This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft File: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft (raw, json) Hash identifier: OO5BHQS9uw5hbpgw8bBSeAHm3Z3Sms8gxLQHcXPjooI= Subject key identifier: 4C:C1:94:01:7E:F4:7A:C0:8D:5E:8E:25:6D:BD:01:9A:4E:AF:A8:9C Authority key identifier: 81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD Certificate issuer: /CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Certificate serial: 4C6BE86853843847F830074A06AF5C19F5C9C4C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 06:30:03 +0000 Manifest this update: Sat 06 Dec 2025 06:25:03 +0000 Manifest next update: Tue 09 Dec 2025 17:19:03 +0000 Files and hashes: 1: 8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl (hash: L3+J97r0UGUL3bwBrCbltDo0v2N56e087/O+OeSSxWE=) 2: 3130332e362e35322e302f32322d3234203d3e203435373331.roa (hash: 6tOL4hJTfKy0QTohf2XnIaRbJ/5EvxeyWw/OGANzGm8=) 3: 323030313a6466303a62633a3a2f34382d3438203d3e203435373331.roa (hash: 0Va8dfmQpSBmOg74IAPb4RGOIS0UpCgpkBTTVh/iLok=) 4: 3138302e3233352e3134382e302f32322d3234203d3e203435373331.roa (hash: HxGB/bUslsxHfeCfoct3SORx0s0Y1RxTBE2WHAbQK5w=) 5: 3131332e32302e32382e302f32322d3234203d3e203435373331.roa (hash: 4OyDyZeEQND65aawqOInlxqrAJlZe0Z4Rsi7/2+kKVI=) 6: 34332e3232392e3234382e302f32322d3234203d3e203435373331.roa (hash: 6QYiowaUHr77b6SHtMm/wFHLHsnE4/CHR6s2UKLu4J0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:6b:e8:68:53:84:38:47:f8:30:07:4a:06:af:5c:19:f5:c9:c4:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8115D30091F8948B76AE0AAC8B4F68550DA321CD Validity Not Before: Dec 6 06:25:03 2025 GMT Not After : Dec 9 17:19:03 2025 GMT Subject: CN=4CC194017EF47AC08D5E8E256DBD019A4EAFA89C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:a2:32:eb:e1:e1:20:6f:04:be:3b:df:d7: 21:9c:de:e3:47:07:3d:af:92:a8:43:96:44:7d:b2: 56:74:e7:f9:3e:c9:6b:0c:11:a1:d1:a1:99:1d:bc: 48:43:a0:d5:a2:19:36:6c:ff:10:3c:02:86:6c:aa: ca:e8:af:26:40:e2:7a:b2:be:e5:44:85:ed:e1:3d: c3:9f:c1:02:56:2b:b0:af:9e:82:ab:73:e5:2b:9f: b7:db:03:38:6e:20:09:5b:bd:1a:c5:f5:d7:71:17: 54:13:0f:83:9e:67:aa:8e:09:94:a9:63:10:7a:61: 69:56:5e:7f:06:92:32:3b:be:9b:f4:65:7f:7d:78: 87:cc:ac:e8:63:47:ab:64:26:6a:08:f2:7e:9c:cd: e6:d2:47:03:c8:44:4f:a2:1f:76:98:f3:f9:6c:70: 83:c1:c1:42:33:1a:cf:07:90:cd:c5:49:09:57:0f: ac:2d:d8:3b:96:5e:8c:dd:9c:40:69:a3:90:a2:ff: 50:d2:08:dd:fd:77:dc:74:5b:42:f7:03:d0:e2:6a: 1c:b0:92:f0:59:94:1a:8a:1a:2c:1b:f4:89:d3:c6: c7:8b:fd:ee:1d:ca:66:08:ed:6e:11:9f:0a:ec:74: 28:f5:92:70:66:64:3d:3b:bb:ed:5c:d3:5e:ec:96: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:94:01:7E:F4:7A:C0:8D:5E:8E:25:6D:BD:01:9A:4E:AF:A8:9C X509v3 Authority Key Identifier: