This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft File: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft (raw, json) Hash identifier: HUUr/b8G4GHvyA0SkIea/tOY6rOqgphNGueFlSdbxWA= Subject key identifier: 15:69:C7:93:BD:18:9F:72:B0:A1:DF:3F:42:E2:3B:AB:90:A5:4D:D9 Authority key identifier: 8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 Certificate issuer: /CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Certificate serial: 27304D65A34ACECD587CC27DB76B44E3BB52424B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft Manifest number: 03AF Signing time: Mon 15 Dec 2025 05:20:44 +0000 Manifest this update: Mon 15 Dec 2025 05:15:44 +0000 Manifest next update: Thu 18 Dec 2025 14:02:44 +0000 Files and hashes: 1: 3130332e3136322e3134362e302f32332d3234203d3e203137393935.roa (hash: glmRxvHF4g4HTvz1muaudxYOmNWHdjodUPYRc5xhUvY=) 2: 8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl (hash: nIuc/dPKZqEfqhz5icaQudBEUo6O++4D9nD2VxGeBgg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 14:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:30:4d:65:a3:4a:ce:cd:58:7c:c2:7d:b7:6b:44:e3:bb:52:42:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0 Validity Not Before: Dec 15 05:15:44 2025 GMT Not After : Dec 18 14:02:44 2025 GMT Subject: CN=1569C793BD189F72B0A1DF3F42E23BAB90A54DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:be:65:b4:df:d9:48:35:9e:6b:c7:ac:87: d4:68:da:cf:11:c2:0d:02:fd:7f:32:96:3b:b3:cd: 76:72:be:a1:1f:12:a5:7c:fe:95:86:48:2f:53:8d: fe:03:9e:c5:0f:61:ca:76:b6:6b:b4:52:db:ea:09: 25:e5:bd:00:7f:65:a4:cf:37:6a:b4:cd:4f:56:ad: 8b:56:c0:11:ad:ba:3d:00:78:d1:27:a4:87:e8:cf: cb:b5:6a:bf:7d:63:77:14:2d:2c:3b:0c:fd:00:2b: ce:1c:e5:50:f8:5e:df:93:30:c5:73:71:c1:d2:86: 5b:87:82:7c:a5:9b:18:44:3f:37:d5:3b:01:4f:10: 35:f5:80:58:b3:0e:3a:5b:c1:35:f5:c7:b7:70:8a: f4:3f:2b:f3:be:b7:34:44:8d:0b:3a:34:c5:81:9e: 09:a2:a9:55:bd:91:e6:8b:63:21:79:82:d4:ca:37: c9:ea:9e:10:14:76:af:74:a3:62:5b:41:1b:ed:ac: e5:5d:b1:9c:86:45:25:a0:a8:86:58:70:40:89:5f: 35:f1:c6:a9:a2:fe:64:5a:5e:f3:64:b9:96:68:87: 67:93:22:fc:0c:80:fc:e9:dd:67:33:ae:be:67:cb: aa:d3:05:c7:ec:f9:48:30:a3:cc:ef:c4:c0:5b:d8: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:69:C7:93:BD:18:9F:72:B0:A1:DF:3F:42:E2:3B:AB:90:A5:4D:D9 X509v3 Authority Key Identifier: keyid:8C:DF:71:6F:25:D6:4D:EB:3E:10:36:E6:A3:6D:B7:24:CD:E1:E5:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0520b54-3ba7-4631-af0b-55984b0ba7f2/0/8CDF716F25D64DEB3E1036E6A36DB724CDE1E5D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:62:f5:20:b8:18:8e:ae:83:54:32:42:aa:3d:9c:c2:20:d5: