This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft File: 8955B36815B4084BAFC7908A639810631BEED49F.mft (raw, json) Hash identifier: F7nnGBZqjCE7J5pCTfU54LuSHUQarN6ptyOP6Otlmmo= Subject key identifier: 49:BF:E4:AB:C3:85:ED:C8:3E:EF:BB:09:FF:40:82:DF:3E:01:D0:CB Authority key identifier: 89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F Certificate issuer: /CN=8955B36815B4084BAFC7908A639810631BEED49F Certificate serial: 103B60056617343075CB3CC29C7C304F5A40D94F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft Manifest number: 0523 Signing time: Wed 17 Dec 2025 15:30:49 +0000 Manifest this update: Wed 17 Dec 2025 15:25:49 +0000 Manifest next update: Sat 20 Dec 2025 23:35:49 +0000 Files and hashes: 1: 8955B36815B4084BAFC7908A639810631BEED49F.crl (hash: f1i1Hwb5O5RNyJvuSGnmeOspaDd+DhPT14bO6qD/DRE=) 2: 3130332e3135332e3234342e302f32342d3234203d3e20313430343734.roa (hash: anheo7/IFUA2/H9FN8liseYHAvu0fSEkGprdILkGE3g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 23:35:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3b:60:05:66:17:34:30:75:cb:3c:c2:9c:7c:30:4f:5a:40:d9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8955B36815B4084BAFC7908A639810631BEED49F Validity Not Before: Dec 17 15:25:49 2025 GMT Not After : Dec 20 23:35:49 2025 GMT Subject: CN=49BFE4ABC385EDC83EEFBB09FF4082DF3E01D0CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:1d:3b:ae:07:0b:36:4e:cc:9f:64:74:e8: d2:e0:5f:7e:6b:d8:b1:f8:f5:41:2e:4b:21:0a:36: 3a:6f:27:40:57:68:55:f2:92:8f:e8:55:f7:5f:4f: 22:9a:bc:90:23:85:e2:a4:04:72:bc:b6:7e:78:12: e4:c4:6e:61:04:f9:1a:b6:f4:6e:19:2a:54:c6:4a: 14:41:4b:45:96:52:05:d0:13:34:07:63:43:04:3a: e2:5e:98:21:f9:ef:a7:a9:4a:00:db:cd:4d:27:4e: e2:ca:ba:e1:aa:fa:c5:10:6e:fd:80:54:a9:64:b3: 6e:89:48:ea:7c:e2:2a:cd:2f:8a:1e:80:45:15:2c: bf:d8:f3:d5:e7:9c:a4:a4:8a:51:82:34:83:dd:77: 1e:f7:cc:fd:7e:cd:ee:56:86:c9:7d:7e:19:2b:88: b5:50:2e:38:38:24:fb:e0:88:8f:28:5f:f2:c7:34: d8:52:69:ac:6a:f6:4f:0c:72:99:69:df:17:30:24: 49:3c:8b:85:4f:63:83:64:0f:5a:eb:62:9c:d5:69: a7:cd:b3:83:87:ae:32:69:23:09:7d:e3:c3:df:43: bb:9c:41:7b:f7:55:96:17:8b:05:b3:83:03:26:f2: 84:16:32:45:57:de:3d:54:1b:c9:f0:c7:c8:5a:da: a1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BF:E4:AB:C3:85:ED:C8:3E:EF:BB:09:FF:40:82:DF:3E:01:D0:CB X509v3 Authority Key Identifier: keyid:89:55:B3:68:15:B4:08:4B:AF:C7:90:8A:63:98:10:63:1B:EE:D4:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8955B36815B4084BAFC7908A639810631BEED49F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e26aa3-3073-4276-bd74-ad86f099c253/0/8955B36815B4084BAFC7908A639810631BEED49F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0c:02:c4:2c:ad:ab:1b:77:e8:9b:ec:84:d2:63:fc:d2:e1: 