This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: W92mvAJx6zF/8+t/CKZ42foDNHPbFy7m6t7SfCC/o0U= Subject key identifier: B9:3D:CE:C2:E5:64:D1:F0:42:0F:69:8B:F1:F8:C5:9B:7F:CF:03:1A Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 07F9AF8F42FEBE7287741E4DA4FA59D4968E3062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 0365 Signing time: Tue 30 Dec 2025 01:10:03 +0000 Manifest this update: Tue 30 Dec 2025 01:05:03 +0000 Manifest next update: Fri 02 Jan 2026 09:19:03 +0000 Files and hashes: 1: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: qyQp/hyKyst6XmwfFg2kTVnF1W7/ejSzOxRidxXhEBQ=) 2: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 09:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f9:af:8f:42:fe:be:72:87:74:1e:4d:a4:fa:59:d4:96:8e:30:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Dec 30 01:05:03 2025 GMT Not After : Jan 2 09:19:03 2026 GMT Subject: CN=B93DCEC2E564D1F0420F698BF1F8C59B7FCF031A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dd:eb:6e:71:6d:e9:c9:5d:46:2b:3e:64:54: 16:88:0c:7b:15:39:eb:51:ff:0e:68:e3:27:a6:9d: 43:a8:1f:66:7e:0b:77:dc:b6:49:d4:52:c7:48:ea: cc:bc:73:08:98:aa:1d:6b:0f:32:1a:6f:04:82:95: 70:94:f5:0c:76:fc:09:e3:51:28:59:a6:4f:16:81: c9:3d:ab:e1:c7:ef:ed:85:36:81:f7:7e:4d:7b:99: 91:ee:76:ac:77:8b:ae:90:72:6e:11:67:0b:84:67: d4:4c:0a:af:95:29:e2:a7:9e:80:ce:10:12:92:be: d6:a9:a9:db:1b:d6:87:03:ff:f0:88:f0:74:13:03: 34:ad:86:e9:d1:b2:3d:80:2f:fa:20:53:30:43:34: 47:71:07:0c:c8:db:ec:40:7b:76:1f:d5:df:4a:1f: ca:49:b5:72:ed:15:da:de:f5:c3:b2:66:cb:d6:8a: 5b:b5:11:d0:94:e5:d4:be:f9:b7:dc:6b:4c:50:56: 88:3c:61:3f:9d:3b:0b:01:ec:78:22:c3:f2:a1:35: 2c:5c:48:a6:de:45:35:73:22:73:80:d7:25:20:a0: 1a:6b:31:6c:ea:e9:a5:58:b8:8a:88:3d:27:41:4c: bd:0c:68:94:71:35:b3:f4:d5:c4:ab:9d:56:0a:97: 6f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3D:CE:C2:E5:64:D1:F0:42:0F:69:8B:F1:F8:C5:9B:7F:CF:03:1A X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:a3:a5:bb:7b:9d:7a:12:cd:c8:76:19:67:99:98:c1:29:1b: 51:a7:ea:01:e9:af:5a:44:f5:39:78:fa:a4:29:0e:fd:f4:29: ed:08:2a:23:6c:e9:0a:b5:50:a3:8b:20:93:30:70:81:89:9d: 3d:b5:7d:d6:29:48:aa:7c:38:05:74:79:09:86:61:05:d9:8a: c9:7b:8c:d1:a0:e4:2d:38:f6:38:f1:5f:ab:ac:bc:25:f1:89: 94:78:55:9a:d6:3f:f6:31:48:9f:da:82:61:af:b9:a3:5d:3f: 0e:dd:4e:1b:57:22:47:81:fb:45:e5:c5:40:a3:fc:f0:38:4e: 54:8a:fb:5a:23:5b:c8:fc:8a:3b:ae:ba:ab:e8:84:c8:38:4b: bf:63:3d:a4:1f:b0:f0:3d:6b:77:c1:93:e6:1d:61:a8:01:33: a5:c6:2e:a4:88:1e:0c:d7:6c:34:53:ca:84:42:18:9f:bd:ca: ad:b6:3b:80:9a:2b:66:83:1e:f4:3d:a3:7a:a6:66:f1:70:20: e8:79:c8:12:bd:66:47:66:31:70:d7:a8:3e:1a:24:e4:94:3c: 9d:a8:e5:71:aa:6f:47:0e:47:d9:52:44:0d:72:c8:9a:93:c9: f6:c1:b6:6a:68:24:5c:98:8a:36:6b:35:02:1b:5d:f6:97:34: d2:13:e6:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/mvj0L+vnKHdB5NpPpZ1JaOMGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTEyMzAwMTA1MDNaFw0yNjAxMDIwOTE5MDNaMDMxMTAvBgNV BAMTKEI5M0RDRUMyRTU2NEQxRjA0MjBGNjk4QkYxRjhDNTlCN0ZDRjAzMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3etucW3pyV1GKz5kVBaIDHsV OetR/w5o4yemnUOoH2Z+C3fctknUUsdI6sy8cwiYqh1rDzIabwSClXCU9Qx2/Anj UShZpk8Wgck9q+HH7+2FNoH3fk17mZHudqx3i66Qcm4RZwuEZ9RMCq+VKeKnnoDO EBKSvtapqdsb1ocD//CI8HQTAzSthunRsj2AL/ogUzBDNEdxBwzI2+xAe3Yf1d9K H8pJtXLtFdre9cOyZsvWilu1EdCU5dS++bfca0xQVog8YT+dOwsB7Hgiw/KhNSxc SKbeRTVzInOA1yUgoBprMWzq6aVYuIqIPSdBTL0MaJRxNbP01cSrnVYKl2/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuT3OwuVk0fBCD2mL8fjFm3/PAxowHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyjpbt7nXoSzch2GWeZmMEpG1Gn6gHpr1pE 9Tl4+qQpDv30Ke0IKiNs6Qq1UKOLIJMwcIGJnT21fdYpSKp8OAV0eQmGYQXZisl7 jNGg5C049jjxX6usvCXxiZR4VZrWP/YxSJ/agmGvuaNdPw7dThtXIkeB+0XlxUCj /PA4TlSK+1ojW8j8ijuuuqvohMg4S79jPaQfsPA9a3fBk+YdYagBM6XGLqSIHgzX bDRTyoRCGJ+9yq22O4CaK2aDHvQ9o3qmZvFwIOh5yBK9ZkdmMXDXqD4aJOSUPJ2o 5XGqb0cOR9lSRA1yyJqTyfbBtmpoJFyYijZrNQIbXfaXNNIT5oY= -----END CERTIFICATE-----Generated at Wed Dec 31 09:27:21 2025 by rpki-client