This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: nnXgfPHwN3qWSPHsw1vJnGmEhUgItVG6Gjy6wrAaPAI= Subject key identifier: 24:75:90:46:8A:30:9B:C2:86:0B:D4:0B:05:80:75:D8:77:66:9C:81 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 097DA0603E6123E19EC77AF54AD664B820AC446A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 7F Signing time: Wed 24 Dec 2025 13:11:47 +0000 Manifest this update: Wed 24 Dec 2025 13:06:47 +0000 Manifest next update: Sun 28 Dec 2025 00:54:47 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: j0ul4RYq5n8bfPeMaxT0imvPUivI715TvM/OM2W/+sQ=) 2: 3230322e39302e3139342e302f32342d3234203d3e203435333233.roa (hash: E3gl245QWUOSrRvQIfs41ST6vQLNBujKh2hLnsJBzx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7d:a0:60:3e:61:23:e1:9e:c7:7a:f5:4a:d6:64:b8:20:ac:44:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Dec 24 13:06:47 2025 GMT Not After : Dec 28 00:54:47 2025 GMT Subject: CN=247590468A309BC2860BD40B058075D877669C81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:98:53:81:c7:c9:e3:24:4c:c4:40:c0:44:38: f7:fd:39:76:4c:e1:92:20:d5:56:b2:ff:33:e7:e6: 82:60:05:39:62:52:e6:17:89:b4:96:ed:62:13:fa: fd:c4:03:d5:dc:14:0c:ec:68:c1:c7:32:05:6b:d0: 99:24:4f:c1:06:f1:f6:f9:ca:84:4b:17:c6:8d:f7: 0d:3f:9b:0c:ec:e5:a9:b9:c5:59:9c:58:37:b2:91: 8b:e0:bd:d6:bc:0f:38:d7:09:65:8b:c7:f9:9c:9a: 96:c5:fd:d5:59:ef:6f:34:94:13:1c:85:5e:51:9d: f2:90:4a:9e:d7:fe:12:57:d9:78:e3:29:af:07:6e: 99:08:35:32:52:94:a0:b6:49:00:1c:e5:b6:0d:14: 3b:4c:ac:15:d9:c4:26:a7:08:ea:d2:09:36:d8:c0: 10:9c:e9:c7:79:62:57:99:d1:88:e5:75:1c:b1:51: 3a:a0:c9:e1:d5:9d:0f:de:5c:47:8e:56:c5:ac:70: 10:bb:09:f0:c5:e1:c5:c1:39:57:1b:9b:48:93:0a: 2d:11:ec:55:68:0b:0f:97:24:ff:30:a0:62:94:e9: e1:70:3e:9b:5a:fd:bb:97:a0:28:8d:3d:fb:86:6b: 45:ef:44:55:ea:37:eb:a6:0b:07:b6:2b:57:a7:23: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:75:90:46:8A:30:9B:C2:86:0B:D4:0B:05:80:75:D8:77:66:9C:81 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:47:83:43:94:a3:98:2b:82:dc:5e:7f:84:b5:a5:19:eb:7f: 01:88:30:8f:fa:ae:22:53:99:d5:ba:d1:41:97:7f:2f:10:c5: d9:d1:c9:d2:e2:07:da:97:00:4c:a6:e3:c3:e6:90:0f:1e:13: c9:b7:32:32:25:9c:7d:ad:be:7a:a9:c7:5b:80:c4:46:be:9b: f1:5f:a0:cb:78:37:c9:cf:0f:c6:c7:f4:0e:19:a8:dc:7c:e3: 21:ea:9c:69:0d:2e:97:8e:98:32:3f:be:39:19:ab:aa:2f:90: df:c1:f3:6c:af:45:c0:f8:0a:c5:77:c0:63:3a:40:5a:38:61: 0b:51:0c:86:34:54:07:6d:3d:eb:53:4e:ff:c0:db:45:6e:9b: fb:8d:49:4b:55:2e:31:d6:48:a5:2c:ba:5c:6e:ee:04:3f:62: fd:c2:ed:3e:62:4c:e8:b1:6c:ea:b1:c8:36:18:8b:27:b5:24: 31:c4:9d:ef:c8:7b:de:17:46:d0:f5:ac:be:87:82:c9:58:85: 99:09:ac:39:2a:12:b0:11:ec:6e:30:3b:94:8c:56:79:e5:3d: ac:96:ee:46:a2:3b:18:38:87:51:22:0e:4c:50:7d:ee:0b:47: 7c:a8:37:a7:39:27:ba:6c:15:87:66:4b:28:09:f6:ac:c7:3a: 9f:9d:46:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCX2gYD5hI+Gex3r1StZkuCCsRGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTEyMjQxMzA2NDdaFw0yNTEyMjgwMDU0NDdaMDMxMTAvBgNV BAMTKDI0NzU5MDQ2OEEzMDlCQzI4NjBCRDQwQjA1ODA3NUQ4Nzc2NjlDODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNmFOBx8njJEzEQMBEOPf9OXZM 4ZIg1Vay/zPn5oJgBTliUuYXibSW7WIT+v3EA9XcFAzsaMHHMgVr0JkkT8EG8fb5 yoRLF8aN9w0/mwzs5am5xVmcWDeykYvgvda8DzjXCWWLx/mcmpbF/dVZ7280lBMc hV5RnfKQSp7X/hJX2XjjKa8HbpkINTJSlKC2SQAc5bYNFDtMrBXZxCanCOrSCTbY wBCc6cd5YleZ0YjldRyxUTqgyeHVnQ/eXEeOVsWscBC7CfDF4cXBOVcbm0iTCi0R 7FVoCw+XJP8woGKU6eFwPpta/buXoCiNPfuGa0XvRFXqN+umCwe2K1enI1fxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJHWQRoowm8KGC9QLBYB12HdmnIEwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1Hg0OUo5grgtxef4S1pRnrfwGIMI/6riJT mdW60UGXfy8QxdnRydLiB9qXAEym48PmkA8eE8m3MjIlnH2tvnqpx1uAxEa+m/Ff oMt4N8nPD8bH9A4ZqNx84yHqnGkNLpeOmDI/vjkZq6ovkN/B82yvRcD4CsV3wGM6 QFo4YQtRDIY0VAdtPetTTv/A20Vum/uNSUtVLjHWSKUsulxu7gQ/Yv3C7T5iTOix bOqxyDYYiye1JDHEne/Ie94XRtD1rL6HgslYhZkJrDkqErAR7G4wO5SMVnnlPayW 7kaiOxg4h1EiDkxQfe4LR3yoN6c5J7psFYdmSygJ9qzHOp+dRvU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:03 2025 by rpki-client