This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft File: 8E5335B45EE371DC463E5C65783A244FD1846656.mft (raw, json) Hash identifier: pSjrKzuEnVdZ4lHq/Urc7YBosSnFWLFXY0XkQ2Zti2w= Subject key identifier: 90:30:6B:B8:20:75:6E:DB:FD:AE:07:1A:B3:AB:A4:B1:77:2B:0B:2B Authority key identifier: 8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 Certificate issuer: /CN=8E5335B45EE371DC463E5C65783A244FD1846656 Certificate serial: 5BA3467E14475624B897D9740E938A3CE9A8E0C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft Manifest number: 0116 Signing time: Thu 18 Dec 2025 02:21:35 +0000 Manifest this update: Thu 18 Dec 2025 02:16:35 +0000 Manifest next update: Sun 21 Dec 2025 11:30:35 +0000 Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: gZ7MIdwunPoLq27viYGE8zwAvrRl3NrvQYfYS07O7wA=) 2: 8E5335B45EE371DC463E5C65783A244FD1846656.crl (hash: SopT0EjQuXYzCd8i869kvL3fE08wPsqQfTIhDgDeISo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a3:46:7e:14:47:56:24:b8:97:d9:74:0e:93:8a:3c:e9:a8:e0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E5335B45EE371DC463E5C65783A244FD1846656 Validity Not Before: Dec 18 02:16:35 2025 GMT Not After : Dec 21 11:30:35 2025 GMT Subject: CN=90306BB820756EDBFDAE071AB3ABA4B1772B0B2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:fb:2a:4b:d1:01:53:36:19:e9:b6:fa:55: 84:65:94:da:7c:da:cd:8a:98:c1:ff:d1:86:89:ec: 18:78:22:28:fe:79:22:c1:56:99:cd:37:2b:d3:db: 97:ed:4b:80:f0:05:96:e6:cc:28:b6:da:98:54:52: c9:f1:66:07:81:23:f4:99:64:b3:68:b7:0d:76:ce: 5a:0d:a1:d8:cb:40:ca:c1:c5:59:0a:dd:ec:fb:2e: d1:04:f6:f4:d6:d0:29:18:c2:59:b6:c5:67:cc:6e: 75:bd:33:40:98:c6:d5:95:d3:49:4d:ad:b2:4b:f7: 93:f1:73:b6:9a:7d:80:30:e1:c7:f6:36:12:85:73: 72:12:3b:f7:10:21:dc:ad:8a:1a:5b:a0:23:4d:3b: 17:a7:31:b1:21:67:6b:cd:ea:94:3d:69:95:af:72: 1a:3e:5e:27:bc:b1:cf:7c:5b:08:90:3f:e5:d8:ee: e2:72:5d:81:fb:c9:9f:ea:ec:a9:a3:73:aa:ef:cf: 7c:2c:4d:84:27:3f:4d:63:86:96:ae:d9:b5:37:d8: 7f:d1:e5:5f:89:74:df:d3:04:34:10:22:4b:46:1a: 33:09:55:2a:33:3a:31:8c:d9:24:ae:3b:95:24:ca: 0b:e8:ca:94:4c:2d:ab:3b:ec:1f:3d:b0:44:35:11: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:30:6B:B8:20:75:6E:DB:FD:AE:07:1A:B3:AB:A4:B1:77:2B:0B:2B X509v3 Authority Key Identifier: keyid:8E:53:35:B4:5E:E3:71:DC:46:3E:5C:65:78:3A:24:4F:D1:84:66:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E5335B45EE371DC463E5C65783A244FD1846656.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/8E5335B45EE371DC463E5C65783A244FD1846656.