This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: 7ISLN8jR9wtsbRJ4L0wx3BUihZlQG+UE7s7EKbYUq8k= Subject key identifier: 7B:60:A5:AD:B5:F1:1B:1F:C2:5C:0B:0E:8C:92:A4:5F:75:1A:6C:9E Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 7014D9DE13F04C20DFCB73AB12027E519A890768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 0315 Signing time: Tue 23 Dec 2025 14:41:05 +0000 Manifest this update: Tue 23 Dec 2025 14:36:05 +0000 Manifest next update: Fri 26 Dec 2025 21:54:05 +0000 Files and hashes: 1: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: fmFr8KDz2IQb4QQCV8kji9jCj0Q9Lf6+EZ+XhyZwcnk=) 2: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=) 3: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 21:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:14:d9:de:13:f0:4c:20:df:cb:73:ab:12:02:7e:51:9a:89:07:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Dec 23 14:36:05 2025 GMT Not After : Dec 26 21:54:05 2025 GMT Subject: CN=7B60A5ADB5F11B1FC25C0B0E8C92A45F751A6C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:74:15:c5:f8:5b:2e:74:c4:45:05:1b:67:d5: a9:32:b9:d3:58:9b:48:14:f3:d6:76:6f:53:a6:7a: 03:7a:4f:8b:15:59:87:f3:50:2b:62:8c:63:16:dc: d2:80:25:c5:42:5d:30:e1:77:21:19:bc:94:8d:75: 60:67:6e:34:75:28:22:3c:96:0f:36:c7:41:3c:52: 1b:90:d9:f8:6b:24:1d:60:ce:ec:a3:fc:c7:fa:d1: 1d:78:2c:bb:6f:9b:fc:97:63:b7:c9:7a:7d:a3:16: 27:00:b9:15:48:49:b7:a1:20:32:db:aa:2d:c1:54: d8:d1:6c:5a:6c:44:bb:b1:94:2d:84:d7:ac:e1:76: 3c:77:80:bd:fb:c8:04:f4:06:ba:93:dc:da:6b:a1: 10:fb:f7:3c:f4:f0:24:d6:20:22:76:66:11:67:66: e1:04:13:21:41:7c:1f:e7:e9:17:e2:a5:78:45:7f: 2e:dd:0c:eb:ff:4c:7c:7a:48:a0:48:32:15:87:b7: e0:36:1e:2a:2a:53:78:9f:34:27:dd:8b:2d:ad:86: a5:62:10:93:15:47:ed:f7:ca:07:01:20:c3:1a:cb: 47:ab:36:73:57:67:2d:b5:b4:6f:8c:1e:d8:2c:7b: c6:c3:e5:80:8f:73:b1:df:9d:33:e0:29:60:72:22: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:60:A5:AD:B5:F1:1B:1F:C2:5C:0B:0E:8C:92:A4:5F:75:1A:6C:9E X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ab:fb:2a:c9:2f:84:1b:2f:85:c6:d4:90:2f:ae:21:0f:a4: 15:56:49:92:c9:98:1f:bb:ff:fb:98:0d:d0:c3:1c:13:52:5c: 25:04:70:fa:c3:69:f4:ba:27:0c:4c:f4:d1:44:6a:46:d7:11: 49:3e:ff:d2:27:27:9d:7f:2b:b0:03:99:69:c9:c6:5b:56:18: c4:d9:4a:b1:ae:1a:16:f0:0a:8d:5c:ac:55:31:ae:1d:db:66: 75:ec:28:dc:5e:6e:ad:1e:e3:83:b5:1d:3b:27:b6:eb:19:49: ab:fe:4e:2d:87:bc:dc:9f:28:64:6f:a2:a0:08:1a:8a:e2:03: fd:7d:f7:96:75:13:49:17:3c:9e:62:8d:0c:df:63:4c:0c:14: 13:c1:b6:ce:b8:4f:dd:63:69:de:f0:ce:94:b8:82:b7:68:6e: 0a:ec:c6:c9:09:00:d4:a5:01:b7:27:c1:94:7c:52:b8:12:f5: 5a:0a:08:62:b4:db:78:1f:ab:40:b2:42:a4:3c:d9:a4:7b:31: 93:df:05:3e:05:a3:f5:96:f6:76:f9:96:87:31:2d:00:a2:dd: 06:de:d0:e6:86:68:fc:07:2b:a0:92:9e:f7:22:93:93:c3:07: 4a:45:eb:52:74:10:74:fd:c1:d5:70:72:45:1c:a0:e9:4f:48: d4:1f:58:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBTZ3hPwTCDfy3OrEgJ+UZqJB2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTEyMjMxNDM2MDVaFw0yNTEyMjYyMTU0MDVaMDMxMTAvBgNV BAMTKDdCNjBBNUFEQjVGMTFCMUZDMjVDMEIwRThDOTJBNDVGNzUxQTZDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwdBXF+FsudMRFBRtn1akyudNY m0gU89Z2b1OmegN6T4sVWYfzUCtijGMW3NKAJcVCXTDhdyEZvJSNdWBnbjR1KCI8 lg82x0E8UhuQ2fhrJB1gzuyj/Mf60R14LLtvm/yXY7fJen2jFicAuRVISbehIDLb qi3BVNjRbFpsRLuxlC2E16zhdjx3gL37yAT0BrqT3NproRD79zz08CTWICJ2ZhFn ZuEEEyFBfB/n6RfipXhFfy7dDOv/THx6SKBIMhWHt+A2HioqU3ifNCfdiy2thqVi EJMVR+33ygcBIMMay0erNnNXZy21tG+MHtgse8bD5YCPc7HfnTPgKWByIgE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe2ClrbXxGx/CXAsOjJKkX3UabJ4wHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOr+yrJL4QbL4XG1JAvriEPpBVWSZLJmB+7 //uYDdDDHBNSXCUEcPrDafS6JwxM9NFEakbXEUk+/9InJ51/K7ADmWnJxltWGMTZ SrGuGhbwCo1crFUxrh3bZnXsKNxebq0e44O1HTsntusZSav+Ti2HvNyfKGRvoqAI GoriA/1995Z1E0kXPJ5ijQzfY0wMFBPBts64T91jad7wzpS4grdobgrsxskJANSl AbcnwZR8UrgS9VoKCGK023gfq0CyQqQ82aR7MZPfBT4Fo/WW9nb5locxLQCi3Qbe 0OaGaPwHK6CSnvcik5PDB0pF61J0EHT9wdVwckUcoOlPSNQfWKI= -----END CERTIFICATE-----Generated at Wed Dec 24 16:22:33 2025 by rpki-client