This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft File: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft (raw, json) Hash identifier: UUb3cX3F/bUwPUMpnM6kUVAb70EI9suBYMzh6B4X2FQ= Subject key identifier: FD:FD:E7:2C:4A:01:0A:73:77:71:5E:4C:F3:C6:C2:C7:AA:65:4C:26 Authority key identifier: 8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA Certificate issuer: /CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Certificate serial: 0AAE57E819A4AFCD1E8C90BC9505F7D6CB5DDDDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft Manifest number: 053D Signing time: Sat 20 Dec 2025 00:33:31 +0000 Manifest this update: Sat 20 Dec 2025 00:28:31 +0000 Manifest next update: Tue 23 Dec 2025 08:17:31 +0000 Files and hashes: 1: 34332e3233312e3132392e302f32342d3234203d3e203338373838.roa (hash: W5Zb76xYohKVMN4oDjg1HwPWp43mgnWE5orvLBb5SkM=) 2: 34332e3233302e342e302f32342d3234203d3e203338373838.roa (hash: Myo0yUY2zYBlmDu7ifkTtwfEDTywRzZJiBzIgMz4kyk=) 3: 3130332e372e302e302f32332d3233203d3e203338373838.roa (hash: eYJSZ6BNvJdcwOjXxyxNY4HDMCsMbaLoRNn+0CbiAds=) 4: 3130332e3234322e3138312e302f32342d3234203d3e203338373838.roa (hash: i565en58aZkxitE/Cu7dj7vQtPe24rOc0XFo1zdj2pA=) 5: 34332e3233312e3132382e302f32332d3233203d3e203338373838.roa (hash: HFx27am61y/dC1xdTadXPgOw5A9a+PEjL0futSZShAU=) 6: 3130332e372e302e302f32342d3234203d3e203338373838.roa (hash: IvhePbxETJJ1An12hekeGcMrYJecR0U54GWOfDVzXpo=) 7: 3130332e3234322e3138302e302f32342d3234203d3e203338373838.roa (hash: J6znwF/VIOIQq7nf+/cVdXFnP4yNGPdAl3m1qZHQzpE=) 8: 3130332e3234322e3138302e302f32332d3233203d3e203338373838.roa (hash: Q4FCJx2xdQyXWuG/Mkdlbm+EYQuJWHSMRXEQhaDwxBc=) 9: 34332e3233312e3132382e302f32342d3234203d3e203338373838.roa (hash: lmYVrCn9BeJjLwZ83vYZIK3fLJEIHwntZ3WH1J4i7Cc=) 10: 3130332e372e312e302f32342d3234203d3e203338373838.roa (hash: HfReQfR8KQgqYxrjCjLONRll8cJTpbYph9s5PnSext8=) 11: 34332e3233302e372e302f32342d3234203d3e203338373838.roa (hash: i3HQaU7A5T+hugQmUCoVWplcF5RYtJ+OjDq/WGotyFM=) 12: 8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl (hash: 4IIynaCC5HdCvUEyu9R5V9wMRiU1icLc1rIUPQeBgps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 08:17:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ae:57:e8:19:a4:af:cd:1e:8c:90:bc:95:05:f7:d6:cb:5d:dd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3E44A2E2B475D5CF4A48E52D17290001FEFECA Validity Not Before: Dec 20 00:28:31 2025 GMT Not After : Dec 23 08:17:31 2025 GMT Subject: CN=FDFDE72C4A010A7377715E4CF3C6C2C7AA654C26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:e1:15:c1:d1:5a:51:37:0a:d0:7f:1e:69: a4:51:c3:dd:29:f3:d8:b6:9b:d2:15:a3:53:4c:ef: 2e:2c:ad:e9:52:66:fe:20:49:8d:65:a9:09:7e:25: ea:f7:9f:a7:ab:3e:ed:7f:2d:cf:ae:e3:61:cb:bb: 17:80:11:77:83:77:b6:38:ce:70:70:d8:42:26:b4: f6:ef:c7:17:7e:00:57:f0:cc:b6:f6:2b:cc:f4:f0: 89:08:9a:78:2f:5a:ab:cb:16:38:11:58:25:fa:b2: 3f:a4:60:e9:38:01:19:75:36:a4:98:aa:dc:f2:7c: a9:33:ad:95:de:bb:13:c9:80:1b:54:d7:1f:ec:5e: f2:e3:0b:16:ec:7b:4f:d6:69:d5:44:e2:7e:dd:78: b7:28:05:2d:5e:71:30:96:67:d5:a4:cb:6a:96:3c: