This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: AtXJYt2AGhY+7zY0jWvvfafeKT4E5f7mFxhJ8rj2TsA= Subject key identifier: 78:32:F7:67:56:B0:33:36:6A:AE:F0:E8:09:86:77:B7:48:3E:C8:25 Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 14F7FEE361E3C2046EA5591C83D4881E675DB5A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 0264 Signing time: Wed 17 Dec 2025 00:01:43 +0000 Manifest this update: Tue 16 Dec 2025 23:56:43 +0000 Manifest next update: Sat 20 Dec 2025 03:06:43 +0000 Files and hashes: 1: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 2: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 3: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) 4: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: Ujyy5A7yHPvGE/dZ7hKxE3GHVJsNMZj6SGxwCG6yHLI=) 5: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) 6: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) 7: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:f7:fe:e3:61:e3:c2:04:6e:a5:59:1c:83:d4:88:1e:67:5d:b5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Dec 16 23:56:43 2025 GMT Not After : Dec 20 03:06:43 2025 GMT Subject: CN=7832F76756B033366AAEF0E8098677B7483EC825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0b:83:a9:57:1f:7c:82:e0:70:fa:39:70:91: 65:09:6e:59:12:0f:4d:f6:61:ae:0a:44:ee:86:bc: 55:e9:2a:91:6d:81:12:39:d0:4b:3f:aa:d1:5f:f8: ee:d7:ff:42:fe:0e:7b:1c:65:49:ed:49:17:ac:4d: 4e:02:7a:ba:33:01:4a:55:d4:d2:87:81:af:23:61: 4d:f9:86:ee:b2:68:e1:46:ad:a0:96:a6:37:dd:00: 2c:60:ff:03:82:42:4d:71:56:d7:7e:36:37:cf:b7: 62:76:24:9b:e9:df:e4:25:b6:4b:11:e5:93:69:78: 92:6c:de:79:cb:e7:8d:2a:c3:12:79:7a:12:51:c8: b6:a1:a6:77:c4:55:09:39:b4:77:33:33:07:6e:54: 81:4c:a5:71:5c:5d:da:76:7d:45:8b:2c:10:23:7a: a6:13:f2:a8:4d:d3:99:63:e6:e6:fe:9d:3f:9a:2a: bf:cb:e4:80:52:1b:6c:db:06:47:e3:d5:a6:0b:b1: 8f:da:ca:ca:6a:a8:2d:0f:30:50:e5:86:a7:87:22: fd:d4:91:f9:81:ed:83:83:01:bf:76:b8:43:90:16: dd:27:0c:50:75:47:9a:77:3a:50:5d:a7:d3:8d:97: 34:19:87:8f:8f:a4:94:78:49:d6:71:fa:d8:6b:aa: f3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:32:F7:67:56:B0:33:36:6A:AE:F0:E8:09:86:77:B7:48:3E:C8:25 X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f8:45:06:0f:28:33:9e:4d:ac:a2:bf:14:32:c9:02:ad:81: 70:45:ea:12:df:63:3f:91:6e:c0:0b:e8:7a:d1:76:af:e9:9d: 62:b4:a2:80:2f:12:91:cf:fa:84:d2:91:4d:20:95:43:ff:49: ee:eb:4e:04:cb:54:ae:b8:0b:93:11:22:1f:d8:cd:4a:3b:7c: 4d:68:c9:11:eb:5a:51:44:5b:4d:18:ad:21:81:d7:90:bf:cd: 9a:b7:68:94:12:0b:8a:4d:45:16:c0:e1:62:90:19:8b:5a:55: 42:68:ce:30:06:52:38:27:a8:a4:e8:9e:58:fb:aa:37:4d:2c: 58:4f:d3:12:01:d1:6e:71:76:95:c3:3b:0e:ec:80:b2:f3:5c: 22:5f:ed:71:6d:57:10:93:4c:97:9c:28:7b:c8:f3:f8:e9:e9: 61:df:08:f7:a9:f7:eb:58:01:49:7a:ee:26:63:40:17:77:d9: 42:e9:67:bf:3f:cd:ac:90:6e:1c:73:6e:2a:1b:46:3a:24:24: 19:f2:2b:60:1e:5c:3b:56:0a:54:92:bb:69:5e:dd:a9:f5:6e: 31:7f:cf:51:bd:5f:e0:1e:79:25:6c:ea:6f:0a:80:78:90:69: bf:15:44:e0:84:8f:c9:c5:9c:8d:fd:00:39:89:7c:6d:5c:27: b9:6f:dc:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFPf+42HjwgRupVkcg9SIHmddtaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTEyMTYyMzU2NDNaFw0yNTEyMjAwMzA2NDNaMDMxMTAvBgNV BAMTKDc4MzJGNzY3NTZCMDMzMzY2QUFFRjBFODA5ODY3N0I3NDgzRUM4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVC4OpVx98guBw+jlwkWUJblkS D032Ya4KRO6GvFXpKpFtgRI50Es/qtFf+O7X/0L+DnscZUntSResTU4CerozAUpV 1NKHga8jYU35hu6yaOFGraCWpjfdACxg/wOCQk1xVtd+NjfPt2J2JJvp3+QltksR 5ZNpeJJs3nnL540qwxJ5ehJRyLahpnfEVQk5tHczMwduVIFMpXFcXdp2fUWLLBAj eqYT8qhN05lj5ub+nT+aKr/L5IBSG2zbBkfj1aYLsY/ayspqqC0PMFDlhqeHIv3U kfmB7YODAb92uEOQFt0nDFB1R5p3OlBdp9ONlzQZh4+PpJR4SdZx+thrqvNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeDL3Z1awMzZqrvDoCYZ3t0g+yCUwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAz4RQYPKDOeTayivxQyyQKtgXBF6hLfYz+R bsAL6HrRdq/pnWK0ooAvEpHP+oTSkU0glUP/Se7rTgTLVK64C5MRIh/YzUo7fE1o yRHrWlFEW00YrSGB15C/zZq3aJQSC4pNRRbA4WKQGYtaVUJozjAGUjgnqKTonlj7 qjdNLFhP0xIB0W5xdpXDOw7sgLLzXCJf7XFtVxCTTJecKHvI8/jp6WHfCPep9+tY AUl67iZjQBd32ULpZ78/zayQbhxzbiobRjokJBnyK2AeXDtWClSSu2le3an1bjF/ z1G9X+AeeSVs6m8KgHiQab8VROCEj8nFnI39ADmJfG1cJ7lv3FU= -----END CERTIFICATE-----Generated at Fri Dec 19 03:06:19 2025 by rpki-client