This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: zdBAyQ6YzcD8QGReef3VqITSy65LLQbN+8pE/YZF4So= Subject key identifier: A9:94:88:9B:8D:57:89:97:19:4B:9C:DD:B7:7E:FD:CA:3F:CC:16:4F Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 3C69D1BB60B208A8B935FC6D2BE056993A55A447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 0212 Signing time: Fri 19 Dec 2025 11:23:45 +0000 Manifest this update: Fri 19 Dec 2025 11:18:45 +0000 Manifest next update: Mon 22 Dec 2025 11:24:45 +0000 Files and hashes: 1: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: 6KLkzmb8d66caxLt9NuQ/NxddHR1zXQnKQe5svfUMA8=) 2: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 11:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:69:d1:bb:60:b2:08:a8:b9:35:fc:6d:2b:e0:56:99:3a:55:a4:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Dec 19 11:18:45 2025 GMT Not After : Dec 22 11:24:45 2025 GMT Subject: CN=A994889B8D578997194B9CDDB77EFDCA3FCC164F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:fb:c2:8a:65:de:76:47:42:e9:bd:56:c8: 26:ac:8c:8e:47:e4:ed:09:02:76:d1:f5:e5:14:51: d2:6c:34:9f:bf:b3:80:50:ea:fd:43:38:fa:57:2c: 0b:d6:33:b0:3c:dc:8c:5a:2a:67:97:95:90:59:f8: 38:ad:77:6c:ad:0f:ab:d8:3b:8e:fc:32:87:55:9d: c6:83:16:a2:cc:86:d2:69:81:2f:e8:19:3a:d7:92: f7:ee:13:ba:bb:38:55:a3:2c:af:a1:be:6a:dd:a1: 2d:85:20:46:0a:5a:1e:71:71:54:f2:78:80:13:f5: 45:fd:41:03:54:28:ee:d8:bd:66:1b:6a:7e:eb:3b: ba:52:34:5f:6e:cc:2c:e9:b5:37:bd:19:36:31:a1: d3:d1:ab:98:0b:28:67:7f:ea:7c:a5:76:5d:58:aa: d4:a1:db:c1:45:d3:f2:d4:3a:2d:6c:51:8e:39:42: 05:28:6a:9c:52:48:95:ef:09:7b:ec:a8:b9:28:b6: c9:04:5e:87:12:a8:33:65:66:95:ae:6d:86:b6:ca: 6c:37:6a:9d:b2:b8:ba:ba:93:71:c7:4e:d3:e6:1f: 5f:f1:27:ff:00:8f:9b:6e:f3:4f:55:4b:44:e7:ab: f7:49:a9:fc:18:3b:a9:57:a7:06:92:81:39:38:c4: 76:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:94:88:9B:8D:57:89:97:19:4B:9C:DD:B7:7E:FD:CA:3F:CC:16:4F X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:93:64:74:49:07:69:9f:b6:05:dd:90:9a:5b:58:1e:d8:25: 95:69:d7:d7:08:62:39:ca:e4:14:75:eb:6b:45:52:ae:58:4e: a6:09:c9:14:18:5b:88:b5:21:f6:bc:00:2e:82:ef:50:9c:14: d1:d8:da:3d:eb:37:5e:4f:fb:22:f4:46:a9:45:db:19:b4:eb: 08:14:39:c7:9b:78:bd:7f:d0:2f:4d:ec:e8:40:2f:7c:c1:a2: 5c:13:37:d1:f3:72:9d:63:54:40:53:a9:e5:e1:e9:e9:a5:e1: 72:76:ae:45:93:76:8a:f9:e5:fd:63:c6:75:78:c0:f0:e3:25: b0:0f:5e:03:ec:2e:69:27:91:7d:b7:fc:f7:9a:f9:ec:83:79: 90:47:0b:48:05:9f:07:ef:2b:94:d0:88:6d:45:fd:44:a1:c9: 58:be:86:e4:91:ba:b6:5f:88:8b:a0:c9:89:3d:cd:84:a0:5c: df:01:d8:7b:dd:35:bd:e1:a4:f9:af:41:60:ae:19:aa:04:99: 80:cc:bc:36:b8:51:dc:5d:9a:f0:42:8a:b6:5d:ba:8e:be:5c: 12:00:c5:67:c5:95:9a:53:af:e2:21:94:12:c8:e0:85:e2:19: 11:55:7d:b7:2d:e1:22:6a:84:39:43:61:e0:91:ae:ee:60:03: a3:eb:ff:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGnRu2CyCKi5NfxtK+BWmTpVpEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNTEyMTkxMTE4NDVaFw0yNTEyMjIxMTI0NDVaMDMxMTAvBgNV BAMTKEE5OTQ4ODlCOEQ1Nzg5OTcxOTRCOUNEREI3N0VGRENBM0ZDQzE2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnzfvCimXedkdC6b1WyCasjI5H 5O0JAnbR9eUUUdJsNJ+/s4BQ6v1DOPpXLAvWM7A83IxaKmeXlZBZ+Ditd2ytD6vY O478ModVncaDFqLMhtJpgS/oGTrXkvfuE7q7OFWjLK+hvmrdoS2FIEYKWh5xcVTy eIAT9UX9QQNUKO7YvWYban7rO7pSNF9uzCzptTe9GTYxodPRq5gLKGd/6nyldl1Y qtSh28FF0/LUOi1sUY45QgUoapxSSJXvCXvsqLkotskEXocSqDNlZpWubYa2ymw3 ap2yuLq6k3HHTtPmH1/xJ/8Aj5tu809VS0Tnq/dJqfwYO6lXpwaSgTk4xHbpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqZSIm41XiZcZS5zdt379yj/MFk8wHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+TZHRJB2mftgXdkJpbWB7YJZVp19cIYjnK 5BR162tFUq5YTqYJyRQYW4i1Ifa8AC6C71CcFNHY2j3rN15P+yL0RqlF2xm06wgU OcebeL1/0C9N7OhAL3zBolwTN9Hzcp1jVEBTqeXh6eml4XJ2rkWTdor55f1jxnV4 wPDjJbAPXgPsLmknkX23/Pea+eyDeZBHC0gFnwfvK5TQiG1F/UShyVi+huSRurZf iIugyYk9zYSgXN8B2HvdNb3hpPmvQWCuGaoEmYDMvDa4UdxdmvBCirZduo6+XBIA xWfFlZpTr+IhlBLI4IXiGRFVfbct4SJqhDlDYeCRru5gA6Pr//4= -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:33 2025 by rpki-client