This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: 0N+e4aosf65eZEOrExUEQerVPFk6E5wWLr4hExdHKIo= Subject key identifier: 2E:36:FD:60:7E:2F:66:64:EE:9C:57:76:37:2B:41:B8:FF:7F:A6:47 Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 6A2A7F21D9F250D5A77242987CC7CD06F5285890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01D7 Signing time: Tue 23 Dec 2025 20:31:17 +0000 Manifest this update: Tue 23 Dec 2025 20:26:17 +0000 Manifest next update: Sat 27 Dec 2025 07:52:17 +0000 Files and hashes: 1: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=) 2: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: tEBtUPpEDGCQRGHU0jqH8l84l5ouGYhksmnoMUjcSlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 07:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:7f:21:d9:f2:50:d5:a7:72:42:98:7c:c7:cd:06:f5:28:58:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Dec 23 20:26:17 2025 GMT Not After : Dec 27 07:52:17 2025 GMT Subject: CN=2E36FD607E2F6664EE9C5776372B41B8FF7FA647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:34:07:84:fa:09:08:b0:d7:57:76:ba:7a: 05:82:71:3d:f6:e4:9a:2d:93:2d:0b:d6:49:3b:3a: c5:1a:67:f4:60:97:27:01:33:e0:09:72:d5:48:17: 26:67:be:3c:cb:69:b1:3f:23:f7:e2:02:15:01:90: b4:fb:d4:76:62:47:13:dd:16:81:b5:68:cc:9b:f2: 2b:28:7d:bc:a8:dc:57:11:aa:8c:2e:1b:6a:99:6e: e1:b2:4a:f1:3c:c7:ca:b0:47:5f:df:1c:42:42:ca: 06:7c:1e:fa:98:c6:51:04:de:f0:06:83:ad:6b:17: b8:fb:78:29:51:08:74:28:6c:77:11:16:fb:6b:5b: 2d:dd:73:53:af:56:7f:60:28:59:03:9e:01:0c:94: f7:2b:8b:75:fa:70:6d:d8:5f:23:66:84:77:b3:b9: ba:ad:fd:e9:e0:2f:86:10:96:d4:5c:a5:c6:6e:5a: 38:0a:77:d8:10:7c:79:be:54:b0:5a:f6:8c:19:92: 1e:24:28:9e:e0:6d:dd:c0:75:7c:68:9e:ff:68:d9: 9a:f4:18:af:42:8d:ab:f2:a3:58:e0:ed:c7:20:3d: 2e:76:04:de:a3:f3:cd:15:8f:b5:c6:90:4b:b4:79: 1c:57:33:3f:15:19:01:d3:0a:70:49:45:ff:17:ee: b3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:36:FD:60:7E:2F:66:64:EE:9C:57:76:37:2B:41:B8:FF:7F:A6:47 X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e9:38:ad:35:e9:ee:49:a3:f5:a8:09:b4:05:bf:bf:98:04: ec:07:46:00:5a:f0:28:09:d9:2f:b4:6a:e1:fe:08:25:38:7b: 61:b1:e1:fe:2f:3e:90:1e:2e:31:6c:69:e5:8f:30:c6:d5:46: 0d:ee:b2:cd:50:72:8f:01:1d:6e:c3:c1:e7:f2:32:06:d9:61: 99:4b:88:fb:32:d5:79:62:4b:2b:d5:0b:a7:ff:7f:9a:03:de: 4b:a7:6b:97:fd:8b:af:59:99:80:5a:a2:e0:b8:54:6d:b8:51: 05:ce:b3:e7:d1:2f:bc:25:e2:74:88:2b:77:af:35:a5:19:34: 26:cf:04:7f:18:45:de:f1:3e:8f:3f:e0:0a:ef:0f:1c:95:77: 1e:b0:92:da:dd:0d:d6:9e:4d:97:48:86:b2:1a:e1:82:fe:94: 41:1a:28:13:3e:ef:70:09:55:77:75:0a:2d:c6:79:0a:9d:e1: 3e:82:59:35:2e:49:93:c0:2e:d7:01:4d:d6:c1:34:c4:cc:9c: 6e:f6:09:dd:08:d7:7b:24:a1:7d:66:2e:13:e6:04:c9:a9:53: 40:da:34:cb:2d:7f:f4:a2:48:24:d0:d3:5e:a5:2e:71:fe:d5: f2:f3:e3:40:10:27:30:9d:4b:c1:5d:8b:b2:ba:70:72:1d:5d: 6d:ed:e2:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaip/IdnyUNWnckKYfMfNBvUoWJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTEyMjMyMDI2MTdaFw0yNTEyMjcwNzUyMTdaMDMxMTAvBgNV BAMTKDJFMzZGRDYwN0UyRjY2NjRFRTlDNTc3NjM3MkI0MUI4RkY3RkE2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxTQHhPoJCLDXV3a6egWCcT32 5Jotky0L1kk7OsUaZ/RglycBM+AJctVIFyZnvjzLabE/I/fiAhUBkLT71HZiRxPd FoG1aMyb8isofbyo3FcRqowuG2qZbuGySvE8x8qwR1/fHEJCygZ8HvqYxlEE3vAG g61rF7j7eClRCHQobHcRFvtrWy3dc1OvVn9gKFkDngEMlPcri3X6cG3YXyNmhHez ubqt/engL4YQltRcpcZuWjgKd9gQfHm+VLBa9owZkh4kKJ7gbd3AdXxonv9o2Zr0 GK9Cjavyo1jg7ccgPS52BN6j880Vj7XGkEu0eRxXMz8VGQHTCnBJRf8X7rOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjb9YH4vZmTunFd2NytBuP9/pkcwHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInpOK016e5Jo/WoCbQFv7+YBOwHRgBa8CgJ 2S+0auH+CCU4e2Gx4f4vPpAeLjFsaeWPMMbVRg3uss1Qco8BHW7DwefyMgbZYZlL iPsy1XliSyvVC6f/f5oD3kuna5f9i69ZmYBaouC4VG24UQXOs+fRL7wl4nSIK3ev NaUZNCbPBH8YRd7xPo8/4ArvDxyVdx6wktrdDdaeTZdIhrIa4YL+lEEaKBM+73AJ VXd1Ci3GeQqd4T6CWTUuSZPALtcBTdbBNMTMnG72Cd0I13skoX1mLhPmBMmpU0Da NMstf/SiSCTQ016lLnH+1fLz40AQJzCdS8Fdi7K6cHIdXW3t4gU= -----END CERTIFICATE-----Generated at Thu Dec 25 00:39:51 2025 by rpki-client