This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft File: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft (raw, json) Hash identifier: In+PmCSI8Ici9M8f35qQ134sAng2mCvljjEE6FDVdr4= Subject key identifier: 21:40:41:5C:60:E5:56:E3:9D:11:D7:7D:32:17:F8:5C:4B:9D:7E:92 Authority key identifier: 8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D Certificate issuer: /CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Certificate serial: 120F714AA975E98D24CB75792CA6A76E2C18072B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft Manifest number: 033D Signing time: Tue 16 Dec 2025 12:21:54 +0000 Manifest this update: Tue 16 Dec 2025 12:16:54 +0000 Manifest next update: Fri 19 Dec 2025 16:21:54 +0000 Files and hashes: 1: 8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl (hash: CpF0zDFh+DkRryyOonTt70l3Eo0BmZ4T2fr5WT0GCdQ=) 2: 3130332e3134342e3133352e302f32342d3234203d3e20313339343237.roa (hash: zWJYN2XG8P0RnY9CSUVBnEgmuVsEalWKm5k5yR0nlxQ=) 3: 3130332e3134342e3133342e302f32342d3234203d3e20313339343237.roa (hash: i2RCXQ2h/tijX2X+SFP27I82J2d7eFOatLRW4qkSUTs=) 4: 323430353a366463303a3a2f33322d3332203d3e20313339343237.roa (hash: wF6dopi/8yFT5FMMEEtbalVZ2HlgmQH2NzcCqjkPo/A=) 5: 3130332e3134342e3133342e302f32332d3233203d3e20313339343237.roa (hash: CwI8o18dMmmdKMsJY38paR/SR1tzAkJd4x6YF0hfFxY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 16:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:0f:71:4a:a9:75:e9:8d:24:cb:75:79:2c:a6:a7:6e:2c:18:07:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E3F7441403B9CDF2FD603CCBAF13D1671202D2D Validity Not Before: Dec 16 12:16:54 2025 GMT Not After : Dec 19 16:21:54 2025 GMT Subject: CN=2140415C60E556E39D11D77D3217F85C4B9D7E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:e1:91:6a:b6:ea:0e:c5:93:40:15:b8:fa: c7:e2:de:b1:dc:78:db:7c:e5:28:5f:06:95:31:92: e3:f5:89:d8:cd:2f:19:ed:71:15:06:72:b3:2d:72: ff:fd:f3:0a:71:1c:a9:e9:cf:f7:2f:f4:fb:fe:1f: ab:93:f7:97:de:6c:fc:1b:e1:18:70:c2:27:e5:31: b3:90:96:01:3b:6a:34:73:08:d5:65:78:63:be:bc: da:c2:31:93:84:08:f1:ec:e2:a3:af:f5:67:60:a7: 5e:29:80:b0:68:b0:fa:2e:4d:10:bb:cb:ca:55:17: 85:7f:b7:0c:3c:59:09:2d:d6:40:48:c8:60:ab:af: b1:ab:06:55:a3:30:8a:1b:99:a8:3c:7d:42:f6:1e: 47:0f:38:14:34:51:bb:72:a6:2e:ad:f6:36:b0:c8: 9b:2b:1a:10:9c:dd:f6:ee:11:4d:be:b5:75:ac:3f: a1:19:1d:39:09:5d:da:b9:a1:be:a1:66:b6:4a:28: b1:a7:99:23:43:88:00:9f:bd:76:78:f8:29:de:51: b5:8e:43:cd:ab:06:f0:f9:b5:5e:45:aa:35:4c:a1: 24:8b:aa:dd:d0:9c:96:4c:61:1b:5a:88:8a:08:a3: 43:d7:2d:35:38:de:84:50:3b:11:ee:ed:bb:6c:9c: 95:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:40:41:5C:60:E5:56:E3:9D:11:D7:7D:32:17:F8:5C:4B:9D:7E:92 X509v3 Authority Key