This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: JM6XF3ID3s7/ygtPUanA+WloWIbFBNCrajxqRkrY200= Subject key identifier: 16:84:E3:D3:B1:A8:1B:4F:EE:73:A9:E3:61:29:63:74:A3:78:58:C3 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 7333985A683E042108D1AEE6E78DB7F3B9113A26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: F2 Signing time: Wed 24 Dec 2025 10:50:45 +0000 Manifest this update: Wed 24 Dec 2025 10:45:45 +0000 Manifest next update: Sat 27 Dec 2025 14:37:45 +0000 Files and hashes: 1: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: HWyzdHOaYvDZfz4owWz+67D1bqRH77BW4gVD35b78wM=) 2: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:33:98:5a:68:3e:04:21:08:d1:ae:e6:e7:8d:b7:f3:b9:11:3a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Dec 24 10:45:45 2025 GMT Not After : Dec 27 14:37:45 2025 GMT Subject: CN=1684E3D3B1A81B4FEE73A9E361296374A37858C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:23:3d:29:d5:54:cf:c2:25:38:cf:80:05:1f: 5c:b8:d5:bb:7c:b6:fa:32:78:11:78:4d:74:ce:ba: 8c:c1:d9:d8:3f:d0:2a:4d:47:d3:30:63:af:f2:68: b4:29:44:7d:1f:b1:bc:41:33:0d:be:a7:25:5d:b7: 03:f5:db:04:60:6a:2d:06:d8:75:f9:16:98:07:6e: 68:bf:f6:ff:5f:d3:9b:23:d9:7d:27:cb:f5:f5:b1: af:35:3e:31:a1:03:88:11:e6:b9:f2:08:53:d0:37: af:62:aa:e7:5c:d5:49:7b:0e:16:3f:32:29:b1:d0: 89:bc:d8:92:cb:bb:a3:7c:6d:6a:cc:f3:f2:71:15: 6d:dd:b2:32:46:8e:34:f3:69:31:a6:c9:83:27:25: 54:ae:39:34:ce:a6:5a:80:7a:5c:7f:f3:72:89:ca: d0:8d:c2:f7:c6:cc:d1:29:3f:fd:b5:c4:c2:96:29: d3:b0:6a:8f:45:70:d9:72:54:5d:a1:f1:8b:a3:71: b9:63:30:a4:6c:3c:d4:6f:6f:57:83:ce:39:e3:f7: 18:62:5e:e9:90:b8:b1:3b:34:7f:1d:21:19:d2:71: d4:cb:9e:1f:d6:f8:40:80:80:cb:d7:50:b6:3a:ca: 05:82:fa:4b:76:fd:f5:86:3c:e1:59:d8:0c:10:e4: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:84:E3:D3:B1:A8:1B:4F:EE:73:A9:E3:61:29:63:74:A3:78:58:C3 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:50:e5:07:91:27:69:9f:70:f2:d2:ef:ab:7f:f4:88:a5:52: 7a:c4:fd:8f:5f:86:a3:46:b6:e5:d6:2b:23:5a:e7:2c:77:0c: a7:d2:14:7f:e8:29:d0:d0:15:ad:6b:ca:25:e9:19:56:78:57: 49:c6:3b:cc:17:bf:1e:3e:d0:05:05:58:b5:cf:4f:0c:53:71: 76:86:1c:1d:55:9d:73:c4:b1:75:09:d6:be:36:bc:86:b7:c0: 79:6d:cd:ff:65:17:7f:41:a9:a8:2a:a9:2a:15:4a:62:01:09: d0:f7:2f:4e:9f:f3:9a:ca:6c:bb:76:4b:77:d9:a1:74:7f:d2: ce:21:c0:a3:49:2d:7f:f2:d3:6f:23:1b:b4:20:31:cc:7e:78: 71:7e:bc:5a:cf:09:5a:38:34:c5:84:d5:7d:f8:3a:dc:74:22: e8:46:99:af:25:6b:e9:d8:fe:d2:05:54:5f:1d:92:35:07:df: 5e:9d:3c:34:d5:1c:62:bf:bb:09:42:07:5d:ef:76:e0:2d:23: a3:26:21:4d:21:5f:64:ed:b3:57:ac:32:e8:4e:e3:10:a2:07: 1a:34:63:ca:09:74:99:b6:d8:67:0c:8f:f3:8c:bb:7c:37:20: be:7d:c9:26:af:30:13:27:a4:1a:7b:2e:00:a5:fb:61:9e:34: f1:00:8f:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUczOYWmg+BCEI0a7m542387kROiYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTEyMjQxMDQ1NDVaFw0yNTEyMjcxNDM3NDVaMDMxMTAvBgNV BAMTKDE2ODRFM0QzQjFBODFCNEZFRTczQTlFMzYxMjk2Mzc0QTM3ODU4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Iz0p1VTPwiU4z4AFH1y41bt8 tvoyeBF4TXTOuozB2dg/0CpNR9MwY6/yaLQpRH0fsbxBMw2+pyVdtwP12wRgai0G 2HX5FpgHbmi/9v9f05sj2X0ny/X1sa81PjGhA4gR5rnyCFPQN69iqudc1Ul7DhY/ Mimx0Im82JLLu6N8bWrM8/JxFW3dsjJGjjTzaTGmyYMnJVSuOTTOplqAelx/83KJ ytCNwvfGzNEpP/21xMKWKdOwao9FcNlyVF2h8YujcbljMKRsPNRvb1eDzjnj9xhi XumQuLE7NH8dIRnScdTLnh/W+ECAgMvXULY6ygWC+kt2/fWGPOFZ2AwQ5DQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoTj07GoG0/uc6njYSljdKN4WMMwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFQ5QeRJ2mfcPLS76t/9IilUnrE/Y9fhqNG tuXWKyNa5yx3DKfSFH/oKdDQFa1ryiXpGVZ4V0nGO8wXvx4+0AUFWLXPTwxTcXaG HB1VnXPEsXUJ1r42vIa3wHltzf9lF39BqagqqSoVSmIBCdD3L06f85rKbLt2S3fZ oXR/0s4hwKNJLX/y028jG7QgMcx+eHF+vFrPCVo4NMWE1X34Otx0IuhGma8la+nY /tIFVF8dkjUH316dPDTVHGK/uwlCB13vduAtI6MmIU0hX2Tts1esMuhO4xCiBxo0 Y8oJdJm22GcMj/OMu3w3IL59ySavMBMnpBp7LgCl+2GeNPEAjxQ= -----END CERTIFICATE-----Generated at Thu Dec 25 01:24:54 2025 by rpki-client