This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: Dnu7gHv2Lc9tE9JDlYbE4VBizoX3n3lKQqABTNbAROk= Subject key identifier: AC:D9:1B:B3:53:16:E0:60:AB:52:BF:39:19:1C:F0:7A:FA:4C:E6:C7 Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 640B88B079867A186CF88C07B7D48E1825D98640 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 0233 Signing time: Tue 23 Dec 2025 04:11:40 +0000 Manifest this update: Tue 23 Dec 2025 04:06:40 +0000 Manifest next update: Fri 26 Dec 2025 11:00:40 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: GalI4PAGxqRjIGwWZsxlvr+G5i6CvGIX5hMae8Nc+dg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0b:88:b0:79:86:7a:18:6c:f8:8c:07:b7:d4:8e:18:25:d9:86:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Dec 23 04:06:40 2025 GMT Not After : Dec 26 11:00:40 2025 GMT Subject: CN=ACD91BB35316E060AB52BF39191CF07AFA4CE6C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:f2:91:6f:74:15:dc:a3:4e:a8:85:06:03: 65:d8:04:95:3a:b2:e5:2a:27:15:b1:2d:71:2f:92: ce:07:8f:71:11:c1:4b:48:f1:81:ae:9c:e5:eb:0b: be:00:8b:8e:d1:10:49:0c:97:d9:4c:fd:ca:5d:fc: 00:77:b0:18:91:78:0e:45:ba:df:5a:11:0e:6d:8a: 9c:bc:4c:41:af:b4:bf:67:b2:3a:43:cc:ca:84:71: dd:59:9c:2a:b1:28:eb:7e:49:2b:93:14:fb:86:23: 97:c6:97:d5:89:36:b0:b2:32:fa:02:86:74:0e:39: 6b:32:e8:8a:44:12:39:29:bf:ff:f2:ac:22:6c:2c: f8:f1:c7:76:3e:46:72:ba:38:21:ee:db:38:e7:19: b2:d5:d3:1d:d7:8e:f2:5d:65:9f:27:6d:18:ea:af: 3d:73:83:21:e4:f5:25:33:c5:94:e4:01:00:fc:b8: cd:ae:dd:25:8a:5c:09:ed:dd:08:8d:d2:48:a7:f2: da:d1:84:46:1e:47:d4:9b:74:a7:5f:53:19:f9:af: 67:71:37:31:6c:83:01:db:8e:ee:26:9a:3b:e8:56: 3d:31:a9:7b:e1:3d:0e:59:a9:c1:0b:d3:6d:e8:34: 05:6f:19:18:68:e2:5b:c0:bb:bb:80:71:c3:1c:e6: 0e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:1B:B3:53:16:E0:60:AB:52:BF:39:19:1C:F0:7A:FA:4C:E6:C7 X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:dd:ed:89:3d:ee:4b:f1:2e:97:82:29:8b:ce:e0:01:bf:73: 7e:ed:ad:2c:98:6b:40:4a:15:99:21:79:d6:28:20:71:cf:f7: 15:8d:bf:e6:54:33:60:7d:62:53:ca:dd:c2:66:30:88:92:02: 66:65:27:e7:fb:35:7c:7e:f8:b8:3f:74:d1:96:03:d7:d7:00: 8d:a2:52:07:30:a5:21:eb:8d:e5:c2:30:b2:74:7c:38:bd:e7: 61:ea:3a:cd:96:e6:d8:ba:c4:d1:5f:a3:23:62:e0:91:cd:f0: 75:99:68:f4:80:d5:9e:cc:fd:b5:a2:c8:0c:4d:4f:82:28:33: e2:9d:68:81:66:2e:31:07:87:59:33:7c:1d:62:32:62:6f:2e: 57:73:15:34:a3:5e:2b:16:fa:f1:3f:ad:66:fd:3c:db:4d:dd: 23:97:43:e5:95:99:d1:f6:22:af:7d:99:b6:32:1c:94:99:43: 5d:b9:9c:af:aa:b3:52:2d:f7:37:c7:77:b3:40:d8:f8:be:de: 41:aa:26:57:c4:6d:62:db:42:92:64:d4:5a:a0:29:11:45:a2: 7f:60:93:12:60:39:bc:1f:58:b8:93:ca:0d:19:f6:d0:9c:cb: 94:05:09:b2:7a:95:3e:e4:b2:a3:1a:e9:40:38:f1:09:fe:a1: f2:b0:86:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAuIsHmGehhs+IwHt9SOGCXZhkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTEyMjMwNDA2NDBaFw0yNTEyMjYxMTAwNDBaMDMxMTAvBgNV BAMTKEFDRDkxQkIzNTMxNkUwNjBBQjUyQkYzOTE5MUNGMDdBRkE0Q0U2QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJPKRb3QV3KNOqIUGA2XYBJU6 suUqJxWxLXEvks4Hj3ERwUtI8YGunOXrC74Ai47REEkMl9lM/cpd/AB3sBiReA5F ut9aEQ5tipy8TEGvtL9nsjpDzMqEcd1ZnCqxKOt+SSuTFPuGI5fGl9WJNrCyMvoC hnQOOWsy6IpEEjkpv//yrCJsLPjxx3Y+RnK6OCHu2zjnGbLV0x3XjvJdZZ8nbRjq rz1zgyHk9SUzxZTkAQD8uM2u3SWKXAnt3QiN0kin8trRhEYeR9SbdKdfUxn5r2dx NzFsgwHbju4mmjvoVj0xqXvhPQ5ZqcEL023oNAVvGRho4lvAu7uAccMc5g6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNkbs1MW4GCrUr85GRzwevpM5scwHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDd7Yk97kvxLpeCKYvO4AG/c37trSyYa0BK FZkhedYoIHHP9xWNv+ZUM2B9YlPK3cJmMIiSAmZlJ+f7NXx++Lg/dNGWA9fXAI2i UgcwpSHrjeXCMLJ0fDi952HqOs2W5ti6xNFfoyNi4JHN8HWZaPSA1Z7M/bWiyAxN T4IoM+KdaIFmLjEHh1kzfB1iMmJvLldzFTSjXisW+vE/rWb9PNtN3SOXQ+WVmdH2 Iq99mbYyHJSZQ125nK+qs1It9zfHd7NA2Pi+3kGqJlfEbWLbQpJk1FqgKRFFon9g kxJgObwfWLiTyg0Z9tCcy5QFCbJ6lT7ksqMa6UA48Qn+ofKwhiY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:07 2025 by rpki-client