This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: l7HF06x/LZsFm7weC9r9lUhUhLBEFMLHvybd+JM2TNA= Subject key identifier: 31:E2:E9:3D:73:F0:03:5E:C7:B6:36:4F:4B:8C:26:32:94:78:30:70 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 01FF053B3CAD72F58C740AFA7BBCF675380723A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02FC Signing time: Wed 17 Dec 2025 03:51:00 +0000 Manifest this update: Wed 17 Dec 2025 03:46:00 +0000 Manifest next update: Sat 20 Dec 2025 14:58:00 +0000 Files and hashes: 1: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) 2: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: 6IZk0tOlc0HpponpU6XdT/ITl78JsaItdpLqiI0bV4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:05:3b:3c:ad:72:f5:8c:74:0a:fa:7b:bc:f6:75:38:07:23:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Dec 17 03:46:00 2025 GMT Not After : Dec 20 14:58:00 2025 GMT Subject: CN=31E2E93D73F0035EC7B6364F4B8C263294783070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:b6:01:d0:3a:a2:69:34:35:42:2b:d8:59: ef:b6:9c:4f:30:d4:6a:8c:bb:02:5f:a4:6c:80:b0: b2:7f:7e:54:27:4e:fc:7e:31:cf:dd:93:4d:fe:2e: 5b:fb:eb:de:55:0b:18:c4:bd:c6:53:52:ea:72:49: b9:3b:ea:14:fb:c1:c9:40:79:4c:32:32:f6:b9:a1: c3:b5:b6:a8:52:49:27:af:69:44:c3:91:9b:9d:18: be:4d:06:17:37:13:70:d6:6d:9d:f7:5c:f0:bf:9c: 5c:df:4a:6b:f8:fa:89:9d:b6:48:c7:3c:93:73:8c: 4d:f1:be:79:19:42:37:a1:bb:79:55:67:25:6e:fb: ed:c6:ef:18:24:5b:87:17:6d:2b:50:e1:9b:ce:4d: 6d:39:78:f2:4a:0c:89:e6:38:8b:a0:bb:e8:72:33: d4:3c:56:31:5c:f6:42:eb:a5:d1:2a:b0:fc:51:9f: b0:be:bf:76:bb:d8:d5:3a:b7:56:80:2a:0f:96:b9: cb:4f:56:b3:6a:53:13:a3:48:3b:c8:17:d8:cc:2c: 84:a2:de:4a:b6:0c:d7:2e:7c:10:0b:aa:ff:70:0a: f8:73:4b:c2:b3:3e:f4:e6:3d:d8:e5:df:bb:cf:6b: 22:ac:65:92:cc:10:82:dc:2e:89:36:9a:2b:ea:f4: 84:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:E9:3D:73:F0:03:5E:C7:B6:36:4F:4B:8C:26:32:94:78:30:70 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:29:b2:4f:7b:33:c6:68:6f:2d:a0:7d:b0:ed:44:f3:77:d2: 92:26:c8:37:83:b2:37:cf:4f:d2:71:28:95:af:b4:4c:f1:9b: bb:43:43:e0:85:7c:0e:fc:1d:59:40:a2:3b:bb:a2:d6:d8:bb: f4:0d:36:58:f1:7b:98:be:25:f8:b8:ed:1a:29:17:92:cc:39: 74:02:c5:af:2c:e8:d4:32:b7:dc:17:f1:7f:86:4d:5d:74:bd: 96:05:5c:fb:3f:8f:bf:94:2e:47:c0:ba:58:9f:d6:09:af:d7: 38:eb:3d:e4:3c:cb:fb:c0:3b:63:98:88:e9:90:47:5b:77:36: d6:8b:ba:a0:7a:4f:58:e7:aa:ff:c5:5b:51:b7:d1:aa:61:b1: a3:c7:66:4f:d7:6f:e6:83:35:c1:a7:a5:db:38:cf:44:38:ce: bc:2b:51:2a:af:ab:ca:fb:ef:f1:0a:cb:6c:5a:c4:03:7d:fe: 99:51:cd:93:83:c3:b8:71:b4:d5:ce:4b:58:40:fc:7a:99:0b: 31:27:e1:c8:2e:02:c5:ca:d9:9a:e8:39:6e:34:e7:c7:c2:1b: d3:c8:2f:e4:ca:26:67:11:f0:03:bb:a7:1b:8d:66:3f:44:e3: 6b:eb:8b:3e:47:55:10:2b:32:29:9f:a3:c6:f4:13:1b:41:8e: 3d:3d:ee:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAf8FOzytcvWMdAr6e7z2dTgHI6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTEyMTcwMzQ2MDBaFw0yNTEyMjAxNDU4MDBaMDMxMTAvBgNV BAMTKDMxRTJFOTNENzNGMDAzNUVDN0I2MzY0RjRCOEMyNjMyOTQ3ODMwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCprbYB0DqiaTQ1QivYWe+2nE8w 1GqMuwJfpGyAsLJ/flQnTvx+Mc/dk03+Llv7695VCxjEvcZTUupySbk76hT7wclA eUwyMva5ocO1tqhSSSevaUTDkZudGL5NBhc3E3DWbZ33XPC/nFzfSmv4+omdtkjH PJNzjE3xvnkZQjehu3lVZyVu++3G7xgkW4cXbStQ4ZvOTW05ePJKDInmOIugu+hy M9Q8VjFc9kLrpdEqsPxRn7C+v3a72NU6t1aAKg+WuctPVrNqUxOjSDvIF9jMLISi 3kq2DNcufBALqv9wCvhzS8KzPvTmPdjl37vPayKsZZLMEILcLok2mivq9IRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMeLpPXPwA17HtjZPS4wmMpR4MHAwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMpsk97M8Zoby2gfbDtRPN30pImyDeDsjfP T9JxKJWvtEzxm7tDQ+CFfA78HVlAoju7otbYu/QNNljxe5i+Jfi47RopF5LMOXQC xa8s6NQyt9wX8X+GTV10vZYFXPs/j7+ULkfAulif1gmv1zjrPeQ8y/vAO2OYiOmQ R1t3NtaLuqB6T1jnqv/FW1G30aphsaPHZk/Xb+aDNcGnpds4z0Q4zrwrUSqvq8r7 7/EKy2xaxAN9/plRzZODw7hxtNXOS1hA/HqZCzEn4cguAsXK2ZroOW4058fCG9PI L+TKJmcR8AO7pxuNZj9E42vriz5HVRArMimfo8b0ExtBjj097mc= -----END CERTIFICATE-----Generated at Fri Dec 19 14:35:13 2025 by rpki-client