This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft File: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft (raw, json) Hash identifier: GYJ3kqYEpHO1lskM7674kFdXwlntGhkfC5J8QthzcgM= Subject key identifier: E2:EB:4C:AE:54:0F:3B:F7:3C:84:A1:4C:D2:8F:09:71:BB:56:7E:8E Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 3AB80F6472CB8D2F19F63A3046C1D73255A067B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft Manifest number: 022F Signing time: Wed 17 Dec 2025 11:30:03 +0000 Manifest this update: Wed 17 Dec 2025 11:25:03 +0000 Manifest next update: Sat 20 Dec 2025 13:35:03 +0000 Files and hashes: 1: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok=) 2: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: 6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=) 3: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 6QYiowaUHr77b6SHtMm/wFHLHsnE4/CHR6s2UKLu4J0=) 4: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl (hash: F7kMKkuKJRjnVcVZLo2YBhkt3pmMW+XjxpZ8n1o6o3g=) 5: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: 4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=) 6: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: HxGB/bUslsxHfeCfoct3SORx0s0Y1RxTBE2WHAbQK5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b8:0f:64:72:cb:8d:2f:19:f6:3a:30:46:c1:d7:32:55:a0:67:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Dec 17 11:25:03 2025 GMT Not After : Dec 20 13:35:03 2025 GMT Subject: CN=E2EB4CAE540F3BF73C84A14CD28F0971BB567E8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:9c:ac:be:38:c0:0b:e7:b5:12:43:92:c5: 7d:fb:f9:fa:b3:bf:da:48:cf:44:63:14:db:2c:e5: 5b:4f:6c:92:08:fd:ef:f5:31:43:5d:25:d8:04:f9: eb:d0:65:47:3f:f4:b6:9f:f7:c4:fd:12:ce:af:c3: d1:cd:f1:b0:8d:77:e3:90:b4:61:38:e9:38:c4:93: 95:7c:dc:fa:7a:1d:26:e3:ec:45:dd:74:75:02:07: 91:c8:d7:ad:43:5b:a8:78:8f:cf:b0:5a:37:5f:9f: 9b:c7:61:93:3b:70:49:df:43:49:3f:df:29:da:0f: bd:dc:c6:d9:6a:d9:33:68:2c:9f:51:af:e1:3f:07: 9f:2c:c9:79:a3:68:0f:a9:4c:b1:cb:8f:b5:b3:b9: 46:f4:6e:3d:91:8a:55:52:9e:93:a4:47:ed:7f:ed: e2:f5:f8:b9:73:b2:02:4b:69:b5:4f:09:20:e6:94: be:4f:b8:40:cc:d5:90:45:9b:aa:dc:28:eb:75:e3: de:91:76:95:7d:2b:46:bd:7e:10:d3:72:b9:36:f7: 89:e5:97:23:d5:ad:4e:56:8f:20:a5:9f:62:79:e3: 1a:d4:ff:59:25:c3:2a:0c:de:99:fd:e9:f1:84:6b: 05:ee:5f:8f:7b:4c:97:d1:59:36:9c:ce:e7:2f:cf: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:EB:4C:AE:54:0F:3B:F7:3C:84:A1:4C:D2:8F:09:71:BB:56:7E:8E X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:99:84:c8:1b:3b:78:c6:b4:b6:73:2f:62:2e:0f:5f:a9:3b: b6:95:de:e2:52:3e:8b:6a:66:39:fa:55:d9:21:18:ee:04:58: fc:d8:78:e3:0e:31:77:6a:69:96:fd:dd:c3:ed:1e:28:09:c6: 9b:9d:00:b9:0d:f6:b9:36:17:f3:5b:10:3e:d3:fb:22:e1:eb: 63:4b:35:04:38:c0:9b:39:22:d3:61:fc:c3:46:0a:10:60:47: 3d:da:9f:7c:88:be:50:f9:83:41:07:31:c7:09:e8:29:67:6c: b6:d6:fa:85:c0:78:cc:f9:8a:ae:f6:d9:59:9c:39:94:c8:db: 74:54:b9:c8:f2:7a:1d:09:74:b2:cc:a2:f6:a5:14:5e:a4:61: 60:9a:3c:da:b3:f0:63:49:56:20:09:35:94:48:03:0c:5d:96: b3:31:3d:76:d7:13:31:3a:8a:c2:cd:51:44:c7:49:06:5e:aa: 34:05:ce:7e:86:b6:8f:10:ac:5c:81:fc:d8:a5:e3:03:3b:b8: 3c:ea:9c:8d:bc:0f:97:9f:9f:f9:ee:a5:54:8e:3b:f2:6a:b4: 36:7f:5a:cd:16:fd:48:a2:f4:68:f0:2b:10:37:4e:05:9f:48: 8a:54:e6:f4:2d:64:e6:db:aa:37:ff:53:d4:65:65:98:9e:64: ef:40:5f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrgPZHLLjS8Z9jowRsHXMlWgZ7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNTEyMTcxMTI1MDNaFw0yNTEyMjAxMzM1MDNaMDMxMTAvBgNV BAMTKEUyRUI0Q0FFNTQwRjNCRjczQzg0QTE0Q0QyOEYwOTcxQkI1NjdFOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtpysvjjAC+e1EkOSxX37+fqz v9pIz0RjFNss5VtPbJII/e/1MUNdJdgE+evQZUc/9Laf98T9Es6vw9HN8bCNd+OQ tGE46TjEk5V83Pp6HSbj7EXddHUCB5HI161DW6h4j8+wWjdfn5vHYZM7cEnfQ0k/ 3ynaD73cxtlq2TNoLJ9Rr+E/B58syXmjaA+pTLHLj7WzuUb0bj2RilVSnpOkR+1/ 7eL1+LlzsgJLabVPCSDmlL5PuEDM1ZBFm6rcKOt1496RdpV9K0a9fhDTcrk294nl lyPVrU5WjyCln2J54xrU/1klwyoM3pn96fGEawXuX497TJfRWTaczucvz4BjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4utMrlQPO/c8hKFM0o8JcbtWfo4wHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4 NTUwREEzMjFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSZhMgbO3jGtLZzL2IuD1+pO7aV3uJSPotq Zjn6VdkhGO4EWPzYeOMOMXdqaZb93cPtHigJxpudALkN9rk2F/NbED7T+yLh62NL NQQ4wJs5ItNh/MNGChBgRz3an3yIvlD5g0EHMccJ6ClnbLbW+oXAeMz5iq722Vmc OZTI23RUucjyeh0JdLLMovalFF6kYWCaPNqz8GNJViAJNZRIAwxdlrMxPXbXEzE6 isLNUUTHSQZeqjQFzn6Gto8QrFyB/Nil4wM7uDzqnI28D5efn/nupVSOO/JqtDZ/ Ws0W/Uii9GjwKxA3TgWfSIpU5vQtZObbqjf/U9RlZZieZO9AX7k= -----END CERTIFICATE-----Generated at Fri Dec 19 00:47:44 2025 by rpki-client