This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: 0heCdfRQo4vDg1iLX0FfbswZNSS/Cgl+6Zo2eAQ0Nks= Subject key identifier: E1:58:FC:1B:C1:65:B7:3C:3A:CF:5C:A9:77:ED:B3:41:69:8F:8E:80 Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 61448F1010CDB9F64CD20FE3CCEE91E1984DC986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01BE Signing time: Tue 23 Dec 2025 09:32:54 +0000 Manifest this update: Tue 23 Dec 2025 09:27:54 +0000 Manifest next update: Fri 26 Dec 2025 11:05:54 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: DJmiq9C4qCNiNPHURzhPU6wqevq6V4iMyNvSAz1UxvI=) 3: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 4: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:44:8f:10:10:cd:b9:f6:4c:d2:0f:e3:cc:ee:91:e1:98:4d:c9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Dec 23 09:27:54 2025 GMT Not After : Dec 26 11:05:54 2025 GMT Subject: CN=E158FC1BC165B73C3ACF5CA977EDB341698F8E80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:f7:05:ee:9e:ec:d8:87:a5:e7:d7:be:31: be:00:b4:69:74:c4:9a:82:be:9e:2f:a4:18:56:e0: d5:91:c9:c2:f5:8b:01:93:ce:1c:61:2d:1b:da:53: 1e:c5:dd:6a:dd:55:fd:dd:c3:53:31:58:38:30:45: 48:59:ab:fe:96:91:50:b3:d6:7f:11:2a:d2:d8:26: 63:46:96:cd:48:90:b6:a1:55:6c:7f:71:72:36:80: aa:e0:1e:92:79:43:76:14:6a:c2:5b:46:01:37:e2: f9:cb:36:63:64:63:cc:78:b7:9a:87:6e:a8:bf:db: f2:d0:7c:ab:c1:0c:05:e1:fb:5d:3b:1c:7d:70:4f: cf:62:2f:8b:3b:44:75:35:0e:61:ee:6c:68:2e:b4: cc:82:0b:34:da:e1:e5:c2:39:1a:0e:28:4d:db:b4: 9f:ca:60:76:ab:2e:d7:01:c6:bf:2e:9e:71:f3:d1: e9:56:da:32:20:d9:d6:7b:4d:c7:78:c7:09:3a:53: 73:52:6a:00:e7:b7:89:00:f7:59:79:cd:22:b4:ad: 7b:e6:31:68:cf:3f:4c:d0:c7:17:87:23:6a:6a:e7: 41:db:2a:a4:a1:05:46:12:37:44:f7:07:f7:76:64: 30:92:30:0b:6a:b1:a4:33:9d:9c:1e:40:bb:ec:4c: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:58:FC:1B:C1:65:B7:3C:3A:CF:5C:A9:77:ED:B3:41:69:8F:8E:80 X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ac:45:d0:f8:86:b8:1a:16:47:d9:37:26:07:d6:a0:fa:ac: 56:0f:28:f6:2b:17:16:dd:1c:ec:5a:44:20:57:a1:55:61:8b: 41:2b:a3:30:6c:58:4f:5e:8b:aa:93:45:77:fd:32:05:7e:0f: 05:7b:8e:17:dd:f2:dd:9f:bc:43:34:5e:16:58:6c:53:b5:2e: 99:48:db:73:a7:65:70:12:ef:67:50:df:99:f4:c4:18:ca:75: 1a:21:41:50:9e:a1:be:6f:2d:a3:6d:48:9f:2b:f2:8e:6e:33: 85:76:a5:16:ba:f8:1e:63:33:37:21:2e:60:fa:c7:56:25:20: c8:4c:1d:2f:d0:69:95:fa:f1:cf:40:85:23:43:0a:82:e2:b4: 42:c1:7e:9a:1e:1b:7e:9e:7f:20:cd:bc:fe:37:bb:1a:df:63: d1:ea:cc:8d:4c:92:cd:dc:fa:68:72:74:11:48:36:fd:4a:c3: 37:27:4f:51:94:82:7d:cb:bc:a7:aa:03:34:ff:20:95:2b:ff: b3:ff:4c:6b:21:7b:d1:31:30:47:f6:ef:e4:fe:c5:ad:8a:bf: 4b:19:d3:4e:ee:00:cc:31:b2:4e:ae:c9:64:7c:9b:f8:37:5f: 1d:45:8d:54:d0:90:91:e0:b2:5b:2f:56:1d:45:f2:3d:18:8e: b5:12:0e:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUSPEBDNufZM0g/jzO6R4ZhNyYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTEyMjMwOTI3NTRaFw0yNTEyMjYxMTA1NTRaMDMxMTAvBgNV BAMTKEUxNThGQzFCQzE2NUI3M0MzQUNGNUNBOTc3RURCMzQxNjk4RjhFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPVPcF7p7s2Iel59e+Mb4AtGl0 xJqCvp4vpBhW4NWRycL1iwGTzhxhLRvaUx7F3WrdVf3dw1MxWDgwRUhZq/6WkVCz 1n8RKtLYJmNGls1IkLahVWx/cXI2gKrgHpJ5Q3YUasJbRgE34vnLNmNkY8x4t5qH bqi/2/LQfKvBDAXh+107HH1wT89iL4s7RHU1DmHubGgutMyCCzTa4eXCORoOKE3b tJ/KYHarLtcBxr8unnHz0elW2jIg2dZ7Tcd4xwk6U3NSagDnt4kA91l5zSK0rXvm MWjPP0zQxxeHI2pq50HbKqShBUYSN0T3B/d2ZDCSMAtqsaQznZweQLvsTIcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Vj8G8Fltzw6z1ypd+2zQWmPjoAwHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHasRdD4hrgaFkfZNyYH1qD6rFYPKPYrFxbd HOxaRCBXoVVhi0ErozBsWE9ei6qTRXf9MgV+DwV7jhfd8t2fvEM0XhZYbFO1LplI 23OnZXAS72dQ35n0xBjKdRohQVCeob5vLaNtSJ8r8o5uM4V2pRa6+B5jMzchLmD6 x1YlIMhMHS/QaZX68c9AhSNDCoLitELBfpoeG36efyDNvP43uxrfY9HqzI1Mks3c +mhydBFINv1KwzcnT1GUgn3LvKeqAzT/IJUr/7P/TGshe9ExMEf27+T+xa2Kv0sZ 007uAMwxsk6uyWR8m/g3Xx1FjVTQkJHgslsvVh1F8j0YjrUSDhY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:07:19 2025 by rpki-client