This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: 2YlLa62+m4FUuEUkcAykGjbVuLKpOF85e1yc7rSXSmI= Subject key identifier: 2E:40:5E:A9:6E:A7:0D:0B:17:97:83:DC:2B:1D:0A:E1:81:BF:6A:BC Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 7981ED37E08A99CAE7D7E1D787BB0D31C72E1272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01BE Signing time: Thu 18 Dec 2025 00:21:30 +0000 Manifest this update: Thu 18 Dec 2025 00:16:30 +0000 Manifest next update: Sun 21 Dec 2025 05:30:30 +0000 Files and hashes: 1: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) 2: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: HhViHVXGnGinfSEsoWVK7KdTe3IdiCELliEbvXVhqzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:30:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:81:ed:37:e0:8a:99:ca:e7:d7:e1:d7:87:bb:0d:31:c7:2e:12:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Dec 18 00:16:30 2025 GMT Not After : Dec 21 05:30:30 2025 GMT Subject: CN=2E405EA96EA70D0B179783DC2B1D0AE181BF6ABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:8a:b6:45:81:83:5d:d3:8c:ac:f4:b7:56: e4:47:3b:c1:d2:00:80:c0:a2:6f:52:82:e6:b1:15: 8a:6b:28:8d:74:f3:4b:b5:c3:73:d3:d7:0e:4f:6c: 3d:7e:1b:50:43:dc:68:00:91:62:15:b6:0a:b9:18: f5:11:2d:c6:da:5d:d7:f2:74:61:52:52:b8:91:a2: 6b:df:01:cc:be:38:88:cc:a3:e3:03:76:a3:ee:96: 67:2f:9d:25:84:09:10:a1:81:37:55:66:18:a1:30: ea:ed:ce:07:ed:3b:4d:b6:07:76:21:f2:f6:24:93: 00:07:1b:72:60:10:78:90:4c:e2:5b:dc:3b:f6:dd: 03:36:4d:b7:fd:4b:f9:c9:02:be:3b:9b:db:1d:a6: 7a:54:cf:47:3f:cc:e9:39:cc:1e:d4:ef:49:c9:cf: a4:ca:2f:31:4b:23:2d:4d:e7:5c:c1:38:06:dd:67: 79:44:0c:1f:a1:dd:a5:ad:0f:71:9d:0f:e3:6b:cd: eb:a0:5a:b1:50:03:e6:28:ae:c8:7e:35:25:51:28: 07:e7:c6:ff:d9:7d:51:91:2f:55:6a:05:2a:d2:88: 43:2a:4c:cf:ab:20:40:e0:b7:5d:d9:f8:f0:cb:47: a9:2c:8c:08:e6:96:95:76:e3:70:b7:1c:68:8b:24: e1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:5E:A9:6E:A7:0D:0B:17:97:83:DC:2B:1D:0A:E1:81:BF:6A:BC X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bc:69:4c:ac:70:25:6f:01:14:4e:25:6f:8b:d6:a6:84:53: f0:f4:e6:5c:e9:52:3f:aa:9d:5d:fc:b9:5a:79:e7:21:ee:b9: 2b:18:c8:77:e4:13:1c:4c:88:cb:68:f0:d9:75:df:f2:20:50: 04:25:67:4a:fd:f1:b9:62:80:2d:b0:c0:41:1e:1f:b7:2b:6b: 39:0a:ec:8c:6a:2f:67:3e:4c:f9:b6:c2:1e:1e:31:4e:03:24: cf:11:2b:4b:ea:8e:61:31:97:ec:92:24:ff:e3:72:90:e7:ff: b3:6e:4c:73:1d:a4:ef:ad:b2:84:08:97:50:4f:4c:97:1a:fc: da:7e:ca:92:18:66:0b:99:63:bf:50:e7:f6:09:e3:dc:a1:ce: ed:83:8e:82:ef:45:d4:99:48:02:26:ed:cc:bd:ad:08:97:bf: 2c:3d:8e:b4:c9:4b:ee:df:1c:22:3b:e8:20:10:91:ca:23:73: 9f:5a:6e:79:d0:9a:bc:68:b6:74:35:01:da:3f:e3:2b:b7:eb: 16:f9:cf:0f:80:a0:ac:5e:ea:4b:44:2a:fd:04:90:e4:e4:8c: ae:2b:0b:63:df:0b:d6:5f:1c:9f:d1:53:30:0e:6e:13:71:1c: d0:3b:2c:07:9e:88:ae:4b:99:cd:68:05:72:9d:09:f3:98:b9: f9:43:7f:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYHtN+CKmcrn1+HXh7sNMccuEnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTEyMTgwMDE2MzBaFw0yNTEyMjEwNTMwMzBaMDMxMTAvBgNV BAMTKDJFNDA1RUE5NkVBNzBEMEIxNzk3ODNEQzJCMUQwQUUxODFCRjZBQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIboq2RYGDXdOMrPS3VuRHO8HS AIDAom9SguaxFYprKI1080u1w3PT1w5PbD1+G1BD3GgAkWIVtgq5GPURLcbaXdfy dGFSUriRomvfAcy+OIjMo+MDdqPulmcvnSWECRChgTdVZhihMOrtzgftO022B3Yh 8vYkkwAHG3JgEHiQTOJb3Dv23QM2Tbf9S/nJAr47m9sdpnpUz0c/zOk5zB7U70nJ z6TKLzFLIy1N51zBOAbdZ3lEDB+h3aWtD3GdD+NrzeugWrFQA+Yorsh+NSVRKAfn xv/ZfVGRL1VqBSrSiEMqTM+rIEDgt13Z+PDLR6ksjAjmlpV243C3HGiLJOFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkBeqW6nDQsXl4PcKx0K4YG/arwwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKG8aUyscCVvARROJW+L1qaEU/D05lzpUj+q nV38uVp55yHuuSsYyHfkExxMiMto8Nl13/IgUAQlZ0r98bligC2wwEEeH7crazkK 7IxqL2c+TPm2wh4eMU4DJM8RK0vqjmExl+ySJP/jcpDn/7NuTHMdpO+tsoQIl1BP TJca/Np+ypIYZguZY79Q5/YJ49yhzu2DjoLvRdSZSAIm7cy9rQiXvyw9jrTJS+7f HCI76CAQkcojc59abnnQmrxotnQ1Ado/4yu36xb5zw+AoKxe6ktEKv0EkOTkjK4r C2PfC9ZfHJ/RUzAObhNxHNA7LAeeiK5Lmc1oBXKdCfOYuflDf8Q= -----END CERTIFICATE-----Generated at Fri Dec 19 11:36:20 2025 by rpki-client