This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft File: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft (raw, json) Hash identifier: XQQvURQcrmWIYUDWvFBS3AMAv8UuiCo3l91ACBn30xs= Subject key identifier: 6B:0B:4A:72:00:41:43:54:01:78:EE:C0:DF:1B:50:9D:43:6C:79:89 Authority key identifier: 89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E Certificate issuer: /CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Certificate serial: 4FB0915EE5BD134466C4FC9BE2EC8F452EB9A306 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft Manifest number: 0130 Signing time: Fri 05 Dec 2025 15:50:04 +0000 Manifest this update: Fri 05 Dec 2025 15:45:04 +0000 Manifest next update: Tue 09 Dec 2025 00:07:04 +0000 Files and hashes: 1: 3230322e34372e3136302e302f32342d3234203d3e20313532303736.roa (hash: SOoZmysbJDZktqnuTuwq0n/y13DKsF/IrNzLNUAhqCQ=) 2: 8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl (hash: qpqIajT15oNFYMAl2MCduid1YGjH89cFQ5eYCq+iGRY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 00:07:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:b0:91:5e:e5:bd:13:44:66:c4:fc:9b:e2:ec:8f:45:2e:b9:a3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E Validity Not Before: Dec 5 15:45:04 2025 GMT Not After : Dec 9 00:07:04 2025 GMT Subject: CN=6B0B4A72004143540178EEC0DF1B509D436C7989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:a4:25:13:0c:da:1d:32:d1:88:ac:3a:4b: 5f:f3:a9:ea:7f:d1:e0:85:79:88:53:18:01:e0:21: 41:2f:45:93:11:8f:03:b4:f0:00:e6:cb:4a:30:52: 95:fc:5c:a5:84:0d:d9:8b:d2:bb:2d:c1:52:a4:9f: 77:64:1f:ca:63:1a:1c:c9:94:c2:97:c2:1e:67:63: 0f:07:fe:3c:ef:e7:3c:cf:3d:aa:7a:b2:62:c0:18: 9b:1c:c2:43:d7:e1:00:f6:0e:c7:69:95:7b:bf:12: 0e:77:92:56:20:ee:86:9b:8b:f3:66:8a:9b:c9:f0: 78:a2:5a:6b:3f:65:16:f5:21:14:62:49:1f:b4:2b: 16:1f:50:d0:75:2d:02:0b:63:fa:45:6d:62:88:13: c5:3c:16:1f:b7:92:d8:ea:d9:d2:90:b5:e1:d3:ed: 78:fb:bb:b1:63:c9:45:60:f9:b9:de:b1:0f:66:e0: 09:4e:5c:60:ad:59:b0:28:ae:dd:8e:36:6c:13:4b: 3a:6d:f2:2c:63:95:ea:88:95:7f:c9:6e:dc:e7:d0: 6b:c1:3a:93:8d:67:db:66:a1:fe:65:57:4b:39:73: 7e:30:5a:7a:ed:e6:b2:b8:24:19:be:91:c0:39:86: 85:b9:40:25:83:8d:32:b8:4a:24:bc:6a:d1:33:5e: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:0B:4A:72:00:41:43:54:01:78:EE:C0:DF:1B:50:9D:43:6C:79:89 X509v3 Authority Key Identifier: keyid:89:58:EB:1E:A0:02:2D:EF:78:3D:17:F1:C5:B6:F0:C5:4B:0F:5F:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4288762c-3fc5-49cc-949a-594b331a13a1/0/8958EB1EA0022DEF783D17F1C5B6F0C54B0F5F1E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ca:ad:8f:f5:1e:8c:ce:1a:3e:77:d6:8e:6f:0f:d7:8f:ca: 