This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft (raw, json) Hash identifier: xqnt1LuWWl9UvBZulDh6ro2dYmIMZUehNfPEWs+JasM= Subject key identifier: 96:48:38:6F:64:61:43:DB:52:57:A3:58:4C:FF:E5:EB:AC:E2:AE:40 Authority key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Certificate issuer: /CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Certificate serial: 541910BBBCFB4962FE5CB9A025E8B77DEF9F7E58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft Manifest number: 0228 Signing time: Sat 06 Dec 2025 18:50:38 +0000 Manifest this update: Sat 06 Dec 2025 18:45:38 +0000 Manifest next update: Wed 10 Dec 2025 01:28:38 +0000 Files and hashes: 1: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl (hash: nxXiusuIbsBI/he99APC9aZOTZ3CSzR5wpoU2V4pzrk=) 2: 3130332e3138382e3131392e302f32342d3234203d3e20313439373435.roa (hash: VHhhP8m98Q6XFX6o9Io0DEj5+ACOMVpb0NESi8BC7x8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:19:10:bb:bc:fb:49:62:fe:5c:b9:a0:25:e8:b7:7d:ef:9f:7e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Validity Not Before: Dec 6 18:45:38 2025 GMT Not After : Dec 10 01:28:38 2025 GMT Subject: CN=9648386F646143DB5257A3584CFFE5EBACE2AE40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:58:42:e3:11:78:12:52:ed:fa:3a:1b:aa: 2c:88:1b:d6:07:77:ee:6a:d3:b7:1c:a2:1d:20:d7: 92:13:07:f5:26:8b:ef:d5:cd:f3:f3:39:5b:08:7f: c8:31:a7:62:c7:94:bf:c6:4b:56:fc:7f:c8:5a:a7: b0:bc:71:9d:f0:7c:7d:5a:1a:96:55:37:b0:46:4b: 01:32:7f:d0:80:9a:af:90:b0:da:75:35:41:e8:c7: 6e:91:38:a6:c6:4e:9e:ca:4e:4c:7c:d8:46:71:c6: cb:c9:d0:c3:01:6a:db:aa:d4:c6:ee:b9:da:4b:18: 18:9e:e4:f2:fb:cc:d1:f1:8a:b3:20:59:04:6d:10: 7a:07:73:9c:eb:1c:a4:44:a1:3a:95:6f:d3:d6:58: 8b:4c:9c:6e:84:55:b3:d5:47:74:73:fa:c9:2b:51: 86:fb:0b:f2:17:7b:d1:d7:6d:9f:e8:22:00:40:de: b5:77:78:b7:1e:94:ed:77:c7:c4:37:20:4a:9c:a9: 8a:c2:61:78:4f:8c:4e:bc:12:22:8e:8f:79:40:d5: 58:0e:0f:86:bb:97:0c:2c:ed:bd:54:c4:90:fa:9b: ae:fb:00:e5:22:b2:65:2d:0b:27:96:53:0f:f9:4e: fb:2e:5d:3e:5b:2b:14:6c:f7:b5:4e:84:a4:ee:8d: cb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:48:38:6F:64:61:43:DB:52:57:A3:58:4C:FF:E5:EB:AC:E2:AE:40 X509v3 Authority Key Identifier: keyid:8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a4:60:a1:b3:41:4a:15:6c:13:a9:d6:50:1c:0e:6b:a6:e8: 8e:a6:96:49:3e:8f:af:e4:fb:14:34:d6:c2:b3:5e:2e:a7:27: 7e:8b:cb:c7:a8:8a:73:94:87:3e:f0:30:ce:6f:51:a8:e4:3c: 75:64:ca:a8:ed:b6:a9:60:5a:2b:98:f5:6d:e8:2f:d4:5f:b9: 42:20:a9:dc:ce:e6:fc:66:60:ce:b8:0c:c6:e3:c9:07:f8:cf: f0:02:cf:3c:bc:f4:08:95:92:cb:54:b9:99:ea:71:6b:4c:49: 73:1a:6b:b2:ed:9e:fe:f4:00:8a:d5:fc:12:e7:3b:d8:6a:af: d8:ca:e5:a2:ed:81:d5:0e:c0:8a:5b:cc:ef:ba:5c:84:82:df: 4c:da:84:1a:c6:18:97:45:69:8f:37:6e:5c:a2:55:bc:8f:0e: 07:b5:6f:70:d2:4d:89:67:84:a6:b9:88:ad:c4:69:17:6b:62: 4f:7b:d6:ac:db:33:88:0e:e5:d4:4e:bc:81:8f:38:f8:ae:7d: 63:8f:d4:8d:3d:ea:2a:22:b0:8f:2e:3e:2c:37:69:e3:ac:ee: 87:02:fc:48:38:12:c1:2e:49:bc:91:59:39:8a:f7:df:90:68: 8a:47:8e:78:e6:d3:45:4a:16:80:1f:bb:09:ae:d8:af:08:1e: e8:dc:a3:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVBkQu7z7SWL+XLmgJei3fe+fflgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJB MzU0MENEOTAeFw0yNTEyMDYxODQ1MzhaFw0yNTEyMTAwMTI4MzhaMDMxMTAvBgNV BAMTKDk2NDgzODZGNjQ2MTQzREI1MjU3QTM1ODRDRkZFNUVCQUNFMkFFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOVhC4xF4ElLt+jobqiyIG9YH d+5q07ccoh0g15ITB/Umi+/VzfPzOVsIf8gxp2LHlL/GS1b8f8hap7C8cZ3wfH1a GpZVN7BGSwEyf9CAmq+QsNp1NUHox26ROKbGTp7KTkx82EZxxsvJ0MMBatuq1Mbu udpLGBie5PL7zNHxirMgWQRtEHoHc5zrHKREoTqVb9PWWItMnG6EVbPVR3Rz+skr UYb7C/IXe9HXbZ/oIgBA3rV3eLcelO13x8Q3IEqcqYrCYXhPjE68EiKOj3lA1VgO D4a7lwws7b1UxJD6m677AOUismUtCyeWUw/5TvsuXT5bKxRs97VOhKTujcvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkg4b2RhQ9tSV6NYTP/l66zirkAwHwYDVR0j BBgwFoAUj5FkcUobO5Bs+KizcfNC66NUDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMC84RjkxNjQ3MTRB MUIzQjkwNkNGOEE4QjM3MUYzNDJFQkEzNTQwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQyRUJBMzU0 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUtNDljOC00OGI4LWJk Y2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZDRjhBOEIzNzFGMzQy RUJBMzU0MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmkYKGzQUoVbBOp1lAcDmum6I6mlkk+j6/k +xQ01sKzXi6nJ36Ly8eoinOUhz7wMM5vUajkPHVkyqjttqlgWiuY9W3oL9RfuUIg qdzO5vxmYM64DMbjyQf4z/ACzzy89AiVkstUuZnqcWtMSXMaa7Ltnv70AIrV/BLn O9hqr9jK5aLtgdUOwIpbzO+6XISC30zahBrGGJdFaY83blyiVbyPDge1b3DSTYln hKa5iK3EaRdrYk971qzbM4gO5dROvIGPOPiufWOP1I096ioisI8uPiw3aeOs7ocC /Eg4EsEuSbyRWTmK99+QaIpHjnjm00VKFoAfuwmu2K8IHujco0c= -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:20 2025 by rpki-client