This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft (raw, json) Hash identifier: quChe6zfAm3g9+0djADUAhPun/dPrC8wZy9KfK+NbZw= Subject key identifier: 74:89:7E:09:D6:AD:ED:8F:32:22:96:66:A9:79:40:F6:C3:AD:0A:5D Authority key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Certificate issuer: /CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Certificate serial: 38483CEAAEADF4056B1A9490DA63D408492C9C95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft Manifest number: 04D8 Signing time: Fri 05 Dec 2025 10:11:29 +0000 Manifest this update: Fri 05 Dec 2025 10:06:29 +0000 Manifest next update: Mon 08 Dec 2025 12:05:29 +0000 Files and hashes: 1: 323430333a333163303a3a2f33322d3332203d3e20313337333736.roa (hash: yZdB1+Hb4ph9w/wvrnMAOAc9P831jd2qxlkZfuEjv8w=) 2: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl (hash: dyX4cGb+NdZXETCms+DoP71SRhKqJuEBbHle+/5ON8U=) 3: 3130332e3131382e3132342e302f32322d3234203d3e20313337333736.roa (hash: shtmTa57+pxWxFUP615U/s617hiWKy/m/Dpc5lxTH4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 12:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:48:3c:ea:ae:ad:f4:05:6b:1a:94:90:da:63:d4:08:49:2c:9c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Validity Not Before: Dec 5 10:06:29 2025 GMT Not After : Dec 8 12:05:29 2025 GMT Subject: CN=74897E09D6ADED8F32229666A97940F6C3AD0A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9a:06:de:0e:d8:ab:ab:ba:a1:33:9d:b7:46: e3:2a:67:e5:c7:8d:f0:8c:24:35:55:4d:db:79:62: e4:c0:8d:1c:27:8a:90:af:f3:1d:77:f5:fd:20:e6: 97:95:f1:3e:ab:af:9e:fa:53:34:db:92:bb:8f:6a: f7:ca:5e:62:fa:0a:b3:12:a9:0d:06:ad:62:d1:d3: 9f:a7:1f:ad:c5:53:10:ae:94:d7:6f:85:89:5c:e8: 7f:07:40:71:52:11:c6:e0:46:c4:02:ea:e8:2f:dd: 64:dc:e9:be:ac:7a:c0:04:78:c8:a5:e9:52:e6:7d: 62:bb:b5:cf:f6:eb:e4:f6:28:dd:27:84:18:81:5b: 8b:fe:09:22:9e:33:c6:0d:90:5b:a1:a1:53:21:89: 11:96:3c:88:92:b9:d4:04:d7:29:39:86:57:31:e2: 93:6d:15:9f:03:3d:b5:fc:6b:d0:5b:b7:22:12:11: 87:0c:54:08:9d:1e:46:27:c4:67:24:a0:6c:78:31: 88:bd:85:d3:a1:2a:5a:cb:a6:f2:25:fd:0c:cb:80: 39:8e:10:ba:9b:8b:91:c4:e0:13:86:b0:c9:9c:45: 04:43:09:a3:4d:06:a0:f5:03:a9:45:75:bf:3a:9b: 7a:81:9b:75:d9:7e:1e:d2:f7:71:18:1e:c2:9e:46: 48:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:89:7E:09:D6:AD:ED:8F:32:22:96:66:A9:79:40:F6:C3:AD:0A:5D X509v3 Authority Key Identifier: