This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft File: 8CFA88063D5C0A51C1D737A5170338865A245358.mft (raw, json) Hash identifier: 0THRv8Nxuu5CqoUcGUOLkS58LEzrDgSUwQ7l7zHOCvc= Subject key identifier: AB:7A:DE:3C:60:9A:F5:37:22:CC:A4:FC:16:F6:86:5F:6A:F8:01:AE Authority key identifier: 8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 Certificate issuer: /CN=8CFA88063D5C0A51C1D737A5170338865A245358 Certificate serial: 4C3C54568333264B7831B21B428A53AE1F999CB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft Manifest number: 052E Signing time: Sat 06 Dec 2025 23:51:51 +0000 Manifest this update: Sat 06 Dec 2025 23:46:51 +0000 Manifest next update: Wed 10 Dec 2025 09:08:51 +0000 Files and hashes: 1: 3130332e3132362e3230302e302f32322d3232203d3e20313338313133.roa (hash: iKqR4sdrDvQYzAbaXB9On/A/Jy5fdaFvtV4f3tabdnk=) 2: 323430343a313034303a3a2f33322d3332203d3e20313338313133.roa (hash: IwOy6L011wgRp4Z43jUYFVOd/TCfuz6IilpFz+BTytc=) 3: 3130332e3132362e3230302e302f32332d3233203d3e20313338313133.roa (hash: OX5qJy0ELn8OIpv9cwcHP0OwwrzKVk8H6b2UKzBtyEg=) 4: 8CFA88063D5C0A51C1D737A5170338865A245358.crl (hash: bxSdsbDipfOd9bu7qkpYfsgf9BGnQaO5r9wS2vrSoWs=) 5: 3130332e3132362e3230322e302f32332d3233203d3e20313338313133.roa (hash: x7tsLph+/FB0QeKJjGm8RZPvo26S0bN0rsI7VAab3d8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3c:54:56:83:33:26:4b:78:31:b2:1b:42:8a:53:ae:1f:99:9c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CFA88063D5C0A51C1D737A5170338865A245358 Validity Not Before: Dec 6 23:46:51 2025 GMT Not After : Dec 10 09:08:51 2025 GMT Subject: CN=AB7ADE3C609AF53722CCA4FC16F6865F6AF801AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:d9:53:07:de:86:42:5e:1e:87:80:86:1f: 04:4f:d8:28:e6:b7:fa:c8:c1:03:a1:1c:f6:8c:bc: ec:27:d9:cc:2d:7b:f9:df:02:f5:7c:2b:23:21:2f: 91:40:c4:56:05:e5:54:af:46:40:eb:da:e2:a8:a2: eb:15:55:62:7d:e8:8e:c8:56:6d:b4:79:c0:7f:61: e1:39:bb:26:e2:ff:b8:73:3b:fe:1c:07:ee:b7:d0: 91:e1:7f:e4:82:81:dd:e3:28:8f:1f:4c:73:16:90: cb:17:a7:36:ee:c8:5b:08:26:aa:59:e5:c1:98:ba: d8:95:3a:ba:47:4d:e0:7b:ff:22:43:62:ff:a6:9b: bd:50:cd:b5:dd:fa:08:03:20:65:aa:f1:16:31:39: c3:40:21:e5:c6:11:a8:7b:5b:d4:a0:91:01:0b:be: b1:92:e8:39:a5:ca:53:76:85:73:32:29:ec:0f:0d: 4b:34:ce:ff:ab:7e:3c:11:33:c5:66:e5:2e:47:03: a0:89:98:9c:37:29:2d:ad:bf:f9:b4:06:15:55:db: 9e:fe:90:c8:ac:99:81:36:56:f5:88:bc:de:dd:66: f2:4b:04:86:ca:62:c8:74:bf:c2:82:45:a9:9a:e6: b0:8e:14:57:7f:ad:72:9f:f8:f1:bb:54:44:75:b5: 2c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:DE:3C:60:9A:F5:37:22:CC:A4:FC:16:F6:86:5F:6A:F8:01:AE X509v3 Authority Key Identifier: keyid:8C:FA:88:06:3D:5C:0A:51:C1:D7:37:A5:17:03:38:86:5A:24:53:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFA88063D5C0A51C1D737A5170338865A245358.