This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft (raw, json) Hash identifier: pkdwxcTjMJfrbUhrCZAQ0/zO9I50DI5i+E3M891+5TA= Subject key identifier: DF:12:AB:D7:CD:4D:7E:29:50:48:07:60:95:59:6F:F8:A5:B7:65:C5 Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Certificate issuer: /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Certificate serial: 74695B134B75997F6F97611CFC10A031DA60DA77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft Manifest number: 02F7 Signing time: Fri 05 Dec 2025 20:01:02 +0000 Manifest this update: Fri 05 Dec 2025 19:56:02 +0000 Manifest next update: Tue 09 Dec 2025 07:58:02 +0000 Files and hashes: 1: 3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (hash: ino1QDYQDx2pfUj3BL+ZlKpPJfUhXo1WbnH0JMrs73I=) 2: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl (hash: VkIzwNB6NAfK1zro1KYOMVj+Kwc1bWIoPsoZ5dXcKhY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:69:5b:13:4b:75:99:7f:6f:97:61:1c:fc:10:a0:31:da:60:da:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Validity Not Before: Dec 5 19:56:02 2025 GMT Not After : Dec 9 07:58:02 2025 GMT Subject: CN=DF12ABD7CD4D7E295048076095596FF8A5B765C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:69:8e:0f:d8:a2:1a:f3:82:01:50:31:b5: 82:72:51:60:70:02:01:c0:df:45:d7:53:52:48:7c: fa:c4:c0:63:8f:b7:d4:c3:f3:01:b9:89:ce:a3:bb: 15:3a:e8:44:b6:ae:a2:e4:9b:f3:7c:77:a0:f6:85: ee:f5:f8:d9:ef:e2:12:be:77:a9:32:6a:da:23:ee: bf:15:bc:e5:09:24:8d:7e:b1:70:ff:31:53:d8:e7: 6b:9f:72:47:00:39:f7:54:c8:3b:58:2c:fb:6c:84: e8:09:93:7c:48:37:92:8c:19:66:3c:35:66:91:31: 9a:7b:2b:e2:82:2d:92:56:c8:46:41:88:cd:ee:37: 51:cb:a4:28:b9:0c:32:2a:c8:58:0a:dc:9b:7e:4b: 58:e7:a3:82:7b:b6:5f:0b:ac:a2:b3:ee:ff:31:8f: bb:70:11:86:c2:3c:56:c3:c9:11:df:ff:6b:89:4d: a4:34:c4:63:7f:73:29:f7:ca:60:bc:dc:a0:58:e0: 8f:6a:3b:e9:e2:10:a2:ef:75:af:3a:3d:dc:66:55: bf:42:80:83:5f:f2:27:41:55:db:7f:6a:23:bb:53: 2f:11:05:1d:bd:b3:95:7c:45:17:4e:59:e0:b5:06: f7:bc:b2:c1:44:5e:92:dd:9a:b5:eb:cf:21:53:7c: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:12:AB:D7:CD:4D:7E:29:50:48:07:60:95:59:6F:F8:A5:B7:65:C5 X509v3 Authority Key Identifier: keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fa:72:24:11:d7:e7:b4:81:6b:4e:ca:7f:28:2b:42:2f:e8: ac:57:dd:36:0b:53:6a:76:ec:d9:1a:51:3b:f2:02:1d:0e:ab: af:b4:ce:95:68:0a:ff:1d:7c:ed:14:22:24:c7:2c:72:24:48: c0:1f:5d:67:40:bc:c7:53:4b:ae:ec:b4:b6:6a:ac:33:4b:30: c2:27:bf:61:5b:cb:9c:04:1e:3c:6e:de:b2:dd:3e:37:c2:13: 2c:f6:e5:9f:d1:f5:7c:c9:f9:8b:4e:77:2b:67:23:39:08:2f: 75:2d:c8:ff:2b:8a:e6:01:d3:8b:01:c2:ed:19:13:19:c0:12: 6f:76:eb:ab:d2:f1:0d:03:04:4f:91:b8:4f:b5:ab:71:75:3c: fb:f5:29:5d:e5:1f:81:5c:b3:1c:2e:13:7e:1a:a9:5b:0f:d9: 71:43:c6:cc:b3:19:a5:b3:8c:80:5d:dc:19:dc:e1:da:aa:69: b5:c3:cd:e7:b5:3d:d8:82:57:68:db:f7:63:d1:d4:95:92:56: e2:82:6e:5d:ae:e4:c7:1c:64:7a:26:87:2e:7d:95:e9:29:be: 73:76:e4:3b:f4:ea:0c:44:bc:d2:df:2f:6c:e6:0d:dc:37:f7: 18:83:0a:30:dc:ea:43:63:f1:92:4a:5a:a5:fb:ed:b6:d0:28: 67:7f:77:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGlbE0t1mX9vl2Ec/BCgMdpg2ncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4 QTUyMkFGNDAeFw0yNTEyMDUxOTU2MDJaFw0yNTEyMDkwNzU4MDJaMDMxMTAvBgNV BAMTKERGMTJBQkQ3Q0Q0RDdFMjk1MDQ4MDc2MDk1NTk2RkY4QTVCNzY1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/GmOD9iiGvOCAVAxtYJyUWBw AgHA30XXU1JIfPrEwGOPt9TD8wG5ic6juxU66ES2rqLkm/N8d6D2he71+Nnv4hK+ d6kyatoj7r8VvOUJJI1+sXD/MVPY52ufckcAOfdUyDtYLPtshOgJk3xIN5KMGWY8 NWaRMZp7K+KCLZJWyEZBiM3uN1HLpCi5DDIqyFgK3Jt+S1jno4J7tl8LrKKz7v8x j7twEYbCPFbDyRHf/2uJTaQ0xGN/cyn3ymC83KBY4I9qO+niEKLvda86PdxmVb9C gINf8idBVdt/aiO7Uy8RBR29s5V8RRdOWeC1Bve8ssFEXpLdmrXrzyFTfL21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xKr181NfilQSAdglVlv+KW3ZcUwHwYDVR0j BBgwFoAUjcLtCHCgBRUmBuLmvra2x4pSKvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMC84REMyRUQwODcw QTAwNTE1MjYwNkUyRTZCRUI2QjZDNzhBNTIyQUY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2Qzc4QTUy MkFGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxOWI4MGQtNDY5My00MDk1LWE5 ZTMtNDEyZTEyODI4ZmYyLzAvOERDMkVEMDg3MEEwMDUxNTI2MDZFMkU2QkVCNkI2 Qzc4QTUyMkFGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP6ciQR1+e0gWtOyn8oK0Iv6KxX3TYLU2p2 7NkaUTvyAh0Oq6+0zpVoCv8dfO0UIiTHLHIkSMAfXWdAvMdTS67stLZqrDNLMMIn v2Fby5wEHjxu3rLdPjfCEyz25Z/R9XzJ+YtOdytnIzkIL3UtyP8riuYB04sBwu0Z ExnAEm9266vS8Q0DBE+RuE+1q3F1PPv1KV3lH4FcsxwuE34aqVsP2XFDxsyzGaWz jIBd3Bnc4dqqabXDzee1PdiCV2jb92PR1JWSVuKCbl2u5MccZHomhy59lekpvnN2 5Dv06gxEvNLfL2zmDdw39xiDCjDc6kNj8ZJKWqX77bbQKGd/d38= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:12 2025 by rpki-client