This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: Ew9mCoCLW+grRoHXyq2Ul0bdqE4WaAnx/CQrch5+Ht4= Subject key identifier: 8A:60:39:B3:99:39:CA:19:C4:9D:EC:E7:F5:C5:50:A0:82:87:F3:E6 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 0F377C6233ABB88EC426CEBF179A9B349CD9FC91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 047E Signing time: Thu 18 Dec 2025 23:51:55 +0000 Manifest this update: Thu 18 Dec 2025 23:46:55 +0000 Manifest next update: Mon 22 Dec 2025 05:30:55 +0000 Files and hashes: 1: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 3: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) 4: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: 1S+NwoGXwqaYgc1jiEH2hebYd9/dosXjhJXncwKdXbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 05:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:37:7c:62:33:ab:b8:8e:c4:26:ce:bf:17:9a:9b:34:9c:d9:fc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Dec 18 23:46:55 2025 GMT Not After : Dec 22 05:30:55 2025 GMT Subject: CN=8A6039B39939CA19C49DECE7F5C550A08287F3E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:b1:f4:fe:94:f6:17:17:08:63:af:c4:a3: a9:ff:4e:cc:1b:0a:37:39:8d:a0:2a:33:65:37:d0: ae:b4:31:05:64:f3:21:e5:de:fa:eb:f0:35:f1:f5: 94:d9:16:69:c0:7c:e8:ea:68:ce:72:dd:91:07:7c: 9e:fb:4c:57:17:93:f9:85:0b:e4:82:cf:3a:3c:f7: 97:f3:f9:fc:3e:57:92:3f:2d:e1:63:42:02:ad:ea: 85:f7:ba:ad:74:ab:27:91:52:bd:1f:62:89:44:11: 93:8e:ca:78:de:f7:a0:a8:c9:92:3f:91:a1:90:54: ff:f2:2d:b9:1b:4a:2c:89:47:a5:c8:97:10:e6:79: ee:c9:dd:88:ad:e4:72:17:50:97:51:20:12:5c:c5: 0b:cf:74:59:b3:04:20:d8:87:2b:9d:71:a3:54:67: f5:55:3a:80:b4:a5:fd:d4:d0:55:2c:b1:4e:9c:59: fa:2a:aa:ad:fe:dc:3b:51:93:5f:a1:cd:7a:1c:3e: 80:99:32:43:62:22:1b:87:7c:bf:4e:cf:37:2e:62: 46:0e:f5:3f:f3:3f:52:47:7b:e3:97:c7:e0:95:b6: 2c:b7:fa:b4:a2:d4:d9:e8:5d:84:fc:8d:33:43:aa: 28:82:06:3b:bc:a3:67:16:1a:05:3a:12:e3:9b:b2: 48:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:60:39:B3:99:39:CA:19:C4:9D:EC:E7:F5:C5:50:A0:82:87:F3:E6 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:5e:57:25:32:4d:3b:81:52:79:14:b5:0f:55:85:7e:93:3e: 60:b6:b0:85:0f:9a:6f:d2:11:de:e8:ff:c4:8a:8c:01:58:2d: c0:f7:2d:dc:c4:bc:e6:d6:b9:98:a5:d4:8f:34:44:18:d8:68: b2:32:37:4a:b3:1d:5c:ca:d8:dc:cb:3d:6e:32:57:dc:20:5e: 0b:f7:ad:88:d3:32:58:c4:e0:cc:27:c1:35:7c:05:11:19:24: 27:f7:d9:a4:33:2c:3f:2e:10:3b:61:88:4a:43:52:92:80:1d: 36:6b:f0:86:8b:ce:71:11:ed:a9:be:c1:a9:0d:6c:1f:ff:2c: 2b:f0:0f:01:35:d0:14:56:ae:7c:b9:b4:21:95:b0:c9:91:18: 63:8e:71:14:92:d3:8a:a6:28:51:7f:9a:dd:fe:d2:34:a9:8a: 75:74:3d:a8:fa:5f:7b:c1:91:6d:9c:b3:54:66:a8:4d:f0:63: b8:65:7b:c1:53:c3:3c:be:30:9f:6a:79:c0:64:cb:e7:d0:71: 9e:5b:60:4d:49:b5:bd:72:05:2c:81:26:4a:1f:ab:62:29:78: 80:5d:42:ba:c8:00:e9:1a:f1:4c:08:35:f8:f3:5e:f0:dd:f0: 05:02:35:62:84:43:d4:0b:b0:82:37:66:b9:4d:84:c7:30:d5: f8:9f:b1:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzd8YjOruI7EJs6/F5qbNJzZ/JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTEyMTgyMzQ2NTVaFw0yNTEyMjIwNTMwNTVaMDMxMTAvBgNV BAMTKDhBNjAzOUIzOTkzOUNBMTlDNDlERUNFN0Y1QzU1MEEwODI4N0YzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtYLH0/pT2FxcIY6/Eo6n/Tswb Cjc5jaAqM2U30K60MQVk8yHl3vrr8DXx9ZTZFmnAfOjqaM5y3ZEHfJ77TFcXk/mF C+SCzzo895fz+fw+V5I/LeFjQgKt6oX3uq10qyeRUr0fYolEEZOOynje96CoyZI/ kaGQVP/yLbkbSiyJR6XIlxDmee7J3Yit5HIXUJdRIBJcxQvPdFmzBCDYhyudcaNU Z/VVOoC0pf3U0FUssU6cWfoqqq3+3DtRk1+hzXocPoCZMkNiIhuHfL9OzzcuYkYO 9T/zP1JHe+OXx+CVtiy3+rSi1NnoXYT8jTNDqiiCBju8o2cWGgU6EuObskghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUimA5s5k5yhnEnezn9cVQoIKH8+YwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADVeVyUyTTuBUnkUtQ9VhX6TPmC2sIUPmm/S Ed7o/8SKjAFYLcD3LdzEvObWuZil1I80RBjYaLIyN0qzHVzK2NzLPW4yV9wgXgv3 rYjTMljE4MwnwTV8BREZJCf32aQzLD8uEDthiEpDUpKAHTZr8IaLznER7am+wakN bB//LCvwDwE10BRWrny5tCGVsMmRGGOOcRSS04qmKFF/mt3+0jSpinV0Paj6X3vB kW2cs1RmqE3wY7hle8FTwzy+MJ9qecBky+fQcZ5bYE1Jtb1yBSyBJkofq2IpeIBd QrrIAOka8UwINfjzXvDd8AUCNWKEQ9QLsII3ZrlNhMcw1fifsXQ= -----END CERTIFICATE-----Generated at Sun Dec 21 06:01:53 2025 by rpki-client