This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft File: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft (raw, json) Hash identifier: RqOS2zdaakRZ5i/wKFj1Oca5vBww2JXzaEHcGyGLz5w= Subject key identifier: AC:BF:86:38:00:7A:22:7A:61:5F:C9:96:5F:FA:C6:73:62:63:D2:91 Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 Certificate issuer: /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Certificate serial: 2CA0FF5C10E7C0857C9F636DB812989003360531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft Manifest number: 0232 Signing time: Thu 18 Dec 2025 23:32:01 +0000 Manifest this update: Thu 18 Dec 2025 23:27:01 +0000 Manifest next update: Mon 22 Dec 2025 00:51:01 +0000 Files and hashes: 1: 3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (hash: 1fOWEp4TrzIX6lJGhVie2BUvo2f5cu7g23YUAHBTka8=) 2: 8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl (hash: Gf8AY/K5TAIY0A+xhm4at+5ZEjzzX7APcbQ+b7bR8f8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 00:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:a0:ff:5c:10:e7:c0:85:7c:9f:63:6d:b8:12:98:90:03:36:05:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7 Validity Not Before: Dec 18 23:27:01 2025 GMT Not After : Dec 22 00:51:01 2025 GMT Subject: CN=ACBF8638007A227A615FC9965FFAC6736263D291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:2c:96:a8:51:4a:95:84:c8:a3:d4:dd:29: a7:7e:eb:dc:14:94:43:ae:1c:58:a0:53:d0:4e:cd: 4b:6b:e8:a9:38:e2:a4:2b:af:34:85:80:52:d6:54: d6:81:21:8e:a1:8b:1f:8f:fd:15:77:65:a8:81:a2: cf:8d:bc:55:04:08:90:84:9a:ab:0c:11:54:e4:7e: 51:11:d2:64:99:f6:46:21:ae:67:58:a7:2c:4d:e8: ee:a2:9c:8b:78:74:dd:a2:9e:79:25:45:db:d7:eb: 0d:ed:84:22:44:4e:4a:43:2e:3b:b4:a5:16:47:14: 0d:3e:34:80:ec:c7:00:ad:01:c1:e4:d3:cc:02:a0: 46:7e:31:2c:31:9e:2a:04:db:77:61:a4:5c:5a:b2: 8e:be:f8:cb:86:aa:71:41:1a:a6:6d:3b:8f:b1:51: 2f:09:1b:74:86:f1:20:6a:2e:96:7e:f9:c7:14:c9: a2:24:f8:0e:94:51:0b:2e:ef:d0:c3:df:89:dd:31: db:c6:60:84:78:80:6d:82:2e:b4:a4:76:f1:ba:eb: 46:ad:76:be:c4:10:7b:05:60:5d:86:9b:2f:93:ca: 3a:53:3e:00:18:05:45:16:62:50:b8:49:13:a4:57: 2b:68:86:3e:c6:1c:db:05:4c:69:c0:2a:23:e9:b9: f8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BF:86:38:00:7A:22:7A:61:5F:C9:96:5F:FA:C6:73:62:63:D2:91 X509v3 Authority Key Identifier: keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:51:d9:92:18:e5:60:fc:91:01:4f:df:9c:ac:51:5b:7d:da: 12:21:51:b8:78:16:2e:af:5e:8b:a2:87:4f:ca:80:9c:b1:f4: 53:85:f2:1d:7e:30:09:a5:1f:8f:22:7c:37:97:ec:fb:73:fd: f0:73:17:bc:d7:82:25:93:70:73:75:4a:6b:f7:47:47:74:54: a3:ff:a0:3c:31:bc:2a:39:9a:36:fb:fe:65:6b:c8:b3:ed:fa: 56:58:7e:60:3a:bd:df:4d:04:15:5e:1e:96:89:3a:dd:a2:d6: 02:64:4a:80:f0:17:b4:a2:96:69:27:48:8d:ad:a0:e2:b1:5b: 9e:96:50:14:75:0b:5f:bb:35:7f:af:3e:8f:50:4e:ad:f7:76: 4c:27:27:21:d5:0c:f3:28:6f:0a:a7:01:94:9a:d6:79:61:d1: 18:9d:27:1d:ed:a8:9f:07:15:94:a3:ab:51:8e:6d:65:58:46: 1b:15:43:8d:84:0e:cd:e3:09:fb:3e:09:5e:4f:26:c0:18:d5: d2:35:fb:30:8e:4a:73:92:20:66:41:cf:db:72:93:0b:c6:47: 4f:17:31:80:85:c7:77:9f:97:02:dc:89:1c:e4:b8:7c:0a:25: 0f:31:5b:e7:3a:50:bc:56:03:7e:16:08:1a:25:2d:dd:fb:dd: ee:52:3c:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULKD/XBDnwIV8n2NtuBKYkAM2BTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG MDNGMTFBNzAeFw0yNTEyMTgyMzI3MDFaFw0yNTEyMjIwMDUxMDFaMDMxMTAvBgNV BAMTKEFDQkY4NjM4MDA3QTIyN0E2MTVGQzk5NjVGRkFDNjczNjI2M0QyOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YiyWqFFKlYTIo9TdKad+69wU lEOuHFigU9BOzUtr6Kk44qQrrzSFgFLWVNaBIY6hix+P/RV3ZaiBos+NvFUECJCE mqsMEVTkflER0mSZ9kYhrmdYpyxN6O6inIt4dN2innklRdvX6w3thCJETkpDLju0 pRZHFA0+NIDsxwCtAcHk08wCoEZ+MSwxnioE23dhpFxaso6++MuGqnFBGqZtO4+x US8JG3SG8SBqLpZ++ccUyaIk+A6UUQsu79DD34ndMdvGYIR4gG2CLrSkdvG660at dr7EEHsFYF2Gmy+TyjpTPgAYBUUWYlC4SROkVytohj7GHNsFTGnAKiPpufhpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrL+GOAB6InphX8mWX/rGc2Jj0pEwHwYDVR0j BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1 NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG MTFBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZkYjE4ZWYtNjU5Zi00YjFlLWEy ZTAtYjU4YWY2YjEyNzFmLzAvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBD RDFGMDNGMTFBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1R2ZIY5WD8kQFP35ysUVt92hIhUbh4Fi6v Xouih0/KgJyx9FOF8h1+MAmlH48ifDeX7Ptz/fBzF7zXgiWTcHN1Smv3R0d0VKP/ oDwxvCo5mjb7/mVryLPt+lZYfmA6vd9NBBVeHpaJOt2i1gJkSoDwF7SilmknSI2t oOKxW56WUBR1C1+7NX+vPo9QTq33dkwnJyHVDPMobwqnAZSa1nlh0RidJx3tqJ8H FZSjq1GObWVYRhsVQ42EDs3jCfs+CV5PJsAY1dI1+zCOSnOSIGZBz9tykwvGR08X MYCFx3eflwLciRzkuHwKJQ8xW+c6ULxWA34WCBolLd373e5SPBE= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:52 2025 by rpki-client