This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft File: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft (raw, json) Hash identifier: 2r5lE/Z6XXzjEOXR+Zzb/7NILW1P4byiR6nmfq7/gAw= Subject key identifier: E0:E4:43:80:6D:75:CC:64:4E:1A:7A:2A:12:11:F0:4B:40:51:93:4F Authority key identifier: 8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 Certificate issuer: /CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Certificate serial: 3E05B02627225046988B4E23F9771228A6F159C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft Manifest number: 01B7 Signing time: Sun 07 Dec 2025 01:41:43 +0000 Manifest this update: Sun 07 Dec 2025 01:36:43 +0000 Manifest next update: Wed 10 Dec 2025 02:37:43 +0000 Files and hashes: 1: 3130332e3130312e39362e302f32332d3233203d3e20313530393430.roa (hash: lwBU7RZrxpXV+tNL6ldwUUEfAC8x198/UcNXhcVqIDE=) 2: 3130332e3130312e39372e302f32342d3234203d3e20313530393430.roa (hash: aTXk/DsjXzFyIklyAQb47qbqcaGolhR0lzBTP747Tls=) 3: 3130332e3130312e39362e302f32342d3234203d3e20313530393430.roa (hash: S5y/AAm56aWRItZwk28UKrK77+5w1nu1pwxZLQMOads=) 4: 8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl (hash: fEj2BUALWlc1u9YX7J/XN15xlI40I7ezqUIhLHswrBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:05:b0:26:27:22:50:46:98:8b:4e:23:f9:77:12:28:a6:f1:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D7AD1F796C88BCD49E1BEC42851AFA58BD78588 Validity Not Before: Dec 7 01:36:43 2025 GMT Not After : Dec 10 02:37:43 2025 GMT Subject: CN=E0E443806D75CC644E1A7A2A1211F04B4051934F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:f5:f2:52:a0:ce:3e:c0:dd:3c:5c:59:48: 02:23:50:38:87:63:50:c7:30:00:7e:6b:8e:ab:c6: 5c:10:51:8e:f3:76:00:75:57:6f:31:5e:05:07:9f: a7:b8:4c:49:70:4b:9e:94:40:01:5c:ca:d8:25:2e: c6:3e:8e:1c:36:bc:4a:8e:c0:28:7d:48:aa:7c:fd: bc:ff:e6:ea:30:cd:f4:d7:be:27:29:e9:09:ab:4a: 72:a9:de:11:ce:61:df:92:9c:c1:06:73:2e:56:2a: ea:97:ab:1e:b8:c8:83:e1:85:38:9b:75:17:b1:7a: 8f:0a:4a:05:72:87:f1:78:74:85:f5:89:0b:01:73: 63:23:4c:bc:27:91:35:44:66:52:68:09:2f:73:4b: 0f:04:db:b7:f9:43:0d:e2:49:62:91:d2:56:f3:56: e1:85:e0:c8:a1:9c:ae:71:02:fa:a6:1c:e7:8b:f0: 10:e5:7b:a3:f6:50:47:51:a1:5d:a2:e0:a1:1d:dd: 0a:72:a1:5f:2a:37:98:a7:a7:41:f7:68:ff:83:fd: f2:95:e4:26:eb:ec:e7:b9:29:44:6b:e0:61:22:44: 6e:ba:9a:12:61:6a:ff:d5:bb:0f:57:b1:fb:de:cf: 22:01:1c:50:03:d2:c0:6d:34:9d:ca:5d:94:be:0f: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E4:43:80:6D:75:CC:64:4E:1A:7A:2A:12:11:F0:4B:40:51:93:4F X509v3 Authority Key Identifier: keyid:8D:7A:D1:F7:96:C8:8B:CD:49:E1:BE:C4:28:51:AF:A5:8B:D7:85:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4157c9ac-52db-4dba-ac77-845e2ddd8879/0/8D7AD1F796C88BCD49E1BEC42851AFA58BD78588.