This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: oJMd4Yqm4kCGrF7wUj/jWv9qkoh9/kQfTyY2H/rtDlA= Subject key identifier: D6:E8:CD:82:03:7E:CC:E4:84:CF:6D:2B:FA:50:9C:5B:89:29:43:EC Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 14132CF49DE02367CEE56FAD20B6671FD28ED222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04DE Signing time: Thu 18 Dec 2025 09:21:29 +0000 Manifest this update: Thu 18 Dec 2025 09:16:29 +0000 Manifest next update: Sun 21 Dec 2025 15:53:29 +0000 Files and hashes: 1: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: shtmTa57+pxWxFUP615U/s617hiWKy/m/Dpc5lxTH4w=) 2: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: yZdB1+Hb4ph9w/wvrnMAOAc9P831jd2qxlkZfuEjv8w=) 3: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: 43qB60atgcUi7CyzN+KvNGhxT27GX+F0KTb57tCXwb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:13:2c:f4:9d:e0:23:67:ce:e5:6f:ad:20:b6:67:1f:d2:8e:d2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Dec 18 09:16:29 2025 GMT Not After : Dec 21 15:53:29 2025 GMT Subject: CN=D6E8CD82037ECCE484CF6D2BFA509C5B892943EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:eb:a7:04:c5:54:c0:8d:55:dd:27:49:ca:41: f3:73:4d:05:04:ce:42:3c:f4:ea:4c:86:50:0a:51: 60:d9:5f:13:ba:1a:10:71:9e:bc:61:7f:07:b7:12: 5f:ad:35:a0:47:e5:6e:6c:b8:28:6a:ae:67:5c:b3: c0:4d:e6:2a:c5:8c:6b:f5:3c:a9:ca:2e:82:63:81: f8:cc:26:17:20:2f:f8:22:0e:06:0c:5d:72:59:fe: 5b:c1:ba:aa:3d:e5:04:8f:55:6b:6c:1a:e4:66:42: 03:a0:b9:85:ac:bc:84:62:f8:31:1d:79:3d:4d:97: f1:31:c2:c9:38:93:02:22:2a:7b:ac:61:df:fa:60: 17:46:87:58:3a:e5:30:0c:07:5e:7b:ef:a0:70:ef: 05:13:13:81:fb:00:88:8c:a9:d4:81:ec:67:1c:6d: 5c:3c:6f:22:c0:14:bc:a8:a6:3b:52:7f:01:ef:62: cc:0b:b4:e5:d8:a6:48:2b:48:06:11:b7:09:8c:9c: 7d:45:fc:d8:85:ac:80:5f:f6:0d:1d:c6:86:f0:6e: 64:da:c4:85:5b:b2:57:71:60:81:5e:a9:ed:6e:1e: 4b:18:a1:3b:cd:ba:15:02:25:59:e7:62:94:9e:53: 4f:8a:84:57:9e:a3:ba:ee:0c:6f:7b:ce:b8:12:1d: df:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E8:CD:82:03:7E:CC:E4:84:CF:6D:2B:FA:50:9C:5B:89:29:43:EC X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:4d:38:f3:a7:d5:09:a5:c0:6a:cc:6c:96:63:6a:13:69:0d: 9a:97:98:a0:e7:96:f0:91:0a:81:45:c2:d7:f2:9f:db:87:14: 1c:6d:2f:6d:f5:96:9b:bb:72:49:93:00:f2:8c:8a:ec:eb:dc: 96:12:1f:bb:24:6c:5f:69:9e:e1:b9:9f:ea:c8:df:14:50:49: 73:00:f5:ed:0c:7b:21:50:2a:3c:b8:5e:11:d0:50:35:1d:75: 4c:5b:58:42:22:3c:6d:07:a6:43:8a:00:9d:91:c5:6e:81:c8: cf:00:6c:e3:4b:3e:c1:8a:a0:b2:47:1d:e1:83:c3:41:d4:8f: 0c:9d:78:9e:3d:66:e4:6e:2a:7e:ca:23:9e:ab:41:b0:dc:64: b3:20:c6:7b:6d:59:de:82:ce:e5:c4:51:89:36:4b:a0:f1:88: 6e:bf:03:84:8c:0a:1d:ca:b2:8c:89:95:25:47:a7:21:58:59: 65:49:7b:5b:13:ba:d9:99:fd:a4:15:b8:2d:aa:54:2f:49:67: 4d:f3:07:27:83:6f:b9:df:86:1a:91:98:ef:55:10:5c:21:7a: 29:1f:26:c9:c7:7a:4d:4f:11:93:df:87:5d:92:53:bf:6e:96: 47:be:87:b5:68:98:b5:9f:52:1f:9d:0f:b1:3a:41:3c:ce:28: d4:b5:2f:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFBMs9J3gI2fO5W+tILZnH9KO0iIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTEyMTgwOTE2MjlaFw0yNTEyMjExNTUzMjlaMDMxMTAvBgNV BAMTKEQ2RThDRDgyMDM3RUNDRTQ4NENGNkQyQkZBNTA5QzVCODkyOTQzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH66cExVTAjVXdJ0nKQfNzTQUE zkI89OpMhlAKUWDZXxO6GhBxnrxhfwe3El+tNaBH5W5suChqrmdcs8BN5irFjGv1 PKnKLoJjgfjMJhcgL/giDgYMXXJZ/lvBuqo95QSPVWtsGuRmQgOguYWsvIRi+DEd eT1Nl/Exwsk4kwIiKnusYd/6YBdGh1g65TAMB15776Bw7wUTE4H7AIiMqdSB7Gcc bVw8byLAFLyopjtSfwHvYswLtOXYpkgrSAYRtwmMnH1F/NiFrIBf9g0dxobwbmTa xIVbsldxYIFeqe1uHksYoTvNuhUCJVnnYpSeU0+KhFeeo7ruDG97zrgSHd/VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ujNggN+zOSEz20r+lCcW4kpQ+wwHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5NOPOn1QmlwGrMbJZjahNpDZqXmKDnlvCR CoFFwtfyn9uHFBxtL231lpu7ckmTAPKMiuzr3JYSH7skbF9pnuG5n+rI3xRQSXMA 9e0MeyFQKjy4XhHQUDUddUxbWEIiPG0HpkOKAJ2RxW6ByM8AbONLPsGKoLJHHeGD w0HUjwydeJ49ZuRuKn7KI56rQbDcZLMgxnttWd6CzuXEUYk2S6DxiG6/A4SMCh3K soyJlSVHpyFYWWVJe1sTutmZ/aQVuC2qVC9JZ03zByeDb7nfhhqRmO9VEFwheikf JsnHek1PEZPfh12SU79ulke+h7VomLWfUh+dD7E6QTzOKNS1L54= -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:04 2025 by rpki-client