This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: c339/ZEXGi2yo5lfHZlxwtLkies25w1UwZ5h6s42bY4= Subject key identifier: 60:67:A1:E5:31:C1:72:7D:CD:3E:32:2E:5A:90:E4:E4:7A:9B:6E:F5 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 619B78C5588530E8D2FBBB21945105C1452A25EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 0263 Signing time: Wed 24 Dec 2025 07:12:59 +0000 Manifest this update: Wed 24 Dec 2025 07:07:59 +0000 Manifest next update: Sat 27 Dec 2025 13:45:59 +0000 Files and hashes: 1: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: 2Ijp1jDIY3YxwrV5zFTKTWvwCtp/nJdG6K4d4JjrFf8=) 2: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:9b:78:c5:58:85:30:e8:d2:fb:bb:21:94:51:05:c1:45:2a:25:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Dec 24 07:07:59 2025 GMT Not After : Dec 27 13:45:59 2025 GMT Subject: CN=6067A1E531C1727DCD3E322E5A90E4E47A9B6EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:44:4d:ae:15:97:81:52:11:13:e5:0b:86: aa:65:e0:25:3f:52:ff:85:e3:5d:04:3f:ef:27:c1: aa:44:34:8c:7c:fa:cf:1f:12:ac:1d:08:ab:c8:a1: 64:fe:8f:01:1a:89:02:3c:0f:00:e3:24:3c:5d:4f: 97:7e:0f:76:5f:13:ae:38:37:f7:3e:37:13:31:b7: c1:a1:e3:0a:96:0d:21:c4:ff:eb:a2:2d:6d:b6:04: 78:cb:b9:27:7d:34:03:0b:62:92:4b:09:8a:f4:8a: a8:bf:94:db:b3:36:a6:91:ba:93:e1:f5:2a:31:9c: 9e:93:70:e5:49:fc:14:73:f5:9e:8f:dd:9d:a5:67: 51:17:b2:2a:6d:a6:10:11:53:f2:7d:b8:b8:4c:95: 13:f3:c2:70:6e:60:52:48:1e:f6:2d:22:6e:85:58: 2c:bc:96:8d:a9:7a:0c:b5:67:c4:06:44:58:87:f5: b4:17:c8:95:76:17:b0:c0:f4:2c:2f:78:3c:8d:b6: 5a:aa:c7:df:e6:34:ba:7e:22:b7:31:71:ba:6f:1f: 8c:a0:3b:9f:ec:fc:f4:9a:7b:7e:3b:a9:13:f5:2e: 8a:81:78:1c:bd:cd:b3:4f:79:fc:b2:0c:ea:69:17: 62:7d:db:f2:6e:a6:1d:d7:75:e0:e6:12:6c:8b:f4: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:67:A1:E5:31:C1:72:7D:CD:3E:32:2E:5A:90:E4:E4:7A:9B:6E:F5 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:25:fd:ad:47:62:3d:60:7d:a8:2e:fe:b7:c4:36:d1:39:a9: e2:4d:ad:54:9e:d6:39:ec:29:b7:ee:48:28:a4:f6:a6:16:95: 9e:9b:4d:22:e2:9f:3d:c6:18:c6:45:61:58:15:16:3d:1a:d3: df:8e:91:7f:a5:9e:57:22:46:db:95:c6:8c:87:20:e5:fb:3b: 2a:b6:f2:21:a1:77:a5:89:76:63:ac:8d:ab:4d:b4:a4:a2:9b: ce:95:7a:bd:11:ea:cc:0a:d9:36:66:bb:9c:50:2c:1e:25:e4: 18:f7:19:f1:3b:3b:34:69:d5:7d:ce:96:c4:5e:e1:70:c4:0e: d7:dc:97:11:61:44:b8:79:bb:be:7b:8b:03:f2:df:ad:5b:d1: c8:2d:eb:91:0c:d5:8a:e6:80:a3:b6:08:77:1e:d8:86:ff:49: 23:c2:75:ff:d8:c3:d3:62:71:aa:b6:f2:ef:fd:b4:b7:a6:e0: b5:a0:43:79:81:01:d7:46:c4:55:de:d8:de:6d:e2:a4:5f:d3: 67:dd:a6:b8:40:b3:3b:f6:83:78:d8:31:05:02:58:05:3b:8b: b0:17:2a:f5:f1:01:6b:68:d2:13:04:2c:be:60:5f:fa:ef:7b: ec:0b:c6:00:ca:68:29:a4:96:7a:99:b6:23:3e:6a:fd:b6:f6: b1:ce:13:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYZt4xViFMOjS+7shlFEFwUUqJe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTEyMjQwNzA3NTlaFw0yNTEyMjcxMzQ1NTlaMDMxMTAvBgNV BAMTKDYwNjdBMUU1MzFDMTcyN0RDRDNFMzIyRTVBOTBFNEU0N0E5QjZFRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/sERNrhWXgVIRE+ULhqpl4CU/ Uv+F410EP+8nwapENIx8+s8fEqwdCKvIoWT+jwEaiQI8DwDjJDxdT5d+D3ZfE644 N/c+NxMxt8Gh4wqWDSHE/+uiLW22BHjLuSd9NAMLYpJLCYr0iqi/lNuzNqaRupPh 9SoxnJ6TcOVJ/BRz9Z6P3Z2lZ1EXsiptphARU/J9uLhMlRPzwnBuYFJIHvYtIm6F WCy8lo2pegy1Z8QGRFiH9bQXyJV2F7DA9CwveDyNtlqqx9/mNLp+IrcxcbpvH4yg O5/s/PSae347qRP1LoqBeBy9zbNPefyyDOppF2J92/Juph3XdeDmEmyL9CxJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGeh5THBcn3NPjIuWpDk5HqbbvUwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIQl/a1HYj1gfagu/rfENtE5qeJNrVSe1jns KbfuSCik9qYWlZ6bTSLinz3GGMZFYVgVFj0a09+OkX+lnlciRtuVxoyHIOX7Oyq2 8iGhd6WJdmOsjatNtKSim86Ver0R6swK2TZmu5xQLB4l5Bj3GfE7OzRp1X3OlsRe 4XDEDtfclxFhRLh5u757iwPy361b0cgt65EM1YrmgKO2CHce2Ib/SSPCdf/Yw9Ni caq28u/9tLem4LWgQ3mBAddGxFXe2N5t4qRf02fdprhAszv2g3jYMQUCWAU7i7AX KvXxAWto0hMELL5gX/rve+wLxgDKaCmklnqZtiM+av229rHOE8Q= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:18 2025 by rpki-client