This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft File: 8790EFE9518BF8664B34E1227585F3516FDC5367.mft (raw, json) Hash identifier: 8i/j/+BYjhrllLlYuQrvf8g8FE8v2ksXFKhZB4v/4wA= Subject key identifier: DC:51:25:E2:DA:AA:F5:2B:D5:01:91:EF:DF:1F:61:24:49:9D:AE:94 Authority key identifier: 87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 Certificate issuer: /CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Certificate serial: 1096111871F23C7219BA5E048A1192E99B990AC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft Manifest number: 022C Signing time: Sun 07 Dec 2025 03:01:38 +0000 Manifest this update: Sun 07 Dec 2025 02:56:38 +0000 Manifest next update: Wed 10 Dec 2025 08:26:38 +0000 Files and hashes: 1: 3130332e3136362e39302e302f32332d3234203d3e20313431393431.roa (hash: u/DfRKi6okqGd/2PRwDyTkJXR+LfAGJBXiMbBVUigkU=) 2: 8790EFE9518BF8664B34E1227585F3516FDC5367.crl (hash: DY2QhInPGyj1DieDSQz28u7x5nAbEj+0+w/4NWB6Us0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:96:11:18:71:f2:3c:72:19:ba:5e:04:8a:11:92:e9:9b:99:0a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8790EFE9518BF8664B34E1227585F3516FDC5367 Validity Not Before: Dec 7 02:56:38 2025 GMT Not After : Dec 10 08:26:38 2025 GMT Subject: CN=DC5125E2DAAAF52BD50191EFDF1F6124499DAE94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f3:dd:f5:7e:e8:62:73:32:d5:01:62:e6:0c: ef:a3:f7:7b:cc:71:31:eb:9e:59:19:f8:8c:09:00: 88:36:b7:5c:2a:13:5e:7d:24:9d:0e:08:31:b0:46: 4a:98:71:43:d2:63:52:f0:12:d5:b2:7a:c3:64:83: 86:0a:23:a8:14:5c:f1:06:28:a8:4e:91:ee:52:de: 61:23:49:47:ed:1c:71:52:04:cd:ba:32:63:00:e4: 5d:af:da:51:8a:c4:28:4e:ff:17:e7:3d:98:f6:b4: ef:66:5c:bd:3d:01:da:64:2a:0c:60:00:d0:5b:52: d5:db:0f:e7:13:b1:36:fe:2d:44:73:c2:49:b9:32: 03:da:ef:38:b4:7d:b1:1f:cf:61:78:3b:2b:b1:ce: 0d:1d:53:86:95:48:a6:e3:c4:34:b3:bc:b1:e7:1e: 31:69:1f:4b:85:0f:6a:ee:97:8d:06:bd:8c:8d:74: 3d:d2:1b:99:29:06:ba:41:32:68:ec:75:96:7f:f1: cb:05:6c:c7:d3:ef:4b:ab:11:1c:0c:e9:b2:9b:45: 0f:ba:dd:1e:6b:6f:ad:5e:8b:e2:60:c4:27:03:7f: 45:2e:d2:53:5b:8a:67:0c:0e:50:f5:b5:8a:f5:32: bd:ff:30:07:c0:22:c8:3f:3d:e5:fd:17:00:c2:75: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:25:E2:DA:AA:F5:2B:D5:01:91:EF:DF:1F:61:24:49:9D:AE:94 X509v3 Authority Key Identifier: keyid:87:90:EF:E9:51:8B:F8:66:4B:34:E1:22:75:85:F3:51:6F:DC:53:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8790EFE9518BF8664B34E1227585F3516FDC5367.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cbdc8-d195-4c7d-b3e8-0a8fbae8c284/0/8790EFE9518BF8664B34E1227585F3516FDC5367.