This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft File: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft (raw, json) Hash identifier: sSRsgl1BC7FYtKWVqp39Cx5iqgrwvAqzsLrf0ykcbuQ= Subject key identifier: C9:1C:EA:B0:B9:8B:75:B2:B2:A1:52:0D:C8:31:C4:C7:8B:5B:1E:A7 Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A Certificate issuer: /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Certificate serial: 315933DDDA0B086BB7ADF3F9E0E68F3DEACDB039 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft Manifest number: 05EC Signing time: Sat 06 Dec 2025 01:50:39 +0000 Manifest this update: Sat 06 Dec 2025 01:45:39 +0000 Manifest next update: Tue 09 Dec 2025 02:35:39 +0000 Files and hashes: 1: 34392e302e302e302f32322d3234203d3e203535373031.roa (hash: yzJFuCgJdtqHHRWns+YkV15nd/BuBUJW5VOi1zg7H6Q=) 2: 34332e3235322e3233382e302f32342d3234203d3e203535373031.roa (hash: Nnf66JxT1+eZbCkYQn8x6cz4I9We7qQ0T90RTh7FkG0=) 3: 3230322e37332e32362e302f32342d3234203d3e20313431383932.roa (hash: QqG89TEZjAnI8K1IrPR29kJtDOMjh4sJXdy9wDe7GkQ=) 4: 3230322e37332e32372e302f32342d3234203d3e203535373031.roa (hash: 7FX65tSRyznIseHKWjzPuHzH3CNvHvrWJempYLyB19A=) 5: 34332e3235322e3233362e302f32332d3234203d3e203535373031.roa (hash: Dc8BdtAPO03Z1L5MRp5Y72lj+merY2MxA64B93hGmbo=) 6: 3130332e33312e3233322e302f32322d3234203d3e203535373031.roa (hash: BrB/GW7Td9VbCbmZFNch6tbk4BKMd6sCGKbNPlrCa44=) 7: 8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl (hash: mA8vhE7HbTQthil7ZjKV5iOXsyNkcg3NCdMDvl6GQxw=) 8: 3230322e37332e32352e302f32342d3234203d3e20313431383932.roa (hash: L3e7xhgbdKiD6xLSCC6o4EcC4VabYtoVoPe/Fd1r3p4=) 9: 3230322e37332e32342e302f32342d3234203d3e203535373031.roa (hash: 4zJcjhi99V9+23NjQKwrFy3Y4HQGoSDMxwY4qblbwdg=) 10: 3130332e31382e37362e302f32322d3234203d3e203535373031.roa (hash: oa5lMgIER/j9/ZBqK2jTnvVzB4d9A9ON67O4sbQz5Lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:59:33:dd:da:0b:08:6b:b7:ad:f3:f9:e0:e6:8f:3d:ea:cd:b0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A Validity Not Before: Dec 6 01:45:39 2025 GMT Not After : Dec 9 02:35:39 2025 GMT Subject: CN=C91CEAB0B98B75B2B2A1520DC831C4C78B5B1EA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:ca:90:bd:23:9b:a8:e3:3c:b7:57:96:5f: da:5e:a5:43:96:c0:ba:f3:f1:35:38:3a:1e:b1:43: 9e:c9:6f:40:76:a7:66:94:9f:7f:53:2e:76:7c:dd: 48:9f:77:42:dc:5c:4c:c0:48:ae:7b:92:f7:ef:ac: 6c:15:13:d8:a3:e4:a7:7d:36:0b:5c:fb:aa:7d:11: 5e:cd:69:20:46:ce:bf:24:c6:23:4f:48:41:4a:8d: df:a9:0a:3d:1c:2c:09:8b:57:1b:95:19:90:30:5d: 55:02:c8:14:dd:8b:4c:aa:ec:66:ea:a4:45:ca:e2: 17:72:26:8c:2f:19:eb:0e:3d:09:86:56:4d:40:e1: d3:2a:ad:f0:04:86:c2:ae:3d:a5:fe:ec:fa:22:0a: 31:e9:b7:de:fa:68:5f:35:2b:e2:fb:b8:42:bd:40: 