This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft File: 8DA8C02216F0C7D625FEFA7EF659021425920442.mft (raw, json) Hash identifier: y6ViJ93YKLNYK1lkUzoCqe1do5siGrd9kTSgNW7TbqE= Subject key identifier: 0E:BB:1E:1A:23:D3:1B:FE:60:AE:98:4B:46:AA:48:7F:01:04:BE:9F Authority key identifier: 8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 Certificate issuer: /CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Certificate serial: 755CF43D11745361303634D26BD7C9608F0A1DFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft Manifest number: 01EC Signing time: Fri 05 Dec 2025 18:51:45 +0000 Manifest this update: Fri 05 Dec 2025 18:46:45 +0000 Manifest next update: Tue 09 Dec 2025 00:41:45 +0000 Files and hashes: 1: 3130332e37312e32352e302f32342d3234203d3e20313530323333.roa (hash: 75IsX464I80YzdtDMOG0/64Es8A4yar1LsqWA90nFOo=) 2: 8DA8C02216F0C7D625FEFA7EF659021425920442.crl (hash: KDl0yobgP4giyVK/Df5AeVPED5+CqOYj9ltT/F3sMwY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5c:f4:3d:11:74:53:61:30:36:34:d2:6b:d7:c9:60:8f:0a:1d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DA8C02216F0C7D625FEFA7EF659021425920442 Validity Not Before: Dec 5 18:46:45 2025 GMT Not After : Dec 9 00:41:45 2025 GMT Subject: CN=0EBB1E1A23D31BFE60AE984B46AA487F0104BE9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:67:70:c0:21:69:de:e6:92:1b:be:45:79: c0:1d:a5:d3:83:02:31:5f:09:86:2d:eb:c5:59:e8: 62:c8:cc:53:47:8f:28:0d:0c:ec:96:39:c3:b0:df: 53:e0:ca:03:03:52:b4:5d:6b:ed:07:db:52:ca:e3: 65:ef:da:90:0b:fb:77:4b:3c:99:33:ad:f4:60:a4: e9:1a:32:dd:0f:c7:e1:49:82:f6:67:78:f1:5a:73: c1:79:af:63:0d:e0:63:a9:5d:5a:74:7f:fc:36:a1: 69:ba:1a:77:75:72:db:5b:e1:c7:f9:95:10:26:dd: d3:4b:dd:d7:60:1f:b7:62:8b:b0:8d:fb:47:34:0d: e8:b8:05:95:ed:cf:8b:5a:23:a6:bc:d4:12:85:17: cd:d2:c0:6d:0b:54:a9:91:cf:5e:14:92:e5:bb:0b: c7:5c:76:69:36:11:e0:08:6a:2e:63:ca:41:2d:7a: 37:c1:2f:bd:87:2d:52:0d:7d:27:80:09:7f:9b:d6: f2:31:ab:43:8e:3e:32:f9:b6:df:99:0e:d0:14:81: 16:86:39:89:83:99:05:2a:fb:b5:2f:65:e0:2c:bb: b6:f4:c8:ff:89:f8:6e:49:b6:fe:f5:9c:c5:41:db: d9:2c:d3:09:71:98:05:03:fc:7f:4e:94:03:73:62: 5d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BB:1E:1A:23:D3:1B:FE:60:AE:98:4B:46:AA:48:7F:01:04:BE:9F X509v3 Authority Key Identifier: keyid:8D:A8:C0:22:16:F0:C7:D6:25:FE:FA:7E:F6:59:02:14:25:92:04:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DA8C02216F0C7D625FEFA7EF659021425920442.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c86cb5d-f07d-426a-8e5e-a77a978dd2ee/0/8DA8C02216F0C7D625FEFA7EF659021425920442.