This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft File: 8E9447BD6E58024BA4182380EFF3743772CEBED8.mft (raw, json) Hash identifier: hw5zr/aOl0CphmLnIJfiyUx80bKMBdFu4MVZMCKIXak= Subject key identifier: 13:15:86:8F:E2:BE:77:45:73:B3:6B:0C:CB:A9:15:20:B6:9A:FF:F5 Authority key identifier: 8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 Certificate issuer: /CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Certificate serial: 72F7B742734F40D827EAD2CF141AAC92F0063F25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft Manifest number: 020C Signing time: Sat 06 Dec 2025 13:42:17 +0000 Manifest this update: Sat 06 Dec 2025 13:37:17 +0000 Manifest next update: Tue 09 Dec 2025 23:00:17 +0000 Files and hashes: 1: 3130332e3136302e33372e302f32342d3234203d3e20313431353834.roa (hash: +IMY2tCHHq00hfSj0qqAGK3VJsbjGklWL5sab/AdO2Q=) 2: 8E9447BD6E58024BA4182380EFF3743772CEBED8.crl (hash: sHpcBngtQSbrn+jxp6l/4sxSiYwWZj+6qTjZF4NFOSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f7:b7:42:73:4f:40:d8:27:ea:d2:cf:14:1a:ac:92:f0:06:3f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E9447BD6E58024BA4182380EFF3743772CEBED8 Validity Not Before: Dec 6 13:37:17 2025 GMT Not After : Dec 9 23:00:17 2025 GMT Subject: CN=1315868FE2BE774573B36B0CCBA91520B69AFFF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:b2:56:41:91:0f:74:23:8f:f5:d1:87:f2: f0:23:cf:de:03:20:3e:bd:54:8d:8e:22:b5:ba:4b: ee:d1:f9:d8:96:cb:7f:50:ff:41:84:0a:07:3e:31: e9:fc:c7:35:a9:29:32:70:47:cf:83:7a:7b:9d:58: d6:17:a2:00:15:32:13:bc:73:d4:2b:a9:e9:c5:3e: 5a:dd:95:8e:ec:91:b6:bd:43:56:bb:46:c3:0d:c4: 92:73:29:dc:d5:f0:af:19:e9:4f:39:ec:12:a7:69: a4:93:7b:11:69:ed:e9:82:61:b1:24:ad:3d:77:ae: d4:6b:02:57:76:d6:fa:ac:97:92:da:4e:99:57:b1: ab:4f:7f:cc:f1:01:c0:35:91:86:ee:c5:14:23:8c: 77:38:b9:2d:ed:27:d6:53:97:f3:92:f5:ba:5d:67: d0:f2:62:eb:61:e4:61:02:2f:f2:66:c7:a5:73:f0: 7d:bf:fd:1d:b5:f7:02:ba:0c:67:40:25:ea:6c:3c: cb:b4:e9:b2:8d:a3:be:c4:f6:79:1c:d4:b4:98:f0: 69:06:17:f4:6e:50:c3:d4:78:ae:b1:96:e5:75:d5: 9e:7a:47:55:7d:1b:ec:d0:f8:c2:8f:10:2f:c4:02: 98:63:7c:d9:61:4e:c9:c4:23:54:31:71:61:c8:68: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:15:86:8F:E2:BE:77:45:73:B3:6B:0C:CB:A9:15:20:B6:9A:FF:F5 X509v3 Authority Key Identifier: keyid:8E:94:47:BD:6E:58:02:4B:A4:18:23:80:EF:F3:74:37:72:CE:BE:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E9447BD6E58024BA4182380EFF3743772CEBED8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7846fed7-f88e-48ea-a6d1-6f756bcf8db6/0/8E9447BD6E58024BA4182380EFF3743772CEBED8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:59:63:f2:13:de:b3:dc:04:d0:33:0f:93:3f:41:33:f8:4e: 