This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: ZqMuZLJECnrWI8jMu6IU1p0ePMzeL//QGtYwUhKJRcc= Subject key identifier: BA:21:B9:6F:C0:06:F5:21:19:D5:71:AD:A2:38:3F:C8:FF:4E:1B:0C Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 5406792E019B2F6673F7352C8F1DDC352FDB3D82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04AC Signing time: Sat 06 Dec 2025 03:30:53 +0000 Manifest this update: Sat 06 Dec 2025 03:25:53 +0000 Manifest next update: Tue 09 Dec 2025 08:20:53 +0000 Files and hashes: 1: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 2: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 3: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: VjXA+WG3NdWcuzWafRy5ltWy2mrH0/PEdMkfHwl76Sk=) 4: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:06:79:2e:01:9b:2f:66:73:f7:35:2c:8f:1d:dc:35:2f:db:3d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Dec 6 03:25:53 2025 GMT Not After : Dec 9 08:20:53 2025 GMT Subject: CN=BA21B96FC006F52119D571ADA2383FC8FF4E1B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:29:ae:04:99:44:ed:1a:b8:16:14:5d:5a: 1c:51:ff:f6:b8:3b:3b:36:cf:b8:d0:2d:11:7c:fc: 6c:21:25:59:19:e2:72:c9:f5:29:ae:fa:ce:3a:72: af:9a:53:00:94:a5:4a:5c:98:3f:52:a4:2a:7c:95: f5:a1:a3:23:c7:2f:27:bd:7d:8b:67:a4:de:29:aa: 6c:03:44:19:1f:6e:a9:aa:80:6b:6a:87:c4:1b:3e: ec:cd:e2:b8:12:61:52:a2:50:b8:09:05:1b:6a:50: b1:06:7c:f2:d0:c5:20:91:8e:b2:2a:ef:f9:6e:b9: 39:51:94:7f:9e:1e:f4:17:b7:a8:06:48:39:28:6b: 25:c2:60:7a:25:08:7e:a4:bc:67:ee:d2:8a:80:60: 0f:aa:49:04:34:33:ef:63:37:c9:2d:8b:89:f1:fc: ca:67:5f:f6:e9:14:17:d6:c9:9e:00:12:7b:5e:b7: a6:3e:79:7c:d5:15:b8:28:f5:fa:01:0b:6a:33:36: cc:ac:6d:06:da:5b:cb:19:15:8d:1f:28:05:97:37: f9:89:1d:ae:4b:41:f4:c0:3f:69:18:b1:ca:ad:e1: 87:47:a1:7f:df:a0:ba:0b:39:55:2d:11:41:18:d2: f2:67:3d:9b:91:24:93:c8:77:29:14:a3:76:25:d1: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:B9:6F:C0:06:F5:21:19:D5:71:AD:A2:38:3F:C8:FF:4E:1B:0C X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d6:22:cf:59:30:96:e8:5b:d4:33:87:94:97:c2:e7:13:9d: 27:c9:cc:87:45:34:03:88:e8:6c:97:08:69:ab:73:7b:e5:4f: 7f:70:39:09:35:9d:5e:be:27:17:85:60:2e:18:e4:3c:91:9d: b0:6e:ef:93:6b:ec:41:c6:3e:15:99:5a:05:9b:d1:48:66:58: 92:6d:2c:c4:8c:2d:b1:67:17:93:54:4f:58:65:0b:a0:7a:b0: 18:4e:22:86:89:7c:7d:f3:29:bc:d8:7a:f9:36:b5:7a:ec:f5: 2b:f1:f2:0d:14:72:1b:84:3c:8b:87:f1:d6:1e:59:72:a8:9d: 39:85:eb:12:61:41:9f:25:aa:38:ed:fd:48:bd:03:df:1a:51: 35:d4:15:b9:e0:92:0d:c5:a5:d3:d4:d4:d2:1a:b2:d5:46:df: a7:6a:36:d0:00:75:cc:82:f5:07:17:b0:14:e4:d1:a9:20:e3: ad:c2:68:19:0a:ff:89:a9:df:50:c3:2b:45:c7:ea:6e:15:53: d8:e0:0e:84:5d:9e:fc:78:1f:21:f7:3b:ba:59:16:a2:97:a6: 30:94:90:57:63:30:ba:f0:0b:64:11:4d:71:02:16:59:2a:7d: b4:06:e6:43:c2:f4:0b:37:83:df:3d:92:2a:ff:4c:f6:d3:40: 7c:3b:93:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAZ5LgGbL2Zz9zUsjx3cNS/bPYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTEyMDYwMzI1NTNaFw0yNTEyMDkwODIwNTNaMDMxMTAvBgNV BAMTKEJBMjFCOTZGQzAwNkY1MjExOUQ1NzFBREEyMzgzRkM4RkY0RTFCMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraSmuBJlE7Rq4FhRdWhxR//a4 Ozs2z7jQLRF8/GwhJVkZ4nLJ9Smu+s46cq+aUwCUpUpcmD9SpCp8lfWhoyPHLye9 fYtnpN4pqmwDRBkfbqmqgGtqh8QbPuzN4rgSYVKiULgJBRtqULEGfPLQxSCRjrIq 7/luuTlRlH+eHvQXt6gGSDkoayXCYHolCH6kvGfu0oqAYA+qSQQ0M+9jN8kti4nx /MpnX/bpFBfWyZ4AEntet6Y+eXzVFbgo9foBC2ozNsysbQbaW8sZFY0fKAWXN/mJ Ha5LQfTAP2kYscqt4YdHoX/foLoLOVUtEUEY0vJnPZuRJJPIdykUo3Yl0aKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuiG5b8AG9SEZ1XGtojg/yP9OGwwwHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvWIs9ZMJboW9Qzh5SXwucTnSfJzIdFNAOI 6GyXCGmrc3vlT39wOQk1nV6+JxeFYC4Y5DyRnbBu75Nr7EHGPhWZWgWb0UhmWJJt LMSMLbFnF5NUT1hlC6B6sBhOIoaJfH3zKbzYevk2tXrs9Svx8g0UchuEPIuH8dYe WXKonTmF6xJhQZ8lqjjt/Ui9A98aUTXUFbngkg3FpdPU1NIastVG36dqNtAAdcyC 9QcXsBTk0akg463CaBkK/4mp31DDK0XH6m4VU9jgDoRdnvx4HyH3O7pZFqKXpjCU kFdjMLrwC2QRTXECFlkqfbQG5kPC9As3g989kir/TPbTQHw7kyU= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:00 2025 by rpki-client