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3b:f3:bc:5b:ef:1b:ed:2b:60:4d:2a:1e:d4:ce:f1:af:5b: d4:9d:67:b9:58:86:19:bf:25:13:25:37:b1:46:80:24:29:58: b0:64:90:2b:24:fd:cc:91:ba:24:45:65:74:6e:d9:dd:3a:c6: 11:51:72:13:e4:ee:4f:79:c5:bf:62:42:95:b1:5f:5f:8c:00: 2d:07:4e:00:6c:d3:55:c5:de:98:a0:b1:44:90:7d:2d:1a:50: 20:20:1e:04:80:f4:b0:6e:a2:5c:d9:ad:fc:5f:20:5d:e2:df: 23:63:d2:91:11:95:4f:e9:d0:d4:b1:e7:61:f7:2b:2e:44:a8: d0:4f:ec:e5:c9:92:f0:9f:4e:9f:20:f9:98:18:dc:f4:fa:b1: 7d:24:b1:c0:de:e5:ae:ac:da:f1:3e:44:55:80:08:46:64:cf: b0:11:d9:b6:0f:c5:22:72:06:3f:37:d7:d7:93:e8:84:aa:2d: 59:61:16:61:28:94:45:c2:ba:fa:90:5a:73:78:a6:8a:d1:da: de:c9:f4:67:e6:8c:df:74:d0:bb:58:0e:f6:87:0f:23:3d:b7: 85:54:25:a4:07:c6:9c:96:fa:a5:4b:29:90:99:7e:4c:74:9d: 23:84:7b:6c:07:e6:8e:bf:52:46:de:5e:dd:4c:72:49:3f:75: 6d:de:fc:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdVz0PRF0U2EwNjTSa9fJYI8KHf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQy NTkyMDQ0MjAeFw0yNTEyMDUxODQ2NDVaFw0yNTEyMDkwMDQxNDVaMDMxMTAvBgNV BAMTKDBFQkIxRTFBMjNEMzFCRkU2MEFFOTg0QjQ2QUE0ODdGMDEwNEJFOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44WdwwCFp3uaSG75FecAdpdOD AjFfCYYt68VZ6GLIzFNHjygNDOyWOcOw31PgygMDUrRda+0H21LK42Xv2pAL+3dL PJkzrfRgpOkaMt0Px+FJgvZnePFac8F5r2MN4GOpXVp0f/w2oWm6Gnd1cttb4cf5 lRAm3dNL3ddgH7dii7CN+0c0Dei4BZXtz4taI6a81BKFF83SwG0LVKmRz14UkuW7 C8dcdmk2EeAIai5jykEtejfBL72HLVINfSeACX+b1vIxq0OOPjL5tt+ZDtAUgRaG OYmDmQUq+7UvZeAsu7b0yP+J+G5Jtv71nMVB29ks0wlxmAUD/H9OlANzYl0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrseGiPTG/5grphLRqpIfwEEvp8wHwYDVR0j BBgwFoAUjajAIhbwx9Yl/vp+9lkCFCWSBEIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Yzg2Y2I1ZC1mMDdkLTQyNmEtOGU1ZS1hNzdhOTc4ZGQyZWUvMC84REE4QzAyMjE2 RjBDN0Q2MjVGRUZBN0VGNjU5MDIxNDI1OTIwNDQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAyMTQyNTky MDQ0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4NmNiNWQtZjA3ZC00MjZhLThl NWUtYTc3YTk3OGRkMmVlLzAvOERBOEMwMjIxNkYwQzdENjI1RkVGQTdFRjY1OTAy MTQyNTkyMDQ0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw787xb7xvtK2BNKh7UzvGvW9SdZ7lYhhm/ JRMlN7FGgCQpWLBkkCsk/cyRuiRFZXRu2d06xhFRchPk7k95xb9iQpWxX1+MAC0H TgBs01XF3pigsUSQfS0aUCAgHgSA9LBuolzZrfxfIF3i3yNj0pERlU/p0NSx52H3 Ky5EqNBP7OXJkvCfTp8g+ZgY3PT6sX0kscDe5a6s2vE+RFWACEZkz7AR2bYPxSJy Bj8319eT6ISqLVlhFmEolEXCuvqQWnN4porR2t7J9GfmjN900LtYDvaHDyM9t4VU JaQHxpyW+qVLKZCZfkx0nSOEe2wH5o6/UkbeXt1Mckk/dW3e/Co= -----END CERTIFICATE-----Generated at Sun Dec 7 03:06:15 2025 by rpki-client