This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft File: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft (raw, json) Hash identifier: 2Z1HCkgcADm0sEXwnKrLRa/LVo2gs8mqzA6IyGxFv0k= Subject key identifier: DF:2F:31:62:DF:88:BB:A7:AE:F0:1D:28:89:2D:CA:DF:E3:6B:40:AB Authority key identifier: 8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 Certificate issuer: /CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Certificate serial: 7E71393BEF54B9DDD70940C7366BEE10044DB6E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft Manifest number: 04B1 Signing time: Wed 17 Dec 2025 05:30:53 +0000 Manifest this update: Wed 17 Dec 2025 05:25:53 +0000 Manifest next update: Sat 20 Dec 2025 14:21:53 +0000 Files and hashes: 1: 3130332e3135302e3134392e302f32342d3234203d3e203438343635.roa (hash: CuNnfQrbuM8+O8ZQH5Ej0XZg8NtbJlexDdCn1sFJRks=) 2: 3130332e3135302e3134382e302f32342d3234203d3e203438343635.roa (hash: sbwxpfNxTrYw0z44J1B/mwGbnIcVA+kjI7CcxPn5wJs=) 3: 3130332e3135302e3134382e302f32332d3233203d3e20313430333932.roa (hash: ZekBegmwkGhtEq1kwIjaVxEJBaW+y/p+5uyfM78H6mk=) 4: 8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl (hash: 08NkUjyFDGFUfo2Xa2DkWF167ClqTRxavEJ7XSmULKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:21:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:71:39:3b:ef:54:b9:dd:d7:09:40:c7:36:6b:ee:10:04:4d:b6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F58893B1CE1DB8555D7BECB63DE342D238B6779 Validity Not Before: Dec 17 05:25:53 2025 GMT Not After : Dec 20 14:21:53 2025 GMT Subject: CN=DF2F3162DF88BBA7AEF01D28892DCADFE36B40AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:13:de:2f:51:12:70:7f:27:22:72:1b:65:d8: 11:f5:72:90:2c:2b:54:83:ab:38:21:b2:8c:a4:8a: 12:f0:f6:dd:31:df:3f:17:56:22:65:f6:4a:db:ae: be:55:48:52:b5:04:a4:46:fc:3c:08:75:d6:6d:69: 0a:c8:17:8a:20:76:65:56:4c:e9:db:1b:19:3d:8e: f2:c3:3c:96:47:3f:be:de:32:83:26:3d:fd:2b:f8: 3f:43:74:5e:41:83:2b:ec:71:08:d7:5a:20:b0:a8: 17:fd:50:b3:13:73:48:c7:f2:a1:91:5b:93:f0:1b: 77:71:26:f7:a3:e3:65:f4:9c:4f:8b:30:87:cb:23: 75:ee:e7:64:2d:d8:a0:35:8b:03:3d:d2:7d:17:ca: e7:fd:0d:eb:1f:9f:fa:85:3a:ee:94:48:05:85:dc: a0:6e:99:eb:4d:67:bd:a6:c2:72:c9:0b:7c:c7:ef: 1a:ea:67:c5:63:d2:bd:bc:52:c2:aa:f5:b7:c5:46: bc:15:9a:01:36:35:97:96:4d:74:d3:b9:c4:e9:03: 74:70:3a:8e:79:8c:b5:f0:df:fc:cb:bb:3a:36:c0: 5d:35:7e:80:73:fb:14:78:95:00:0f:64:3d:4e:e8: 44:43:8f:c8:46:67:a4:72:8b:66:c2:d1:81:a9:7b: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:2F:31:62:DF:88:BB:A7:AE:F0:1D:28:89:2D:CA:DF:E3:6B:40:AB X509v3 Authority Key Identifier: keyid:8F:58:89:3B:1C:E1:DB:85:55:D7:BE:CB:63:DE:34:2D:23:8B:67:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F58893B1CE1DB8555D7BECB63DE342D238B6779.