7e:01:01:ed:66:7e:5e:52:c6:da:58:c2:0c:44:3b: 6f:44:6f:35:f5:76:b4:cc:ab:84:7d:51:dd:69:96: c3:10:e1:2b:4e:4c:44:f6:4c:61:a4:a7:2d:96:3a: 4e:d6:08:1c:93:4b:27:b8:67:c1:31:6f:b7:47:19: 28:2a:32:18:5a:d9:f6:c3:97:47:57:19:74:ab:dc: 4b:e5:c7:e9:d6:46:4d:6c:22:24:f9:3b:2e:a0:56: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:1C:EA:B0:B9:8B:75:B2:B2:A1:52:0D:C8:31:C4:C7:8B:5B:1E:A7 X509v3 Authority Key Identifier: keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:32:a3:fd:64:5b:9f:42:6d:27:0b:58:d9:35:85:3c:e9:a6: e9:0c:df:ee:e0:60:f0:f2:e1:1b:1f:e1:8d:3b:f6:bd:2e:57: f0:38:9f:0c:be:a5:3c:44:19:0a:0f:76:1c:a2:c3:7f:63:dc: 70:c0:5c:ee:5f:78:d5:f2:c3:83:5a:17:01:dc:9e:60:35:37: 20:21:3f:2d:8d:3a:19:95:b7:c0:cf:92:20:92:f7:38:48:1f: 43:31:9c:e6:b8:fa:4b:3b:3a:22:ac:45:08:a8:52:ee:e6:3d: 1c:c1:ab:ad:fb:34:ce:9a:9b:19:e7:46:b3:f6:f2:be:11:e2: 6c:3a:be:d0:4a:c5:10:19:8b:35:58:59:a2:40:1e:17:ee:36: 7d:dc:fd:51:9d:63:bd:f4:ed:f6:96:4e:a3:cc:6c:49:a8:a5: b7:27:f1:ea:01:14:8c:f9:9e:05:2e:2e:63:eb:7c:44:ef:59: 7c:61:81:ec:bd:02:86:f5:3b:ca:79:d8:1b:67:b8:36:6e:f5: 3f:27:96:e1:d9:e4:6c:61:f2:a2:9f:a9:81:db:9f:94:67:d0: 1f:43:7b:d4:cd:dc:2f:c2:2c:4c:9b:66:bf:ae:b7:73:88:94: da:5c:60:51:d7:47:90:c5:32:d0:93:db:bf:db:60:7e:4a:c5: ff:0d:56:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMVkz3doLCGu3rfP54OaPPerNsDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4 QkY1MEY2QTAeFw0yNTEyMDYwMTQ1MzlaFw0yNTEyMDkwMjM1MzlaMDMxMTAvBgNV BAMTKEM5MUNFQUIwQjk4Qjc1QjJCMkExNTIwREM4MzFDNEM3OEI1QjFFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeS8qQvSObqOM8t1eWX9pepUOW wLrz8TU4Oh6xQ57Jb0B2p2aUn39TLnZ83Uifd0LcXEzASK57kvfvrGwVE9ij5Kd9 Ngtc+6p9EV7NaSBGzr8kxiNPSEFKjd+pCj0cLAmLVxuVGZAwXVUCyBTdi0yq7Gbq pEXK4hdyJowvGesOPQmGVk1A4dMqrfAEhsKuPaX+7PoiCjHpt976aF81K+L7uEK9 QH4BAe1mfl5SxtpYwgxEO29EbzX1drTMq4R9Ud1plsMQ4StOTET2TGGkpy2WOk7W CByTSye4Z8Exb7dHGSgqMhha2fbDl0dXGXSr3Evlx+nWRk1sIiT5Oy6gVnSjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRzqsLmLdbKyoVINyDHEx4tbHqcwHwYDVR0j BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1 MEY2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWY4NTEtN2U3My00Mzg0LTk1 MGUtOGJlOGUxNWZkM2VlLzAvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBC NzU4QkY1MEY2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4yo/1kW59CbScLWNk1hTzppukM3+7gYPDy 4Rsf4Y079r0uV/A4nwy+pTxEGQoPdhyiw39j3HDAXO5feNXyw4NaFwHcnmA1NyAh Py2NOhmVt8DPkiCS9zhIH0MxnOa4+ks7OiKsRQioUu7mPRzBq637NM6amxnnRrP2 8r4R4mw6vtBKxRAZizVYWaJAHhfuNn3c/VGdY7307faWTqPMbEmopbcn8eoBFIz5 ngUuLmPrfETvWXxhgey9Aob1O8p52BtnuDZu9T8nluHZ5Gxh8qKfqYHbn5Rn0B9D e9TN3C/CLEybZr+ut3OIlNpcYFHXR5DFMtCT27/bYH5Kxf8NVmE= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:25 2025 by rpki-client