This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: GQklWPPeeypCK3XVqNMblTrIgLS1e7+PVN3cOg2T7lQ= Subject key identifier: 1B:D8:48:BD:98:BD:DF:69:47:3B:59:9E:57:72:BD:8C:DF:34:14:48 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 35317496D7FD8F13ACEC2D3C736C081A59C292BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 020E Signing time: Tue 23 Dec 2025 09:52:06 +0000 Manifest this update: Tue 23 Dec 2025 09:47:06 +0000 Manifest next update: Fri 26 Dec 2025 13:27:06 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: TWfIXIVXp0lanaqdmCjliuWn+ETz7xwRfOIaJAb7cvA=) 2: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: 3FggD+VWc6y2BbrtoZ+nq8lRFDG5/1urOL7Y9v84lMI=) 3: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: GkGrk3uoqwZ411t/pDhy3mlwE7XrelZ7UpYea4pdtg4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 13:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:31:74:96:d7:fd:8f:13:ac:ec:2d:3c:73:6c:08:1a:59:c2:92:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Dec 23 09:47:06 2025 GMT Not After : Dec 26 13:27:06 2025 GMT Subject: CN=1BD848BD98BDDF69473B599E5772BD8CDF341448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d8:92:25:4b:23:57:fb:7e:8a:88:34:42:ef: 35:68:26:69:20:f1:b7:8d:c7:6f:01:3f:4c:a5:1a: b2:f4:2f:cf:f6:d3:69:b5:06:a1:a6:6a:db:a6:34: 98:9d:00:52:bd:67:ea:7e:72:af:3a:04:4e:d7:e7: f1:ba:53:f7:66:49:dc:97:73:9c:ec:cf:05:08:fb: 86:b3:03:a1:25:d9:b6:79:f6:c0:56:f7:4a:4e:f5: 44:6b:55:4c:9c:a5:33:3f:e6:da:42:e7:5b:fa:d6: 76:35:45:55:24:5d:91:cc:3e:0c:88:30:cc:a8:17: d7:7e:d7:00:99:77:93:47:f4:6d:5e:c7:92:89:5d: 4e:9d:3a:54:4d:2f:b4:69:1e:4c:ba:f5:68:25:85: 6d:c7:bf:bd:e6:57:05:7e:16:38:e8:15:d8:22:91: c4:cf:94:0b:b9:2f:36:71:7c:a8:d8:bc:75:f7:56: 7b:7c:62:ab:55:a8:6b:cd:30:21:2b:00:ae:da:79: 1e:07:1c:87:87:53:fc:d0:1d:e8:79:62:b6:d3:49: 7a:f4:11:59:9f:33:1c:e8:83:d5:dc:2d:1c:62:f3: fc:06:66:60:95:4e:c9:6b:77:aa:ec:c4:3c:4c:cd: 28:88:7e:45:05:3d:55:4e:77:72:87:12:31:e4:a4: e4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D8:48:BD:98:BD:DF:69:47:3B:59:9E:57:72:BD:8C:DF:34:14:48 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3f:74:26:5f:24:aa:ec:19:d4:8a:6d:09:bf:bd:7d:4e:2d: b6:21:b1:39:0c:53:39:17:d1:b9:00:a2:5b:93:fd:57:0a:17: 29:65:ff:64:eb:34:5a:67:2b:8e:4d:bb:7b:62:0c:c0:da:f1: bf:7a:6b:4a:b0:23:78:05:55:7c:df:dd:a4:4a:89:7c:ae:10: 8a:85:f1:17:0e:d8:5a:ff:c7:69:8f:e9:ce:f8:85:c6:b1:70: 87:8d:65:85:89:87:9c:b6:45:bc:79:ff:ec:9e:af:c8:24:bc: ed:23:59:7c:28:b2:3c:84:42:f0:1e:14:97:d9:2e:51:04:82: 57:77:eb:61:85:de:05:5d:ea:fe:1a:e3:51:f8:66:4f:b8:6b: 2d:b4:96:2f:9a:3a:d2:01:da:58:b8:cf:f6:89:96:b6:cf:86: 40:88:c6:95:f2:d3:8c:f7:8c:69:94:69:0c:b9:fe:a1:1b:27: 8a:7b:68:ad:ef:45:d2:a6:02:55:2f:c6:8a:e5:9f:ce:d4:87: 4a:cf:43:17:27:6a:59:ea:b5:23:91:bd:aa:94:82:c3:70:54: e9:9d:e3:4b:f5:3d:af:a9:6a:aa:40:b2:e4:d4:fe:e7:08:73: 48:a6:19:1f:b4:14:d0:1f:66:86:01:a2:48:e1:c9:09:43:4e: fd:e1:77:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNTF0ltf9jxOs7C08c2wIGlnCkrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTEyMjMwOTQ3MDZaFw0yNTEyMjYxMzI3MDZaMDMxMTAvBgNV BAMTKDFCRDg0OEJEOThCRERGNjk0NzNCNTk5RTU3NzJCRDhDREYzNDE0NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb2JIlSyNX+36KiDRC7zVoJmkg 8beNx28BP0ylGrL0L8/202m1BqGmatumNJidAFK9Z+p+cq86BE7X5/G6U/dmSdyX c5zszwUI+4azA6El2bZ59sBW90pO9URrVUycpTM/5tpC51v61nY1RVUkXZHMPgyI MMyoF9d+1wCZd5NH9G1ex5KJXU6dOlRNL7RpHky69WglhW3Hv73mVwV+FjjoFdgi kcTPlAu5LzZxfKjYvHX3Vnt8YqtVqGvNMCErAK7aeR4HHIeHU/zQHeh5YrbTSXr0 EVmfMxzog9XcLRxi8/wGZmCVTslrd6rsxDxMzSiIfkUFPVVOd3KHEjHkpORnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG9hIvZi932lHO1meV3K9jN80FEgwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJk/dCZfJKrsGdSKbQm/vX1OLbYhsTkMUzkX 0bkAoluT/VcKFyll/2TrNFpnK45Nu3tiDMDa8b96a0qwI3gFVXzf3aRKiXyuEIqF 8RcO2Fr/x2mP6c74hcaxcIeNZYWJh5y2Rbx5/+yer8gkvO0jWXwosjyEQvAeFJfZ LlEEgld362GF3gVd6v4a41H4Zk+4ay20li+aOtIB2li4z/aJlrbPhkCIxpXy04z3 jGmUaQy5/qEbJ4p7aK3vRdKmAlUvxorln87Uh0rPQxcnalnqtSORvaqUgsNwVOmd 40v1Pa+paqpAsuTU/ucIc0imGR+0FNAfZoYBokjhyQlDTv3hd1w= -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:12 2025 by rpki-client