This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft File: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft (raw, json) Hash identifier: MbmLqjvSxdrNmPSdYYVn3h5HxoGgddVxn+EgUaVYeUQ= Subject key identifier: C9:96:61:63:51:5E:C4:F5:6A:FA:1B:E2:29:11:3B:D9:A6:0A:04:EB Authority key identifier: 8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B Certificate issuer: /CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Certificate serial: 58A0BD676572CCEFB1EF756C6FE7950B56DB2D78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft Manifest number: 01CF Signing time: Fri 05 Dec 2025 14:40:44 +0000 Manifest this update: Fri 05 Dec 2025 14:35:44 +0000 Manifest next update: Tue 09 Dec 2025 01:22:44 +0000 Files and hashes: 1: 8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl (hash: hrL2WlBVslqF2Qi7YAFXJu2hmOV5uvo5ZbkQgFHCgIc=) 2: 3130332e3139372e3138382e302f32322d3234203d3e20313333383030.roa (hash: 4aA8UHvWdn6b+e9rvE0qvRNLuWwKk2SM0xhNOkJ4w/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a0:bd:67:65:72:cc:ef:b1:ef:75:6c:6f:e7:95:0b:56:db:2d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B Validity Not Before: Dec 5 14:35:44 2025 GMT Not After : Dec 9 01:22:44 2025 GMT Subject: CN=C9966163515EC4F56AFA1BE229113BD9A60A04EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c9:db:bb:2f:b4:68:6a:d3:b0:3d:36:d9:3d: c2:ad:70:31:fd:60:99:a6:9f:f0:23:59:17:d6:76: 37:a0:32:9b:46:35:5d:96:8d:14:c3:e6:e7:4f:65: 92:a7:53:aa:d5:f5:0f:f0:e3:73:2c:09:49:bb:1c: bf:d7:ad:46:d6:a0:c5:32:c8:77:fd:2d:73:72:db: 9d:08:63:8a:21:94:b0:91:97:79:66:f4:ba:da:c3: 07:ec:6a:b0:e8:05:cf:a9:ff:5a:16:22:f2:e6:ca: 37:fc:47:2b:42:9c:0f:31:f3:15:d5:46:b5:79:28: 05:15:d7:08:e1:f9:51:74:71:39:c5:27:ef:7b:65: 80:0e:f9:04:e6:92:7e:a1:de:0d:a8:80:a9:2d:1d: 83:94:f1:55:f9:0d:c8:72:2e:5b:78:f7:9d:39:8a: 05:a2:d2:17:47:bd:04:da:73:b1:b2:45:71:dc:9c: 17:ba:07:1a:02:94:0f:f2:af:8d:e2:64:34:0e:d7: 67:1a:86:24:8b:5a:42:ae:3b:34:1c:7c:3f:9b:64: ed:fe:21:08:0d:45:c3:6f:b7:15:4b:c5:bb:e6:d9: 9f:db:e0:05:97:e7:ac:f9:22:42:9c:23:4e:22:fe: 7e:d8:e7:a1:dd:cd:ee:15:8a:46:f6:b9:36:15:78: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:96:61:63:51:5E:C4:F5:6A:FA:1B:E2:29:11:3B:D9:A6:0A:04:EB X509v3 Authority Key Identifier: keyid:8E:E9:EE:E4:6E:A0:F8:60:38:5C:88:0C:00:E2:EE:5A:59:D6:EA:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c80467c-aeb2-4095-8f54-85b9090d3908/0/8EE9EEE46EA0F860385C880C00E2EE5A59D6EA9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:72:a6:03:3b:eb:7d:cf:ac:26:64:de:b0:2f:b6:4c:81:eb: 