This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft File: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft (raw, json) Hash identifier: arJE08ZYGQCphmSxA3EPxq0XnTXswTwCmbYLRTY9m1Y= Subject key identifier: 64:ED:FF:59:34:63:A6:0E:4A:35:CA:06:54:9A:B4:FF:76:5E:75:37 Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 Certificate issuer: /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Certificate serial: 3F913FF10A31A9401BDC10E11857EABBE001C4E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft Manifest number: 035A Signing time: Fri 05 Dec 2025 06:20:03 +0000 Manifest this update: Fri 05 Dec 2025 06:15:03 +0000 Manifest next update: Mon 08 Dec 2025 17:19:03 +0000 Files and hashes: 1: 3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (hash: Ho5Y5TOHX49gl1fZYVO+j2M3OjYa1AKAk+KnhAmd/6M=) 2: 8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl (hash: nLU12SpAAW8pzxfOKH60VL44GdRTBj8tnq53Z3bR+VA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:19:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:91:3f:f1:0a:31:a9:40:1b:dc:10:e1:18:57:ea:bb:e0:01:c4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0 Validity Not Before: Dec 5 06:15:03 2025 GMT Not After : Dec 8 17:19:03 2025 GMT Subject: CN=64EDFF593463A60E4A35CA06549AB4FF765E7537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:43:e7:96:0b:12:9c:ab:b4:03:06:a4:44:38: 00:99:91:c4:ae:69:e9:85:57:22:76:cb:0f:70:f9: a9:9c:14:1f:01:45:85:02:6f:56:52:74:ff:ae:93: 43:88:69:b9:1a:30:5a:cf:67:12:10:6c:09:d9:45: 2f:6e:7b:cb:2e:74:39:2c:72:58:3d:6d:0c:55:89: 17:49:8d:46:fd:37:64:45:29:cf:c8:b4:56:64:04: 21:3d:e6:b0:ee:a5:7f:15:5d:d0:89:1d:c0:44:b6: 9e:ce:7c:ac:02:b3:5e:f4:72:65:23:8d:f0:7d:a4: 07:a8:3e:01:75:9a:4e:19:7e:f1:70:34:cc:96:48: d3:6e:97:86:56:e0:99:a1:6e:50:b1:3c:51:90:02: 09:a5:2f:29:9b:2a:84:03:65:89:fc:b7:3e:cd:d2: b0:a4:61:ae:bc:c6:83:b8:bc:28:2d:45:d1:90:4d: 2a:4d:8d:b8:82:3f:1a:e4:91:29:78:b0:22:96:eb: 7d:6a:76:0e:a5:31:6d:2f:12:ca:9c:52:b5:78:0d: c5:ec:e8:9e:a6:7f:a6:ea:7d:21:b3:64:ab:2c:bd: 12:70:63:e4:cd:c1:51:64:a9:b2:65:05:ec:65:a8: 35:dd:a3:91:a8:92:dd:5f:70:60:55:29:97:ea:e7: fb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:ED:FF:59:34:63:A6:0E:4A:35:CA:06:54:9A:B4:FF:76:5E:75:37 X509v3 Authority Key Identifier: keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f5:46:0a:29:94:87:32:bd:21:26:cb:7d:3a:36:98:85:c2: 0d:30:87:a8:36:46:c8:c0:dc:8f:42:0e:5f:a2:9e:c9:a1:66: 5d:e4:27:56:9d:89:12:c1:7a:64:be:e7:98:7c:91:d0:69:d8: 78:4c:ab:81:6d:ce:fd:3a:a2:cc:65:02:da:eb:73:04:6d:3f: 4e:2b:87:a4:6d:e9:86:bf:27:16:9c:ab:60:9b:50:63:21:12: 9d:08:4b:1f:5b:aa:15:1a:e9:34:c2:53:86:11:c6:fc:32:c0: 56:c9:f7:1c:43:d3:0b:cb:87:68:75:69:b8:10:f6:0b:37:6b: 36:71:fb:b9:02:1f:66:59:81:40:99:c8:b4:58:f9:f1:f9:7f: df:be:66:41:43:9c:92:f5:62:4c:73:16:5d:1b:65:e3:4c:75: 13:1d:fc:f0:c2:c2:52:5d:22:90:dd:27:5f:79:25:83:11:04: 53:9f:e8:c4:a6:54:5b:b4:d8:92:6e:7e:d2:fd:68:30:84:eb: 09:e1:bf:52:b3:7b:62:bd:d7:06:dc:f5:18:36:35:a2:92:5f: 04:72:6f:c5:8b:eb:f2:2a:1c:e0:6c:4c:b7:83:75:a6:41:b2: b2:33:cb:f0:0d:21:9f:38:0c:f2:18:e3:d8:4d:7a:0a:1a:7e: 5c:71:5a:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5E/8QoxqUAb3BDhGFfqu+ABxOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC RkVFNTVBMDAeFw0yNTEyMDUwNjE1MDNaFw0yNTEyMDgxNzE5MDNaMDMxMTAvBgNV BAMTKDY0RURGRjU5MzQ2M0E2MEU0QTM1Q0EwNjU0OUFCNEZGNzY1RTc1MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyQ+eWCxKcq7QDBqREOACZkcSu aemFVyJ2yw9w+amcFB8BRYUCb1ZSdP+uk0OIabkaMFrPZxIQbAnZRS9ue8sudDks clg9bQxViRdJjUb9N2RFKc/ItFZkBCE95rDupX8VXdCJHcBEtp7OfKwCs170cmUj jfB9pAeoPgF1mk4ZfvFwNMyWSNNul4ZW4JmhblCxPFGQAgmlLymbKoQDZYn8tz7N 0rCkYa68xoO4vCgtRdGQTSpNjbiCPxrkkSl4sCKW631qdg6lMW0vEsqcUrV4DcXs 6J6mf6bqfSGzZKssvRJwY+TNwVFkqbJlBexlqDXdo5Gokt1fcGBVKZfq5/u5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZO3/WTRjpg5KNcoGVJq0/3ZedTcwHwYDVR0j BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF NTVBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI5MTNmYTEtMzNhZS00ZTMzLWJi ZTItODFiZDlmMDNjODRiLzAvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBE NzBCRkVFNTVBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGf1RgoplIcyvSEmy306NpiFwg0wh6g2RsjA 3I9CDl+insmhZl3kJ1adiRLBemS+55h8kdBp2HhMq4Ftzv06osxlAtrrcwRtP04r h6Rt6Ya/Jxacq2CbUGMhEp0ISx9bqhUa6TTCU4YRxvwywFbJ9xxD0wvLh2h1abgQ 9gs3azZx+7kCH2ZZgUCZyLRY+fH5f9++ZkFDnJL1YkxzFl0bZeNMdRMd/PDCwlJd IpDdJ195JYMRBFOf6MSmVFu02JJuftL9aDCE6wnhv1Kze2K91wbc9Rg2NaKSXwRy b8WL6/IqHOBsTLeDdaZBsrIzy/ANIZ84DPIY49hNegoaflxxWmw= -----END CERTIFICATE-----Generated at Sun Dec 7 05:50:13 2025 by rpki-client