f5:98:42:05:f8:1a:66:3b:a3:9e:ad:c1:a7:06:a9:84:74:02: 8f:a7:76:e8:2a:f6:79:71:64:dc:6b:61:82:9f:86:7e:42:53: e1:f1:85:44:5e:31:93:c0:4f:ad:cd:fa:2a:5a:05:7c:ff:d3: dc:d6:a7:01:cf:2b:27:a1:f2:01:a6:08:35:64:6e:69:e8:33: be:bd:e6:76:e1:cc:30:61:99:60:41:98:ee:98:cb:26:80:ec: 2e:9f:e0:db:bb:4b:91:e8:05:4c:bf:12:a1:8b:7a:42:35:81: fa:7c:bc:4d:c5:1b:9d:a5:7e:26:b0:42:68:63:2b:4f:9b:92: 7c:97:d6:90:ac:da:33:8f:a7:56:ef:57:75:fa:51:81:e2:c2: d3:36:c9:30:6f:e1:9f:7a:f5:63:b6:9c:92:ad:12:e4:ce:46: e1:19:a3:a4:7c:c7:cf:c8:a5:e5:c9:7e:38:02:89:0c:73:3a: c4:73:e3:5a:fd:73:37:cc:81:fe:0a:d1:fc:9f:5f:28:f6:37: f7:ba:72:0b:67:5d:23:47:24:25:9d:7d:98:55:ec:bf:91:7a: 7b:ef:b8:26:e4:d8:f9:c8:20:ae:78:6a:13:46:07:44:85:b5: 90:74:91:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzBNZaNKzs1YfMJ9t2tE47tSQkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRD REUxRTVEMDAeFw0yNTEyMTUwNTE1NDRaFw0yNTEyMTgxNDAyNDRaMDMxMTAvBgNV BAMTKDE1NjlDNzkzQkQxODlGNzJCMEExREYzRjQyRTIzQkFCOTBBNTRERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvb5ltN/ZSDWea8esh9Ro2s8R wg0C/X8yljuzzXZyvqEfEqV8/pWGSC9Tjf4DnsUPYcp2tmu0UtvqCSXlvQB/ZaTP N2q0zU9WrYtWwBGtuj0AeNEnpIfoz8u1ar99Y3cULSw7DP0AK84c5VD4Xt+TMMVz ccHShluHgnylmxhEPzfVOwFPEDX1gFizDjpbwTX1x7dwivQ/K/O+tzREjQs6NMWB ngmiqVW9keaLYyF5gtTKN8nqnhAUdq90o2JbQRvtrOVdsZyGRSWgqIZYcECJXzXx xqmi/mRaXvNkuZZoh2eTIvwMgPzp3Wczrr5ny6rTBcfs+Ugwo8zvxMBb2O51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFWnHk70Yn3Kwod8/QuI7q5ClTdkwHwYDVR0j BBgwFoAUjN9xbyXWTes+EDbmo223JM3h5dAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDUyMGI1NC0zYmE3LTQ2MzEtYWYwYi01NTk4NGIwYmE3ZjIvMC84Q0RGNzE2RjI1 RDY0REVCM0UxMDM2RTZBMzZEQjcyNENERTFFNUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3MjRDREUx RTVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjA1MjBiNTQtM2JhNy00NjMxLWFm MGItNTU5ODRiMGJhN2YyLzAvOENERjcxNkYyNUQ2NERFQjNFMTAzNkU2QTM2REI3 MjRDREUxRTVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVi9SC4GI6ug1QyQqo9nMIg1fWYQgX4GmY7 o56twacGqYR0Ao+ndugq9nlxZNxrYYKfhn5CU+HxhUReMZPAT63N+ipaBXz/09zW pwHPKyeh8gGmCDVkbmnoM7695nbhzDBhmWBBmO6YyyaA7C6f4Nu7S5HoBUy/EqGL ekI1gfp8vE3FG52lfiawQmhjK0+bknyX1pCs2jOPp1bvV3X6UYHiwtM2yTBv4Z96 9WO2nJKtEuTORuEZo6R8x8/IpeXJfjgCiQxzOsRz41r9czfMgf4K0fyfXyj2N/e6 cgtnXSNHJCWdfZhV7L+RenvvuCbk2PnIIK54ahNGB0SFtZB0kRA= -----END CERTIFICATE-----Generated at Tue Dec 16 22:31:28 2025 by rpki-client