0d:63:1b:51:c1:e2:75:45:7f:c0:38:58:64:24:fa:fc:30:c3: 32:f3:31:78:e3:45:86:69:cf:e5:11:54:0d:ae:ea:43:d7:35: d5:0d:95:d2:7e:4c:32:af:2b:cd:75:a7:91:4c:cb:5a:c4:54: fd:dd:95:8e:d7:62:8d:6d:9b:00:70:f9:f1:5f:37:30:f9:e8: 85:43:a7:08:8f:67:b9:5e:dc:f3:99:8b:c1:40:2e:61:67:97: 8d:ad:70:d1:c0:78:d1:b7:53:f4:46:4f:27:ee:ee:cf:78:de: 5f:ae:60:36:67:d4:2e:ff:ec:11:35:02:61:d8:74:63:00:50: bc:8e:67:66:1f:46:ac:c9:4e:da:0f:ff:35:6a:8b:e0:5c:d6: 96:58:7c:7c:77:04:da:10:c8:a5:e0:41:ea:fb:42:b2:08:fa: ed:9b:1a:20:ad:9b:9b:74:e0:52:42:a8:33:c5:78:bc:9e:1c: 47:ec:00:b3:46:49:83:35:67:f7:3b:49:12:7c:f4:26:73:4e: b8:ff:37:ec:1b:57:3e:24:b0:25:75:35:d9:d1:57:1b:0e:43: de:a1:63:45:ac:4f:30:4e:71:aa:61:3a:e8:8a:f7:be:48:0e: e0:d8:7f:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWKC9Z2VyzO+x73Vsb+eVC1bbLXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1 OUQ2RUE5QjAeFw0yNTEyMDUxNDM1NDRaFw0yNTEyMDkwMTIyNDRaMDMxMTAvBgNV BAMTKEM5OTY2MTYzNTE1RUM0RjU2QUZBMUJFMjI5MTEzQkQ5QTYwQTA0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ydu7L7RoatOwPTbZPcKtcDH9 YJmmn/AjWRfWdjegMptGNV2WjRTD5udPZZKnU6rV9Q/w43MsCUm7HL/XrUbWoMUy yHf9LXNy250IY4ohlLCRl3lm9LrawwfsarDoBc+p/1oWIvLmyjf8RytCnA8x8xXV RrV5KAUV1wjh+VF0cTnFJ+97ZYAO+QTmkn6h3g2ogKktHYOU8VX5DchyLlt49505 igWi0hdHvQTac7GyRXHcnBe6BxoClA/yr43iZDQO12cahiSLWkKuOzQcfD+bZO3+ IQgNRcNvtxVLxbvm2Z/b4AWX56z5IkKcI04i/n7Y56Hdze4Vikb2uTYVeGKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyZZhY1FexPVq+hviKRE72aYKBOswHwYDVR0j BBgwFoAUjunu5G6g+GA4XIgMAOLuWlnW6pswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzgwNDY3Yy1hZWIyLTQwOTUtOGY1NC04NWI5MDkwZDM5MDgvMC84RUU5RUVFNDZF QTBGODYwMzg1Qzg4MEMwMEUyRUU1QTU5RDZFQTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVFNUE1OUQ2 RUE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWM4MDQ2N2MtYWViMi00MDk1LThm NTQtODViOTA5MGQzOTA4LzAvOEVFOUVFRTQ2RUEwRjg2MDM4NUM4ODBDMDBFMkVF NUE1OUQ2RUE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdypgM7633PrCZk3rAvtkyB6w1jG1HB4nVF f8A4WGQk+vwwwzLzMXjjRYZpz+URVA2u6kPXNdUNldJ+TDKvK811p5FMy1rEVP3d lY7XYo1tmwBw+fFfNzD56IVDpwiPZ7le3POZi8FALmFnl42tcNHAeNG3U/RGTyfu 7s943l+uYDZn1C7/7BE1AmHYdGMAULyOZ2YfRqzJTtoP/zVqi+Bc1pZYfHx3BNoQ yKXgQer7QrII+u2bGiCtm5t04FJCqDPFeLyeHEfsALNGSYM1Z/c7SRJ89CZzTrj/ N+wbVz4ksCV1NdnRVxsOQ96hY0WsTzBOcaphOuiK975IDuDYfw0= -----END CERTIFICATE-----Generated at Sun Dec 7 00:18:07 2025 by rpki-client