This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: J02KkI9LeNhW2a6jz8+4JFEYwXoc+dvfTntJl2Lpbwg= Subject key identifier: CC:11:ED:DE:A8:0E:8F:D6:7F:4E:CC:35:CC:5D:E3:DE:2C:8D:A5:61 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 75BF97A2FAEE5620F7CB8792288FE9CC1C7614A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 016B Signing time: Tue 23 Dec 2025 06:52:25 +0000 Manifest this update: Tue 23 Dec 2025 06:47:25 +0000 Manifest next update: Fri 26 Dec 2025 09:17:25 +0000 Files and hashes: 1: 3130332e33382e3131312e302f32342d3234203d3e20313531353639.roa (hash: dbxrQTgZv3GXn+UMmlKIl7zz9zo4NUqYuZDIWrYrKEU=) 2: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: lRqemUGZMDaBHIvLziqDEvyyJxQWvCn5E4jv1u3hWSs=) 3: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) 4: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 09:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bf:97:a2:fa:ee:56:20:f7:cb:87:92:28:8f:e9:cc:1c:76:14:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Dec 23 06:47:25 2025 GMT Not After : Dec 26 09:17:25 2025 GMT Subject: CN=CC11EDDEA80E8FD67F4ECC35CC5DE3DE2C8DA561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:1b:42:7e:4a:a0:c2:4e:51:8d:11:e1:c3: d8:1c:0f:68:8f:61:9c:6a:25:86:58:04:fe:61:1c: a7:4b:43:f1:66:eb:6f:f7:c9:42:ef:07:f3:ec:ed: ee:23:69:63:e5:01:06:d6:ef:92:74:26:f3:b8:3e: 8b:c7:ff:94:9f:56:81:67:5f:05:ba:32:d1:71:89: e0:91:8c:44:89:6e:ac:90:78:fa:cd:d2:fa:96:d2: f5:cc:d2:b4:d5:11:b9:63:42:e9:1d:ec:d9:f2:f6: 7a:d9:ba:f4:8a:49:8f:ff:fe:e7:d6:fb:30:ff:73: 74:be:a7:51:e9:35:9c:dd:56:75:55:ee:e3:df:0e: b4:b1:2d:ca:d7:6d:75:19:bb:3f:b6:f2:e5:ae:a1: 86:13:4c:48:dd:df:46:d5:ef:9a:d6:9f:6e:21:8d: a1:46:05:eb:bf:ad:0c:07:be:7f:28:2c:69:5d:49: 26:58:dd:4f:ab:6c:58:1c:7c:a4:a8:b1:45:4f:10: d5:7e:77:54:e2:4e:fc:dc:11:dd:47:ae:e5:48:27: c9:34:a7:2b:09:17:98:dc:89:04:7b:18:69:eb:64: 7c:f2:9c:1c:df:30:a7:77:c4:9d:8d:7a:26:c5:1d: 2f:c4:ba:56:c7:8d:66:b3:58:7d:58:d3:22:5a:52: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:11:ED:DE:A8:0E:8F:D6:7F:4E:CC:35:CC:5D:E3:DE:2C:8D:A5:61 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a7:75:e0:88:f4:7b:c9:d5:75:06:3f:13:62:e4:5e:37:d5: a6:60:27:5b:38:51:74:6d:6a:19:73:00:cc:4a:a4:6f:e4:42: 78:82:a1:0c:8b:40:50:ef:bb:d1:97:05:61:25:d4:89:8c:38: 56:a0:23:69:e6:46:31:b9:c3:75:23:a1:2d:3b:38:95:89:1d: 9b:9f:cd:e2:17:a7:8b:b1:ee:c1:b2:71:27:f0:a9:f6:a4:1c: de:eb:5b:ec:c4:6a:1a:28:97:ca:85:88:a9:18:aa:d5:2b:d8: da:45:98:fe:25:53:94:2d:8c:81:ec:fe:83:ee:31:01:a0:22: 1d:af:d7:56:f7:c2:da:56:f6:91:6d:8a:1c:63:b0:d7:db:da: 9a:8c:d7:7d:44:56:ed:2f:00:c4:8d:05:4e:99:cf:0e:9d:d9: 6e:3a:8e:0a:2d:4f:02:03:7d:14:07:b7:f4:c6:34:ed:51:4d: 99:00:fa:33:78:1d:6b:d5:75:54:c7:e9:78:1a:09:a4:cc:ba: 0a:bc:aa:18:f9:34:0c:e0:68:fd:2a:14:67:c5:23:23:e3:49: 42:6c:74:c3:28:23:33:be:12:20:df:04:c3:d7:80:06:9e:26: ef:9b:55:96:2a:2a:05:a1:4a:bf:88:0a:5e:5e:de:21:63:f1: c9:d2:f3:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdb+XovruViD3y4eSKI/pzBx2FKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTEyMjMwNjQ3MjVaFw0yNTEyMjYwOTE3MjVaMDMxMTAvBgNV BAMTKENDMTFFRERFQTgwRThGRDY3RjRFQ0MzNUNDNURFM0RFMkM4REE1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EBtCfkqgwk5RjRHhw9gcD2iP YZxqJYZYBP5hHKdLQ/Fm62/3yULvB/Ps7e4jaWPlAQbW75J0JvO4PovH/5SfVoFn XwW6MtFxieCRjESJbqyQePrN0vqW0vXM0rTVEbljQukd7Nny9nrZuvSKSY///ufW +zD/c3S+p1HpNZzdVnVV7uPfDrSxLcrXbXUZuz+28uWuoYYTTEjd30bV75rWn24h jaFGBeu/rQwHvn8oLGldSSZY3U+rbFgcfKSosUVPENV+d1TiTvzcEd1HruVIJ8k0 pysJF5jciQR7GGnrZHzynBzfMKd3xJ2NeibFHS/EulbHjWazWH1Y0yJaUtinAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzBHt3qgOj9Z/Tsw1zF3j3iyNpWEwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2ndeCI9HvJ1XUGPxNi5F431aZgJ1s4UXRt ahlzAMxKpG/kQniCoQyLQFDvu9GXBWEl1ImMOFagI2nmRjG5w3UjoS07OJWJHZuf zeIXp4ux7sGycSfwqfakHN7rW+zEahool8qFiKkYqtUr2NpFmP4lU5QtjIHs/oPu MQGgIh2v11b3wtpW9pFtihxjsNfb2pqM131EVu0vAMSNBU6Zzw6d2W46jgotTwID fRQHt/TGNO1RTZkA+jN4HWvVdVTH6XgaCaTMugq8qhj5NAzgaP0qFGfFIyPjSUJs dMMoIzO+EiDfBMPXgAaeJu+bVZYqKgWhSr+ICl5e3iFj8cnS8w0= -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:39 2025 by rpki-client