This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft File: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft (raw, json) Hash identifier: fg/IIkk3iooH8NvhnWo4lSwkJknyE+dwBKX3F2H9+jc= Subject key identifier: C9:EA:90:D9:9C:F7:70:5F:32:D6:8B:80:B2:7B:47:CA:FE:4A:1D:B1 Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 Certificate issuer: /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Certificate serial: 0F3DDBBD810EC9E9B5044703D6BAA0D5F1034A1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft Manifest number: 024C Signing time: Sat 06 Dec 2025 22:31:38 +0000 Manifest this update: Sat 06 Dec 2025 22:26:38 +0000 Manifest next update: Wed 10 Dec 2025 00:52:38 +0000 Files and hashes: 1: 3130332e3138362e3139352e302f32342d3234203d3e203438343635.roa (hash: 9nS/psP6uP/NgK0GsDYJioeVISZGFYj6wNXBWyPXoig=) 2: 3130332e3138362e3139342e302f32342d3234203d3e20313439373132.roa (hash: uzPIoUslKlL0kCJ3Mr8GlDHsPvFS4WU5l7ZsMhLtDsU=) 3: 8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl (hash: A5KrYIrR4rSSrdRtmU270YC7tqH1yh5iVbwVJ7vFHfU=) 4: 3130332e3138362e3139342e302f32332d3234203d3e20313439373132.roa (hash: S9MFaIq/j9TJ63dOJfnzWaZP6j2QyCQRqTU45iGYFSM=) 5: 3130332e3138362e3139342e302f32332d3233203d3e20313439373132.roa (hash: swBTOVyl/nQxFd9eqJx6PzMQ7ExSAWTFjV6g64/KqU0=) 6: 3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (hash: nuw56AWJFQx7bF2mLso7Fp7ypapHW7bx18alMUZHm9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3d:db:bd:81:0e:c9:e9:b5:04:47:03:d6:ba:a0:d5:f1:03:4a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59 Validity Not Before: Dec 6 22:26:38 2025 GMT Not After : Dec 10 00:52:38 2025 GMT Subject: CN=C9EA90D99CF7705F32D68B80B27B47CAFE4A1DB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6e:e5:43:b3:3d:03:15:b6:e5:77:bb:7a:b0: 59:dc:60:a3:0b:80:4a:4e:3e:81:40:ae:54:e3:38: d8:b0:7e:78:50:b6:c6:9e:b0:d5:02:69:e7:ce:80: 5c:a7:bd:b7:3b:fe:68:8a:d0:d6:a6:9e:67:3e:87: 02:75:2c:a0:51:8f:2a:d2:1e:2d:f7:b6:45:3f:2f: 28:cf:49:a8:64:76:95:b1:91:cc:e8:2a:dc:f5:da: 23:00:9b:ee:2c:3c:e3:4f:22:d7:ec:2b:7b:06:8b: dd:05:63:f8:53:8f:8f:b0:48:f2:a3:0d:e2:f9:b3: 63:e8:03:6e:90:aa:7e:7e:a9:be:6d:ea:69:13:1b: d1:62:4f:71:24:f4:d6:bc:f3:f4:d9:21:56:34:b0: 12:ef:64:24:44:53:bc:ad:d5:02:af:f0:a0:df:11: 92:28:f3:bc:43:86:71:5e:08:3d:28:7d:d3:e4:3e: 1a:fb:56:b9:dc:71:99:d7:5f:c2:17:fc:b2:60:b1: 17:34:bb:18:81:fd:98:a4:2b:15:c2:e3:97:ed:ea: f3:02:a9:fe:26:3a:35:c4:c3:86:6e:6b:1d:c6:76: dd:4f:20:e0:eb:81:9d:47:9b:99:47:5c:d4:54:42: d7:00:c6:c9:8e:5f:ae:38:6c:23:25:1c:b9:20:b8: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EA:90:D9:9C:F7:70:5F:32:D6:8B:80:B2:7B:47:CA:FE:4A:1D:B1 