This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft File: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft (raw, json) Hash identifier: 6nn53mRzTH1e5yxEgXk9GfvrKWXLs6HTYYSQCjil028= Subject key identifier: 6D:70:F1:8F:69:7B:5A:52:B7:23:7E:A7:35:69:69:07:FC:CB:77:86 Authority key identifier: 8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 Certificate issuer: /CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Certificate serial: 2579249A483AFAB342C9FDB3BC1B5C1F7CE2EC43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft Manifest number: EA Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:55:45 +0000 Manifest next update: Tue 09 Dec 2025 06:38:45 +0000 Files and hashes: 1: 3136302e32322e3139342e302f32332d3234203d3e20313532383236.roa (hash: 8CRgA1ByY654Nlat1fHrKnqGH93mDlUGlMXfJsCa4ik=) 2: 8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl (hash: VKLugt61KqtOGwopY6wP72gEFJCXSc2mGjwE2MPmSxI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:79:24:9a:48:3a:fa:b3:42:c9:fd:b3:bc:1b:5c:1f:7c:e2:ec:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0 Validity Not Before: Dec 6 04:55:45 2025 GMT Not After : Dec 9 06:38:45 2025 GMT Subject: CN=6D70F18F697B5A52B7237EA735696907FCCB7786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6e:38:9c:b3:15:d9:98:c9:5a:47:08:58:7d: 4a:78:4e:26:6f:c6:cf:a9:1e:55:fc:77:b3:86:92: f7:d0:b7:48:4a:36:ba:16:ee:ba:7b:c9:be:c9:71: e2:22:f0:5c:8c:be:f0:2b:df:97:69:64:2f:84:2e: 16:2f:27:fa:2f:5d:d3:3b:4a:19:29:f3:24:92:c7: 13:1b:20:5c:31:49:33:3d:c5:16:db:b0:c2:c4:6d: 69:77:2d:df:4b:b0:d4:3f:1f:b0:c8:95:73:c4:98: e4:39:39:c4:21:cd:8d:65:11:76:fc:57:ac:0a:b5: af:a0:8f:57:03:15:d8:de:9a:85:24:67:7f:91:1c: bf:0b:20:37:24:fa:fb:af:6c:29:37:11:93:8a:57: 86:cb:81:d6:ec:74:a0:66:cf:cf:44:1d:f9:4d:9a: f5:4d:3f:67:79:ff:56:fb:19:4d:d0:c0:25:12:d8: 47:03:ef:f0:15:d3:42:69:54:0c:a9:7d:bd:a6:c7: ed:b9:80:3d:36:44:84:1a:d6:99:d8:6d:d2:3b:98: 1f:b4:c4:8f:c8:d7:12:2d:35:f0:0e:0f:ba:5c:ea: 75:d2:03:af:01:7f:d2:7a:80:5c:14:23:6d:af:bc: 80:7c:79:26:51:1f:f0:ec:03:dd:50:aa:7f:93:bb: 40:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:70:F1:8F:69:7B:5A:52:B7:23:7E:A7:35:69:69:07:FC:CB:77:86 X509v3 Authority Key Identifier: keyid:8C:21:08:40:D9:E2:8A:46:5D:4F:0B:9F:3A:1D:7C:31:CC:66:80:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0ba85a0-3534-49a4-a826-13a735f94369/0/8C210840D9E28A465D4F0B9F3A1D7C31CC6680C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1e:d2:2f:c2:71:aa:77:d6:f6:11:44:f2:43:d4:6a:51:ba: 