This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft (raw, json) Hash identifier: aqr3UdOShOw+866Y2RMK4JAzTP8ealm408ghvDUexlw= Subject key identifier: D1:1B:25:07:73:17:4D:74:19:CE:96:17:50:EC:A3:C8:54:51:97:79 Authority key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Certificate issuer: /CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Certificate serial: 0FE81C1F1C845112D53DA86DFCE14AF7439B0CDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft Manifest number: 01FF Signing time: Sat 06 Dec 2025 22:02:06 +0000 Manifest this update: Sat 06 Dec 2025 21:57:06 +0000 Manifest next update: Wed 10 Dec 2025 07:49:06 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2CDFzM/b08FBAmMsE5mkOznd4mOppWCjC4ZNYfj8Grs=) 2: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl (hash: JnNbXwYk8dZ6V84gITj5MeRPMS+JSBMWAZ9Uy9oUZIM=) 3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: AlVmqpfL/WFpHYoBKjxWx/LAHevtz/DHHIwmIJ22kko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e8:1c:1f:1c:84:51:12:d5:3d:a8:6d:fc:e1:4a:f7:43:9b:0c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Validity Not Before: Dec 6 21:57:06 2025 GMT Not After : Dec 10 07:49:06 2025 GMT Subject: CN=D11B250773174D7419CE961750ECA3C854519779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:6d:0b:18:55:64:7e:b3:c4:1a:0d:66:1e: fb:78:95:cb:42:6b:e6:8f:b6:d4:1f:f9:8c:d9:45: 09:c5:0c:18:42:2b:2a:bd:de:e4:90:db:91:9e:c0: bf:fb:9c:50:76:66:ce:cb:74:d6:ac:78:21:4a:b3: 70:54:f9:16:85:f0:01:50:a3:18:05:f7:87:09:38: c0:56:86:ee:8f:3e:7e:f1:a7:d7:f0:6f:1c:2a:46: 60:27:55:77:ad:fe:07:4d:7b:62:8a:e2:d7:2e:46: 2d:2c:66:81:c7:7c:1a:fa:73:f1:ce:6f:86:5b:de: 77:4e:12:2f:0c:76:72:07:d2:8c:6f:27:67:80:79: 43:79:b4:62:e4:cd:70:94:29:ae:43:eb:ea:90:52: 60:f2:47:46:37:0e:da:51:6c:b5:66:77:3e:6a:dd: 74:b5:2a:47:f7:07:26:13:2b:7c:58:9f:38:0b:26: dd:80:3b:55:0c:5a:b4:61:1f:8d:49:38:fd:aa:11: c0:e1:7e:0f:ea:7d:98:61:ec:f4:4f:45:d6:42:1a: 06:9a:5d:94:f1:9b:81:45:25:75:81:cb:45:d6:1b: 93:aa:c6:83:55:51:36:5c:03:24:91:57:7e:58:aa: 02:66:2d:f0:d2:20:e4:7d:12:36:cb:45:bd:73:82: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:1B:25:07:73:17:4D:74:19:CE:96:17:50:EC:A3:C8:54:51:97:79 X509v3 Authority Key Identifier: keyid:8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0f:37:c9:66:f6:f4:4e:4b:bc:c5:20:fb:be:ca:64:5f:42: 46:aa:d3:31:14:1c:f9:e8:24:33:5c:9a:fa:14:08:f0:e0:66: 83:a1:5a:cc:3e:41:ca:f4:88:a4:6b:d4:73:61:ed:d4:3a:3c: 99:25:6f:70:24:c9:8a:54:b5:1d:6e:98:01:5e:ba:9c:c5:b6: f8:02:32:d5:55:35:09:f8:73:04:ff:a1:0e:04:45:19:49:93: 77:11:fd:dc:4b:b3:ce:94:8d:bd:66:64:d0:ec:a7:11:fe:19: 31:9d:41:85:f5:35:a5:b5:c5:80:c8:20:fb:0a:00:18:0d:a9: a6:78:7c:af:4c:70:11:22:56:0f:f0:e4:42:f1:38:9e:40:6c: 5c:f0:10:9c:9d:99:84:cb:c3:93:b6:51:fb:e6:8b:27:04:55: fe:ac:76:58:15:47:01:54:76:1e:b5:f0:10:df:e5:24:b0:2f: 29:41:79:15:e3:f7:6c:0d:ee:84:3a:63:d9:ef:1c:5a:9f:29: 90:09:81:43:b3:1f:92:93:db:65:96:fa:00:99:ea:5d:37:8d: 21:2b:26:11:ff:90:7d:55:b3:a0:3e:47:c6:db:ee:dc:d4:46: 4d:37:a0:2b:5c:6b:eb:f9:6a:33:06:cc:43:51:15:ae:2c:1f: 6b:94:2b:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+gcHxyEURLVPaht/OFK90ObDN4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlD NkE0Njg2ODAeFw0yNTEyMDYyMTU3MDZaFw0yNTEyMTAwNzQ5MDZaMDMxMTAvBgNV BAMTKEQxMUIyNTA3NzMxNzRENzQxOUNFOTYxNzUwRUNBM0M4NTQ1MTk3NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRAW0LGFVkfrPEGg1mHvt4lctC a+aPttQf+YzZRQnFDBhCKyq93uSQ25GewL/7nFB2Zs7LdNaseCFKs3BU+RaF8AFQ oxgF94cJOMBWhu6PPn7xp9fwbxwqRmAnVXet/gdNe2KK4tcuRi0sZoHHfBr6c/HO b4Zb3ndOEi8MdnIH0oxvJ2eAeUN5tGLkzXCUKa5D6+qQUmDyR0Y3DtpRbLVmdz5q 3XS1Kkf3ByYTK3xYnzgLJt2AO1UMWrRhH41JOP2qEcDhfg/qfZhh7PRPRdZCGgaa XZTxm4FFJXWBy0XWG5OqxoNVUTZcAySRV35YqgJmLfDSIOR9EjbLRb1zgrEPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0RslB3MXTXQZzpYXUOyjyFRRl3kwHwYDVR0j BBgwFoAUjZVs8d9WhQyc9hc9+QFBqcakaGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMC84RDk1NkNGMURG NTY4NTBDOUNGNjE3M0RGOTAxNDFBOUM2QTQ2ODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQxQTlDNkE0 Njg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvOEQ5NTZDRjFERjU2ODUwQzlDRjYxNzNERjkwMTQx QTlDNkE0Njg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMPN8lm9vROS7zFIPu+ymRfQkaq0zEUHPno JDNcmvoUCPDgZoOhWsw+Qcr0iKRr1HNh7dQ6PJklb3AkyYpUtR1umAFeupzFtvgC MtVVNQn4cwT/oQ4ERRlJk3cR/dxLs86Ujb1mZNDspxH+GTGdQYX1NaW1xYDIIPsK ABgNqaZ4fK9McBEiVg/w5ELxOJ5AbFzwEJydmYTLw5O2UfvmiycEVf6sdlgVRwFU dh618BDf5SSwLylBeRXj92wN7oQ6Y9nvHFqfKZAJgUOzH5KT22WW+gCZ6l03jSEr JhH/kH1Vs6A+R8bb7tzURk03oCtca+v5ajMGzENRFa4sH2uUK8c= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:58 2025 by rpki-client