This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: iYS1GvzHBAjTVcVUblLFqwdxhpAFlbnrVt9aI6AZCDI= Subject key identifier: EA:80:FD:B4:56:3A:EF:C4:55:87:59:DF:A0:35:EA:B4:BD:68:70:0B Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 75988FD401DD09C18A1B7117DFBFA5F5513A9B56 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 013A Signing time: Sun 28 Dec 2025 20:20:04 +0000 Manifest this update: Sun 28 Dec 2025 20:15:04 +0000 Manifest next update: Thu 01 Jan 2026 00:33:04 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: kKfR8h8OgSKErReKBDkaLVZ9SmLJCMx3A2v1qaaoD0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 20:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:98:8f:d4:01:dd:09:c1:8a:1b:71:17:df:bf:a5:f5:51:3a:9b:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Dec 28 20:15:04 2025 GMT Not After : Jan 1 00:33:04 2026 GMT Subject: CN=EA80FDB4563AEFC4558759DFA035EAB4BD68700B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:a0:ae:06:5b:a4:70:0b:36:1a:94:b2:a0:15: 74:97:0d:db:44:2a:25:9d:73:02:c7:c7:7b:3c:f6: a2:5d:8a:be:ba:4e:33:7d:7e:81:3a:f3:8d:ea:3b: 0e:4f:df:a3:0d:e7:63:18:63:99:8e:f6:19:05:f9: 33:a8:e6:44:bf:93:10:f1:c1:d0:be:a9:2e:7e:e1: 26:66:8c:9e:4e:98:63:29:b8:eb:91:9d:96:6a:e4: 02:5d:84:9d:03:6e:20:5e:e5:ea:86:9c:bf:3c:92: 38:fa:7f:a0:9b:5d:8c:7f:7f:ee:96:54:cb:39:fd: 06:03:4e:0a:9f:19:94:ce:b9:2b:09:ce:7a:29:95: b7:ff:e6:10:8e:3c:b3:7d:0c:88:4d:bb:9e:38:b5: 04:15:15:d9:f0:e2:f7:92:87:ab:56:ec:7f:ff:9d: e6:04:39:e8:39:9e:8f:84:de:67:d1:df:44:e1:98: 37:eb:3c:ae:e7:b5:1b:df:4b:ad:c3:2e:84:61:af: 2a:22:c7:93:dc:84:c4:15:de:3f:8c:f1:0c:c6:38: 80:91:a6:aa:a6:ef:a0:c7:42:93:dc:ee:ba:c9:08: 86:89:f7:71:b5:ca:c5:f7:32:e7:16:44:3f:ef:55: f1:02:a6:08:11:43:61:3d:ef:aa:e5:bb:95:5b:0f: 5d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:80:FD:B4:56:3A:EF:C4:55:87:59:DF:A0:35:EA:B4:BD:68:70:0B X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b4:e1:7a:b4:b1:84:6f:3f:99:70:31:10:b3:44:97:f4:e3: 7e:a3:89:cd:6d:d9:d6:b7:2a:b7:0e:33:b3:dc:01:00:7e:a1: 32:1d:ba:51:5f:ad:15:36:14:d7:0b:17:09:20:7c:91:69:cf: 39:09:ab:bb:66:92:86:00:7f:bf:4f:6c:fc:62:84:31:82:eb: ee:b6:b8:11:b2:92:66:dd:17:0b:f4:14:e3:65:0f:1b:5d:e6: cd:a1:04:2f:53:da:8b:5a:46:94:49:5b:b3:81:03:a5:56:55: 87:f1:ef:66:a2:26:ae:9d:15:1c:89:75:8b:8a:08:ca:e4:53: 7a:69:68:3a:3b:07:e0:34:34:59:ab:12:c0:5b:a6:dd:9d:b3: 05:0d:6d:fb:d4:a9:60:52:3a:41:7a:1b:8a:13:b6:19:03:40: d3:48:16:b9:0f:1c:0e:fb:b6:f4:98:de:46:4c:19:a1:18:2f: 1d:ca:4e:08:80:ac:a9:6d:a7:23:1c:5a:61:52:c0:70:d4:4c: 2f:ca:0f:c2:f5:14:4c:d6:e0:67:c8:21:19:85:e5:4d:b5:48: b9:b5:62:b0:b6:cb:bd:b5:ec:29:92:c7:66:02:e9:d3:8f:bb: 1a:05:76:95:48:1b:a7:51:f1:97:07:20:6c:a5:72:ef:c4:7d: 3a:0d:f4:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdZiP1AHdCcGKG3EX37+l9VE6m1YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTEyMjgyMDE1MDRaFw0yNjAxMDEwMDMzMDRaMDMxMTAvBgNV BAMTKEVBODBGREI0NTYzQUVGQzQ1NTg3NTlERkEwMzVFQUI0QkQ2ODcwMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4oK4GW6RwCzYalLKgFXSXDdtE KiWdcwLHx3s89qJdir66TjN9foE6843qOw5P36MN52MYY5mO9hkF+TOo5kS/kxDx wdC+qS5+4SZmjJ5OmGMpuOuRnZZq5AJdhJ0DbiBe5eqGnL88kjj6f6CbXYx/f+6W VMs5/QYDTgqfGZTOuSsJznoplbf/5hCOPLN9DIhNu544tQQVFdnw4veSh6tW7H// neYEOeg5no+E3mfR30ThmDfrPK7ntRvfS63DLoRhryoix5PchMQV3j+M8QzGOICR pqqm76DHQpPc7rrJCIaJ93G1ysX3MucWRD/vVfECpggRQ2E976rlu5VbD12fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6oD9tFY678RVh1nfoDXqtL1ocAswHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy04Xq0sYRvP5lwMRCzRJf0436jic1t2da3 KrcOM7PcAQB+oTIdulFfrRU2FNcLFwkgfJFpzzkJq7tmkoYAf79PbPxihDGC6+62 uBGykmbdFwv0FONlDxtd5s2hBC9T2otaRpRJW7OBA6VWVYfx72aiJq6dFRyJdYuK CMrkU3ppaDo7B+A0NFmrEsBbpt2dswUNbfvUqWBSOkF6G4oTthkDQNNIFrkPHA77 tvSY3kZMGaEYLx3KTgiArKltpyMcWmFSwHDUTC/KD8L1FEzW4GfIIRmF5U21SLm1 YrC2y7217CmSx2YC6dOPuxoFdpVIG6dR8ZcHIGylcu/EfToN9Gc= -----END CERTIFICATE-----Generated at Sun Dec 28 22:15:06 2025 by rpki-client