This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: 5a62G5sjboxC0ibfupJvQvosMh5cHlAmGJerXaPkzi0= Subject key identifier: E2:81:42:69:33:69:FA:E5:EE:37:CA:4E:5C:1F:C8:BC:79:50:25:A9 Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 0FDA333B74BFE1FEA713360C51564B30B0BCCA2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: 0121 Signing time: Sun 21 Dec 2025 22:11:47 +0000 Manifest this update: Sun 21 Dec 2025 22:06:47 +0000 Manifest next update: Thu 25 Dec 2025 03:38:47 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: 84FO2PxOHIRrxXZaUs7Ou0fXYA2mVS2xzVMsJ2FBRGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:da:33:3b:74:bf:e1:fe:a7:13:36:0c:51:56:4b:30:b0:bc:ca:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Dec 21 22:06:47 2025 GMT Not After : Dec 25 03:38:47 2025 GMT Subject: CN=E28142693369FAE5EE37CA4E5C1FC8BC795025A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:34:d0:ca:fe:1c:83:97:78:3e:1a:17:70: 8c:6f:60:d7:7c:ef:2e:48:32:24:67:30:58:75:fa: 0b:8c:fe:71:c6:7d:19:e6:30:a0:de:e3:9c:67:d3: 2c:dc:28:7f:3a:55:38:74:73:0c:fd:3b:d3:bb:6c: 9f:a5:a8:40:2d:f1:2d:f4:a6:c4:29:70:22:61:06: e9:44:45:61:c0:5b:0f:53:ca:f4:a6:cb:67:b0:b8: 75:e9:16:67:c2:11:94:07:77:f4:e7:22:e9:74:7a: 67:e0:2f:57:10:b4:0b:4b:42:47:b2:ad:0c:eb:f9: 22:8f:88:4e:1f:96:39:b7:ba:3f:79:d3:b3:41:24: c9:92:81:da:ba:ef:74:06:a5:f2:50:4c:af:6d:af: 54:dd:17:ea:50:1c:5d:a1:4d:80:68:02:57:04:8a: da:6e:01:ed:ad:87:f8:c1:02:79:b9:d6:1e:3b:c6: 60:79:7a:78:9e:f3:8d:b5:58:3e:1a:20:dc:57:d5: 59:f8:e9:38:b6:30:51:57:80:22:bb:d2:48:72:af: 0b:e9:d2:ed:e5:94:0d:1b:5f:af:42:2f:df:92:93: 00:e5:ca:2b:92:9b:76:2a:eb:fe:1b:ae:37:19:08: 4d:2c:e7:2e:a8:ac:8c:56:36:e1:53:e1:bb:f0:56: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:42:69:33:69:FA:E5:EE:37:CA:4E:5C:1F:C8:BC:79:50:25:A9 X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c4:5e:69:af:30:28:b0:20:b0:cc:a6:d4:1f:a3:0a:d5:59: 96:7e:6a:cf:2d:c4:39:b2:b2:f8:e4:ef:20:46:ae:7d:a0:45: b2:4e:25:f6:42:f4:60:b4:81:1f:ea:9e:ae:d8:e4:a2:af:09: 63:cf:73:dd:53:99:d0:7a:d7:07:85:a6:80:16:08:10:a5:9d: 13:4b:87:36:e8:23:de:70:9d:02:17:d0:12:8e:14:a9:45:d9: f0:b1:fe:7e:2f:b7:a3:53:8f:31:e2:4f:ea:cf:86:c4:82:d7: a5:70:24:de:08:a3:e0:73:3a:40:d9:b1:21:a5:71:26:6c:8b: 5f:c8:a0:b5:8f:85:84:12:76:7c:94:b4:7a:65:47:8a:6b:7b: f9:83:85:3c:72:cb:92:70:1c:01:0c:eb:3e:28:c9:f6:9b:55: b5:1a:8d:e9:44:09:11:44:4f:a4:04:d7:f1:12:26:79:8c:a2: c8:aa:8c:d6:96:38:6e:ad:64:b0:66:81:de:e1:36:4b:06:c2: 82:e9:7b:c0:e6:05:9d:21:8b:f9:75:95:54:12:ad:a2:5f:6f: 37:76:c3:80:af:36:09:0e:63:ec:cd:dc:5e:5c:74:dd:cc:06: 92:08:6e:0b:c3:be:f4:06:77:1c:67:c6:62:26:af:ad:82:5c: 78:f9:35:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9ozO3S/4f6nEzYMUVZLMLC8yiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTEyMjEyMjA2NDdaFw0yNTEyMjUwMzM4NDdaMDMxMTAvBgNV BAMTKEUyODE0MjY5MzM2OUZBRTVFRTM3Q0E0RTVDMUZDOEJDNzk1MDI1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtTTQyv4cg5d4PhoXcIxvYNd8 7y5IMiRnMFh1+guM/nHGfRnmMKDe45xn0yzcKH86VTh0cwz9O9O7bJ+lqEAt8S30 psQpcCJhBulERWHAWw9TyvSmy2ewuHXpFmfCEZQHd/TnIul0emfgL1cQtAtLQkey rQzr+SKPiE4fljm3uj9507NBJMmSgdq673QGpfJQTK9tr1TdF+pQHF2hTYBoAlcE itpuAe2th/jBAnm51h47xmB5enie8421WD4aINxX1Vn46Ti2MFFXgCK70khyrwvp 0u3llA0bX69CL9+SkwDlyiuSm3Yq6/4brjcZCE0s5y6orIxWNuFT4bvwVhcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oFCaTNp+uXuN8pOXB/IvHlQJakwHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/EXmmvMCiwILDMptQfowrVWZZ+as8txDmy svjk7yBGrn2gRbJOJfZC9GC0gR/qnq7Y5KKvCWPPc91TmdB61weFpoAWCBClnRNL hzboI95wnQIX0BKOFKlF2fCx/n4vt6NTjzHiT+rPhsSC16VwJN4Io+BzOkDZsSGl cSZsi1/IoLWPhYQSdnyUtHplR4pre/mDhTxyy5JwHAEM6z4oyfabVbUajelECRFE T6QE1/ESJnmMosiqjNaWOG6tZLBmgd7hNksGwoLpe8DmBZ0hi/l1lVQSraJfbzd2 w4CvNgkOY+zN3F5cdN3MBpIIbgvDvvQGdxxnxmImr62CXHj5NUk= -----END CERTIFICATE-----Generated at Mon Dec 22 08:08:19 2025 by rpki-client