This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft File: 8C888E996588527BC5EF8ABD293676C3463A1A22.mft (raw, json) Hash identifier: F8GCKb12gjewhNcrsV00gu1ON2x5jYt5tpsk8+mDS7g= Subject key identifier: 28:1C:CA:29:98:1E:2D:97:0B:11:7F:DB:10:59:83:52:C5:E8:CC:6C Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 Certificate issuer: /CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Certificate serial: 28ADC211247388CB380220D3044166FE75549989 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft Manifest number: 025F Signing time: Fri 05 Dec 2025 21:51:40 +0000 Manifest this update: Fri 05 Dec 2025 21:46:40 +0000 Manifest next update: Tue 09 Dec 2025 05:40:40 +0000 Files and hashes: 1: 323430313a383034303a3a2f33322d3332203d3e20313336313237.roa (hash: UuD6w5FXiXpEb3WA0CSDEKfMUpwCYuxys7TXvAGTTaE=) 2: 3130332e39372e352e302f32342d3234203d3e20313336313237.roa (hash: WKEiaTlm3HRRnumgx69gRc0fNHyTzs1yLm0l6WuuEfo=) 3: 3130332e39372e362e302f32342d3234203d3e20313336313237.roa (hash: TtoAt5XF5k/VvO7s/IJgg3qpfYPoYBpMQ3uw/EaHESY=) 4: 8C888E996588527BC5EF8ABD293676C3463A1A22.crl (hash: VA8+LjsLZJdfkY3GOGh5RrlphW0K/dIu3WTliq1//0Q=) 5: 3130332e39372e342e302f32322d3234203d3e20313336313237.roa (hash: Fuo7Zv6Qy+uY4bdbE0UwMy6jWa9ZEF+DnD6ctpiueL4=) 6: 3130332e39372e372e302f32342d3234203d3e20313336313237.roa (hash: Qqqk2T1cKP78pedxPHc7hCxMQjf7DnhA0KfJusumKno=) 7: 3130332e39372e342e302f32342d3234203d3e20313336313237.roa (hash: oyn1Uio0Qvr9sm/GPuAcnqkMPKHi72fQr6RvUU829kw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:40:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:ad:c2:11:24:73:88:cb:38:02:20:d3:04:41:66:fe:75:54:99:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22 Validity Not Before: Dec 5 21:46:40 2025 GMT Not After : Dec 9 05:40:40 2025 GMT Subject: CN=281CCA29981E2D970B117FDB10598352C5E8CC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:37:7e:f3:f0:bf:35:ee:5c:b1:61:0a:14:0b: aa:09:cc:3d:d4:1e:78:db:f9:b6:82:d4:bf:ac:f4: cb:6a:32:ff:ea:86:fa:9a:a5:30:18:db:c1:fc:83: b4:7c:12:81:bf:b4:6a:aa:2d:ea:2f:7e:56:95:2d: 44:0c:84:0c:89:ad:5e:d9:b0:f1:56:f7:94:19:60: 12:6d:bb:21:e1:3c:92:e2:fe:0a:60:83:bb:1b:9d: 62:10:c7:76:c6:05:d7:8b:1a:65:2f:27:5a:be:e4: 75:15:6c:ec:0d:83:ea:e5:e0:e3:92:27:87:00:85: 16:af:89:61:b0:96:45:cd:45:72:2c:25:2b:04:76: 37:49:6d:5b:99:f6:1d:db:8d:26:e0:b8:bb:d3:5d: 97:03:52:e8:74:14:f0:73:d1:1c:40:71:d1:ea:67: b4:c6:3d:68:ef:f0:47:17:5c:f4:8e:ba:1d:ac:cc: 56:c8:16:37:57:f5:2b:12:79:d3:46:a6:71:31:e5: fa:d1:97:fe:f0:e0:f2:30:a8:e7:1a:c0:08:3b:11: 11:9a:ed:c1:41:00:ba:4a:46:a4:d5:a2:43:21:e9: a4:84:78:34:ba:f2:a4:05:2a:78:cb:4f:4d:5a:b7: fc:94:7c:ca:7a:75:d1:6f:fd:5a:2f:26:46:18:de: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1C:CA:29:98:1E:2D:97:0B:11:7F:DB:10:59:83:52:C5:E8:CC:6C X509v3 Authority Key Identifier: keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:12:0f:95:0a:44:67:9a:cc:27:36:bb:5b:60:1b:48:a2:3f: b3:dd:f0:7e:e6:64:98:78:7d:a1:1b:1d:d7:49:15:ae:a1:5e: ea:29:6b:83:cf:9d:82:b5:e3:b3:5b:a2:d8:d8:92:c3:1c:67: 37:0f:e7:c2:00:2b:58:e1:f8:ee:75:5d:ff:7d:5c:4d:f5:93: bf:fb:51:eb:a5:89:b9:bf:76:03:a1:61:ec:81:25:1d:61:85: 7f:ae:ec:b6:09:14:89:1a:cd:f4:50:9e:11:a9:a5:08:1a:cc: 7c:af:4f:7d:5a:64:a7:b9:c8:49:b4:82:af:22:9d:3c:a1:d4: 53:f4:b0:cb:58:35:52:e9:31:1e:ce:e1:e0:39:80:11:b4:62: c3:f6:b4:99:be:28:db:b8:c0:cf:17:91:12:8c:dc:49:28:ed: ee:00:a3:98:fe:db:05:1f:b8:bd:94:32:f7:df:88:72:42:80: 71:59:65:fd:f0:49:00:bf:0c:bc:a1:3a:54:61:7d:b2:5b:14: 66:9b:75:af:9b:b9:b9:08:07:84:e7:86:c6:9e:3f:41:c2:75: b9:8b:e5:20:56:99:0f:81:09:83:41:b2:81:19:eb:41:f0:6b: c8:be:48:05:fa:6b:0a:2c:70:ba:36:18:38:0b:f3:b0:04:67: 4c:80:bd:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKK3CESRziMs4AiDTBEFm/nVUmYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0 NjNBMUEyMjAeFw0yNTEyMDUyMTQ2NDBaFw0yNTEyMDkwNTQwNDBaMDMxMTAvBgNV BAMTKDI4MUNDQTI5OTgxRTJEOTcwQjExN0ZEQjEwNTk4MzUyQzVFOENDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqN37z8L817lyxYQoUC6oJzD3U Hnjb+baC1L+s9MtqMv/qhvqapTAY28H8g7R8EoG/tGqqLeovflaVLUQMhAyJrV7Z sPFW95QZYBJtuyHhPJLi/gpgg7sbnWIQx3bGBdeLGmUvJ1q+5HUVbOwNg+rl4OOS J4cAhRaviWGwlkXNRXIsJSsEdjdJbVuZ9h3bjSbguLvTXZcDUuh0FPBz0RxAcdHq Z7TGPWjv8EcXXPSOuh2szFbIFjdX9SsSedNGpnEx5frRl/7w4PIwqOcawAg7ERGa 7cFBALpKRqTVokMh6aSEeDS68qQFKnjLT01at/yUfMp6ddFv/VovJkYY3s0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKBzKKZgeLZcLEX/bEFmDUsXozGwwHwYDVR0j BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1 ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB MUEyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiMjczMDMtOWUzZC00ZDQyLWFm MjUtNmEwZjExODA4ZjI3LzAvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2 QzM0NjNBMUEyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcSD5UKRGeazCc2u1tgG0iiP7Pd8H7mZJh4 faEbHddJFa6hXuopa4PPnYK147NbotjYksMcZzcP58IAK1jh+O51Xf99XE31k7/7 Ueulibm/dgOhYeyBJR1hhX+u7LYJFIkazfRQnhGppQgazHyvT31aZKe5yEm0gq8i nTyh1FP0sMtYNVLpMR7O4eA5gBG0YsP2tJm+KNu4wM8XkRKM3Eko7e4Ao5j+2wUf uL2UMvffiHJCgHFZZf3wSQC/DLyhOlRhfbJbFGabda+bubkIB4TnhsaeP0HCdbmL 5SBWmQ+BCYNBsoEZ60Hwa8i+SAX6awoscLo2GDgL87AEZ0yAvcs= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:44 2025 by rpki-client