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a2e5b69-adbd-4e2d-847d-374815581d86/0/8CFA88063D5C0A51C1D737A5170338865A245358.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:05:f9:1c:72:da:f0:43:92:a9:ee:d1:6f:c5:ae:79:9a:d3: 39:4a:9e:39:f4:62:fe:97:93:45:f3:69:88:dd:3d:f1:af:f6: 78:5b:fc:13:35:cf:af:b5:e8:33:66:4f:d4:47:a2:e9:62:08: 51:2e:5e:e6:5e:41:a4:5b:3d:5b:0c:bb:1f:b6:8d:4d:bd:c3: 68:2d:b4:45:f1:c2:de:2a:fe:2a:99:c7:3c:6d:e3:c7:eb:19: 0f:63:1c:53:9c:ee:66:1a:4a:88:da:21:f9:f8:2a:b6:5e:9e: 4a:1d:99:1e:e7:69:55:1b:64:1d:f0:0e:7d:c4:54:ff:c0:6b: fd:05:ed:32:84:6a:00:99:bc:e4:50:55:90:90:01:14:2f:a0: 13:f3:fc:15:72:21:14:a7:4a:16:d7:2e:c3:11:6f:65:30:08: 48:29:2b:98:ed:54:5f:cd:0e:36:cc:0f:69:66:53:58:96:bb: 6d:82:99:c3:66:34:b8:77:84:23:84:e1:27:7c:03:12:09:4b: bb:8c:4a:d5:b2:8a:e4:b4:c2:cb:df:77:de:ac:2a:e9:81:30: 6c:0d:8f:0d:ec:3d:b9:0a:25:87:0b:5d:9b:2e:f8:01:fb:44: 1e:8e:ec:96:ad:c8:db:f7:0c:be:a9:59:72:3e:7e:db:ee:15: 84:82:47:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTDxUVoMzJkt4MbIbQopTrh+ZnLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1 QTI0NTM1ODAeFw0yNTEyMDYyMzQ2NTFaFw0yNTEyMTAwOTA4NTFaMDMxMTAvBgNV BAMTKEFCN0FERTNDNjA5QUY1MzcyMkNDQTRGQzE2RjY4NjVGNkFGODAxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAutlTB96GQl4eh4CGHwRP2Cjm t/rIwQOhHPaMvOwn2cwte/nfAvV8KyMhL5FAxFYF5VSvRkDr2uKoousVVWJ96I7I Vm20ecB/YeE5uybi/7hzO/4cB+630JHhf+SCgd3jKI8fTHMWkMsXpzbuyFsIJqpZ 5cGYutiVOrpHTeB7/yJDYv+mm71QzbXd+ggDIGWq8RYxOcNAIeXGEah7W9SgkQEL vrGS6DmlylN2hXMyKewPDUs0zv+rfjwRM8Vm5S5HA6CJmJw3KS2tv/m0BhVV257+ kMismYE2VvWIvN7dZvJLBIbKYsh0v8KCRama5rCOFFd/rXKf+PG7VER1tSzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq3rePGCa9TcizKT8FvaGX2r4Aa4wHwYDVR0j BBgwFoAUjPqIBj1cClHB1zelFwM4hlokU1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YTJlNWI2OS1hZGJkLTRlMmQtODQ3ZC0zNzQ4MTU1ODFkODYvMC84Q0ZBODgwNjNE NUMwQTUxQzFENzM3QTUxNzAzMzg4NjVBMjQ1MzU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4ODY1QTI0 NTM1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGEyZTViNjktYWRiZC00ZTJkLTg0 N2QtMzc0ODE1NTgxZDg2LzAvOENGQTg4MDYzRDVDMEE1MUMxRDczN0E1MTcwMzM4 ODY1QTI0NTM1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKoF+Rxy2vBDkqnu0W/Frnma0zlKnjn0Yv6X k0XzaYjdPfGv9nhb/BM1z6+16DNmT9RHouliCFEuXuZeQaRbPVsMux+2jU29w2gt tEXxwt4q/iqZxzxt48frGQ9jHFOc7mYaSojaIfn4KrZenkodmR7naVUbZB3wDn3E VP/Aa/0F7TKEagCZvORQVZCQARQvoBPz/BVyIRSnShbXLsMRb2UwCEgpK5jtVF/N DjbMD2lmU1iWu22CmcNmNLh3hCOE4Sd8AxIJS7uMStWyiuS0wsvfd96sKumBMGwN jw3sPbkKJYcLXZsu+AH7RB6O7JatyNv3DL6pWXI+ftvuFYSCRyg= -----END CERTIFICATE-----Generated at Sun Dec 7 06:06:39 2025 by rpki-client