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bde936b-53cf-4b08-b5f7-2b90de21fe94/0/8F58893B1CE1DB8555D7BECB63DE342D238B6779.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ad:74:6d:42:17:bb:be:9b:4d:a7:d4:02:43:fc:7d:83:73: bd:fd:95:30:2e:c3:93:f7:99:0c:25:b7:69:53:19:7f:13:d4: dc:54:55:06:da:22:40:43:1b:1f:cd:70:cc:99:6a:37:3f:43: fa:3a:21:59:a2:92:14:9b:91:35:3e:7b:ce:0e:26:9e:c2:81: 0c:d6:f6:e8:af:f6:54:33:ae:d1:03:47:84:66:f7:21:bf:39: bc:0b:24:67:d8:57:90:51:72:c6:1b:62:b5:7e:b7:6d:b8:59: 31:f4:3b:35:3c:15:7f:cb:78:b5:6d:76:e5:83:c4:dd:48:9d: 80:47:eb:68:60:1f:a4:d7:d6:4c:62:a2:41:42:27:0c:13:97: c6:53:a2:d7:bb:1e:31:88:5e:0d:89:f5:c1:8a:2b:33:f7:96: a6:92:4e:74:5f:f1:4b:37:a3:c3:ed:ec:e8:90:26:1e:b0:78: 92:24:4b:a1:8f:34:41:85:74:a1:cc:a4:5f:e1:86:c7:38:33: 44:07:ce:f7:2e:a1:e0:b6:f3:d1:da:e6:87:a1:80:da:98:ce: aa:60:f9:86:87:5c:aa:d3:82:37:ff:9e:ad:14:44:4e:af:e1: 10:80:d5:65:b0:3c:a7:04:71:f2:a1:58:5f:af:83:e2:1d:e1: d2:1d:05:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnE5O+9Uud3XCUDHNmvuEARNtucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQy MzhCNjc3OTAeFw0yNTEyMTcwNTI1NTNaFw0yNTEyMjAxNDIxNTNaMDMxMTAvBgNV BAMTKERGMkYzMTYyREY4OEJCQTdBRUYwMUQyODg5MkRDQURGRTM2QjQwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFE94vURJwfycichtl2BH1cpAs K1SDqzghsoykihLw9t0x3z8XViJl9krbrr5VSFK1BKRG/DwIddZtaQrIF4ogdmVW TOnbGxk9jvLDPJZHP77eMoMmPf0r+D9DdF5BgyvscQjXWiCwqBf9ULMTc0jH8qGR W5PwG3dxJvej42X0nE+LMIfLI3Xu52Qt2KA1iwM90n0Xyuf9Desfn/qFOu6USAWF 3KBumetNZ72mwnLJC3zH7xrqZ8Vj0r28UsKq9bfFRrwVmgE2NZeWTXTTucTpA3Rw Oo55jLXw3/zLuzo2wF01foBz+xR4lQAPZD1O6ERDj8hGZ6Ryi2bC0YGpe+NNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3y8xYt+Iu6eu8B0oiS3K3+NrQKswHwYDVR0j BBgwFoAUj1iJOxzh24VV177LY940LSOLZ3kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRlOTM2Yi01M2NmLTRiMDgtYjVmNy0yYjkwZGUyMWZlOTQvMC84RjU4ODkzQjFD RTFEQjg1NTVEN0JFQ0I2M0RFMzQyRDIzOEI2Nzc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0MkQyMzhC Njc3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkZTkzNmItNTNjZi00YjA4LWI1 ZjctMmI5MGRlMjFmZTk0LzAvOEY1ODg5M0IxQ0UxREI4NTU1RDdCRUNCNjNERTM0 MkQyMzhCNjc3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2tdG1CF7u+m02n1AJD/H2Dc739lTAuw5P3 mQwlt2lTGX8T1NxUVQbaIkBDGx/NcMyZajc/Q/o6IVmikhSbkTU+e84OJp7CgQzW 9uiv9lQzrtEDR4Rm9yG/ObwLJGfYV5BRcsYbYrV+t224WTH0OzU8FX/LeLVtduWD xN1InYBH62hgH6TX1kxiokFCJwwTl8ZTote7HjGIXg2J9cGKKzP3lqaSTnRf8Us3 o8Pt7OiQJh6weJIkS6GPNEGFdKHMpF/hhsc4M0QHzvcuoeC289Ha5oehgNqYzqpg +YaHXKrTgjf/nq0URE6v4RCA1WWwPKcEcfKhWF+vg+Id4dIdBVo= -----END CERTIFICATE-----Generated at Wed Dec 17 16:42:24 2025 by rpki-client