ea:c7:11:63:72:d2:51:6a:f0:1e:34:26:3f:8d:32: e0:3b:64:7b:5e:56:92:fe:19:c7:19:68:46:e0:be: e6:0d:c1:d8:7f:f1:e5:02:81:72:ab:59:35:63:a2: 4c:4c:20:00:19:f7:6c:35:7a:87:a1:26:25:9f:ce: 39:1a:44:ea:90:ee:39:d9:50:aa:52:95:ee:64:33: ff:7f:dc:c1:f1:8a:6b:e8:f7:9f:db:61:40:a9:ac: 5e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FD:E7:2C:4A:01:0A:73:77:71:5E:4C:F3:C6:C2:C7:AA:65:4C:26 X509v3 Authority Key Identifier: keyid:8C:3E:44:A2:E2:B4:75:D5:CF:4A:48:E5:2D:17:29:00:01:FE:FE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34e2bf09-5f42-4b65-a42d-63d0796d206c/0/8C3E44A2E2B475D5CF4A48E52D17290001FEFECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d4:ea:90:6b:7a:af:8f:9f:d0:15:59:0c:db:16:4d:97:2a: bd:f0:4e:eb:96:10:84:95:8c:d8:23:cd:3c:d5:52:32:fa:ea: 97:df:f5:05:48:58:ec:cf:fc:27:51:48:83:e6:44:f4:e7:58: e3:39:ef:23:36:d2:4f:e1:b0:98:ca:a7:93:c1:ca:19:1b:d2: 85:9e:6d:54:86:bf:fe:cd:db:05:68:54:25:92:50:89:ae:d6: 4c:ae:8d:88:38:10:7d:8b:5e:a7:42:e3:f8:50:4e:b4:93:09: bd:42:cb:ec:3e:c9:04:14:49:e8:bb:df:04:b4:e0:93:a7:a3: 59:59:72:88:93:3e:68:e8:77:2d:e4:a7:5e:00:12:fb:bb:af: 44:b4:79:13:f3:a2:93:2d:c4:4e:e7:25:7d:5f:79:8e:39:c7: b8:a7:9f:00:34:01:91:0c:9d:93:96:55:8a:70:06:8a:ac:fd: 24:f9:5d:31:1e:be:27:53:08:ce:1e:ad:a9:ec:ec:10:3e:6a: 16:9d:af:31:d2:23:4e:44:90:5f:a1:15:a6:0f:7c:09:75:9e: 58:a5:f2:71:ac:7f:75:fc:77:3d:d9:ae:a6:16:de:bf:51:4d: 8c:3f:4f:c8:b9:73:54:77:6a:5c:a9:27:5f:60:3f:52:47:94: f9:8e:3c:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCq5X6Bmkr80ejJC8lQX31std3d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAw MUZFRkVDQTAeFw0yNTEyMjAwMDI4MzFaFw0yNTEyMjMwODE3MzFaMDMxMTAvBgNV BAMTKEZERkRFNzJDNEEwMTBBNzM3NzcxNUU0Q0YzQzZDMkM3QUE2NTRDMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoOEVwdFaUTcK0H8eaaRRw90p 89i2m9IVo1NM7y4srelSZv4gSY1lqQl+Jer3n6erPu1/Lc+u42HLuxeAEXeDd7Y4 znBw2EImtPbvxxd+AFfwzLb2K8z08IkImngvWqvLFjgRWCX6sj+kYOk4ARl1NqSY qtzyfKkzrZXeuxPJgBtU1x/sXvLjCxbse0/WadVE4n7deLcoBS1ecTCWZ9Wky2qW POrHEWNy0lFq8B40Jj+NMuA7ZHteVpL+GccZaEbgvuYNwdh/8eUCgXKrWTVjokxM IAAZ92w1eoehJiWfzjkaROqQ7jnZUKpSle5kM/9/3MHximvo95/bYUCprF5pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/f3nLEoBCnN3cV5M88bCx6plTCYwHwYDVR0j BBgwFoAUjD5EouK0ddXPSkjlLRcpAAH+/sowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGUyYmYwOS01ZjQyLTRiNjUtYTQyZC02M2QwNzk2ZDIwNmMvMC84QzNFNDRBMkUy QjQ3NUQ1Q0Y0QTQ4RTUyRDE3MjkwMDAxRkVGRUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5MDAwMUZF RkVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRlMmJmMDktNWY0Mi00YjY1LWE0 MmQtNjNkMDc5NmQyMDZjLzAvOEMzRTQ0QTJFMkI0NzVENUNGNEE0OEU1MkQxNzI5 MDAwMUZFRkVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbU6pBreq+Pn9AVWQzbFk2XKr3wTuuWEISV jNgjzTzVUjL66pff9QVIWOzP/CdRSIPmRPTnWOM57yM20k/hsJjKp5PByhkb0oWe bVSGv/7N2wVoVCWSUImu1kyujYg4EH2LXqdC4/hQTrSTCb1Cy+w+yQQUSei73wS0 4JOno1lZcoiTPmjody3kp14AEvu7r0S0eRPzopMtxE7nJX1feY45x7innwA0AZEM nZOWVYpwBoqs/ST5XTEevidTCM4erans7BA+ahadrzHSI05EkF+hFaYPfAl1nlil 8nGsf3X8dz3ZrqYW3r9RTYw/T8i5c1R3alypJ19gP1JHlPmOPIk= -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:29 2025 by rpki-client