This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft File: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft (raw, json) Hash identifier: i98yjYguZezLMTt0XDY40f71Bou2RLj+dBzHePFRFPk= Subject key identifier: 16:38:4B:91:14:56:49:1D:F4:E5:5B:82:9E:2D:20:49:65:6B:8F:F7 Authority key identifier: 84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 Certificate issuer: /CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Certificate serial: 27AAF18AE2DCF8B2CF175350AE95A014115FD2C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft Manifest number: 0530 Signing time: Sat 06 Dec 2025 07:01:47 +0000 Manifest this update: Sat 06 Dec 2025 06:56:47 +0000 Manifest next update: Tue 09 Dec 2025 15:04:47 +0000 Files and hashes: 1: 8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl (hash: kOAKkOVZbBqx1dTo9sUugPi4q+dYulfrOq9POdmQaPE=) 2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: Wxz1us2zDXrNlhEeTyTFEnQyiq4EZlAgNa1zZuJQj0g=) 3: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: x+jv4TuSSXN4C68g+x8B9A51ZwulAwMClt9iXTwzSmY=) 4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: I/le6Te2VCdo9U/Jhbu6/dBd0G0Ft1HGDM8GZasvyxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:aa:f1:8a:e2:dc:f8:b2:cf:17:53:50:ae:95:a0:14:11:5f:d2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8458BC369C80A76B2875FC97DBE5D1A09B6AF317 Validity Not Before: Dec 6 06:56:47 2025 GMT Not After : Dec 9 15:04:47 2025 GMT Subject: CN=16384B911456491DF4E55B829E2D2049656B8FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c8:67:34:6f:5e:0f:bd:fe:6f:b7:e0:c6:95: bc:a6:fa:21:fa:90:56:cf:ee:c6:62:df:72:cd:b4: ab:5a:90:5c:36:c5:8b:90:f8:c4:b8:2a:1a:22:fb: 3a:2f:ab:e1:81:a5:fc:f2:d0:79:82:3c:aa:af:a5: 8e:7a:2f:f1:53:8e:50:4a:25:a6:d6:d4:59:d9:9a: e8:c3:b4:1f:c9:e7:a8:be:64:1b:c2:32:10:4a:58: d5:1c:b0:72:8f:4e:fe:ad:3f:50:ca:0f:f4:36:75: 58:a4:d0:8e:9c:65:ed:ee:f5:2d:a9:04:99:36:9a: 8b:90:41:24:7b:29:64:91:c1:8c:3c:6c:81:70:38: 01:7d:64:e8:0e:6b:f8:e1:ae:df:90:59:5b:c3:1f: ba:00:33:90:1f:c7:73:7a:a0:70:fc:b5:d0:b0:e5: c7:6e:09:f4:82:c3:74:1d:a2:5f:72:2c:dd:35:5a: 4e:20:a1:88:74:a5:c4:c1:ad:15:c3:0e:96:f0:b5: e4:b2:02:1e:47:a1:44:d8:12:13:2c:d9:f9:ce:44: 02:45:a1:8d:80:e1:ba:1f:cf:2a:9e:58:8b:00:bc: f8:23:97:97:08:00:89:c9:be:8d:bf:d2:0b:0e:c0: 19:25:ea:f1:f5:7c:ee:96:c3:b3:cf:3e:25:64:14: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:38:4B:91:14:56:49:1D:F4:E5:5B:82:9E:2D:20:49:65:6B:8F:F7 X509v3 Authority Key Identifier: keyid:84:58:BC:36:9C:80:A7:6B:28:75:FC:97:DB:E5:D1:A0:9B:6A:F3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/8458BC369C80A76B2875FC97DBE5D1A09B6AF317.