keyid:81:15:D3:00:91:F8:94:8B:76:AE:0A:AC:8B:4F:68:55:0D:A3:21:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8115D30091F8948B76AE0AAC8B4F68550DA321CD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bdbbc08-4e8e-44ba-a4cf-05e233dda3a5/0/8115D30091F8948B76AE0AAC8B4F68550DA321CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:70:aa:3f:03:ee:cc:86:e1:08:de:af:b9:dd:57:7c:f1:ed: 73:2a:71:26:4b:62:32:85:f0:57:3b:10:ec:14:88:9d:31:fc: 05:23:2f:a9:ba:36:6a:34:ca:c5:f4:e7:1d:5d:5c:62:f0:ba: e4:00:24:a6:cd:dc:27:6e:a9:c5:2d:03:be:3a:00:93:43:1b: 0b:86:a6:34:ec:0b:5d:a2:7a:58:f5:dc:f7:a6:9c:61:5e:14: 2f:2e:27:37:5c:f8:09:b3:46:10:63:b8:c1:67:08:f1:ce:89: 2a:cc:27:87:49:21:b5:50:77:f4:7c:71:f4:ac:2b:89:fb:7d: 54:4e:f1:b2:29:64:a7:01:6c:66:09:ae:f4:c9:ce:4a:b4:b3: ed:2a:9e:93:9b:4d:14:23:27:e1:66:f6:0c:55:ea:b0:72:60: b0:cd:de:d7:13:72:b7:b5:19:04:14:ae:8c:69:9d:0d:7e:ad: 16:67:11:45:6b:ab:8d:9b:fe:22:6d:73:68:05:b2:e4:25:a0: 35:1d:1f:f6:d7:d8:c2:57:43:38:22:dd:50:f1:f4:08:c5:42: c9:26:69:3f:06:64:f5:f7:e1:ae:16:db:c0:8f:49:7e:41:c4: 29:6a:81:26:12:c1:da:25:bc:40:e6:c3:6f:a2:12:95:f6:a4: 53:15:2a:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTGvoaFOEOEf4MAdKBq9cGfXJxMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUw REEzMjFDRDAeFw0yNTEyMDYwNjI1MDNaFw0yNTEyMDkxNzE5MDNaMDMxMTAvBgNV BAMTKDRDQzE5NDAxN0VGNDdBQzA4RDVFOEUyNTZEQkQwMTlBNEVBRkE4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDKIy6+HhIG8Evjvf1yGc3uNH Bz2vkqhDlkR9slZ05/k+yWsMEaHRoZkdvEhDoNWiGTZs/xA8AoZsqsroryZA4nqy vuVEhe3hPcOfwQJWK7CvnoKrc+Urn7fbAzhuIAlbvRrF9ddxF1QTD4OeZ6qOCZSp YxB6YWlWXn8GkjI7vpv0ZX99eIfMrOhjR6tkJmoI8n6czebSRwPIRE+iH3aY8/ls cIPBwUIzGs8HkM3FSQlXD6wt2DuWXozdnEBpo5Ci/1DSCN39d9x0W0L3A9Diahyw kvBZlBqKGiwb9InTxseL/e4dymYI7W4RnwrsdCj1knBmZD07u+1c017slkwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTMGUAX70esCNXo4lbb0Bmk6vqJwwHwYDVR0j BBgwFoAUgRXTAJH4lIt2rgqsi09oVQ2jIc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmRiYmMwOC00ZThlLTQ0YmEtYTRjZi0wNWUyMzNkZGEzYTUvMC84MTE1RDMwMDkx Rjg5NDhCNzZBRTBBQUM4QjRGNjg1NTBEQTMyMUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4NTUwREEz MjFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JkYmJjMDgtNGU4ZS00NGJhLWE0 Y2YtMDVlMjMzZGRhM2E1LzAvODExNUQzMDA5MUY4OTQ4Qjc2QUUwQUFDOEI0RjY4 NTUwREEzMjFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1wqj8D7syG4Qjer7ndV3zx7XMqcSZLYjKF 8Fc7EOwUiJ0x/AUjL6m6Nmo0ysX05x1dXGLwuuQAJKbN3CduqcUtA746AJNDGwuG pjTsC12ielj13PemnGFeFC8uJzdc+AmzRhBjuMFnCPHOiSrMJ4dJIbVQd/R8cfSs K4n7fVRO8bIpZKcBbGYJrvTJzkq0s+0qnpObTRQjJ+Fm9gxV6rByYLDN3tcTcre1 GQQUroxpnQ1+rRZnEUVrq42b/iJtc2gFsuQloDUdH/bX2MJXQzgi3VDx9AjFQskm aT8GZPX34a4W28CPSX5BxClqgSYSwdolvEDmw2+iEpX2pFMVKrM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:18 2025 by rpki-client