This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: 6be+gtCspIGikzMliw548QjHZvq7UF7IIK60VEMx8Gg= Subject key identifier: 52:66:51:3A:32:0B:A2:E9:EE:87:4F:D0:5A:F3:10:61:31:BF:1B:79 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 1B376F78FD435ABCA908BCA17B52C2A0BCAFB9B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0138 Signing time: Wed 24 Dec 2025 02:00:17 +0000 Manifest this update: Wed 24 Dec 2025 01:55:17 +0000 Manifest next update: Sat 27 Dec 2025 12:45:17 +0000 Files and hashes: 1: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: DcQafnOpjbWjywzXwU1SMo5FMlhrt/kzgcuxGILs1dE=) 2: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 12:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:37:6f:78:fd:43:5a:bc:a9:08:bc:a1:7b:52:c2:a0:bc:af:b9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Dec 24 01:55:17 2025 GMT Not After : Dec 27 12:45:17 2025 GMT Subject: CN=5266513A320BA2E9EE874FD05AF3106131BF1B79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:64:8b:ce:75:12:19:68:ff:1b:2b:cf:ea:27: 74:fd:5c:06:80:79:bb:8c:77:93:fc:e1:65:53:9d: 90:5a:c0:65:0a:12:61:84:ea:83:e5:77:0b:42:ff: be:aa:b8:e5:30:aa:05:43:ca:fb:d4:e2:ba:6b:d3: 5d:94:97:8b:d8:85:ff:4b:98:5d:94:b1:c4:43:57: e4:d4:4e:17:19:d9:82:44:5e:4e:eb:b3:54:fe:78: 48:e7:a1:53:8b:23:15:98:80:ef:52:5e:6b:d8:50: d5:c9:09:80:b8:03:31:70:96:d6:0a:27:11:16:9c: 47:0d:8c:74:99:f2:71:0d:8d:53:7a:c3:d5:60:2f: 52:de:46:93:b5:aa:2a:14:d1:0c:22:c8:fb:72:a2: 83:55:98:54:69:30:41:ff:31:6f:ac:67:5e:51:bb: fe:58:d0:d7:fa:05:35:c8:0d:32:c7:3a:d5:a9:88: 2b:b0:78:d8:52:31:33:28:33:3e:2a:84:fd:64:54: b5:48:f9:7e:b9:b8:ef:38:61:f4:51:d0:4b:50:68: 06:7f:68:8d:35:ee:81:7a:dd:20:4e:35:8e:29:35: 80:01:99:ab:19:a1:ab:1b:22:7b:99:fa:0b:8a:dd: 37:98:35:3f:ef:8e:bb:45:ab:3d:29:37:51:f7:4f: 83:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:66:51:3A:32:0B:A2:E9:EE:87:4F:D0:5A:F3:10:61:31:BF:1B:79 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:bc:9f:bd:8f:71:52:b1:58:eb:85:c2:2f:7a:e3:4c:0b: 8c:4e:15:b3:69:f1:6b:45:72:ef:85:6e:86:a3:2f:93:2b:32: 49:32:fc:3a:8c:f0:2d:e9:8a:63:b1:5c:83:9c:39:8a:e4:7c: 39:17:25:13:ef:f3:de:52:ff:67:1d:81:99:52:ae:ff:08:9a: 32:1c:e0:76:67:94:02:7f:46:6c:14:25:b4:74:39:70:b6:2d: 04:eb:dc:d3:81:09:a5:3a:0d:4b:89:38:b8:25:cc:b1:dc:ee: d5:26:f9:ed:2a:57:56:53:38:b1:c1:2d:a3:52:8c:df:ea:0e: e4:61:c2:cf:07:9e:44:f7:3d:01:6d:6b:8b:42:d5:ff:58:36: b0:92:c1:6a:88:4b:3d:03:55:ff:1d:39:c5:57:3e:cb:2e:d6: 94:51:2d:87:b6:0b:bf:1e:66:a8:f8:d9:bb:cf:fc:5e:23:c9: 4f:84:49:c5:4f:b2:90:ba:94:f6:94:90:b7:4c:b1:3f:45:b4: eb:6f:fe:e7:dd:b6:cc:a1:65:9f:c4:6e:c2:5d:4d:e3:19:19: f4:22:da:f8:91:7c:18:63:36:c6:50:24:cd:5c:a6:80:7d:8f: ab:fa:13:a7:5f:48:ab:9e:47:3c:66:16:f2:c9:59:14:5d:b7: 18:09:da:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzdveP1DWrypCLyhe1LCoLyvubMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTEyMjQwMTU1MTdaFw0yNTEyMjcxMjQ1MTdaMDMxMTAvBgNV BAMTKDUyNjY1MTNBMzIwQkEyRTlFRTg3NEZEMDVBRjMxMDYxMzFCRjFCNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpZIvOdRIZaP8bK8/qJ3T9XAaA ebuMd5P84WVTnZBawGUKEmGE6oPldwtC/76quOUwqgVDyvvU4rpr012Ul4vYhf9L mF2UscRDV+TUThcZ2YJEXk7rs1T+eEjnoVOLIxWYgO9SXmvYUNXJCYC4AzFwltYK JxEWnEcNjHSZ8nENjVN6w9VgL1LeRpO1qioU0QwiyPtyooNVmFRpMEH/MW+sZ15R u/5Y0Nf6BTXIDTLHOtWpiCuweNhSMTMoMz4qhP1kVLVI+X65uO84YfRR0EtQaAZ/ aI017oF63SBONY4pNYABmasZoasbInuZ+guK3TeYNT/vjrtFqz0pN1H3T4NrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUmZROjILounuh0/QWvMQYTG/G3kwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5dvJ+9j3FSsVjrhcIveuNMC4xOFbNp8WtF cu+FboajL5MrMkky/DqM8C3pimOxXIOcOYrkfDkXJRPv895S/2cdgZlSrv8ImjIc 4HZnlAJ/RmwUJbR0OXC2LQTr3NOBCaU6DUuJOLglzLHc7tUm+e0qV1ZTOLHBLaNS jN/qDuRhws8HnkT3PQFta4tC1f9YNrCSwWqISz0DVf8dOcVXPssu1pRRLYe2C78e Zqj42bvP/F4jyU+EScVPspC6lPaUkLdMsT9FtOtv/ufdtsyhZZ/EbsJdTeMZGfQi 2viRfBhjNsZQJM1cpoB9j6v6E6dfSKueRzxmFvLJWRRdtxgJ2hw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:56 2025 by rpki-client