This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: NUheRG39m30RiQ8bMG2f4pdRvxlgFAoBwwr9/kcIcrc= Subject key identifier: D5:93:60:A8:47:DC:0B:F9:06:37:14:44:C8:10:1D:A9:C9:41:11:28 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 40DB1F2C061292BE1AE5B44906AA6370CF36749A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 0534 Signing time: Mon 15 Dec 2025 20:11:52 +0000 Manifest this update: Mon 15 Dec 2025 20:06:52 +0000 Manifest next update: Thu 18 Dec 2025 23:03:52 +0000 Files and hashes: 1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: 4nXKJHKhilJWroEJUi4S4Kvx6Dgg3Y1vmn4iq6BCELc=) 2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 3: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 23:03:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:db:1f:2c:06:12:92:be:1a:e5:b4:49:06:aa:63:70:cf:36:74:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Dec 15 20:06:52 2025 GMT Not After : Dec 18 23:03:52 2025 GMT Subject: CN=D59360A847DC0BF906371444C8101DA9C9411128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:73:f7:54:0f:20:09:7d:e8:8a:ae:db:50:a7: 5f:a5:ca:d3:5b:a4:e1:51:4f:5e:63:c4:9d:14:1d: 45:82:93:43:45:a3:cd:75:89:0a:b8:72:5b:a5:62: 41:b2:e5:60:0e:30:9b:59:e8:9e:5f:74:c3:e8:bf: cf:63:a2:41:48:96:f5:3c:d5:ea:6f:b8:41:b5:fa: 57:83:b0:8f:ec:3f:08:21:b5:e0:9b:45:2e:1e:b7: 5e:58:5c:a8:0e:db:d4:55:47:98:8c:a0:f3:12:ef: 6f:43:e6:f3:18:2d:fb:1a:df:8e:70:a0:0a:8f:98: 34:60:ee:28:96:75:0e:fe:6a:f6:7b:d2:d6:4d:82: 72:f7:83:9d:7c:c6:98:1f:02:f6:f6:d7:4e:a1:ad: 3b:1c:00:11:1e:62:ce:4c:6b:e7:95:e7:75:88:ce: 14:91:08:d0:14:82:42:a5:74:05:db:a9:81:40:8a: 9d:08:da:35:7b:77:d6:5c:14:f1:23:7a:1f:93:4e: 15:88:72:8d:38:f2:b8:b5:ae:36:1d:a7:5c:c8:31: ed:aa:d9:c3:75:6e:ec:39:68:02:00:98:24:f7:0b: 7f:88:74:08:2c:18:d4:ac:52:62:75:40:b0:f6:1c: e4:7d:e3:26:b4:f6:b7:8c:91:11:86:66:a2:a2:64: 1e:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:60:A8:47:DC:0B:F9:06:37:14:44:C8:10:1D:A9:C9:41:11:28 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:01:33:f8:ee:00:23:d1:23:5a:27:bf:5b:33:01:c6:77:76: bb:0c:c4:d5:27:8a:24:00:b7:d6:a8:22:1e:3f:b2:2e:97:37: cb:14:51:58:66:d4:4d:3b:1a:42:31:a7:18:cf:4e:1d:53:48: 49:52:7a:8d:8b:e9:eb:69:fa:ec:11:f4:34:63:70:93:19:0b: 19:49:5d:73:e1:2a:42:8e:be:03:58:80:53:fc:8d:cf:f3:7d: 07:f4:0a:d3:c1:7f:b5:5a:fb:2e:57:3d:84:dd:46:7c:38:b0: 54:1c:df:c9:f0:8c:84:26:9c:8c:3d:6f:4f:31:eb:f7:e7:a0: b7:11:1f:32:b5:4d:e1:d2:f9:23:d3:39:0e:2d:5a:63:89:d9: 52:e8:05:2e:90:fc:e3:2c:1b:19:5e:4c:a2:1f:8c:4d:9f:7c: 2e:54:b2:f3:74:56:8d:a6:9b:ad:ef:b3:aa:57:95:43:40:07: d9:d8:86:a1:f4:b1:ac:ca:4b:3f:bd:8a:e1:9a:12:ad:33:75: 1a:16:d2:b0:2c:61:4d:e2:43:ef:70:01:07:ca:f8:9e:4a:2a: be:11:46:67:6f:5e:9f:be:32:62:25:ae:f2:56:92:3b:68:db: 19:86:0a:5c:07:fe:2d:94:7a:56:c4:ab:67:51:fb:86:6a:00: 1d:38:63:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNsfLAYSkr4a5bRJBqpjcM82dJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTEyMTUyMDA2NTJaFw0yNTEyMTgyMzAzNTJaMDMxMTAvBgNV BAMTKEQ1OTM2MEE4NDdEQzBCRjkwNjM3MTQ0NEM4MTAxREE5Qzk0MTExMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVc/dUDyAJfeiKrttQp1+lytNb pOFRT15jxJ0UHUWCk0NFo811iQq4clulYkGy5WAOMJtZ6J5fdMPov89jokFIlvU8 1epvuEG1+leDsI/sPwghteCbRS4et15YXKgO29RVR5iMoPMS729D5vMYLfsa345w oAqPmDRg7iiWdQ7+avZ70tZNgnL3g518xpgfAvb2106hrTscABEeYs5Ma+eV53WI zhSRCNAUgkKldAXbqYFAip0I2jV7d9ZcFPEjeh+TThWIco048ri1rjYdp1zIMe2q 2cN1buw5aAIAmCT3C3+IdAgsGNSsUmJ1QLD2HOR94ya09reMkRGGZqKiZB7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ZNgqEfcC/kGNxREyBAdqclBESgwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIBM/juACPRI1onv1szAcZ3drsMxNUniiQA t9aoIh4/si6XN8sUUVhm1E07GkIxpxjPTh1TSElSeo2L6etp+uwR9DRjcJMZCxlJ XXPhKkKOvgNYgFP8jc/zfQf0CtPBf7Va+y5XPYTdRnw4sFQc38nwjIQmnIw9b08x 6/fnoLcRHzK1TeHS+SPTOQ4tWmOJ2VLoBS6Q/OMsGxleTKIfjE2ffC5UsvN0Vo2m m63vs6pXlUNAB9nYhqH0sazKSz+9iuGaEq0zdRoW0rAsYU3iQ+9wAQfK+J5KKr4R RmdvXp++MmIlrvJWkjto2xmGClwH/i2UelbEq2dR+4ZqAB04YwU= -----END CERTIFICATE-----Generated at Wed Dec 17 18:29:46 2025 by rpki-client