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:bf:08:d9:06:bb:3b:1c:b0:35:cf:0a:f6:56:c8:3e:c5:6e: 0b:e9:3d:02:fc:d2:bf:7b:48:6b:da:74:68:f8:24:b5:9b:ac: 2b:ee:cb:9a:08:b4:66:c5:90:46:0b:aa:c7:2b:4e:b7:e4:d4: 62:5d:a2:2c:65:a5:c3:6a:f6:40:46:0b:cb:f1:1a:4e:ec:65: ea:71:b6:8b:85:11:a9:c5:2e:a2:b9:c9:eb:aa:25:c2:a2:39: 8f:d9:90:09:52:f5:29:b1:72:94:30:b3:9e:7a:c9:97:5e:b4: 26:90:26:92:1c:53:8e:c0:64:c8:ee:fe:94:72:99:86:a2:88: b5:4f:b5:c4:44:68:1f:6b:b6:cc:ce:43:ff:fe:79:0a:5a:53: 8a:e3:82:53:00:89:fc:f4:47:f1:67:cf:3d:12:8d:3c:1b:33: 35:ef:50:70:70:2e:8d:aa:df:f2:e3:b5:25:fc:28:ac:71:c4: d0:38:d3:1a:29:b5:66:b2:d5:89:c5:eb:3d:7a:2d:ab:01:6b: 9a:ef:22:cd:81:86:53:41:3d:a6:ed:4e:36:35:c8:63:5d:2e: cc:40:10:55:95:1a:3f:cb:82:65:6d:51:9b:96:4e:31:4c:d7: 7c:c4:b5:b9:24:3a:dc:28:ac:f8:19:86:80:ef:5c:0d:33:06: c0:00:44:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6NGfhRHViS4l9l0DpOKPOmo4MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZE MTg0NjY1NjAeFw0yNTEyMTgwMjE2MzVaFw0yNTEyMjExMTMwMzVaMDMxMTAvBgNV BAMTKDkwMzA2QkI4MjA3NTZFREJGREFFMDcxQUIzQUJBNEIxNzcyQjBCMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGivsqS9EBUzYZ6bb6VYRllNp8 2s2KmMH/0YaJ7Bh4Iij+eSLBVpnNNyvT25ftS4DwBZbmzCi22phUUsnxZgeBI/SZ ZLNotw12zloNodjLQMrBxVkK3ez7LtEE9vTW0CkYwlm2xWfMbnW9M0CYxtWV00lN rbJL95Pxc7aafYAw4cf2NhKFc3ISO/cQIdytihpboCNNOxenMbEhZ2vN6pQ9aZWv cho+Xie8sc98WwiQP+XY7uJyXYH7yZ/q7Kmjc6rvz3wsTYQnP01jhpau2bU32H/R 5V+JdN/TBDQQIktGGjMJVSozOjGM2SSuO5UkygvoypRMLas77B89sEQ1EQO1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDBruCB1btv9rgcas6uksXcrCyswHwYDVR0j BBgwFoAUjlM1tF7jcdxGPlxleDokT9GEZlYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWNjMmU1Yi0zYjkxLTQyYWYtODIwMy01ZTNiOTE3MDQ4NDMvMC84RTUzMzVCNDVF RTM3MURDNDYzRTVDNjU3ODNBMjQ0RkQxODQ2NjU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0NEZEMTg0 NjY1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTljYzJlNWItM2I5MS00MmFmLTgy MDMtNWUzYjkxNzA0ODQzLzAvOEU1MzM1QjQ1RUUzNzFEQzQ2M0U1QzY1NzgzQTI0 NEZEMTg0NjY1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe/CNkGuzscsDXPCvZWyD7FbgvpPQL80r97 SGvadGj4JLWbrCvuy5oItGbFkEYLqscrTrfk1GJdoixlpcNq9kBGC8vxGk7sZepx touFEanFLqK5yeuqJcKiOY/ZkAlS9SmxcpQws556yZdetCaQJpIcU47AZMju/pRy mYaiiLVPtcREaB9rtszOQ//+eQpaU4rjglMAifz0R/Fnzz0SjTwbMzXvUHBwLo2q 3/LjtSX8KKxxxNA40xoptWay1YnF6z16LasBa5rvIs2BhlNBPabtTjY1yGNdLsxA EFWVGj/LgmVtUZuWTjFM13zEtbkkOtworPgZhoDvXA0zBsAAREY= -----END CERTIFICATE-----Generated at Thu Dec 18 12:01:14 2025 by rpki-client