This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft File: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft (raw, json) Hash identifier: WfsDbjYj6LUymG/7B03VNPnMLmotxTQHRlOGKew010s= Subject key identifier: 4B:A1:61:3B:71:95:AA:E2:62:5E:49:9F:8B:42:95:3E:B2:7E:4D:FB Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 Certificate issuer: /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Certificate serial: 4E696BAF73EB965FD4A4B2C31AD5AF4A15845D85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft Manifest number: 0361 Signing time: Mon 22 Dec 2025 04:51:57 +0000 Manifest this update: Mon 22 Dec 2025 04:46:57 +0000 Manifest next update: Thu 25 Dec 2025 04:53:57 +0000 Files and hashes: 1: 3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (hash: 0IdcwPtxZArM5JrmLtgkLYtthS0u5GSXZS6q7IiPcxg=) 2: 8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl (hash: eu57J8mIVBYd0rPPQGhJ1lRkPdTGJy1weIrK4TgGwDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:69:6b:af:73:eb:96:5f:d4:a4:b2:c3:1a:d5:af:4a:15:84:5d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86 Validity Not Before: Dec 22 04:46:57 2025 GMT Not After : Dec 25 04:53:57 2025 GMT Subject: CN=4BA1613B7195AAE2625E499F8B42953EB27E4DFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7a:3a:57:2c:42:bc:05:1d:96:62:80:3e:ee: 20:da:e1:b7:45:5b:32:2f:d1:65:0e:16:32:11:6e: fa:45:3b:12:d8:ae:7b:27:70:34:ba:c8:2f:7e:b8: ab:54:58:d6:1f:4b:56:6c:ba:07:08:bc:35:b3:c9: c7:2f:ea:8f:11:5e:4d:0d:12:ce:ea:69:55:b4:53: d8:3c:a6:03:17:54:e5:b0:02:0a:bb:94:71:04:16: d7:cf:3b:55:83:a4:b4:a2:a5:5f:3f:be:82:35:4c: bb:d6:c8:9b:f6:98:2f:3d:90:6e:80:51:23:5b:17: a1:5a:c1:ef:9a:7a:dd:10:89:e5:08:fc:70:47:9d: 9d:2f:90:10:8a:07:41:4f:36:c4:14:d4:bf:7f:fe: eb:fc:28:c8:49:1b:e1:25:4d:e9:b7:04:d7:31:f4: cd:59:6c:ef:ab:ef:ea:de:83:59:4f:28:7d:41:e9: 6d:b2:b7:a3:79:d6:26:1d:35:f7:d3:06:c3:0f:c3: 2d:a2:1f:10:45:06:28:90:95:db:57:13:89:1d:45: 9e:a4:6f:40:b4:e4:ba:02:91:75:53:58:04:4c:db: 9c:f8:0f:72:e9:24:cf:46:52:40:97:87:d0:a8:e3: 38:84:58:8b:77:93:12:c6:9f:88:72:fd:00:e1:43: fb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A1:61:3B:71:95:AA:E2:62:5E:49:9F:8B:42:95:3E:B2:7E:4D:FB X509v3 Authority Key Identifier: keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:24:bd:4f:89:4c:34:ae:d2:3c:0b:bc:06:34:55:fa:31:0a: 80:55:fa:4c:b2:96:97:03:3c:6e:27:71:92:e7:7d:0c:22:e5: 79:96:c5:4d:d3:9b:43:df:8b:b2:09:53:2a:b7:c1:1c:94:25: 73:89:b1:d8:28:b1:0c:32:2f:df:be:7c:b1:3f:ca:67:63:49: fa:0f:11:03:9e:f1:37:2e:ee:3d:4f:9a:40:44:30:62:65:21: 59:f8:3d:56:de:6b:c9:d7:43:e7:71:dd:c4:36:34:c6:29:06: b4:23:55:63:13:2a:f6:f7:0e:a9:74:dd:67:4e:48:ce:0f:4c: 07:fd:30:d3:d0:8d:7f:e4:46:1c:18:b5:68:cf:55:7f:e2:be: 3d:fb:fc:70:04:a3:e1:e7:36:eb:d6:88:9e:aa:fd:ad:6b:ce: 16:29:40:ba:45:f7:b2:d6:aa:f1:01:29:ce:9a:ab:bc:19:d8: 9e:7e:59:cd:a9:ee:34:31:59:cd:b0:a3:3c:69:76:45:88:12: 04:7c:67:f3:89:09:0d:6a:9f:bc:a8:fe:2d:88:f2:f7:68:0f: c2:e6:53:0d:68:d1:24:b6:af:cd:df:11:52:92:70:ed:93:a0: 14:43:76:fd:04:01:92:f5:9e:6d:4f:12:29:f8:81:eb:81:03: 9e:71:aa:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmlrr3Prll/UpLLDGtWvShWEXYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUx NDBEMUI4NjAeFw0yNTEyMjIwNDQ2NTdaFw0yNTEyMjUwNDUzNTdaMDMxMTAvBgNV BAMTKDRCQTE2MTNCNzE5NUFBRTI2MjVFNDk5RjhCNDI5NTNFQjI3RTRERkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDejpXLEK8BR2WYoA+7iDa4bdF WzIv0WUOFjIRbvpFOxLYrnsncDS6yC9+uKtUWNYfS1ZsugcIvDWzyccv6o8RXk0N Es7qaVW0U9g8pgMXVOWwAgq7lHEEFtfPO1WDpLSipV8/voI1TLvWyJv2mC89kG6A USNbF6Fawe+aet0QieUI/HBHnZ0vkBCKB0FPNsQU1L9//uv8KMhJG+ElTem3BNcx 9M1ZbO+r7+reg1lPKH1B6W2yt6N51iYdNffTBsMPwy2iHxBFBiiQldtXE4kdRZ6k b0C05LoCkXVTWARM25z4D3LpJM9GUkCXh9Co4ziEWIt3kxLGn4hy/QDhQ/vxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS6FhO3GVquJiXkmfi0KVPrJ+TfswHwYDVR0j BBgwFoAUik/4NliLvcXlzFJru+tm1RQNG4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWU3YTI4YS02MmYwLTRkMTQtODcwMi00MDNhNTE5MGVhZTEvMC84QTRGRjgzNjU4 OEJCREM1RTVDQzUyNkJCQkVCNjZENTE0MEQxQjg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2RDUxNDBE MUI4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjllN2EyOGEtNjJmMC00ZDE0LTg3 MDItNDAzYTUxOTBlYWUxLzAvOEE0RkY4MzY1ODhCQkRDNUU1Q0M1MjZCQkJFQjY2 RDUxNDBEMUI4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4kvU+JTDSu0jwLvAY0VfoxCoBV+kyylpcD PG4ncZLnfQwi5XmWxU3Tm0Pfi7IJUyq3wRyUJXOJsdgosQwyL9++fLE/ymdjSfoP EQOe8Tcu7j1PmkBEMGJlIVn4PVbea8nXQ+dx3cQ2NMYpBrQjVWMTKvb3Dql03WdO SM4PTAf9MNPQjX/kRhwYtWjPVX/ivj37/HAEo+HnNuvWiJ6q/a1rzhYpQLpF97LW qvEBKc6aq7wZ2J5+Wc2p7jQxWc2wozxpdkWIEgR8Z/OJCQ1qn7yo/i2I8vdoD8Lm Uw1o0SS2r83fEVKScO2ToBRDdv0EAZL1nm1PEin4geuBA55xqjY= -----END CERTIFICATE-----Generated at Tue Dec 23 09:18:09 2025 by rpki-client