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cf:ba:b6:db:4e:dc:7d:7d:d7:42:a8:46:d0:1c:b9:91:26: c8:76:5d:7f:6c:a7:8d:2c:1c:57:aa:2e:63:15:78:f5:f4:52: 91:53:a6:4a:54:e9:da:82:d0:ff:63:f0:bf:00:1a:52:16:c7: 95:bf:ba:ed:eb:db:bc:82:e6:ef:83:43:54:e6:5e:9b:34:57: 13:7c:a5:c3:40:70:ca:57:1a:56:b6:7c:5c:97:ec:ed:e0:cf: 68:e1:9d:08:f3:81:5f:82:31:15:05:35:d0:61:c8:38:60:67: da:00:c5:13:54:46:23:66:65:ee:40:45:c7:64:fa:6f:5c:7a: ee:74:55:35:97:92:e4:76:67:2d:6e:d6:ea:ae:fb:c8:72:97: 2f:c8:04:93:b6:2f:9a:65:94:c0:ac:3d:4b:a3:7c:78:32:a1: 84:d6:80:a4:c4:c1:ee:0a:74:05:8f:39:fb:3c:fb:ab:21:97: b5:27:a5:4c:9c:fd:09:85:e7:c7:bb:56:0e:bb:83:43:5e:fb: d9:aa:fe:a1:f7:81:bf:ae:42:e0:e0:f5:97:fe:31:e1:6c:3a: 1f:eb:bd:78:eb:6e:23:a3:75:af:b7:bc:ae:4a:84:09:49:02: 94:bd:3c:cd:3e:2a:57:86:a3:94:09:3f:9c:08:65:30:0a:0b: 8b:0e:cf:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6rxiuLc+LLPF1NQrpWgFBFf0sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5 QjZBRjMxNzAeFw0yNTEyMDYwNjU2NDdaFw0yNTEyMDkxNTA0NDdaMDMxMTAvBgNV BAMTKDE2Mzg0QjkxMTQ1NjQ5MURGNEU1NUI4MjlFMkQyMDQ5NjU2QjhGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgyGc0b14Pvf5vt+DGlbym+iH6 kFbP7sZi33LNtKtakFw2xYuQ+MS4Khoi+zovq+GBpfzy0HmCPKqvpY56L/FTjlBK JabW1FnZmujDtB/J56i+ZBvCMhBKWNUcsHKPTv6tP1DKD/Q2dVik0I6cZe3u9S2p BJk2mouQQSR7KWSRwYw8bIFwOAF9ZOgOa/jhrt+QWVvDH7oAM5Afx3N6oHD8tdCw 5cduCfSCw3Qdol9yLN01Wk4goYh0pcTBrRXDDpbwteSyAh5HoUTYEhMs2fnORAJF oY2A4bofzyqeWIsAvPgjl5cIAInJvo2/0gsOwBkl6vH1fO6Ww7PPPiVkFOErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFjhLkRRWSR305VuCni0gSWVrj/cwHwYDVR0j BBgwFoAUhFi8NpyAp2sodfyX2+XRoJtq8xcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmFhMTZlYS0yYWVjLTQ5NWQtYTlhMy02OTI1NzMwZDVlMGYvMC84NDU4QkMzNjlD ODBBNzZCMjg3NUZDOTdEQkU1RDFBMDlCNkFGMzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQxQTA5QjZB RjMxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODQ1OEJDMzY5QzgwQTc2QjI4NzVGQzk3REJFNUQx QTA5QjZBRjMxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbPurbbTtx9fddCqEbQHLmRJsh2XX9sp40s HFeqLmMVePX0UpFTpkpU6dqC0P9j8L8AGlIWx5W/uu3r27yC5u+DQ1TmXps0VxN8 pcNAcMpXGla2fFyX7O3gz2jhnQjzgV+CMRUFNdBhyDhgZ9oAxRNURiNmZe5ARcdk +m9ceu50VTWXkuR2Zy1u1uqu+8hyly/IBJO2L5pllMCsPUujfHgyoYTWgKTEwe4K dAWPOfs8+6shl7UnpUyc/QmF58e7Vg67g0Ne+9mq/qH3gb+uQuDg9Zf+MeFsOh/r vXjrbiOjda+3vK5KhAlJApS9PM0+KleGo5QJP5wIZTAKC4sOz+4= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:45 2025 by rpki-client