This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft File: 8DAFDBD814B60F568505D65130E4661FCD7D665F.mft (raw, json) Hash identifier: i25rI8n+pqXP/XMoUxjjsAbnDWHJrf2kQR/+PlcYXS0= Subject key identifier: 80:CB:76:4E:46:82:54:80:EF:2C:39:37:5F:03:96:CF:24:4F:71:45 Authority key identifier: 8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F Certificate issuer: /CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Certificate serial: 0C74A7476A2EDA0F5A922D767A30BC27FB4064C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft Manifest number: 025B Signing time: Sat 06 Dec 2025 05:52:00 +0000 Manifest this update: Sat 06 Dec 2025 05:47:00 +0000 Manifest next update: Tue 09 Dec 2025 17:31:00 +0000 Files and hashes: 1: 3130332e3136382e3139302e302f32342d3234203d3e20313432333139.roa (hash: /4nmgLfcCNw5dynQDZtGk4IBxc3BmveSB9gkF4R0RCk=) 2: 8DAFDBD814B60F568505D65130E4661FCD7D665F.crl (hash: djOTNRJwHarzGEezRNPmBVNnhlND0Ye0RYuQ5iI3V4U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:74:a7:47:6a:2e:da:0f:5a:92:2d:76:7a:30:bc:27:fb:40:64:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DAFDBD814B60F568505D65130E4661FCD7D665F Validity Not Before: Dec 6 05:47:00 2025 GMT Not After : Dec 9 17:31:00 2025 GMT Subject: CN=80CB764E46825480EF2C39375F0396CF244F7145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5a:2b:71:c2:85:10:27:3d:01:f4:b7:41:cf: 7a:fb:29:a2:b1:45:58:e4:bf:ee:cd:a7:b6:82:8a: 01:38:e6:fc:30:56:d9:6b:d0:59:e2:a0:cf:bd:3f: 8c:35:e1:6f:d9:27:80:b2:58:60:23:c0:d5:83:65: ae:83:1a:8e:09:8f:1e:36:6a:f6:87:41:58:9c:fc: 35:c8:76:a7:65:de:d7:f3:7e:3e:2b:79:65:90:5c: 39:60:ba:3a:77:55:3d:28:d2:aa:7c:22:56:76:36: 4b:6f:d9:b1:64:f8:4c:64:3f:d1:5e:75:a9:a6:c4: 41:f6:9e:5f:2d:ce:33:d4:09:89:f0:1f:2b:42:bd: ba:f0:ce:fc:57:65:e8:0f:18:28:19:f1:df:f6:2d: 94:99:da:9a:18:b8:cf:9b:5d:75:d7:cc:07:5d:94: 66:dd:47:0c:7e:52:f0:54:ac:ee:06:d5:a4:fe:ad: 65:45:32:8b:69:96:46:4f:b2:3d:eb:a3:2a:f3:4d: dc:9c:1c:51:ab:05:ed:46:88:5a:be:43:2f:78:c5: dc:8c:c1:6c:7a:e7:ce:04:6a:71:79:fa:6f:13:52: 2c:ae:42:29:70:e9:20:63:4c:26:2b:1b:ba:b0:17: 59:fc:5c:2f:f9:b1:79:0a:25:14:24:02:00:53:50: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CB:76:4E:46:82:54:80:EF:2C:39:37:5F:03:96:CF:24:4F:71:45 X509v3 Authority Key Identifier: keyid:8D:AF:DB:D8:14:B6:0F:56:85:05:D6:51:30:E4:66:1F:CD:7D:66:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DAFDBD814B60F568505D65130E4661FCD7D665F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e9b0bad-66b9-4f28-a7c5-e9a9fe120ad7/0/8DAFDBD814B60F568505D65130E4661FCD7D665F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d4:93:26:05:3b:ad:f2:34:9f:ff:83:41:a1:f9:5d:5e:a9: