This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: Lnsz2n2r91ppC9SpTdyINDZE5ReXsHGJAXCkwecXZEM= Subject key identifier: 73:7D:1C:88:DF:28:76:21:0D:44:6D:8B:4B:49:1E:75:AE:65:1B:89 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 37CB4991F602F70E1E967163EB23548FC733487F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 022D Signing time: Wed 17 Dec 2025 07:40:59 +0000 Manifest this update: Wed 17 Dec 2025 07:35:59 +0000 Manifest next update: Sat 20 Dec 2025 07:54:59 +0000 Files and hashes: 1: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) 2: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: pXPxbVKu/T5QPPDfOzjomegEKVDnq2/8jCiZUN5gIIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 07:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cb:49:91:f6:02:f7:0e:1e:96:71:63:eb:23:54:8f:c7:33:48:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Dec 17 07:35:59 2025 GMT Not After : Dec 20 07:54:59 2025 GMT Subject: CN=737D1C88DF2876210D446D8B4B491E75AE651B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fb:14:b6:3a:b5:05:58:64:38:fd:94:d1:de: da:dd:08:01:9d:c1:09:67:33:3a:fd:ed:a1:75:22: 62:5b:0c:49:54:3b:8f:e5:38:a1:85:4b:93:ac:88: 40:c7:3e:2d:88:eb:cc:39:61:55:f5:7a:0e:be:a1: 46:ae:62:8b:bc:f9:0a:2e:d5:a6:85:c8:ef:5c:75: 69:a3:11:34:60:ec:bb:5d:a9:45:9f:1e:79:97:cb: f9:7f:50:83:d1:ed:24:1c:0c:89:1b:65:09:3e:ec: 51:ab:67:09:42:fd:d2:3a:74:1b:e5:2b:ba:f6:2a: 79:95:9d:67:0c:55:29:6d:27:6d:41:f4:63:4c:82: 95:6f:7a:ba:9c:2c:8b:12:9d:08:98:54:f7:f3:d0: 6a:69:95:35:aa:88:c4:54:8b:09:a7:a6:2a:5a:0c: 70:a1:78:b6:6e:6a:b0:31:25:d2:79:ed:be:ce:0c: fb:4f:e5:ba:e6:9f:80:a0:44:8d:c3:61:04:f5:f0: 78:90:96:97:30:c0:a4:be:6c:02:73:db:4e:b9:5c: dd:34:74:51:a6:a8:cc:91:2a:42:a0:a8:39:3f:57: 3c:6d:1e:74:9d:b8:13:96:34:26:51:8c:30:4d:c8: ba:9b:5d:60:75:ce:f4:e2:3a:bb:db:f3:0b:25:d8: b0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:1C:88:DF:28:76:21:0D:44:6D:8B:4B:49:1E:75:AE:65:1B:89 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:78:c6:0e:23:cf:66:80:c2:0c:36:9f:5b:01:c5:b0:cd:25: 4e:8e:6c:c4:3f:55:fc:e4:09:c1:e6:df:eb:f2:5b:6b:28:3e: ae:7c:32:c5:32:32:83:16:30:63:ed:d7:c9:ac:cf:1d:75:14: f7:61:dc:56:32:17:f0:e3:ad:c4:65:20:af:16:e3:cb:dc:f3: ce:7e:9f:74:96:8a:43:4f:51:42:a4:c7:25:42:a9:28:00:b3: 83:d6:d9:98:ae:f3:52:cd:d4:e6:b5:f6:93:0d:0c:4b:d9:54: c6:3a:82:f4:34:2a:29:4a:1c:3a:8b:b1:e9:60:ca:5d:f8:00: 81:1b:ce:d8:07:23:4a:52:ff:77:4d:96:56:a4:a6:64:7a:44: 40:84:2c:fa:ec:a6:b3:9f:25:d4:3a:ab:b6:57:9d:20:cd:6f: e6:f5:87:99:d7:bc:48:ad:f7:8f:f0:1b:b9:26:f1:71:ee:17: 45:31:64:63:10:cb:6c:63:00:01:8e:be:7a:76:c4:f8:92:a2: c5:0b:1d:de:d3:b5:cf:4a:b9:22:e7:44:16:1e:0d:e3:c9:f6: 67:97:09:cc:30:82:3a:fc:03:f3:b8:6f:89:39:83:ce:2f:f6: 0b:12:e5:1c:b2:1f:fe:2e:6c:56:33:dc:49:d9:31:15:e1:78: a8:2d:08:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN8tJkfYC9w4elnFj6yNUj8czSH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTEyMTcwNzM1NTlaFw0yNTEyMjAwNzU0NTlaMDMxMTAvBgNV BAMTKDczN0QxQzg4REYyODc2MjEwRDQ0NkQ4QjRCNDkxRTc1QUU2NTFCODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi+xS2OrUFWGQ4/ZTR3trdCAGd wQlnMzr97aF1ImJbDElUO4/lOKGFS5OsiEDHPi2I68w5YVX1eg6+oUauYou8+Qou 1aaFyO9cdWmjETRg7LtdqUWfHnmXy/l/UIPR7SQcDIkbZQk+7FGrZwlC/dI6dBvl K7r2KnmVnWcMVSltJ21B9GNMgpVverqcLIsSnQiYVPfz0GpplTWqiMRUiwmnpipa DHCheLZuarAxJdJ57b7ODPtP5brmn4CgRI3DYQT18HiQlpcwwKS+bAJz2065XN00 dFGmqMyRKkKgqDk/VzxtHnSduBOWNCZRjDBNyLqbXWB1zvTiOrvb8wsl2LDzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc30ciN8odiENRG2LS0keda5lG4kwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE14xg4jz2aAwgw2n1sBxbDNJU6ObMQ/Vfzk CcHm3+vyW2soPq58MsUyMoMWMGPt18mszx11FPdh3FYyF/DjrcRlIK8W48vc885+ n3SWikNPUUKkxyVCqSgAs4PW2Ziu81LN1Oa19pMNDEvZVMY6gvQ0KilKHDqLselg yl34AIEbztgHI0pS/3dNllakpmR6RECELPrsprOfJdQ6q7ZXnSDNb+b1h5nXvEit 94/wG7km8XHuF0UxZGMQy2xjAAGOvnp2xPiSosULHd7Ttc9KuSLnRBYeDePJ9meX Ccwwgjr8A/O4b4k5g84v9gsS5RyyH/4ubFYz3EnZMRXheKgtCCc= -----END CERTIFICATE-----Generated at Fri Dec 19 13:48:22 2025 by rpki-client