keyid:8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:17:b3:29:23:a0:60:c7:b9:9f:72:f9:0a:f1:af:16:d3:62: c8:ae:97:16:27:72:e1:b5:ef:ae:fa:65:b4:07:8f:77:d0:af: ad:c4:76:d1:91:fd:8d:8a:5a:34:3f:63:cb:7a:10:a7:13:f1: 13:eb:f4:ed:ab:19:4f:68:47:f9:75:65:ec:7b:00:ca:22:18: 5e:f3:35:76:1f:91:27:e9:26:16:75:e0:d9:77:ba:38:f4:2b: c6:af:60:5e:ca:1d:b2:30:61:d3:ad:b9:52:fb:cf:d7:4a:55: e4:80:23:92:2d:06:fb:48:71:94:e8:1e:34:f3:0a:3f:73:39: 2a:63:e8:66:5b:c7:24:8a:cb:85:21:89:f9:05:27:6d:e1:06: 55:1f:10:77:5c:96:e4:c9:7e:2a:42:f1:60:60:4b:32:4b:9c: 1f:fb:35:6c:5e:58:38:7f:ea:c6:50:bf:4e:51:3f:36:b6:ab: 38:c6:d0:58:9b:8d:26:62:79:6b:57:2a:0d:34:5d:0a:66:e6: c1:0e:12:59:fb:06:d6:69:09:83:82:35:05:8c:a2:74:c8:5c: c8:64:43:11:0d:ac:de:fa:26:8e:da:b9:c0:05:0f:29:3e:57: 16:c6:d4:06:a7:2b:04:83:e0:eb:2f:56:e7:04:77:90:de:74: b2:fa:bf:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOEg86q6t9AVrGpSQ2mPUCEksnJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFB QUUyMEY1NzAeFw0yNTEyMDUxMDA2MjlaFw0yNTEyMDgxMjA1MjlaMDMxMTAvBgNV BAMTKDc0ODk3RTA5RDZBREVEOEYzMjIyOTY2NkE5Nzk0MEY2QzNBRDBBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDImgbeDtirq7qhM523RuMqZ+XH jfCMJDVVTdt5YuTAjRwnipCv8x139f0g5peV8T6rr576UzTbkruPavfKXmL6CrMS qQ0GrWLR05+nH63FUxCulNdvhYlc6H8HQHFSEcbgRsQC6ugv3WTc6b6sesAEeMil 6VLmfWK7tc/26+T2KN0nhBiBW4v+CSKeM8YNkFuhoVMhiRGWPIiSudQE1yk5hlcx 4pNtFZ8DPbX8a9BbtyISEYcMVAidHkYnxGckoGx4MYi9hdOhKlrLpvIl/QzLgDmO ELqbi5HE4BOGsMmcRQRDCaNNBqD1A6lFdb86m3qBm3XZfh7S93EYHsKeRkjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIl+Cdat7Y8yIpZmqXlA9sOtCl0wHwYDVR0j BBgwFoAUjF+i69evQDk4g/sI5xvfQariD1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMC84QzVGQTJFQkQ3 QUY0MDM5Mzg4M0ZCMDhFNzFCREY0MUFBRTIwRjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRGNDFBQUUy MEY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQyYTViNTEtYmMwMC00ZDZiLTg3 NjEtYzdkMGQzZjZkZTEyLzAvOEM1RkEyRUJEN0FGNDAzOTM4ODNGQjA4RTcxQkRG NDFBQUUyMEY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgXsykjoGDHuZ9y+QrxrxbTYsiulxYncuG1 7676ZbQHj3fQr63EdtGR/Y2KWjQ/Y8t6EKcT8RPr9O2rGU9oR/l1Zex7AMoiGF7z NXYfkSfpJhZ14Nl3ujj0K8avYF7KHbIwYdOtuVL7z9dKVeSAI5ItBvtIcZToHjTz Cj9zOSpj6GZbxySKy4UhifkFJ23hBlUfEHdcluTJfipC8WBgSzJLnB/7NWxeWDh/ 6sZQv05RPza2qzjG0FibjSZieWtXKg00XQpm5sEOEln7BtZpCYOCNQWMonTIXMhk QxENrN76Jo7aucAFDyk+VxbG1AanKwSD4OsvVucEd5DedLL6v3E= -----END CERTIFICATE-----Generated at Sun Dec 7 04:12:20 2025 by rpki-client