This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: 8knbmWNw9lf0+Z4eY4WkAseJk6KSS9ROP0Gk0jQvc2I= Subject key identifier: 6B:16:84:F4:BC:6E:DC:42:C7:4E:09:7E:42:6B:47:CB:BD:F0:FC:38 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 27E70C086CA767592D71A69D41025C1C23637CE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 00:55:56 +0000 Manifest next update: Tue 09 Dec 2025 08:03:56 +0000 Files and hashes: 1: 3130332e3231362e3130352e302f32342d3234203d3e20313531353830.roa (hash: LW5rOerEeQ4o2LL00sXUmEen9sAHKxhrciVztv4Q/SE=) 2: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: 3qMyEsdN+EzfKfSqeHznjrHI2zdQpPd1LHcHeaoXMCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 08:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e7:0c:08:6c:a7:67:59:2d:71:a6:9d:41:02:5c:1c:23:63:7c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Dec 6 00:55:56 2025 GMT Not After : Dec 9 08:03:56 2025 GMT Subject: CN=6B1684F4BC6EDC42C74E097E426B47CBBDF0FC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4e:a4:65:53:69:f2:6d:30:a9:e6:8c:a0:d2: 8d:46:69:98:c9:91:b8:53:2c:81:82:90:30:77:23: 1c:0b:2e:6b:ea:7f:b4:68:1e:1c:90:b0:8a:19:94: ba:07:be:a3:f5:67:8a:19:b4:62:a0:6a:32:2d:40: e7:48:2b:26:31:e8:d1:95:60:c4:99:42:35:36:8a: 5d:72:74:e1:82:19:95:c2:b8:56:86:fd:29:a9:6b: 1c:0d:be:b5:5f:3f:67:3e:55:03:a7:a7:d3:d4:78: 69:2f:de:7d:1d:9a:06:11:e9:97:c4:69:c2:53:c3: d4:9d:49:42:c6:e5:70:d8:c0:68:49:cd:80:6b:d5: ab:39:98:ac:ae:55:c8:a2:6e:84:60:f3:b3:2b:e6: 47:f2:dc:59:94:2b:01:2e:6f:ef:28:fc:49:70:e2: e6:d3:57:4c:8e:47:6e:2f:ac:6b:56:5e:c7:43:83: 3a:c5:af:58:52:d8:52:bd:2a:2c:72:13:f6:ed:39: bc:d6:15:7d:1d:5a:3b:4e:5f:82:ef:c6:7e:a0:e6: 50:37:3d:27:b5:8a:56:53:b9:a2:00:9b:7d:94:7c: 87:62:1d:52:aa:1e:67:e6:72:6b:64:e7:d5:33:f5: cd:9a:e4:30:3b:07:64:a9:b7:26:e7:dc:b8:13:6d: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:16:84:F4:BC:6E:DC:42:C7:4E:09:7E:42:6B:47:CB:BD:F0:FC:38 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:5c:1e:97:bb:cf:94:d9:9f:a2:00:c4:81:25:77:57:2e:0d: 02:59:4e:28:4c:8e:4b:9f:5c:88:94:bc:1e:cd:1f:ce:dc:b0: 03:9d:71:d3:a8:33:17:15:8b:b4:1d:5e:75:5d:8e:a4:75:03: 9c:69:0f:1d:16:8d:d4:c7:04:8c:c9:4b:18:58:ef:86:a2:ee: c4:76:5b:43:fc:b5:64:86:b8:40:72:6b:c5:c0:1f:5b:6b:b9: 42:08:84:6f:c8:ee:91:1d:d7:c0:6c:18:39:e0:77:e7:e3:0b: 13:a2:7f:fd:29:79:37:8b:7e:1a:42:b6:3f:58:6f:8b:d1:88: 98:4a:b4:41:d1:83:c9:86:c7:86:43:73:6f:61:ec:68:43:95: 51:6a:26:7b:07:57:74:31:01:8e:98:03:e0:ee:09:35:e4:0e: 70:9a:f3:8e:99:38:b0:04:dc:97:fe:2f:5c:70:60:05:b3:82: 2e:56:20:bf:da:86:a3:f0:62:f0:52:9c:79:9c:4b:f8:3e:04: 2d:ec:f9:21:ea:d6:16:39:5a:cb:02:0c:ec:9b:4e:51:96:68: 80:91:d9:8a:2d:c1:a6:2d:cf:48:c4:e4:20:08:b1:9f:5d:3a: 2c:b0:7f:12:69:15:ae:4b:0d:22:93:f8:bb:ba:75:35:28:f7: 24:f1:33:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+cMCGynZ1ktcaadQQJcHCNjfOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTEyMDYwMDU1NTZaFw0yNTEyMDkwODAzNTZaMDMxMTAvBgNV BAMTKDZCMTY4NEY0QkM2RURDNDJDNzRFMDk3RTQyNkI0N0NCQkRGMEZDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdTqRlU2nybTCp5oyg0o1GaZjJ kbhTLIGCkDB3IxwLLmvqf7RoHhyQsIoZlLoHvqP1Z4oZtGKgajItQOdIKyYx6NGV YMSZQjU2il1ydOGCGZXCuFaG/SmpaxwNvrVfP2c+VQOnp9PUeGkv3n0dmgYR6ZfE acJTw9SdSULG5XDYwGhJzYBr1as5mKyuVciiboRg87Mr5kfy3FmUKwEub+8o/Elw 4ubTV0yOR24vrGtWXsdDgzrFr1hS2FK9KixyE/btObzWFX0dWjtOX4Lvxn6g5lA3 PSe1ilZTuaIAm32UfIdiHVKqHmfmcmtk59Uz9c2a5DA7B2Sptybn3LgTbflxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaxaE9Lxu3ELHTgl+QmtHy73w/DgwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdcHpe7z5TZn6IAxIEld1cuDQJZTihMjkuf XIiUvB7NH87csAOdcdOoMxcVi7QdXnVdjqR1A5xpDx0WjdTHBIzJSxhY74ai7sR2 W0P8tWSGuEBya8XAH1truUIIhG/I7pEd18BsGDngd+fjCxOif/0peTeLfhpCtj9Y b4vRiJhKtEHRg8mGx4ZDc29h7GhDlVFqJnsHV3QxAY6YA+DuCTXkDnCa846ZOLAE 3Jf+L1xwYAWzgi5WIL/ahqPwYvBSnHmcS/g+BC3s+SHq1hY5WssCDOybTlGWaICR 2YotwaYtz0jE5CAIsZ9dOiywfxJpFa5LDSKT+Lu6dTUo9yTxM8Q= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:51 2025 by rpki-client