This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: GRVEQjBZOrAGccFgAH+xhFhQy/h00JX5Tnw3yjvN90g= Subject key identifier: 21:6A:8D:55:CC:4C:69:21:1E:EA:BC:9F:03:7D:AD:78:7B:65:A7:AC Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 1F1CD96E0005E34F09C484522D68CC7180DEAE53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 022D Signing time: Tue 23 Dec 2025 04:52:01 +0000 Manifest this update: Tue 23 Dec 2025 04:47:01 +0000 Manifest next update: Fri 26 Dec 2025 06:58:01 +0000 Files and hashes: 1: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: NJiTnDvN30+S1PvPE6Rk2MwUFc/mOHXq1wKqpgTKXlo=) 2: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1c:d9:6e:00:05:e3:4f:09:c4:84:52:2d:68:cc:71:80:de:ae:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Dec 23 04:47:01 2025 GMT Not After : Dec 26 06:58:01 2025 GMT Subject: CN=216A8D55CC4C69211EEABC9F037DAD787B65A7AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:39:3e:43:21:07:04:b6:02:82:2a:08:89: 33:fb:93:33:72:6a:b1:19:a1:25:34:59:73:51:08: 89:66:b0:d4:3c:02:54:b3:43:c9:e6:74:95:b1:5b: 90:85:57:b7:44:04:07:31:c8:e4:0e:00:c0:a1:7c: 24:f4:c6:da:a0:57:ae:69:1f:c3:db:dd:cd:e4:d9: bb:eb:8b:3f:f7:8c:0b:53:2b:7c:ea:11:5b:2c:70: 97:a1:40:1d:f5:25:67:18:00:68:42:39:7b:5d:23: 9d:7d:01:a3:79:57:f8:9e:74:0b:95:db:18:9e:54: 9a:cb:03:db:06:22:5c:de:ca:2b:50:4d:52:d8:9a: 41:5b:59:0b:93:d5:d7:af:e9:7a:99:6d:46:02:5e: 01:b8:3a:a4:5a:84:7b:f6:57:dd:4f:ec:21:f4:51: 22:f7:ce:de:9e:31:f2:73:ee:c9:ce:43:55:27:c9: 68:c3:7c:27:99:e6:99:c7:c5:8e:f7:91:ea:1f:99: a2:7a:ce:e3:ad:cf:f6:3e:99:60:da:f1:36:0b:7e: ce:ef:5f:b6:02:18:a1:f8:b4:56:47:e0:6a:35:3b: 3b:8e:3f:96:10:cd:d3:fa:c0:96:17:04:84:e5:fb: c1:81:b2:5b:28:a8:cf:7c:8d:52:8f:68:e6:8a:3d: 7e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:6A:8D:55:CC:4C:69:21:1E:EA:BC:9F:03:7D:AD:78:7B:65:A7:AC X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:18:83:d4:8f:63:db:c0:bd:c2:13:10:f3:75:b0:e8:df:9c: 87:41:10:04:7e:74:4d:04:4d:43:45:bb:4c:87:55:de:c1:b2: 79:c7:38:57:3d:3f:0c:14:4f:b6:8b:4c:20:a8:41:be:5b:c2: 4f:6a:8d:29:8d:bd:1e:4b:8b:09:a2:f1:06:23:85:4a:6d:4b: f9:22:c1:e7:0c:79:f7:46:01:ca:30:00:d0:be:2b:f8:35:3e: b3:db:d0:b3:34:07:ed:5f:ca:f4:6a:d0:b3:ad:0f:1f:ef:2b: 21:6c:53:01:6c:4a:39:94:cc:7c:fe:e1:3d:ae:15:28:85:59: d3:9b:b2:79:95:95:c1:b5:ae:0f:59:ae:74:45:82:39:9e:94: 1c:f0:4d:5c:b8:6c:f6:45:6c:5c:b6:29:c0:25:44:19:e7:40: 80:d7:e1:6b:91:d9:e0:39:f4:5d:cc:80:a2:3f:42:17:57:c6: 32:b7:06:31:ef:16:8f:9b:60:c2:6f:49:ae:4b:0f:13:ec:34: 88:be:1d:43:49:15:44:b8:61:14:cc:9d:a0:86:cd:ab:31:23: a7:4e:ba:3b:25:71:a7:45:f4:92:76:9c:3e:58:05:3a:25:c1: d5:8a:8d:e5:b6:65:6a:51:d5:40:7b:ac:f1:fb:2f:e5:49:16: 74:9b:e8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxzZbgAF408JxIRSLWjMcYDerlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTEyMjMwNDQ3MDFaFw0yNTEyMjYwNjU4MDFaMDMxMTAvBgNV BAMTKDIxNkE4RDU1Q0M0QzY5MjExRUVBQkM5RjAzN0RBRDc4N0I2NUE3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmzk+QyEHBLYCgioIiTP7kzNy arEZoSU0WXNRCIlmsNQ8AlSzQ8nmdJWxW5CFV7dEBAcxyOQOAMChfCT0xtqgV65p H8Pb3c3k2bvriz/3jAtTK3zqEVsscJehQB31JWcYAGhCOXtdI519AaN5V/iedAuV 2xieVJrLA9sGIlzeyitQTVLYmkFbWQuT1dev6XqZbUYCXgG4OqRahHv2V91P7CH0 USL3zt6eMfJz7snOQ1UnyWjDfCeZ5pnHxY73keofmaJ6zuOtz/Y+mWDa8TYLfs7v X7YCGKH4tFZH4Go1OzuOP5YQzdP6wJYXBITl+8GBslsoqM98jVKPaOaKPX6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWqNVcxMaSEe6ryfA32teHtlp6wwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIYg9SPY9vAvcITEPN1sOjfnIdBEAR+dE0E TUNFu0yHVd7BsnnHOFc9PwwUT7aLTCCoQb5bwk9qjSmNvR5Liwmi8QYjhUptS/ki wecMefdGAcowANC+K/g1PrPb0LM0B+1fyvRq0LOtDx/vKyFsUwFsSjmUzHz+4T2u FSiFWdObsnmVlcG1rg9ZrnRFgjmelBzwTVy4bPZFbFy2KcAlRBnnQIDX4WuR2eA5 9F3MgKI/QhdXxjK3BjHvFo+bYMJvSa5LDxPsNIi+HUNJFUS4YRTMnaCGzasxI6dO ujslcadF9JJ2nD5YBTolwdWKjeW2ZWpR1UB7rPH7L+VJFnSb6O0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:11:37 2025 by rpki-client