This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft File: 8874CE775F191B6E0B34A789A359EB9FB93B737E.mft (raw, json) Hash identifier: GTft3lDM1DdZUKq65ppoUAbgiCE0Im+FFoDYAk28l14= Subject key identifier: A6:AB:9F:73:24:89:81:F5:D3:38:0A:36:DB:DD:48:8C:12:AE:3C:0B Authority key identifier: 88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E Certificate issuer: /CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Certificate serial: 2E70698615965CF2D3C2AD57AE5FF4E8169169B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft Manifest number: 028E Signing time: Mon 22 Dec 2025 16:20:50 +0000 Manifest this update: Mon 22 Dec 2025 16:15:50 +0000 Manifest next update: Fri 26 Dec 2025 00:43:50 +0000 Files and hashes: 1: 3130332e3137322e32352e302f32342d3234203d3e20313432333837.roa (hash: aI45yKhAru9VHfZlQWe/rwkciB33mSYkuVbNTgyinfk=) 2: 8874CE775F191B6E0B34A789A359EB9FB93B737E.crl (hash: gGoUVP87nfVnmz5UQSi8fm7ujmWdnA2nekdBhTTvjcg=) 3: 3130332e3137322e32342e302f32342d3234203d3e20313432333837.roa (hash: nL/HZGA0E7GxsNtQZwq3/bQqUnFo5wNCWdHlAXFVa2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:70:69:86:15:96:5c:f2:d3:c2:ad:57:ae:5f:f4:e8:16:91:69:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8874CE775F191B6E0B34A789A359EB9FB93B737E Validity Not Before: Dec 22 16:15:50 2025 GMT Not After : Dec 26 00:43:50 2025 GMT Subject: CN=A6AB9F73248981F5D3380A36DBDD488C12AE3C0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d9:4e:60:12:8a:cb:1e:90:cf:c8:b4:2a:b6: ea:81:5c:c7:13:3d:28:22:a9:81:c9:44:33:e3:1a: fb:aa:50:ee:f7:23:b9:c8:ad:27:bc:05:fc:5e:80: 7f:ec:e6:6d:f5:ee:35:21:55:35:89:71:b0:bc:17: 11:5e:ee:5e:e3:6b:b8:a0:12:8b:81:43:37:9f:51: 85:94:32:7d:5c:57:29:81:2b:78:e2:a6:0e:a9:55: a8:25:f5:bb:2e:89:35:d5:b4:c5:0c:c4:72:9e:e0: 3c:91:02:93:36:af:81:02:98:13:8b:23:14:19:cd: 06:07:15:04:da:8f:15:c1:d4:3d:39:bf:c2:38:02: 20:2a:4e:76:e6:e0:57:ee:51:43:f7:6e:6c:87:4e: 8c:d0:12:5b:4f:ad:51:9a:3a:fd:59:b4:4e:87:d4: 47:db:78:a5:93:08:c1:bb:3f:e4:3e:b3:9c:13:16: 70:72:25:05:22:51:ce:76:50:f9:66:e9:ca:d0:b2: 4c:ca:2d:a4:0f:90:ce:dc:46:97:5b:1d:56:15:a5: d5:17:9f:93:d8:4d:66:c0:8d:02:70:8b:0b:6e:94: 4e:23:c1:42:03:93:93:cf:d2:d9:70:e3:8c:ed:94: f2:da:6c:8e:02:95:17:2a:00:1c:ba:75:1a:b6:cf: ba:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AB:9F:73:24:89:81:F5:D3:38:0A:36:DB:DD:48:8C:12:AE:3C:0B X509v3 Authority Key Identifier: keyid:88:74:CE:77:5F:19:1B:6E:0B:34:A7:89:A3:59:EB:9F:B9:3B:73:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8874CE775F191B6E0B34A789A359EB9FB93B737E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf0ba1e7-d142-47cd-8d8f-2a372b922223/0/8874CE775F191B6E0B34A789A359EB9FB93B737E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:19:70:b3:62:c2:6e:aa:aa:d6:bf:bf:1c:53:e8:de:2f:24: c3:4a:2d:03:e4:1f:31:eb:98:ff:65:fc:33:bd:02:a7:45:b2: cf:bf:91:81:5d:29:59:e2:45:b3:8f:02:04:02:8b:6d:57:c4: 0e:a1:54:6a:e0:80:99:54:fd:74:c8:4e:4f:76:0e:3d:d6:1a: 48:ed:8b:a3:87:bb:34:8d:ec:7d:73:a8:26:d2:ff:38:b2:19: 82:19:14:00:f2:95:50:4a:94:13:09:8a:ca:aa:05:11:66:98: c5:30:5d:40:21:e6:93:a9:e9:8e:c2:93:de:cb:f5:07:42:2d: 11:cd:05:88:ef:b3:22:2f:a1:80:16:c4:75:3e:0a:11:5f:d0: c6:1e:39:33:b3:a6:03:39:aa:2a:71:d0:c9:c0:a4:4d:ce:87: e9:25:26:2b:5c:74:e7:36:52:a9:0a:fe:b3:25:fb:76:ef:be: 54:36:4d:4e:df:a6:6e:02:6b:6f:84:40:94:8c:4d:9d:76:60: 5b:2a:c9:cb:ab:6e:29:a5:e8:21:0d:94:d9:68:05:ff:69:7a: 0e:c0:db:18:cb:ea:14:06:7d:c6:87:5f:a2:4c:bf:33:7c:2e: 5b:88:b2:01:e7:c6:40:de:35:57:4d:cc:50:7b:9e:e0:50:88: c8:8c:d6:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnBphhWWXPLTwq1Xrl/06BaRabkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZC OTNCNzM3RTAeFw0yNTEyMjIxNjE1NTBaFw0yNTEyMjYwMDQzNTBaMDMxMTAvBgNV BAMTKEE2QUI5RjczMjQ4OTgxRjVEMzM4MEEzNkRCREQ0ODhDMTJBRTNDMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH2U5gEorLHpDPyLQqtuqBXMcT PSgiqYHJRDPjGvuqUO73I7nIrSe8BfxegH/s5m317jUhVTWJcbC8FxFe7l7ja7ig EouBQzefUYWUMn1cVymBK3jipg6pVagl9bsuiTXVtMUMxHKe4DyRApM2r4ECmBOL IxQZzQYHFQTajxXB1D05v8I4AiAqTnbm4FfuUUP3bmyHTozQEltPrVGaOv1ZtE6H 1EfbeKWTCMG7P+Q+s5wTFnByJQUiUc52UPlm6crQskzKLaQPkM7cRpdbHVYVpdUX n5PYTWbAjQJwiwtulE4jwUIDk5PP0tlw44ztlPLabI4ClRcqABy6dRq2z7ozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpqufcySJgfXTOAo2291IjBKuPAswHwYDVR0j BBgwFoAUiHTOd18ZG24LNKeJo1nrn7k7c34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZjBiYTFlNy1kMTQyLTQ3Y2QtOGQ4Zi0yYTM3MmI5MjIyMjMvMC84ODc0Q0U3NzVG MTkxQjZFMEIzNEE3ODlBMzU5RUI5RkI5M0I3MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVCOUZCOTNC NzM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2YwYmExZTctZDE0Mi00N2NkLThk OGYtMmEzNzJiOTIyMjIzLzAvODg3NENFNzc1RjE5MUI2RTBCMzRBNzg5QTM1OUVC OUZCOTNCNzM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALkZcLNiwm6qqta/vxxT6N4vJMNKLQPkHzHr mP9l/DO9AqdFss+/kYFdKVniRbOPAgQCi21XxA6hVGrggJlU/XTITk92Dj3WGkjt i6OHuzSN7H1zqCbS/ziyGYIZFADylVBKlBMJisqqBRFmmMUwXUAh5pOp6Y7Ck97L 9QdCLRHNBYjvsyIvoYAWxHU+ChFf0MYeOTOzpgM5qipx0MnApE3Oh+klJitcdOc2 UqkK/rMl+3bvvlQ2TU7fpm4Ca2+EQJSMTZ12YFsqycurbiml6CENlNloBf9peg7A 2xjL6hQGfcaHX6JMvzN8LluIsgHnxkDeNVdNzFB7nuBQiMiM1tE= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:38 2025 by rpki-client