Identifier: keyid:8E:3F:74:41:40:3B:9C:DF:2F:D6:03:CC:BA:F1:3D:16:71:20:2D:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aa914ada-a9aa-4d7f-9e47-594bcb7a70ab/0/8E3F7441403B9CDF2FD603CCBAF13D1671202D2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ef:ab:05:a9:a1:7d:b6:ac:d7:3f:7d:ad:f1:08:eb:36:24: 37:98:35:33:08:95:4c:f6:4d:82:8c:81:0b:92:b4:91:84:36: 41:14:a5:e8:f5:ce:4d:23:87:3e:95:9f:c1:e7:59:7d:41:4b: 86:d0:de:85:83:b3:cc:bb:82:59:b3:86:43:da:e1:13:21:8c: 34:64:af:a0:3e:a0:75:d1:f0:b2:04:a5:83:29:d1:ab:52:a9: 12:60:a9:b8:fb:59:84:df:2d:66:89:52:29:1b:75:af:3e:b2: a4:82:e6:b0:9d:da:ab:6b:11:41:29:87:3c:b8:18:ae:bf:b4: 13:3c:f7:7e:66:d7:ad:85:74:8d:24:4f:41:58:80:de:eb:46: 85:48:69:a2:21:c0:15:ac:c6:14:6d:e6:a3:cf:be:84:7e:a9: 4f:28:f6:6d:5c:03:94:b0:34:03:58:a3:b2:ac:1d:00:1c:9f: 1b:b4:4f:d7:c5:5d:6a:b3:02:c3:61:a4:72:c9:fb:87:b1:e3: 4f:42:ef:8c:96:4d:6e:7a:02:31:dd:64:21:bf:0e:e1:c6:62: 23:cf:5e:1c:20:e2:b2:34:16:c5:ba:9f:89:cf:4b:f8:d4:a4: ab:7c:c3:b7:48:17:c0:76:8c:39:f2:5e:17:d0:87:c8:1f:4b: 00:b3:90:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEg9xSql16Y0ky3V5LKanbiwYByswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3 MTIwMkQyRDAeFw0yNTEyMTYxMjE2NTRaFw0yNTEyMTkxNjIxNTRaMDMxMTAvBgNV BAMTKDIxNDA0MTVDNjBFNTU2RTM5RDExRDc3RDMyMTdGODVDNEI5RDdFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63uGRarbqDsWTQBW4+sfi3rHc eNt85ShfBpUxkuP1idjNLxntcRUGcrMtcv/98wpxHKnpz/cv9Pv+H6uT95febPwb 4RhwwiflMbOQlgE7ajRzCNVleGO+vNrCMZOECPHs4qOv9Wdgp14pgLBosPouTRC7 y8pVF4V/tww8WQkt1kBIyGCrr7GrBlWjMIobmag8fUL2HkcPOBQ0Ubtypi6t9jaw yJsrGhCc3fbuEU2+tXWsP6EZHTkJXdq5ob6hZrZKKLGnmSNDiACfvXZ4+CneUbWO Q82rBvD5tV5FqjVMoSSLqt3QnJZMYRtaiIoIo0PXLTU43oRQOxHu7btsnJVLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIUBBXGDlVuOdEdd9Mhf4XEudfpIwHwYDVR0j BBgwFoAUjj90QUA7nN8v1gPMuvE9FnEgLS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YTkxNGFkYS1hOWFhLTRkN2YtOWU0Ny01OTRiY2I3YTcwYWIvMC84RTNGNzQ0MTQw M0I5Q0RGMkZENjAzQ0NCQUYxM0QxNjcxMjAyRDJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNEMTY3MTIw MkQyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWE5MTRhZGEtYTlhYS00ZDdmLTll NDctNTk0YmNiN2E3MGFiLzAvOEUzRjc0NDE0MDNCOUNERjJGRDYwM0NDQkFGMTNE MTY3MTIwMkQyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDvqwWpoX22rNc/fa3xCOs2JDeYNTMIlUz2 TYKMgQuStJGENkEUpej1zk0jhz6Vn8HnWX1BS4bQ3oWDs8y7glmzhkPa4RMhjDRk r6A+oHXR8LIEpYMp0atSqRJgqbj7WYTfLWaJUikbda8+sqSC5rCd2qtrEUEphzy4 GK6/tBM8935m162FdI0kT0FYgN7rRoVIaaIhwBWsxhRt5qPPvoR+qU8o9m1cA5Sw NANYo7KsHQAcnxu0T9fFXWqzAsNhpHLJ+4ex409C74yWTW56AjHdZCG/DuHGYiPP Xhwg4rI0FsW6n4nPS/jUpKt8w7dIF8B2jDnyXhfQh8gfSwCzkEU= -----END CERTIFICATE-----Generated at Tue Dec 16 23:18:02 2025 by rpki-client