This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: U7I9pX9iO/Vtn8kA3tFqyZm5/PNkdxomFma2GaNhkyc= Subject key identifier: D2:FE:AB:FC:65:4E:61:2F:9D:9A:37:FE:FB:29:3F:54:77:9F:CC:CC Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 4DF0D9852FFA3E69DA38710216BEB0A5AC716878 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 0232 Signing time: Wed 17 Dec 2025 14:12:22 +0000 Manifest this update: Wed 17 Dec 2025 14:07:22 +0000 Manifest next update: Sun 21 Dec 2025 00:13:22 +0000 Files and hashes: 1: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: 4oaGotgSmy3iavTKj+qXmyqUke/HXDKePjBjlXu9hZc=) 2: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 00:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:f0:d9:85:2f:fa:3e:69:da:38:71:02:16:be:b0:a5:ac:71:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Dec 17 14:07:22 2025 GMT Not After : Dec 21 00:13:22 2025 GMT Subject: CN=D2FEABFC654E612F9D9A37FEFB293F54779FCCCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fc:bc:e7:1c:26:27:c8:a6:6f:78:1b:a4:7a: 70:a2:59:46:00:fe:81:98:01:a7:e0:ea:8b:5a:0c: 42:5e:35:3d:26:0a:63:2d:8a:35:d5:83:07:3d:f3: dc:84:fe:87:43:97:7e:03:bf:2a:90:3d:be:f0:4c: 08:40:16:e5:41:11:8e:2a:64:3f:50:87:91:06:b0: 33:c5:b2:0d:a8:6e:bb:3f:9c:4d:d8:54:22:ff:ef: 97:a8:1f:de:31:4d:ba:a1:f4:7e:6f:5d:79:56:16: 59:26:40:19:d4:18:df:69:56:06:80:5d:0b:82:c8: 0c:f9:10:3b:57:89:11:03:a5:47:99:4f:7f:96:49: 50:77:dd:f3:b9:dc:a1:d2:f1:b5:6b:62:7f:ee:7f: eb:2f:4a:37:ab:4b:33:db:66:d4:3b:d9:95:60:16: eb:2e:ef:14:e7:40:6c:75:51:86:27:8e:8a:fa:46: b2:c0:3e:39:77:dd:b1:97:d5:c6:47:e9:6a:0d:e0: c2:27:9a:2e:97:b5:95:e0:fa:f9:a4:16:35:8d:ee: f7:34:08:80:30:f5:df:f2:83:07:f1:ab:06:3e:64: 48:8c:19:65:ea:7b:5a:91:40:66:40:bf:ba:df:59: 40:36:5a:9b:df:22:cd:31:8f:a8:9d:d6:90:5a:bf: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:FE:AB:FC:65:4E:61:2F:9D:9A:37:FE:FB:29:3F:54:77:9F:CC:CC X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:96:b0:22:5b:4c:db:e4:8e:db:52:5a:8c:57:c5:b5:4c:8b: 91:21:1f:10:8d:36:88:7d:4b:b0:a9:bb:1f:11:ad:ee:44:49: bb:51:10:47:cb:2a:39:37:73:db:d0:1f:96:af:37:3a:07:df: 91:07:bc:d1:2a:79:d5:b0:af:41:bb:f7:2c:a3:39:50:96:9f: 17:7c:fd:fd:05:67:2e:e8:fe:24:aa:e1:6b:ac:30:02:da:7e: 7a:e9:f5:c3:b3:74:cf:1c:cd:d9:40:28:ab:55:0a:27:30:3e: 71:67:18:af:78:16:3c:9b:80:1a:55:4a:33:17:74:ed:83:88: 26:69:79:95:2a:26:f1:5e:87:cb:32:be:f9:e6:d9:90:da:94: 4b:40:54:fd:d2:ed:cc:fb:9e:00:bb:42:d4:78:28:58:64:e8: 58:b1:cd:2c:94:7a:82:7d:6d:67:79:9c:fd:8e:4d:61:06:80: 1f:28:8f:6c:21:cf:bf:bd:28:98:60:22:4f:44:2a:26:3e:4d: 74:0c:38:be:1f:68:e0:9b:aa:9f:dc:35:af:0a:6b:cd:ef:0b: dd:09:4e:ba:26:77:17:53:e6:ba:a9:27:17:f4:31:c8:ec:8d: 7f:52:43:6b:36:bc:88:64:db:3b:e2:c8:4b:45:0e:ed:4e:fe: 6e:f7:fa:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTfDZhS/6PmnaOHECFr6wpaxxaHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTEyMTcxNDA3MjJaFw0yNTEyMjEwMDEzMjJaMDMxMTAvBgNV BAMTKEQyRkVBQkZDNjU0RTYxMkY5RDlBMzdGRUZCMjkzRjU0Nzc5RkNDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE/LznHCYnyKZveBukenCiWUYA /oGYAafg6otaDEJeNT0mCmMtijXVgwc989yE/odDl34DvyqQPb7wTAhAFuVBEY4q ZD9Qh5EGsDPFsg2obrs/nE3YVCL/75eoH94xTbqh9H5vXXlWFlkmQBnUGN9pVgaA XQuCyAz5EDtXiREDpUeZT3+WSVB33fO53KHS8bVrYn/uf+svSjerSzPbZtQ72ZVg Fusu7xTnQGx1UYYnjor6RrLAPjl33bGX1cZH6WoN4MInmi6XtZXg+vmkFjWN7vc0 CIAw9d/ygwfxqwY+ZEiMGWXqe1qRQGZAv7rfWUA2WpvfIs0xj6id1pBavys/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0v6r/GVOYS+dmjf++yk/VHefzMwwHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqWsCJbTNvkjttSWoxXxbVMi5EhHxCNNoh9 S7Cpux8Rre5ESbtREEfLKjk3c9vQH5avNzoH35EHvNEqedWwr0G79yyjOVCWnxd8 /f0FZy7o/iSq4WusMALafnrp9cOzdM8czdlAKKtVCicwPnFnGK94FjybgBpVSjMX dO2DiCZpeZUqJvFeh8syvvnm2ZDalEtAVP3S7cz7ngC7QtR4KFhk6FixzSyUeoJ9 bWd5nP2OTWEGgB8oj2whz7+9KJhgIk9EKiY+TXQMOL4faOCbqp/cNa8Ka83vC90J TromdxdT5rqpJxf0McjsjX9SQ2s2vIhk2zviyEtFDu1O/m73+r4= -----END CERTIFICATE-----Generated at Sat Dec 20 23:25:50 2025 by rpki-client