This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: r24aPNyirUWaYER0mk3rnNePH9ssz7BNWnfb8pbOUE8= Subject key identifier: AE:A7:79:86:6F:7C:A8:A7:A3:24:8C:80:F8:C2:4A:B9:CD:A9:B6:29 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 4A322E957EBCB9F8CDB51CBD22F69D32F54C35DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: C8 Signing time: Wed 17 Dec 2025 13:00:57 +0000 Manifest this update: Wed 17 Dec 2025 12:55:57 +0000 Manifest next update: Sat 20 Dec 2025 15:31:57 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: 3/y4afjv8jHI8iSvIymBkftG0PduurH0Mmv7IJ091v0=) 2: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:32:2e:95:7e:bc:b9:f8:cd:b5:1c:bd:22:f6:9d:32:f5:4c:35:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Dec 17 12:55:57 2025 GMT Not After : Dec 20 15:31:57 2025 GMT Subject: CN=AEA779866F7CA8A7A3248C80F8C24AB9CDA9B629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:16:f7:73:68:1f:6e:83:4b:9a:71:ee:8f:c8: 33:27:a6:e3:c4:dd:0c:5f:74:56:ca:06:20:19:f8: ab:b9:69:60:d5:57:85:7d:e9:9e:fe:32:a3:b3:41: 60:80:91:66:4e:f3:34:98:49:dc:af:4f:a5:2f:b7: e1:4e:45:f5:d0:c7:bf:9c:b2:5e:5a:f6:0d:43:04: 51:95:6b:b6:82:f3:ce:da:c0:ac:2e:27:03:96:5d: 1b:21:c4:8f:70:55:c6:e8:ef:28:d0:57:fa:a0:61: 90:8a:d6:45:43:9c:49:3c:df:33:e3:18:37:ed:95: 19:7f:23:24:0c:3b:85:d5:71:41:47:a2:a7:18:c8: f8:dd:ec:dd:f2:ef:8a:e0:6c:65:68:7f:f4:cf:a6: 80:ad:a3:5d:c1:d0:14:1b:56:2a:4a:03:88:54:02: 58:24:84:9e:70:c2:79:b6:68:5e:77:70:af:0c:fc: a9:d6:e6:12:b5:83:ae:dc:c1:dd:6d:b2:67:5c:a0: 77:3f:7e:21:cd:39:d9:60:95:b5:d9:a7:8f:77:55: 6c:46:2e:91:12:4b:2d:a5:8e:65:74:bd:ec:40:48: d3:49:96:fa:6c:72:74:c4:a1:a5:ff:2e:30:0c:2c: 72:03:51:81:14:b0:d2:05:2f:5a:45:e3:9d:74:48: 9e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A7:79:86:6F:7C:A8:A7:A3:24:8C:80:F8:C2:4A:B9:CD:A9:B6:29 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:8e:82:1b:94:6d:c3:1c:1c:de:34:4d:dd:b3:f5:79:59:ea: 10:e1:76:48:01:78:cb:a7:a0:e4:57:51:49:76:80:7a:c6:1e: ab:a8:92:e4:db:94:8f:22:b8:25:b7:f9:0d:79:ec:2c:c9:e6: 44:60:de:72:7d:cf:8f:07:31:59:d3:7b:b0:16:ca:50:51:d7: b1:53:ff:76:50:a5:17:af:ea:65:db:d2:0e:4d:1c:ea:1f:73: 2c:9d:8c:d7:44:07:5c:de:e5:02:02:af:27:a0:ca:60:a8:75: 52:fd:e5:17:9a:9c:72:1a:fe:a9:57:05:5c:27:4b:7f:26:c8: 25:be:a2:75:39:ea:d4:84:46:87:1f:1b:3a:25:7c:2c:99:75: dc:bf:f9:95:3e:3a:1a:99:ab:c1:1f:c6:aa:fe:66:70:e1:c3: 15:ee:0e:d6:3b:1b:95:de:24:d5:10:27:ed:ea:c2:81:1f:19: e3:cc:eb:7f:3f:bf:80:b7:b6:bf:4a:46:f7:19:54:80:6b:5b: 2f:08:2f:1b:cf:c0:b8:2b:d2:c4:8b:7e:3b:5a:3a:a5:fc:4f: aa:e8:03:55:38:e2:6f:37:93:1e:91:d2:22:cf:ec:eb:ba:d5: 5c:b5:60:28:9a:33:86:6c:58:2c:55:58:fd:42:40:33:4f:c6: f5:4d:67:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSjIulX68ufjNtRy9IvadMvVMNd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTEyMTcxMjU1NTdaFw0yNTEyMjAxNTMxNTdaMDMxMTAvBgNV BAMTKEFFQTc3OTg2NkY3Q0E4QTdBMzI0OEM4MEY4QzI0QUI5Q0RBOUI2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FvdzaB9ug0uace6PyDMnpuPE 3QxfdFbKBiAZ+Ku5aWDVV4V96Z7+MqOzQWCAkWZO8zSYSdyvT6Uvt+FORfXQx7+c sl5a9g1DBFGVa7aC887awKwuJwOWXRshxI9wVcbo7yjQV/qgYZCK1kVDnEk83zPj GDftlRl/IyQMO4XVcUFHoqcYyPjd7N3y74rgbGVof/TPpoCto13B0BQbVipKA4hU AlgkhJ5wwnm2aF53cK8M/KnW5hK1g67cwd1tsmdcoHc/fiHNOdlglbXZp493VWxG LpESSy2ljmV0vexASNNJlvpscnTEoaX/LjAMLHIDUYEUsNIFL1pF4510SJ4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqd5hm98qKejJIyA+MJKuc2ptikwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeOghuUbcMcHN40Td2z9XlZ6hDhdkgBeMun oORXUUl2gHrGHquokuTblI8iuCW3+Q157CzJ5kRg3nJ9z48HMVnTe7AWylBR17FT /3ZQpRev6mXb0g5NHOofcyydjNdEB1ze5QICryegymCodVL95ReanHIa/qlXBVwn S38myCW+onU56tSERocfGzolfCyZddy/+ZU+OhqZq8Efxqr+ZnDhwxXuDtY7G5Xe JNUQJ+3qwoEfGePM638/v4C3tr9KRvcZVIBrWy8ILxvPwLgr0sSLfjtaOqX8T6ro A1U44m83kx6R0iLP7Ou61Vy1YCiaM4ZsWCxVWP1CQDNPxvVNZ40= -----END CERTIFICATE-----Generated at Fri Dec 19 14:15:04 2025 by rpki-client