This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: RMnl4m5s9uPwSTG4OCZP0Key8gM3ze6l+tTS4RpDJuw= Subject key identifier: E8:A7:79:E1:89:11:D3:27:99:07:F9:BF:F3:66:CD:F2:2A:2F:8D:4B Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 7E240838F9526FEBE0EFA32134B4C24E293E6AAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 0528 Signing time: Mon 29 Dec 2025 00:30:48 +0000 Manifest this update: Mon 29 Dec 2025 00:25:48 +0000 Manifest next update: Thu 01 Jan 2026 05:08:48 +0000 Files and hashes: 1: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) 2: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: i4JZtLxNcEx79ztZcAVgbAKDUC7t+Rk8RFZ/jvW9e84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:08:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:24:08:38:f9:52:6f:eb:e0:ef:a3:21:34:b4:c2:4e:29:3e:6a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Dec 29 00:25:48 2025 GMT Not After : Jan 1 05:08:48 2026 GMT Subject: CN=E8A779E18911D3279907F9BFF366CDF22A2F8D4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:b4:da:0d:ad:be:b9:3f:e6:cb:46:8b:63: c7:19:2e:7e:72:d2:46:9a:44:17:ee:1b:ae:ab:0e: db:21:15:72:eb:54:be:ae:dd:ac:58:bd:b7:93:02: 1e:a5:15:4d:d2:c5:eb:9f:a7:5a:8a:f3:8e:b6:35: e8:7d:b5:22:fd:9d:83:26:5b:24:33:9a:ac:64:5f: 7a:31:e9:68:e5:25:ef:db:be:13:ec:02:77:8f:3e: f6:45:e0:f7:0e:39:c9:3c:21:5d:07:cd:78:14:11: 68:cd:44:fd:fd:1c:42:ec:2e:f5:0e:08:42:a9:d0: e0:d6:b8:54:11:4a:1b:34:46:79:f1:34:bc:15:6f: 62:b2:f0:ea:a9:5f:85:0c:04:8a:c1:76:72:e6:1f: 67:cc:db:30:be:1a:8d:5c:6b:60:f7:d7:a4:99:26: ec:26:e0:e8:13:59:c8:e2:b7:f8:da:ac:9b:35:61: 23:4a:c4:63:94:2f:95:56:54:20:63:58:17:06:a1: c6:59:16:f1:8c:90:08:47:e2:f8:ba:9a:68:64:b1: 9b:d2:a1:44:4c:58:f5:fe:74:01:9e:1b:a0:5f:d7: 6f:33:f5:f9:fe:27:9b:73:98:30:68:b7:52:37:bb: c3:18:09:6c:4e:88:2c:87:6a:e9:dd:81:8e:af:72: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A7:79:E1:89:11:D3:27:99:07:F9:BF:F3:66:CD:F2:2A:2F:8D:4B X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:68:d2:df:8e:80:3d:2b:4e:1f:e1:09:bb:9b:bc:88:35:aa: 19:34:22:6a:0e:b4:93:95:bd:97:07:ec:8f:db:f5:85:a1:46: b3:3e:64:10:7f:73:7b:4b:a9:c5:18:81:02:f6:fe:a8:17:b1: 3b:d4:44:aa:2f:59:70:d2:e8:61:66:c7:d7:13:ec:ba:0e:3d: a0:bd:f7:74:50:a6:a4:58:5d:56:4f:08:9d:28:11:ca:27:4e: 6c:63:0a:b1:fa:33:66:9b:99:f9:d6:7a:39:92:a4:b8:08:00: 96:a5:d6:5e:b0:9d:d4:ca:85:f4:95:2a:b5:22:48:48:8d:f1: da:6f:3e:dd:e4:a7:11:53:a6:92:28:8d:6b:66:82:35:1d:67: e9:a0:51:3b:d7:ed:a0:e7:76:81:68:20:e7:b0:d8:4e:97:72: 6c:ca:03:01:bb:90:a1:39:b5:fa:c7:b3:98:46:c7:f5:af:2d: 15:31:21:4f:75:64:65:ee:2e:46:af:5f:0a:4c:5b:6b:f2:a7: ff:88:37:4d:b5:18:59:a5:36:ec:3c:e9:c4:5a:01:8d:bb:d6: be:45:aa:fa:b5:99:a5:c5:c8:cc:41:d5:79:cb:af:c6:29:39: 90:28:f5:be:76:1d:b7:47:6d:b3:f3:ac:d3:10:29:1b:ce:75: 8d:79:70:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfiQIOPlSb+vg76MhNLTCTik+aqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTEyMjkwMDI1NDhaFw0yNjAxMDEwNTA4NDhaMDMxMTAvBgNV BAMTKEU4QTc3OUUxODkxMUQzMjc5OTA3RjlCRkYzNjZDREYyMkEyRjhENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPLTaDa2+uT/my0aLY8cZLn5y 0kaaRBfuG66rDtshFXLrVL6u3axYvbeTAh6lFU3Sxeufp1qK8462Neh9tSL9nYMm WyQzmqxkX3ox6WjlJe/bvhPsAnePPvZF4PcOOck8IV0HzXgUEWjNRP39HELsLvUO CEKp0ODWuFQRShs0RnnxNLwVb2Ky8OqpX4UMBIrBdnLmH2fM2zC+Go1ca2D316SZ Juwm4OgTWcjit/jarJs1YSNKxGOUL5VWVCBjWBcGocZZFvGMkAhH4vi6mmhksZvS oURMWPX+dAGeG6Bf128z9fn+J5tzmDBot1I3u8MYCWxOiCyHaundgY6vcjRhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Kd54YkR0yeZB/m/82bN8iovjUswHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9o0t+OgD0rTh/hCbubvIg1qhk0ImoOtJOV vZcH7I/b9YWhRrM+ZBB/c3tLqcUYgQL2/qgXsTvURKovWXDS6GFmx9cT7LoOPaC9 93RQpqRYXVZPCJ0oEconTmxjCrH6M2abmfnWejmSpLgIAJal1l6wndTKhfSVKrUi SEiN8dpvPt3kpxFTppIojWtmgjUdZ+mgUTvX7aDndoFoIOew2E6XcmzKAwG7kKE5 tfrHs5hGx/WvLRUxIU91ZGXuLkavXwpMW2vyp/+IN021GFmlNuw86cRaAY271r5F qvq1maXFyMxB1XnLr8YpOZAo9b52HbdHbbPzrNMQKRvOdY15cLI= -----END CERTIFICATE-----Generated at Mon Dec 29 13:24:55 2025 by rpki-client