9b:c3:88:af:c0:bf:7a:ed:3d:c5:34:ca:6e:b9:6c:e0:fb:a0: e8:2e:5c:db:aa:68:b1:50:cb:d7:73:14:e2:de:f7:ea:ef:48: 69:43:95:e2:64:18:1f:bb:6e:d3:da:89:4b:09:03:85:54:30: 4c:b6:ba:56:03:f1:f7:00:6b:aa:82:5d:db:b5:ae:fa:a4:9b: 14:35:ab:b3:35:e5:d8:97:f0:c5:0f:3c:d3:d4:e7:06:b9:da: 46:ba:8b:42:ee:3a:91:32:1a:2e:16:83:38:a0:c9:ae:45:4f: f9:93:f3:45:09:24:df:65:c2:4d:19:4b:cb:4d:4c:8a:af:97: 25:1f:39:01:3e:85:04:2f:0c:ae:68:65:6b:b5:3a:a3:ad:38: 6b:11:f5:b3:11:56:11:ce:44:8f:76:c3:38:87:9a:77:de:6e: 67:82:44:57:eb:71:78:bf:c0:76:2d:60:89:03:34:40:e4:68: 32:fb:c2:5f:14:f8:55:38:3f:93:93:0b:4c:4e:c5:d2:04:c6: 4a:d4:53:07:88:9a:4e:ff:1e:26:2c:8a:35:ce:8f:56:8e:e2: a2:b9:b1:cc:2a:59:09:af:29:13:71:5f:7a:9e:24:4f:9f:6a: f8:ad:bc:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEDtgBWYXNDB1yzzCnHwwT1pA2U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMx QkVFRDQ5RjAeFw0yNTEyMTcxNTI1NDlaFw0yNTEyMjAyMzM1NDlaMDMxMTAvBgNV BAMTKDQ5QkZFNEFCQzM4NUVEQzgzRUVGQkIwOUZGNDA4MkRGM0UwMUQwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmx07rgcLNk7Mn2R06NLgX35r 2LH49UEuSyEKNjpvJ0BXaFXyko/oVfdfTyKavJAjheKkBHK8tn54EuTEbmEE+Rq2 9G4ZKlTGShRBS0WWUgXQEzQHY0MEOuJemCH576epSgDbzU0nTuLKuuGq+sUQbv2A VKlks26JSOp84irNL4oegEUVLL/Y89XnnKSkilGCNIPddx73zP1+ze5Whsl9fhkr iLVQLjg4JPvgiI8oX/LHNNhSaaxq9k8Mcplp3xcwJEk8i4VPY4NkD1rrYpzVaafN s4OHrjJpIwl948PfQ7ucQXv3VZYXiwWzgwMm8oQWMkVX3j1UG8nwx8ha2qErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSb/kq8OF7cg+77sJ/0CC3z4B0MswHwYDVR0j BBgwFoAUiVWzaBW0CEuvx5CKY5gQYxvu1J8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2UyNmFhMy0zMDczLTQyNzYtYmQ3NC1hZDg2ZjA5OWMyNTMvMC84OTU1QjM2ODE1 QjQwODRCQUZDNzkwOEE2Mzk4MTA2MzFCRUVENDlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEwNjMxQkVF RDQ5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdlMjZhYTMtMzA3My00Mjc2LWJk NzQtYWQ4NmYwOTljMjUzLzAvODk1NUIzNjgxNUI0MDg0QkFGQzc5MDhBNjM5ODEw NjMxQkVFRDQ5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkMAsQsrasbd+ib7ITSY/zS4ZvDiK/Av3rt PcU0ym65bOD7oOguXNuqaLFQy9dzFOLe9+rvSGlDleJkGB+7btPaiUsJA4VUMEy2 ulYD8fcAa6qCXdu1rvqkmxQ1q7M15diX8MUPPNPU5wa52ka6i0LuOpEyGi4Wgzig ya5FT/mT80UJJN9lwk0ZS8tNTIqvlyUfOQE+hQQvDK5oZWu1OqOtOGsR9bMRVhHO RI92wziHmnfebmeCRFfrcXi/wHYtYIkDNEDkaDL7wl8U+FU4P5OTC0xOxdIExkrU UweImk7/HiYsijXOj1aO4qK5scwqWQmvKRNxX3qeJE+favitvKY= -----END CERTIFICATE-----Generated at Fri Dec 19 11:21:56 2025 by rpki-client