4e:0d:4a:50:20:67:c5:a5:64:1c:91:4c:23:5d:1b:f5:e4:12: 92:9e:a1:68:8f:09:30:84:38:5d:ce:a9:51:7b:68:83:8e:95: 68:53:be:a2:c0:68:ba:45:6b:a8:df:8b:d7:c9:13:6e:8a:b1: 81:98:d1:a9:ab:00:5e:a3:6a:f8:9c:db:59:e3:58:a1:7c:20: a5:35:67:5f:9e:6a:80:d3:b4:30:76:d0:4c:ed:09:4a:b6:e7: 11:65:00:b3:7b:ff:45:12:0d:72:62:9d:6d:08:ad:02:61:05: eb:04:c9:05:77:f9:66:e3:5f:fb:28:a0:54:f6:ac:75:8e:8f: b2:68:75:dc:43:35:c4:91:33:47:43:12:7f:b6:bf:b6:b4:7e: d1:26:79:d5:21:71:85:0d:5d:32:f5:36:e7:33:ff:b9:ab:23: 3d:48:13:38:ed:fa:57:31:15:de:06:e7:36:39:3e:a3:5d:07: 85:af:c9:0f:1d:56:8c:a8:fd:74:fc:8a:e5:f9:c6:1b:de:ff: de:f5:2a:b6:01:4f:d1:be:19:14:0d:26:6a:c0:8e:f0:18:a3: 97:94:71:8a:3d:db:69:ba:a2:8e:a5:3c:fe:85:8b:38:b0:c3: 89:2f:ef:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJXkkmkg6+rNCyf2zvBtcH3zi7EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFD QzY2ODBDMDAeFw0yNTEyMDYwNDU1NDVaFw0yNTEyMDkwNjM4NDVaMDMxMTAvBgNV BAMTKDZENzBGMThGNjk3QjVBNTJCNzIzN0VBNzM1Njk2OTA3RkNDQjc3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHbjicsxXZmMlaRwhYfUp4TiZv xs+pHlX8d7OGkvfQt0hKNroW7rp7yb7JceIi8FyMvvAr35dpZC+ELhYvJ/ovXdM7 Shkp8ySSxxMbIFwxSTM9xRbbsMLEbWl3Ld9LsNQ/H7DIlXPEmOQ5OcQhzY1lEXb8 V6wKta+gj1cDFdjemoUkZ3+RHL8LIDck+vuvbCk3EZOKV4bLgdbsdKBmz89EHflN mvVNP2d5/1b7GU3QwCUS2EcD7/AV00JpVAypfb2mx+25gD02RIQa1pnYbdI7mB+0 xI/I1xItNfAOD7pc6nXSA68Bf9J6gFwUI22vvIB8eSZRH/DsA91Qqn+Tu0BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXDxj2l7WlK3I36nNWlpB/zLd4YwHwYDVR0j BBgwFoAUjCEIQNniikZdTwufOh18McxmgMAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MGJhODVhMC0zNTM0LTQ5YTQtYTgyNi0xM2E3MzVmOTQzNjkvMC84QzIxMDg0MEQ5 RTI4QTQ2NUQ0RjBCOUYzQTFEN0MzMUNDNjY4MEMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdDMzFDQzY2 ODBDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTBiYTg1YTAtMzUzNC00OWE0LWE4 MjYtMTNhNzM1Zjk0MzY5LzAvOEMyMTA4NDBEOUUyOEE0NjVENEYwQjlGM0ExRDdD MzFDQzY2ODBDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADce0i/Ccap31vYRRPJD1GpRuk4NSlAgZ8Wl ZByRTCNdG/XkEpKeoWiPCTCEOF3OqVF7aIOOlWhTvqLAaLpFa6jfi9fJE26KsYGY 0amrAF6javic21njWKF8IKU1Z1+eaoDTtDB20EztCUq25xFlALN7/0USDXJinW0I rQJhBesEyQV3+WbjX/sooFT2rHWOj7JoddxDNcSRM0dDEn+2v7a0ftEmedUhcYUN XTL1Nucz/7mrIz1IEzjt+lcxFd4G5zY5PqNdB4WvyQ8dVoyo/XT8iuX5xhve/971 KrYBT9G+GRQNJmrAjvAYo5eUcYo922m6oo6lPP6Fiziww4kv79Q= -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:08 2025 by rpki-client