98:50:e6:f6:7c:76:8d:8f:55:7f:10:f0:6e:77:20:62:e9:ce: 10:ac:90:36:e9:c6:9e:3f:73:89:45:b7:e9:d3:55:b0:a3:d8: fd:fe:65:c8:21:7c:21:de:72:33:50:db:42:02:bb:98:df:a8: 9f:9a:e2:fb:3a:bf:59:62:44:f3:74:e6:6f:fd:f1:24:70:c4: ab:46:63:d5:e5:ad:29:55:7e:6e:e8:b5:2a:5b:25:69:4d:23: 9b:05:71:fe:9f:d5:e3:98:8c:27:a5:60:7f:af:2d:7c:74:d1: e7:1f:db:07:48:54:5f:fc:c0:c1:43:eb:60:95:82:e2:e8:12: 03:a0:52:c0:3d:70:03:19:14:08:27:24:b9:f5:67:87:33:d2: f0:a7:1b:1b:1e:64:ac:73:18:6e:48:c6:1b:42:eb:25:ad:4b: 7c:b5:1e:5c:18:4d:a5:37:aa:c2:10:dd:e9:f4:83:e7:07:4e: f7:e2:23:40:cc:90:d4:c7:1a:c6:f8:aa:2a:70:4a:46:96:e0: c4:4a:aa:b5:62:d8:ce:db:94:bf:91:50:94:1d:95:af:cf:6a: 88:77:95:16:f6:ae:62:1c:f2:0f:8e:ff:61:11:6d:29:39:b5: 49:15:f4:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcve3QnNPQNgn6tLPFBqskvAGPyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3 MkNFQkVEODAeFw0yNTEyMDYxMzM3MTdaFw0yNTEyMDkyMzAwMTdaMDMxMTAvBgNV BAMTKDEzMTU4NjhGRTJCRTc3NDU3M0IzNkIwQ0NCQTkxNTIwQjY5QUZGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbbJWQZEPdCOP9dGH8vAjz94D ID69VI2OIrW6S+7R+diWy39Q/0GECgc+Men8xzWpKTJwR8+DenudWNYXogAVMhO8 c9QrqenFPlrdlY7skba9Q1a7RsMNxJJzKdzV8K8Z6U857BKnaaSTexFp7emCYbEk rT13rtRrAld21vqsl5LaTplXsatPf8zxAcA1kYbuxRQjjHc4uS3tJ9ZTl/OS9bpd Z9DyYuth5GECL/Jmx6Vz8H2//R219wK6DGdAJepsPMu06bKNo77E9nkc1LSY8GkG F/RuUMPUeK6xluV11Z56R1V9G+zQ+MKPEC/EAphjfNlhTsnEI1QxcWHIaG15AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUExWGj+K+d0Vzs2sMy6kVILaa//UwHwYDVR0j BBgwFoAUjpRHvW5YAkukGCOA7/N0N3LOvtgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODQ2ZmVkNy1mODhlLTQ4ZWEtYTZkMS02Zjc1NmJjZjhkYjYvMC84RTk0NDdCRDZF NTgwMjRCQTQxODIzODBFRkYzNzQzNzcyQ0VCRUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0Mzc3MkNF QkVEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg0NmZlZDctZjg4ZS00OGVhLWE2 ZDEtNmY3NTZiY2Y4ZGI2LzAvOEU5NDQ3QkQ2RTU4MDI0QkE0MTgyMzgwRUZGMzc0 Mzc3MkNFQkVEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBZY/IT3rPcBNAzD5M/QTP4TphQ5vZ8do2P VX8Q8G53IGLpzhCskDbpxp4/c4lFt+nTVbCj2P3+ZcghfCHecjNQ20ICu5jfqJ+a 4vs6v1liRPN05m/98SRwxKtGY9XlrSlVfm7otSpbJWlNI5sFcf6f1eOYjCelYH+v LXx00ecf2wdIVF/8wMFD62CVguLoEgOgUsA9cAMZFAgnJLn1Z4cz0vCnGxseZKxz GG5IxhtC6yWtS3y1HlwYTaU3qsIQ3en0g+cHTvfiI0DMkNTHGsb4qipwSkaW4MRK qrVi2M7blL+RUJQdla/Paoh3lRb2rmIc8g+O/2ERbSk5tUkV9DU= -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:06 2025 by rpki-client