This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: cGiGyMwxzNXsB0PeAtFxiECSSPOzcBcgYvq+IP9zN+s= Subject key identifier: 73:EA:AA:ED:6C:18:A3:49:80:49:DE:60:C8:3E:C6:0B:96:23:C6:84 Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 75796F2AC84DDB740B6AD5AFE4EDECF96D850F6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01F4 Signing time: Tue 23 Dec 2025 21:23:24 +0000 Manifest this update: Tue 23 Dec 2025 21:18:24 +0000 Manifest next update: Sat 27 Dec 2025 08:27:24 +0000 Files and hashes: 1: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: +JWJC4Gp81f1VH0TdYrEefW8CD/iTCAvWGolALNAVdQ=) 2: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 08:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:79:6f:2a:c8:4d:db:74:0b:6a:d5:af:e4:ed:ec:f9:6d:85:0f:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Dec 23 21:18:24 2025 GMT Not After : Dec 27 08:27:24 2025 GMT Subject: CN=73EAAAED6C18A3498049DE60C83EC60B9623C684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:97:5f:f6:0d:e1:6f:f5:d9:a5:79:d1:1f:57: aa:13:60:7e:da:a1:b1:3a:f2:73:b9:7b:df:e4:4f: 66:9b:23:de:b0:c7:7b:3a:1f:52:24:c5:0c:65:ff: ff:83:cc:6b:91:c3:7f:de:59:72:08:8d:0d:69:e6: 69:fb:38:82:03:d5:07:04:8a:7e:30:1c:a0:a9:7d: 04:6e:12:bf:ee:3e:50:78:8e:fc:95:02:86:e5:66: 86:8e:ac:1c:e6:09:7a:26:9a:02:35:5a:fd:50:5d: 94:76:34:6c:15:a2:bf:6f:e4:44:c7:a4:32:a6:6e: 27:fb:fd:48:b0:25:df:bd:48:a7:8f:f0:35:d8:b6: b5:ab:21:1e:9d:28:63:49:e3:e1:04:a5:83:1d:5f: 28:eb:1a:08:1e:d9:60:4c:31:d6:3d:2c:a0:8d:cf: b3:d6:f2:37:b5:88:2a:b9:18:68:11:7b:75:fb:eb: 11:d0:96:f9:ff:ca:1d:47:e9:6d:df:35:cb:c5:ac: d8:bf:53:19:fa:e5:3f:b4:2d:98:e0:de:b8:e9:90: f0:ac:c4:8b:41:5a:22:21:b6:53:13:51:4b:60:79: b5:45:41:7a:9b:46:2c:84:7b:65:20:9e:b0:24:4d: 86:51:3c:93:9c:9f:53:62:81:96:98:f8:07:df:4b: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:EA:AA:ED:6C:18:A3:49:80:49:DE:60:C8:3E:C6:0B:96:23:C6:84 X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:0d:e8:a6:6f:63:3b:05:fa:c0:f4:c6:47:0d:08:5a:2b:9d: e3:ae:40:33:d8:c5:80:9a:0b:ea:07:24:da:85:45:fe:73:af: 28:19:f3:59:67:3a:bb:9f:35:cb:23:4e:13:8f:d0:06:32:5e: fb:25:b6:8c:e4:20:1b:a3:b7:78:08:2f:98:85:61:61:08:3c: 92:ac:31:66:0e:74:09:9c:5b:ae:0d:34:fe:6e:f6:dc:6d:54: 81:da:3f:92:65:73:f2:fb:2e:0b:a0:90:36:41:4f:79:31:66: 88:64:7c:8a:37:29:be:e9:55:62:57:8d:f3:82:94:86:a9:a5: 29:a6:2f:fa:b5:0d:aa:cd:47:e7:4d:41:b8:ce:64:b2:cf:85: 05:76:a4:53:c3:05:10:c1:25:46:2d:59:98:00:0a:8c:24:32: c6:2f:49:de:a1:63:c3:55:3d:9c:e1:43:f0:12:5b:90:8b:8e: ee:ca:b7:42:8b:39:77:c3:81:0c:87:5f:57:cf:06:8d:e6:d5: 96:9e:4b:05:40:02:b8:1c:7a:dd:d6:29:ec:5c:74:e7:93:bb: ec:38:2a:f0:93:95:e8:19:94:7f:1d:6a:8c:d3:eb:51:a0:65: d4:b7:23:a5:c8:da:19:9f:bc:23:98:b7:b5:33:56:e2:76:04: 79:39:d6:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXlvKshN23QLatWv5O3s+W2FD2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTEyMjMyMTE4MjRaFw0yNTEyMjcwODI3MjRaMDMxMTAvBgNV BAMTKDczRUFBQUVENkMxOEEzNDk4MDQ5REU2MEM4M0VDNjBCOTYyM0M2ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDul1/2DeFv9dmledEfV6oTYH7a obE68nO5e9/kT2abI96wx3s6H1IkxQxl//+DzGuRw3/eWXIIjQ1p5mn7OIID1QcE in4wHKCpfQRuEr/uPlB4jvyVAoblZoaOrBzmCXommgI1Wv1QXZR2NGwVor9v5ETH pDKmbif7/UiwJd+9SKeP8DXYtrWrIR6dKGNJ4+EEpYMdXyjrGgge2WBMMdY9LKCN z7PW8je1iCq5GGgRe3X76xHQlvn/yh1H6W3fNcvFrNi/Uxn65T+0LZjg3rjpkPCs xItBWiIhtlMTUUtgebVFQXqbRiyEe2UgnrAkTYZRPJOcn1NigZaY+AffS+PJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc+qq7WwYo0mASd5gyD7GC5YjxoQwHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkN6KZvYzsF+sD0xkcNCForneOuQDPYxYCa C+oHJNqFRf5zrygZ81lnOrufNcsjThOP0AYyXvsltozkIBujt3gIL5iFYWEIPJKs MWYOdAmcW64NNP5u9txtVIHaP5Jlc/L7LgugkDZBT3kxZohkfIo3Kb7pVWJXjfOC lIappSmmL/q1DarNR+dNQbjOZLLPhQV2pFPDBRDBJUYtWZgACowkMsYvSd6hY8NV PZzhQ/ASW5CLju7Kt0KLOXfDgQyHX1fPBo3m1ZaeSwVAArgcet3WKexcdOeTu+w4 KvCTlegZlH8daozT61GgZdS3I6XI2hmfvCOYt7UzVuJ2BHk51mA= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:48 2025 by rpki-client