFE7B87E8C6F5E00AAED5BCAC746427040BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: E6 Signing time: Tue 02 Dec 2025 14:52:42 +0000 Manifest this update: Tue 02 Dec 2025 14:47:42 +0000 Manifest next update: Sat 06 Dec 2025 02:20:42 +0000 Files and hashes: 1: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: 7B0a0OPTUD14/iwMKPxIyaN/0OfPMa9Eku1rt6Jn878=) 2: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a1:bf:e7:b8:7e:8c:6f:5e:00:aa:ed:5b:ca:c7:46:42:70:40:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Dec 2 14:47:42 2025 GMT Not After : Dec 6 02:20:42 2025 GMT Subject: CN=514E97E2E69BDEAEBDFB3F0466597248B43B63CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:a6:cc:d5:b5:d5:d4:50:5b:c2:d9:63:a4: ac:a3:bd:f5:d0:3c:c7:94:c5:f3:ec:74:e3:06:6c: 39:34:37:a5:2f:02:e9:0d:8b:15:6e:87:aa:1e:49: 02:4b:db:44:8e:e2:ce:6e:3e:d6:ef:d1:13:34:b1: 70:b7:9c:f8:42:a2:60:d9:17:58:28:35:31:27:18: 2e:73:b3:a6:74:17:82:94:af:e4:95:98:de:65:8b: 52:02:2b:0f:c5:cd:6c:21:aa:5a:40:ff:e4:59:51: dd:ea:03:10:0e:aa:ed:45:08:ba:bc:00:99:85:6f: 9d:b3:a9:4f:ea:01:f3:56:8d:c6:fb:75:c9:9d:a9: 44:70:4a:28:61:ab:75:f6:5e:b0:1d:4f:e5:28:54: 70:1d:83:fe:e1:ed:71:3e:72:8f:76:4a:05:a7:c7: 61:ba:88:81:ca:4f:22:0e:f6:b6:8f:6c:24:6b:d2: 12:9f:10:4b:78:81:18:e3:c2:cb:cd:14:90:e5:d3: fa:cc:ce:d2:68:80:0a:4b:a3:4f:ae:b7:81:58:92: c4:0b:23:59:bf:ee:55:6f:b4:88:3a:46:d0:43:d4: 83:c4:e3:d2:cf:26:18:08:5a:35:b4:5a:78:b3:c4: f5:c4:d5:74:a3:9d:01:ab:79:71:02:ee:ef:9a:b9: 0c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4E:97:E2:E6:9B:DE:AE:BD:FB:3F:04:66:59:72:48:B4:3B:63:CE X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:a8:54:36:80:2b:b8:8e:cc:48:dd:ee:c0:e7:2c:00:69:1e: 75:d0:20:2c:25:b8:07:bd:51:e0:92:80:db:91:d8:ae:7f:f9: c4:b3:8d:7c:2a:6d:8e:4c:f0:ec:f3:f2:6c:c4:b2:37:29:0c: 44:eb:f9:8e:19:7b:8d:09:78:1b:c8:ea:6c:95:83:d5:3d:7b: 05:e6:cf:32:2c:be:60:ba:63:2c:88:3a:e7:19:32:ff:d2:64: eb:d2:00:e6:64:d8:e0:2c:50:57:ef:33:50:1c:6d:54:c6:00: 9d:d2:d8:80:aa:22:e6:11:98:c2:93:6b:22:bc:3d:0f:5d:0f: d1:0f:97:47:7f:04:e1:1a:27:ad:cc:03:1b:f4:25:00:f8:72: 23:b0:fa:64:eb:f4:7c:60:db:af:d7:e3:fb:9b:e8:9b:29:62: 45:14:a3:7c:8c:1d:94:b2:f2:6e:c0:85:9d:28:75:2f:cd:e9: 94:89:5f:ea:45:cc:0e:f8:09:e9:1f:36:61:71:84:0d:7a:be: 93:3d:82:9c:cc:64:f2:c0:43:a8:0f:fb:62:b7:fe:81:b4:1a: e8:50:87:61:45:8c:55:f5:09:c9:62:86:01:9d:8e:cb:0e:8c: 2f:d7:d1:90:b3:08:68:91:6d:49:d4:40:69:3c:8c:90:71:96: f7:93:1c:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEaG/57h+jG9eAKrtW8rHRkJwQLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTEyMDIxNDQ3NDJaFw0yNTEyMDYwMjIwNDJaMDMxMTAvBgNV BAMTKDUxNEU5N0UyRTY5QkRFQUVCREZCM0YwNDY2NTk3MjQ4QjQzQjYzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKKbM1bXV1FBbwtljpKyjvfXQ PMeUxfPsdOMGbDk0N6UvAukNixVuh6oeSQJL20SO4s5uPtbv0RM0sXC3nPhComDZ F1goNTEnGC5zs6Z0F4KUr+SVmN5li1ICKw/FzWwhqlpA/+RZUd3qAxAOqu1FCLq8 AJmFb52zqU/qAfNWjcb7dcmdqURwSihhq3X2XrAdT+UoVHAdg/7h7XE+co92SgWn x2G6iIHKTyIO9raPbCRr0hKfEEt4gRjjwsvNFJDl0/rMztJogApLo0+ut4FYksQL I1m/7lVvtIg6RtBD1IPE49LPJhgIWjW0WnizxPXE1XSjnQGreXEC7u+auQwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUU6X4uab3q69+z8EZllySLQ7Y84wHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMqoVDaAK7iOzEjd7sDnLABpHnXQICwluAe9 UeCSgNuR2K5/+cSzjXwqbY5M8Ozz8mzEsjcpDETr+Y4Ze40JeBvI6myVg9U9ewXm zzIsvmC6YyyIOucZMv/SZOvSAOZk2OAsUFfvM1AcbVTGAJ3S2ICqIuYRmMKTayK8 PQ9dD9EPl0d/BOEaJ63MAxv0JQD4ciOw+mTr9Hxg26/X4/ub6JspYkUUo3yMHZSy 8m7AhZ0odS/N6ZSJX+pFzA74CekfNmFxhA16vpM9gpzMZPLAQ6gP+2K3/oG0GuhQ h2FFjFX1CclihgGdjssOjC/X0ZCzCGiRbUnUQGk8jJBxlveTHCg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:02 2025 by rpki-client