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6d:04:4b:6d:48:7b:2e:7e:fc:80:de:01:a8:6a:3e:ee:3a: c4:48:f4:8c:22:49:97:bf:d3:d2:a1:cd:53:89:a5:9f:78:82: 3f:12:3d:45:8d:91:e2:e6:e9:a5:d1:ef:2f:26:15:30:eb:72: cf:50:a4:17:36:53:86:b5:83:74:3a:07:e9:a0:04:41:fe:9b: a3:8d:e7:c0:69:e4:83:30:ff:1a:db:a1:cb:a2:24:ce:fb:66: 09:b9:72:d7:ae:c2:59:c5:fa:b4:6d:c3:45:a3:75:cf:a4:1d: 7f:b5:e3:57:12:16:b2:9a:a0:18:b4:56:5a:81:ef:31:a4:18: 41:49:f7:d1:94:77:66:62:dc:8c:a9:22:b2:c5:15:02:84:e8: 08:ec:cb:e8:ed:09:d5:a7:9d:a2:ff:b5:8a:e6:e9:1b:9a:f4: 1c:9f:39:30:de:19:20:ab:c9:f6:83:c4:ff:41:8f:00:10:bd: 36:4c:2e:69:10:22:ab:d0:8a:f8:19:b6:e7:91:7c:3b:61:22: e0:f1:48:a9:2b:fc:c1:6a:55:b3:1c:8b:4b:99:5c:c7:61:dc: 1f:a7:a7:18:3e:3c:a3:cd:38:95:b7:14:49:e1:99:3d:36:4d: 44:0c:68:19:69:b6:01:75:15:c8:bf:0a:ca:60:be:5f:13:fa: f8:44:c1:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPgWwJiciUEaYi04j+XcSKKbxWckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4 QkQ3ODU4ODAeFw0yNTEyMDcwMTM2NDNaFw0yNTEyMTAwMjM3NDNaMDMxMTAvBgNV BAMTKEUwRTQ0MzgwNkQ3NUNDNjQ0RTFBN0EyQTEyMTFGMDRCNDA1MTkzNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZbPXyUqDOPsDdPFxZSAIjUDiH Y1DHMAB+a46rxlwQUY7zdgB1V28xXgUHn6e4TElwS56UQAFcytglLsY+jhw2vEqO wCh9SKp8/bz/5uowzfTXvicp6QmrSnKp3hHOYd+SnMEGcy5WKuqXqx64yIPhhTib dRexeo8KSgVyh/F4dIX1iQsBc2MjTLwnkTVEZlJoCS9zSw8E27f5Qw3iSWKR0lbz VuGF4MihnK5xAvqmHOeL8BDle6P2UEdRoV2i4KEd3QpyoV8qN5inp0H3aP+D/fKV 5Cbr7Oe5KURr4GEiRG66mhJhav/Vuw9XsfvezyIBHFAD0sBtNJ3KXZS+D5/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ORDgG11zGROGnoqEhHwS0BRk08wHwYDVR0j BBgwFoAUjXrR95bIi81J4b7EKFGvpYvXhYgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTU3YzlhYy01MmRiLTRkYmEtYWM3Ny04NDVlMmRkZDg4NzkvMC84RDdBRDFGNzk2 Qzg4QkNENDlFMUJFQzQyODUxQUZBNThCRDc4NTg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFGQTU4QkQ3 ODU4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE1N2M5YWMtNTJkYi00ZGJhLWFj NzctODQ1ZTJkZGQ4ODc5LzAvOEQ3QUQxRjc5NkM4OEJDRDQ5RTFCRUM0Mjg1MUFG QTU4QkQ3ODU4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJptBEttSHsufvyA3gGoaj7uOsRI9IwiSZe/ 09KhzVOJpZ94gj8SPUWNkeLm6aXR7y8mFTDrcs9QpBc2U4a1g3Q6B+mgBEH+m6ON 58Bp5IMw/xrbocuiJM77Zgm5cteuwlnF+rRtw0Wjdc+kHX+141cSFrKaoBi0VlqB 7zGkGEFJ99GUd2Zi3IypIrLFFQKE6Ajsy+jtCdWnnaL/tYrm6Rua9ByfOTDeGSCr yfaDxP9BjwAQvTZMLmkQIqvQivgZtueRfDthIuDxSKkr/MFqVbMci0uZXMdh3B+n pxg+PKPNOJW3FEnhmT02TUQMaBlptgF1Fci/Cspgvl8T+vhEwRE= -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:44 2025 by rpki-client