X509v3 Authority Key Identifier: keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c1:19:9a:b4:a7:19:b2:b5:1e:bc:3c:e6:44:78:30:c5:e9: 2d:67:06:27:8c:05:b0:0d:c4:7d:a5:e2:fa:99:cf:23:2b:8e: d3:02:98:4a:8a:dc:b7:8f:9f:3b:f7:18:be:16:70:fc:74:0c: d4:c6:fa:f4:98:48:48:1c:38:68:b1:e6:82:a2:b8:1f:d6:92: 29:6b:29:e1:29:4c:16:e6:9b:9f:4d:22:cd:23:e0:92:5b:84: da:ca:71:f8:e8:b5:b0:e0:ec:35:fe:a0:7c:25:56:8e:65:7e: f8:eb:71:23:7d:e6:bd:97:ed:3a:8f:55:5f:11:b0:2b:85:cc: 8e:8e:c5:e1:18:68:ef:a7:6c:aa:6b:47:23:24:6d:8e:b5:35: 8b:05:50:5e:00:92:1d:fc:04:fb:0d:fc:d1:46:a0:36:5f:f1: a0:94:b9:16:61:c4:94:82:7c:4a:36:22:54:09:72:23:b8:c1: e5:db:cc:5b:82:1c:a8:4c:9a:a9:52:b3:59:e1:6c:52:32:09: 9c:49:56:c0:50:8b:b5:44:f9:e2:da:a4:ab:d5:62:96:86:83: c1:74:71:28:ee:64:f8:7e:4f:61:89:ba:d5:f9:fe:3e:b4:8f: 1d:2e:e0:9b:33:29:ea:8a:b6:25:c4:7f:95:d2:7b:6f:42:21: dd:7c:c7:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDz3bvYEOyem1BEcD1rqg1fEDShowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhB MDlBNUY1OTAeFw0yNTEyMDYyMjI2MzhaFw0yNTEyMTAwMDUyMzhaMDMxMTAvBgNV BAMTKEM5RUE5MEQ5OUNGNzcwNUYzMkQ2OEI4MEIyN0I0N0NBRkU0QTFEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcbuVDsz0DFbbld7t6sFncYKML gEpOPoFArlTjONiwfnhQtsaesNUCaefOgFynvbc7/miK0Namnmc+hwJ1LKBRjyrS Hi33tkU/LyjPSahkdpWxkczoKtz12iMAm+4sPONPItfsK3sGi90FY/hTj4+wSPKj DeL5s2PoA26Qqn5+qb5t6mkTG9FiT3Ek9Na88/TZIVY0sBLvZCREU7yt1QKv8KDf EZIo87xDhnFeCD0ofdPkPhr7VrnccZnXX8IX/LJgsRc0uxiB/ZikKxXC45ft6vMC qf4mOjXEw4Zuax3Gdt1PIODrgZ1Hm5lHXNRUQtcAxsmOX644bCMlHLkguIsZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyeqQ2Zz3cF8y1ouAsntHyv5KHbEwHwYDVR0j BBgwFoAUjPsifaHvUdsjNku6A00PaKCaX1kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjUyZWFkMy1kYzhmLTRkODYtYWZjZi1hMTQwZTViODc1MzIvMC84Q0ZCMjI3REEx RUY1MURCMjMzNjRCQkEwMzREMEY2OEEwOUE1RjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBGNjhBMDlB NUY1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI1MmVhZDMtZGM4Zi00ZDg2LWFm Y2YtYTE0MGU1Yjg3NTMyLzAvOENGQjIyN0RBMUVGNTFEQjIzMzY0QkJBMDM0RDBG NjhBMDlBNUY1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7BGZq0pxmytR68POZEeDDF6S1nBieMBbAN xH2l4vqZzyMrjtMCmEqK3LePnzv3GL4WcPx0DNTG+vSYSEgcOGix5oKiuB/Wkilr KeEpTBbmm59NIs0j4JJbhNrKcfjotbDg7DX+oHwlVo5lfvjrcSN95r2X7TqPVV8R sCuFzI6OxeEYaO+nbKprRyMkbY61NYsFUF4Akh38BPsN/NFGoDZf8aCUuRZhxJSC fEo2IlQJciO4weXbzFuCHKhMmqlSs1nhbFIyCZxJVsBQi7VE+eLapKvVYpaGg8F0 cSjuZPh+T2GJutX5/j60jx0u4JszKeqKtiXEf5XSe29CId18x14= -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:07 2025 by rpki-client