This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: jgyEWlmCeO6nwGfMzUdMtX3CMIlISQravx/5gKUHloA= Subject key identifier: 8A:B1:39:C9:DF:1F:8B:FD:9C:19:9A:58:63:83:B7:2F:AD:25:C8:D3 Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 581D0F87AA4BD9E01DB608024161F16A2E76A8DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0552 Signing time: Thu 18 Dec 2025 14:41:19 +0000 Manifest this update: Thu 18 Dec 2025 14:36:19 +0000 Manifest next update: Sun 21 Dec 2025 16:30:19 +0000 Files and hashes: 1: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 2: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 3: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 4: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 5: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) 6: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 7: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 8: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 9: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 10: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) 11: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 12: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 13: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 14: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 15: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 16: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 17: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 18: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: Dtxcc9yVh0/3yHiIRVpQhhm9GXqGrByQiolKc5UbqZw=) 19: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 20: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 21: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 16:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:1d:0f:87:aa:4b:d9:e0:1d:b6:08:02:41:61:f1:6a:2e:76:a8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 18 14:36:19 2025 GMT Not After : Dec 21 16:30:19 2025 GMT Subject: CN=8AB139C9DF1F8BFD9C199A586383B72FAD25C8D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:69:bd:9a:2b:24:43:e8:b9:29:0d:f0:32:7a: c8:7c:22:82:9b:18:55:c9:14:1c:40:90:de:9d:f3: 21:a0:bd:be:9f:eb:e1:19:2b:18:dd:8b:d1:29:80: f7:dd:13:8f:2a:30:63:72:e1:cb:e6:c6:6e:97:1b: 0c:eb:bd:ec:12:a0:9b:02:5d:2a:45:ad:6f:f5:70: 93:98:c2:19:f6:a5:f7:ad:00:3c:c5:82:8d:a5:ef: 05:3c:31:68:79:73:70:d1:d4:7f:99:56:a8:fa:a8: 24:fe:9b:9c:21:7d:d6:ce:c6:4d:34:9a:40:81:6a: c2:07:c7:3b:1a:18:5d:e8:1b:4a:74:75:34:42:e4: 86:4c:74:0a:7b:47:71:57:d5:4f:6c:3d:29:66:39: 5f:df:f0:82:94:4e:36:1f:35:75:6e:9e:1b:c3:5a: 48:d5:f0:b1:96:d4:10:1e:80:cc:c4:8a:a5:69:27: 6e:d8:b7:31:9e:96:58:14:28:8a:43:e4:3d:02:f5: 5b:89:80:46:74:e5:36:ff:6c:76:25:6e:d7:8a:b8: 3d:ee:f6:74:b1:bf:c5:91:32:3e:59:35:f6:68:39: 75:58:2e:2e:41:64:cb:da:fd:34:b8:5b:9e:09:7b: c5:88:b5:40:9e:54:fa:7a:d4:38:da:c6:1f:17:86: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B1:39:C9:DF:1F:8B:FD:9C:19:9A:58:63:83:B7:2F:AD:25:C8:D3 X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c1:77:47:d5:34:7e:0e:bf:ea:5a:04:af:57:41:a9:d8:0a: 2b:e9:8d:90:30:3d:af:a4:2a:cf:77:29:08:d2:73:f6:e5:01: d2:cc:2a:f6:f3:18:f9:78:7e:79:46:2b:e8:a6:ed:e5:87:8f: 94:0e:02:7b:34:f0:f3:91:10:42:79:8c:9b:f0:64:24:29:a6: d9:17:30:46:4f:3a:c4:e0:ff:81:3d:6f:85:c4:33:08:86:26: 50:b0:f9:e2:9d:38:d7:8f:fa:d5:fa:c5:33:2d:3e:00:e6:14: 48:a2:0e:f5:bb:26:01:93:97:2b:74:9d:03:11:05:a4:81:31: 75:41:23:e2:31:1b:22:26:9e:1c:dc:39:e8:a4:aa:47:f5:51: a3:b4:f2:14:2e:45:ac:3a:b2:66:dc:90:7f:f1:08:ab:18:5a: aa:cb:f8:8f:a9:50:8a:d1:34:99:f2:cd:e4:a9:90:15:7b:d6: 62:36:36:24:96:b0:27:46:3f:49:1b:2d:4c:70:e5:d8:cf:e9: 6b:df:a5:9f:1c:b7:ba:3a:88:aa:b5:2a:cf:08:c9:0f:da:ea: 4a:19:c7:56:e9:8e:2c:aa:b5:20:cf:5f:66:57:75:d3:48:8e: 98:40:29:85:5f:8a:34:27:08:7b:a3:ad:ab:b5:3e:76:52:fa: ce:9e:73:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWB0Ph6pL2eAdtggCQWHxai52qNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMTgxNDM2MTlaFw0yNTEyMjExNjMwMTlaMDMxMTAvBgNV BAMTKDhBQjEzOUM5REYxRjhCRkQ5QzE5OUE1ODYzODNCNzJGQUQyNUM4RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfab2aKyRD6LkpDfAyesh8IoKb GFXJFBxAkN6d8yGgvb6f6+EZKxjdi9EpgPfdE48qMGNy4cvmxm6XGwzrvewSoJsC XSpFrW/1cJOYwhn2pfetADzFgo2l7wU8MWh5c3DR1H+ZVqj6qCT+m5whfdbOxk00 mkCBasIHxzsaGF3oG0p0dTRC5IZMdAp7R3FX1U9sPSlmOV/f8IKUTjYfNXVunhvD WkjV8LGW1BAegMzEiqVpJ27YtzGellgUKIpD5D0C9VuJgEZ05Tb/bHYlbteKuD3u 9nSxv8WRMj5ZNfZoOXVYLi5BZMva/TS4W54Je8WItUCeVPp61Djaxh8XhmIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirE5yd8fi/2cGZpYY4O3L60lyNMwHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzBd0fVNH4Ov+paBK9XQanYCivpjZAwPa+k Ks93KQjSc/blAdLMKvbzGPl4fnlGK+im7eWHj5QOAns08POREEJ5jJvwZCQpptkX MEZPOsTg/4E9b4XEMwiGJlCw+eKdONeP+tX6xTMtPgDmFEiiDvW7JgGTlyt0nQMR BaSBMXVBI+IxGyImnhzcOeikqkf1UaO08hQuRaw6smbckH/xCKsYWqrL+I+pUIrR NJnyzeSpkBV71mI2NiSWsCdGP0kbLUxw5djP6WvfpZ8ct7o6iKq1Ks8IyQ/a6koZ x1bpjiyqtSDPX2ZXddNIjphAKYVfijQnCHujrau1PnZS+s6ec7Q= -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:45 2025 by rpki-client