This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft File: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft (raw, json) Hash identifier: HarcmLTJJIq/WcthhNuIO5n0a8KXmVRaRpO1Vjt/0HM= Subject key identifier: 02:8D:B8:25:50:24:B8:B0:B9:7E:35:1C:91:B7:DB:0C:85:20:19:11 Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A Certificate issuer: /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Certificate serial: 04C40B1CE278725F18F3F2184D787F557B52104A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft Manifest number: 0241 Signing time: Sun 21 Dec 2025 17:12:10 +0000 Manifest this update: Sun 21 Dec 2025 17:07:10 +0000 Manifest next update: Thu 25 Dec 2025 02:22:10 +0000 Files and hashes: 1: 8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl (hash: pwAPDIoi1G5AN5H78otFj2Uh7Vx/kiEACuxk/hhAwnc=) 2: 3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (hash: tJd9lCwOT2E5aUEAYGLVk9Vox9W7mUTKc82A3hANFMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c4:0b:1c:e2:78:72:5f:18:f3:f2:18:4d:78:7f:55:7b:52:10:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A Validity Not Before: Dec 21 17:07:10 2025 GMT Not After : Dec 25 02:22:10 2025 GMT Subject: CN=028DB8255024B8B0B97E351C91B7DB0C85201911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d3:b4:71:54:0c:09:bb:2d:09:64:1c:9f:25: fe:30:33:01:6d:c6:99:61:3a:04:85:78:be:f3:28: fb:73:09:f2:4a:1c:bc:ce:83:99:5b:af:6b:bb:10: 68:5d:de:77:f2:2e:8c:34:4f:2d:ec:59:ed:7f:21: fb:64:38:85:63:ef:f9:d2:43:4d:20:99:33:97:23: 36:23:20:e4:66:bd:71:8d:d0:14:e0:09:11:51:b8: d6:c4:bd:92:d9:49:37:da:3a:cb:90:a6:f2:f1:ae: 6a:2f:93:1d:ea:39:7d:1e:9b:3d:ee:3f:79:4a:14: 9d:ed:26:aa:aa:db:a0:d1:1a:f6:75:23:d7:82:66: bb:0e:59:51:e3:a8:14:ac:45:e0:ca:f8:63:6f:37: 67:5e:1d:eb:a8:e8:23:7e:0e:db:d5:79:f6:a0:3a: fb:f9:f6:64:04:71:22:76:b4:c5:0d:f5:6d:83:6d: ae:97:33:5a:b1:5f:8c:67:61:5f:ef:9e:1b:05:f5: 7b:55:a7:84:f5:cd:64:d5:25:51:1c:f7:0c:b5:f5: 2b:91:42:18:c6:b1:c2:82:97:a4:16:ed:f8:da:0b: dc:9d:f6:19:dd:da:b0:15:39:26:39:dd:1f:d6:90: 46:79:02:72:8e:40:ba:ca:28:a4:2c:7d:d1:ae:26: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8D:B8:25:50:24:B8:B0:B9:7E:35:1C:91:B7:DB:0C:85:20:19:11 X509v3 Authority Key Identifier: keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a9:43:7a:87:83:56:6c:31:93:e6:f8:57:99:f1:5d:16:e5: a8:b8:74:d4:66:74:a3:3a:92:0f:37:49:e0:aa:44:82:9d:f3: 75:3a:be:59:f2:9a:45:c8:fb:b8:77:97:bb:4a:b8:3d:fc:52: 58:66:8d:b0:5a:23:c9:5c:51:34:a9:88:53:dd:d1:22:c4:3e: 7a:bb:38:aa:2b:c5:5d:68:c4:e1:eb:62:f3:f8:1d:2b:ec:24: e9:9b:fd:b5:29:15:80:dd:74:50:46:97:e4:bd:6b:9a:99:a1: 50:74:7a:1d:c6:6a:7d:cc:6b:a7:30:08:c6:c3:c4:73:8a:9c: ba:cf:06:dd:c1:07:00:3d:43:4b:b0:63:ab:22:04:05:33:dc: 17:b8:07:99:1b:7c:7b:48:ef:6c:90:1e:bb:0a:43:19:0c:fb: 70:28:27:0e:dc:10:76:d5:f4:b3:a8:3a:9e:4c:19:95:2e:36: f2:52:55:7c:4f:2a:2c:dd:e7:4f:f5:3c:0a:23:92:6e:c2:7a: de:cb:c9:d2:98:7b:65:9b:f6:09:ca:b5:01:c1:e0:b5:f3:34: 40:e9:6d:1d:cf:b9:5c:9f:36:7c:b0:f0:03:92:23:01:bd:b3: 78:00:10:1e:93:a5:0d:4e:5d:7f:83:7d:12:d5:8b:4e:bd:0a: 87:ff:86:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMQLHOJ4cl8Y8/IYTXh/VXtSEEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD QzQxNUI1QTAeFw0yNTEyMjExNzA3MTBaFw0yNTEyMjUwMjIyMTBaMDMxMTAvBgNV BAMTKDAyOERCODI1NTAyNEI4QjBCOTdFMzUxQzkxQjdEQjBDODUyMDE5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG07RxVAwJuy0JZByfJf4wMwFt xplhOgSFeL7zKPtzCfJKHLzOg5lbr2u7EGhd3nfyLow0Ty3sWe1/IftkOIVj7/nS Q00gmTOXIzYjIORmvXGN0BTgCRFRuNbEvZLZSTfaOsuQpvLxrmovkx3qOX0emz3u P3lKFJ3tJqqq26DRGvZ1I9eCZrsOWVHjqBSsReDK+GNvN2deHeuo6CN+DtvVefag Ovv59mQEcSJ2tMUN9W2Dba6XM1qxX4xnYV/vnhsF9XtVp4T1zWTVJVEc9wy19SuR QhjGscKCl6QW7fjaC9yd9hnd2rAVOSY53R/WkEZ5AnKOQLrKKKQsfdGuJqP7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAo24JVAkuLC5fjUckbfbDIUgGREwHwYDVR0j BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx NUI1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU4ZGI4N2ItMTZjZC00MzdhLWE1 YjUtMDhjYjM1ZGE5N2YwLzAvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdE MUZDQzQxNUI1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWpQ3qHg1ZsMZPm+FeZ8V0W5ai4dNRmdKM6 kg83SeCqRIKd83U6vlnymkXI+7h3l7tKuD38UlhmjbBaI8lcUTSpiFPd0SLEPnq7 OKorxV1oxOHrYvP4HSvsJOmb/bUpFYDddFBGl+S9a5qZoVB0eh3Gan3Ma6cwCMbD xHOKnLrPBt3BBwA9Q0uwY6siBAUz3Be4B5kbfHtI72yQHrsKQxkM+3AoJw7cEHbV 9LOoOp5MGZUuNvJSVXxPKizd50/1PAojkm7Cet7LydKYe2Wb9gnKtQHB4LXzNEDp bR3PuVyfNnyw8AOSIwG9s3gAEB6TpQ1OXX+DfRLVi069Cof/htg= -----END CERTIFICATE-----Generated at Mon Dec 22 02:16:23 2025 by rpki-client