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:95:51:36:50:ef:d8:21:4f:fa:22:00:49:81:f1:f1:60:9a: c6:27:89:3f:9c:aa:b6:9f:53:9c:81:28:98:dc:cc:c0:d2:2f: 46:7f:01:8f:f5:94:07:f3:ed:97:58:44:a4:35:bf:26:4e:75: 69:a6:a4:b6:76:6e:8a:61:4f:61:5f:fc:e8:d4:e6:9c:02:fb: 7c:f4:16:fd:de:cd:b0:25:6e:90:ca:59:0c:d6:63:0d:2c:68: 86:ea:78:3e:8b:de:b5:76:50:75:aa:47:5f:a7:72:20:f5:95: e9:c2:d4:87:bb:9b:c8:67:3d:0e:58:d0:aa:05:f5:70:74:18: 99:d2:af:32:fc:3c:3c:aa:b7:d4:91:07:e4:0d:9e:a9:07:92: 29:3d:d8:22:1d:b5:46:40:a8:f1:cd:74:13:e7:ed:00:93:52: 4d:43:14:0e:8f:62:3b:63:a3:ca:ef:d6:af:1b:f4:99:76:e6: fc:d3:8e:52:c8:88:d1:9c:17:8a:3a:da:2d:b3:f0:46:eb:5f: 0e:81:14:38:8d:e4:ac:6d:55:f2:46:c2:23:37:20:5a:f1:e8: 32:9d:b4:e2:e2:31:e1:96:ed:02:d1:d2:ed:65:0e:3e:da:c3: 5d:42:74:39:e8:ad:49:21:9f:3a:00:3e:12:98:6b:1c:5a:53: 06:d4:62:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEJYRGHHyPHIZul4EihGS6ZuZCskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2 RkRDNTM2NzAeFw0yNTEyMDcwMjU2MzhaFw0yNTEyMTAwODI2MzhaMDMxMTAvBgNV BAMTKERDNTEyNUUyREFBQUY1MkJENTAxOTFFRkRGMUY2MTI0NDk5REFFOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC98931fuhiczLVAWLmDO+j93vM cTHrnlkZ+IwJAIg2t1wqE159JJ0OCDGwRkqYcUPSY1LwEtWyesNkg4YKI6gUXPEG KKhOke5S3mEjSUftHHFSBM26MmMA5F2v2lGKxChO/xfnPZj2tO9mXL09AdpkKgxg ANBbUtXbD+cTsTb+LURzwkm5MgPa7zi0fbEfz2F4Oyuxzg0dU4aVSKbjxDSzvLHn HjFpH0uFD2rul40GvYyNdD3SG5kpBrpBMmjsdZZ/8csFbMfT70urERwM6bKbRQ+6 3R5rb61ei+JgxCcDf0Uu0lNbimcMDlD1tYr1Mr3/MAfAIsg/PeX9FwDCdaXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FEl4tqq9SvVAZHv3x9hJEmdrpQwHwYDVR0j BBgwFoAUh5Dv6VGL+GZLNOEidYXzUW/cU2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZThjYmRjOC1kMTk1LTRjN2QtYjNlOC0wYThmYmFlOGMyODQvMC84NzkwRUZFOTUx OEJGODY2NEIzNEUxMjI3NTg1RjM1MTZGREM1MzY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYzNTE2RkRD NTM2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U4Y2JkYzgtZDE5NS00YzdkLWIz ZTgtMGE4ZmJhZThjMjg0LzAvODc5MEVGRTk1MThCRjg2NjRCMzRFMTIyNzU4NUYz NTE2RkRDNTM2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyVUTZQ79ghT/oiAEmB8fFgmsYniT+cqraf U5yBKJjczMDSL0Z/AY/1lAfz7ZdYRKQ1vyZOdWmmpLZ2bophT2Ff/OjU5pwC+3z0 Fv3ezbAlbpDKWQzWYw0saIbqeD6L3rV2UHWqR1+nciD1lenC1Ie7m8hnPQ5Y0KoF 9XB0GJnSrzL8PDyqt9SRB+QNnqkHkik92CIdtUZAqPHNdBPn7QCTUk1DFA6PYjtj o8rv1q8b9Jl25vzTjlLIiNGcF4o62i2z8EbrXw6BFDiN5KxtVfJGwiM3IFrx6DKd tOLiMeGW7QLR0u1lDj7aw11CdDnorUkhnzoAPhKYaxxaUwbUYvQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:23 2025 by rpki-client