f0:2a:ba:68:aa:b2:74:a4:cd:2e:86:3d:e6:84:d1:97:30:9e: 60:e1:c3:aa:8c:90:c9:9b:f0:77:ec:26:40:a8:41:f1:6c:7e: cb:73:51:bc:64:be:38:e0:75:04:a9:b9:15:d9:9d:0e:2c:02: 9d:bc:a0:04:53:dc:62:86:74:08:55:e5:fb:19:36:f7:52:3c: 6a:1a:d6:57:2c:b3:22:d5:92:87:7f:fe:0d:a4:55:3c:b8:73: f7:be:7b:12:bb:4c:91:00:54:e5:ce:1a:8a:8a:13:7d:79:35: da:b3:1a:ef:78:f6:e0:1b:16:41:57:d2:37:61:1f:03:41:91: 66:72:3d:05:d9:e5:ec:c4:f8:c1:a4:88:01:6c:87:38:32:9f: ea:8c:60:ff:e4:9c:f9:85:28:d0:a4:85:67:f6:f4:5d:68:97: 6f:16:31:c9:c1:85:75:b2:b6:ca:34:47:e1:56:67:8c:95:5b: b5:34:62:7f:39:7d:66:f7:8a:f5:fe:29:ec:a5:be:9b:e2:ea: 15:7f:34:24:01:ed:c5:8a:5b:63:3e:55:bd:f9:69:87:c1:8f: 89:55:a6:f1:02:0d:53:d1:4e:36:0e:67:3b:0c:ac:f5:9b:d2: c9:3e:c6:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHSnR2ou2g9aki12ejC8J/tAZMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZD RDdENjY1RjAeFw0yNTEyMDYwNTQ3MDBaFw0yNTEyMDkxNzMxMDBaMDMxMTAvBgNV BAMTKDgwQ0I3NjRFNDY4MjU0ODBFRjJDMzkzNzVGMDM5NkNGMjQ0RjcxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWitxwoUQJz0B9LdBz3r7KaKx RVjkv+7Np7aCigE45vwwVtlr0FnioM+9P4w14W/ZJ4CyWGAjwNWDZa6DGo4Jjx42 avaHQVic/DXIdqdl3tfzfj4reWWQXDlgujp3VT0o0qp8IlZ2Nktv2bFk+ExkP9Fe dammxEH2nl8tzjPUCYnwHytCvbrwzvxXZegPGCgZ8d/2LZSZ2poYuM+bXXXXzAdd lGbdRwx+UvBUrO4G1aT+rWVFMotplkZPsj3royrzTdycHFGrBe1GiFq+Qy94xdyM wWx6584EanF5+m8TUiyuQilw6SBjTCYrG7qwF1n8XC/5sXkKJRQkAgBTUFMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgMt2TkaCVIDvLDk3XwOWzyRPcUUwHwYDVR0j BBgwFoAUja/b2BS2D1aFBdZRMORmH819Zl8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTliMGJhZC02NmI5LTRmMjgtYTdjNS1lOWE5ZmUxMjBhZDcvMC84REFGREJEODE0 QjYwRjU2ODUwNUQ2NTEzMEU0NjYxRkNEN0Q2NjVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2MUZDRDdE NjY1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU5YjBiYWQtNjZiOS00ZjI4LWE3 YzUtZTlhOWZlMTIwYWQ3LzAvOERBRkRCRDgxNEI2MEY1Njg1MDVENjUxMzBFNDY2 MUZDRDdENjY1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfUkyYFO63yNJ//g0Gh+V1eqfAqumiqsnSk zS6GPeaE0ZcwnmDhw6qMkMmb8HfsJkCoQfFsfstzUbxkvjjgdQSpuRXZnQ4sAp28 oART3GKGdAhV5fsZNvdSPGoa1lcssyLVkod//g2kVTy4c/e+exK7TJEAVOXOGoqK E315NdqzGu949uAbFkFX0jdhHwNBkWZyPQXZ5ezE+MGkiAFshzgyn+qMYP/knPmF KNCkhWf29F1ol28WMcnBhXWytso0R+FWZ4yVW7U0Yn85fWb3ivX+Keylvpvi6hV/ NCQB7cWKW2M+Vb35aYfBj4lVpvECDVPRTjYOZzsMrPWb0sk+xoI= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:59 2025 by rpki-client