This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft File: 8999E6DA986A355F868ABD73E4E2AADC08244F29.mft (raw, json) Hash identifier: dl3Hv/ClVeTPTUS/7DI8s1SvHXSf7ax5+aATJQ9MBiU= Subject key identifier: 03:49:F8:40:C6:C8:E2:C9:84:92:53:29:0E:61:EE:7F:AE:DC:2B:6B Authority key identifier: 89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 Certificate issuer: /CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Certificate serial: 4CA4282AB171E888439722934E9496203A85F12E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft Manifest number: FB Signing time: Fri 26 Dec 2025 22:12:22 +0000 Manifest this update: Fri 26 Dec 2025 22:07:22 +0000 Manifest next update: Tue 30 Dec 2025 04:14:22 +0000 Files and hashes: 1: 8999E6DA986A355F868ABD73E4E2AADC08244F29.crl (hash: HClDTHNLCtJopRzV3hSc7sH3/eO5/I4gxSF8HrEDj14=) 2: 3135372e36362e35372e302f32342d3234203d3e20313530393835.roa (hash: g0W4yfpco5rqCeJ3sGtEPJSj+o2p48FtppiRKtinTxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:14:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a4:28:2a:b1:71:e8:88:43:97:22:93:4e:94:96:20:3a:85:f1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8999E6DA986A355F868ABD73E4E2AADC08244F29 Validity Not Before: Dec 26 22:07:22 2025 GMT Not After : Dec 30 04:14:22 2025 GMT Subject: CN=0349F840C6C8E2C9849253290E61EE7FAEDC2B6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:29:36:e7:c7:93:36:42:36:14:e7:32:f8:26: 0b:6a:dd:5c:39:c7:20:b1:aa:56:cb:26:1f:9a:15: 24:c3:86:b4:f3:b8:bd:78:3d:89:b2:b6:b0:b3:ae: 4f:bd:26:8e:dc:35:ee:52:ea:ce:02:58:39:0d:74: 77:ca:10:83:aa:8d:ed:d1:66:5a:41:d7:ec:6c:55: d6:a4:d6:8b:16:1e:1f:f3:d0:44:44:a1:1c:9a:4b: 6d:a5:fe:e4:44:36:df:3c:be:29:8c:55:38:00:c5: 7c:f9:d3:88:c7:ff:e7:f8:21:9b:3d:6e:1d:70:70: e6:6a:0c:27:5f:df:05:72:aa:9d:f9:b5:66:30:d7: 19:07:26:90:42:c9:81:01:b8:d7:9e:a7:48:08:6d: 64:c5:1d:6a:55:2c:fa:d4:da:b6:4e:19:b2:1e:9c: fe:14:05:d3:34:d7:6a:08:71:88:11:c9:35:c4:0d: d5:6a:b1:69:c2:cc:88:23:8f:d0:ca:a5:0e:9e:cd: 33:41:d0:a2:a2:4e:ea:75:6c:d0:c6:2d:3e:23:87: e5:c7:bd:14:bb:98:1b:8f:a6:38:cd:1b:44:23:27: 43:7a:a8:da:93:02:a6:e4:5b:46:d8:40:11:7a:78: 27:dd:d9:10:e3:72:2f:ef:5a:92:d5:89:b7:d6:e7: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:49:F8:40:C6:C8:E2:C9:84:92:53:29:0E:61:EE:7F:AE:DC:2B:6B X509v3 Authority Key Identifier: keyid:89:99:E6:DA:98:6A:35:5F:86:8A:BD:73:E4:E2:AA:DC:08:24:4F:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8999E6DA986A355F868ABD73E4E2AADC08244F29.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9329793e-8f18-4116-9268-a133daf11cef/0/8999E6DA986A355F868ABD73E4E2AADC08244F29.