1b:f3:fa:0f:51:94:90:ce:a1:c6:fb:a7:be:fa:f7:ea:72:f0: 21:52:3e:94:40:d5:c5:00:c8:d4:7c:42:ca:b1:57:5d:90:b8: bb:34:e9:d3:ad:78:8e:97:77:3b:94:9f:3e:4a:46:23:e5:96: 1c:50:66:57:16:e8:bd:7b:75:4e:89:ea:37:ca:36:c6:a9:43: d5:3e:ca:89:35:d6:5d:97:9c:13:27:a0:e1:c7:5f:d2:78:7e: c1:10:04:59:9e:c9:3d:3f:b3:42:f1:d4:a3:ed:86:ac:7f:b0: fa:5f:6c:3a:51:fd:ca:ab:f1:fb:0a:81:a4:0b:2b:b2:c1:d7: d0:12:08:37:73:a4:68:9e:47:8b:fb:d7:95:50:d8:de:84:b8: f2:b2:b1:5d:21:d6:20:4c:07:ef:bc:fe:c9:3d:ba:70:80:bb: 0d:d2:3a:76:aa:e6:a4:5b:6f:19:13:0f:1e:58:ad:6c:b5:14: 3c:82:b9:b2:57:f9:37:3a:a4:21:6a:d5:3a:44:2c:55:03:f0: 1c:f3:a5:64:16:0f:01:3d:ac:14:6e:7d:37:64:04:dc:4a:4e: aa:ed:8e:5d:13:9b:b9:8b:cf:8d:c6:70:9e:25:4b:4f:bc:d9: 3a:b4:13:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT7CRXuW9E0RmxPyb4uyPRS65owYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0 QjBGNUYxRTAeFw0yNTEyMDUxNTQ1MDRaFw0yNTEyMDkwMDA3MDRaMDMxMTAvBgNV BAMTKDZCMEI0QTcyMDA0MTQzNTQwMTc4RUVDMERGMUI1MDlENDM2Qzc5ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxp6QlEwzaHTLRiKw6S1/zqep/ 0eCFeYhTGAHgIUEvRZMRjwO08ADmy0owUpX8XKWEDdmL0rstwVKkn3dkH8pjGhzJ lMKXwh5nYw8H/jzv5zzPPap6smLAGJscwkPX4QD2DsdplXu/Eg53klYg7oabi/Nm ipvJ8HiiWms/ZRb1IRRiSR+0KxYfUNB1LQILY/pFbWKIE8U8Fh+3ktjq2dKQteHT 7Xj7u7FjyUVg+bnesQ9m4AlOXGCtWbAort2ONmwTSzpt8ixjleqIlX/Jbtzn0GvB OpONZ9tmof5lV0s5c34wWnrt5rK4JBm+kcA5hoW5QCWDjTK4SiS8atEzXi6vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUawtKcgBBQ1QBeO7A3xtQnUNseYkwHwYDVR0j BBgwFoAUiVjrHqACLe94PRfxxbbwxUsPXx4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Mjg4NzYyYy0zZmM1LTQ5Y2MtOTQ5YS01OTRiMzMxYTEzYTEvMC84OTU4RUIxRUEw MDIyREVGNzgzRDE3RjFDNUI2RjBDNTRCMEY1RjFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYwQzU0QjBG NUYxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDI4ODc2MmMtM2ZjNS00OWNjLTk0 OWEtNTk0YjMzMWExM2ExLzAvODk1OEVCMUVBMDAyMkRFRjc4M0QxN0YxQzVCNkYw QzU0QjBGNUYxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvKrY/1HozOGj531o5vD9ePyhvz+g9RlJDO ocb7p7769+py8CFSPpRA1cUAyNR8QsqxV12QuLs06dOteI6XdzuUnz5KRiPllhxQ ZlcW6L17dU6J6jfKNsapQ9U+yok11l2XnBMnoOHHX9J4fsEQBFmeyT0/s0Lx1KPt hqx/sPpfbDpR/cqr8fsKgaQLK7LB19ASCDdzpGieR4v715VQ2N6EuPKysV0h1iBM B++8/sk9unCAuw3SOnaq5qRbbxkTDx5YrWy1FDyCubJX+Tc6pCFq1TpELFUD8Bzz pWQWDwE9rBRufTdkBNxKTqrtjl0Tm7mLz43GcJ4lS0+82Tq0E+8= -----END CERTIFICATE-----Generated at Sun Dec 7 04:36:13 2025 by rpki-client