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:3a:93:d2:aa:e0:eb:a3:75:b8:57:d0:23:ef:76:ca:e2:bf: 39:5b:76:fa:7f:96:1b:3b:11:92:a0:0e:87:86:87:27:98:a5: ce:5a:41:86:cb:7f:10:56:99:2b:b9:4f:27:0b:1f:fd:f5:6f: 18:76:ea:b5:9d:c4:e2:2d:9f:cb:bb:0c:25:d5:08:61:aa:02: 1b:8f:6a:db:76:7e:78:da:bf:3e:74:e3:cc:af:24:42:a1:c9: 5b:aa:53:bd:01:a2:11:cf:8a:09:b7:0f:fe:48:46:a1:49:ee: 75:eb:36:8c:f3:27:ac:87:ec:b6:a9:de:9b:ec:98:60:71:2c: 50:e1:97:b9:51:37:27:a5:59:03:ba:b4:de:0b:9a:4d:09:4d: c8:18:21:26:7b:82:49:8a:83:44:0c:18:88:9b:14:47:91:d0: e0:76:75:a1:b0:7c:f3:ad:78:f3:ad:5a:61:2a:83:d0:1a:59: 47:9c:87:8f:ad:d9:c5:97:65:d0:84:94:c6:c3:ed:32:e3:b1: 64:ad:98:a4:46:99:10:d0:e6:9e:f3:26:48:b3:b9:23:04:e1: 0b:89:d5:af:da:4f:85:e9:16:bd:5e:42:f1:10:99:6b:44:5f: 0f:32:c1:7b:f6:ca:fb:28:ca:cc:25:e3:57:89:dd:4d:b0:28: 25:a6:c9:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKQoKrFx6IhDlyKTTpSWIDqF8S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMw ODI0NEYyOTAeFw0yNTEyMjYyMjA3MjJaFw0yNTEyMzAwNDE0MjJaMDMxMTAvBgNV BAMTKDAzNDlGODQwQzZDOEUyQzk4NDkyNTMyOTBFNjFFRTdGQUVEQzJCNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHKTbnx5M2QjYU5zL4Jgtq3Vw5 xyCxqlbLJh+aFSTDhrTzuL14PYmytrCzrk+9Jo7cNe5S6s4CWDkNdHfKEIOqje3R ZlpB1+xsVdak1osWHh/z0EREoRyaS22l/uRENt88vimMVTgAxXz504jH/+f4IZs9 bh1wcOZqDCdf3wVyqp35tWYw1xkHJpBCyYEBuNeep0gIbWTFHWpVLPrU2rZOGbIe nP4UBdM012oIcYgRyTXEDdVqsWnCzIgjj9DKpQ6ezTNB0KKiTup1bNDGLT4jh+XH vRS7mBuPpjjNG0QjJ0N6qNqTAqbkW0bYQBF6eCfd2RDjci/vWpLVibfW54/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0n4QMbI4smEklMpDmHuf67cK2swHwYDVR0j BBgwFoAUiZnm2phqNV+Gir1z5OKq3AgkTykwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzI5NzkzZS04ZjE4LTQxMTYtOTI2OC1hMTMzZGFmMTFjZWYvMC84OTk5RTZEQTk4 NkEzNTVGODY4QUJENzNFNEUyQUFEQzA4MjQ0RjI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFBREMwODI0 NEYyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMyOTc5M2UtOGYxOC00MTE2LTky NjgtYTEzM2RhZjExY2VmLzAvODk5OUU2REE5ODZBMzU1Rjg2OEFCRDczRTRFMkFB REMwODI0NEYyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFw6k9Kq4OujdbhX0CPvdsrivzlbdvp/lhs7 EZKgDoeGhyeYpc5aQYbLfxBWmSu5TycLH/31bxh26rWdxOItn8u7DCXVCGGqAhuP att2fnjavz5048yvJEKhyVuqU70BohHPigm3D/5IRqFJ7nXrNozzJ6yH7Lap3pvs mGBxLFDhl7lRNyelWQO6tN4Lmk0JTcgYISZ7gkmKg0QMGIibFEeR0OB2daGwfPOt ePOtWmEqg9AaWUech4+t2cWXZdCElMbD7TLjsWStmKRGmRDQ5p7zJkizuSME4QuJ 1a/aT4XpFr1eQvEQmWtEXw8ywXv2yvsoyswl41eJ3U2wKCWmySs= -----END CERTIFICATE-----Generated at Sat Dec 27 07:17:24 2025 by rpki-client