This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft File: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft (raw, json) Hash identifier: hvxvOHIfbvw30bNJwg0GgHUn8IP8ze16QB37AKr/Bxk= Subject key identifier: EF:99:72:B3:4C:82:BE:33:FC:2E:CB:55:BB:67:D2:AE:72:5D:6A:FF Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Certificate serial: 3B3BBC1C49752FAF34D8494A858743631830AC69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft Manifest number: 0551 Signing time: Tue 16 Dec 2025 11:31:19 +0000 Manifest this update: Tue 16 Dec 2025 11:26:19 +0000 Manifest next update: Fri 19 Dec 2025 14:41:19 +0000 Files and hashes: 1: 3137352e3130332e33332e302f32342d3234203d3e203338333230.roa (hash: Y3N/pOr0hqk+rgEWsHTxDUxkckXwK8BwQRc3Oa99toQ=) 2: 323430343a333930303a6139323a3a2f34382d3438203d3e203338333230.roa (hash: Ketrz/J8f8AAk0/U1Pdx/6YBxlFbuGP5tM7vrclBTuI=) 3: 3230332e3137332e39302e302f32332d3234203d3e20313339343630.roa (hash: 23+gG2DOC+ur5eVWAZvoHWGDnxOhWjXAjjErKhmGrS4=) 4: 3137352e3130332e33342e302f32342d3234203d3e203338333230.roa (hash: mJ+S52vU66RNY0f8EN8g3gvOa1pNNig2fMcG1fH79DY=) 5: 3132322e3134342e342e302f32322d3234203d3e203338333230.roa (hash: V3630RXZfBbv0izTqUqFayseBZlNQ8xYG082iWZg+6Q=) 6: 3130332e32392e3136342e302f32322d3234203d3e203338333230.roa (hash: bwSFGiowGIWFw0Xqwv4OlEcc83VdK0o2KzJnJCZ2DT0=) 7: 3131392e3131302e37322e302f32322d3234203d3e203338333230.roa (hash: EaI6/Dsx2ZEnLc96pWiD/aogqQZmiIKOu7YhzjemiyQ=) 8: 3132322e3134342e302e302f32322d3234203d3e203338333230.roa (hash: 6KFCBq0GeLMij9zX0LHtO8AChuye1d1F56fk0H8ZhzU=) 9: C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl (hash: RAMm9HMabJ0Xm4IROgkMZ7A0NtTG47IVAKwMIGlykVc=) 10: 3131392e3131302e36342e302f32322d3234203d3e203338333230.roa (hash: xet50Y1T2RaCmjZyVilwT++Qk9zQxszZ374/545MhhM=) 11: 3137352e3130332e34352e302f32342d3234203d3e203338333230.roa (hash: dsLjT0RvHwdlA2P0hS8Ta/QvI/7GUPU2p577iDafIJk=) 12: 3131392e3131302e36382e302f32322d3234203d3e203338333230.roa (hash: hd2StT+jTnjUGpfUQ62nAy49x8ecNllIMBX9uxJvBO8=) 13: 3230332e3137332e39312e302f32342d3234203d3e20313339343630.roa (hash: nnj0KLDw9ngWzorUbdMHyDWYfETgXpzXO3uTEwZi24Q=) 14: 3137352e3130332e35372e302f32342d3234203d3e203338333230.roa (hash: QS/GUZ+NIoj800cmERiNyPU2Mys6n5EswZVGgcYBu4o=) 15: 323430343a333930303a313a3a2f34382d3438203d3e203338333230.roa (hash: jyHfiZ6i7aZCFxYleJN7o61t2gr/9pVuDKWy33Zgxrk=) 16: 34332e3234372e31322e302f32322d3234203d3e203338333230.roa (hash: 2g+NXNHiM0B7rPdW5gGiKA7VbkoVsAcew6mjSoTkRN4=) 17: 3137352e3130332e35332e302f32342d3234203d3e203338333230.roa (hash: Q22OsVQGNiQHv7rsWq7HdXb5YFdsKjAZXlHpHoKvOag=) 18: 3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (hash: SKzoUE6GJjGbrRoLBDSg0MJXDhRPXJNlIyQMu/0QWEw=) 19: 3230332e3137332e38392e302f32342d3234203d3e203338333230.roa (hash: 5A8+p1O/f/o7MKvT/iojY154TSW6xBkoOLtIqG2w4iU=) 20: 323430343a333930303a313939323a3a2f34382d3438203d3e203338333230.roa (hash: gOJdZEtA6e6fwm7lb/MvZbjgtOf6sLlu0HNuBmiaEZM=) 21: 3230332e3137332e38382e302f32342d3234203d3e20313339343630.roa (hash: haQraVSry86Exch9h906IOyEPpafpeXC5ih1PxjR4d4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 14:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3b:bc:1c:49:75:2f:af:34:d8:49:4a:85:87:43:63:18:30:ac:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1 Validity Not Before: Dec 16 11:26:19 2025 GMT Not After : Dec 19 14:41:19 2025 GMT Subject: CN=EF9972B34C82BE33FC2ECB55BB67D2AE725D6AFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:91:6d:77:9f:80:ce:1c:36:b5:78:80:8f:52: 02:cc:89:57:78:34:3c:ee:68:ad:62:7c:24:0d:6f: b9:d2:6b:33:45:a6:36:8f:2d:fa:6b:55:1d:8f:39: 17:06:9d:08:9b:67:da:ef:c5:05:d4:d4:a0:5f:6b: cc:fa:8b:26:d8:7d:02:59:24:38:21:cf:38:4b:1f: aa:7f:54:8b:8b:d1:a1:d5:10:70:e1:8f:11:dc:5d: 27:a1:f6:9f:ca:13:0d:41:3f:f0:fd:cb:70:7a:0d: 50:ed:6c:97:79:5d:cc:8c:f6:ab:08:29:61:4a:4f: 06:86:77:16:fc:b2:c2:55:3c:87:41:d1:7c:dc:17: 73:51:1c:0a:ba:9d:2d:a9:6a:af:90:5b:0d:7c:02: 8c:3f:d8:43:19:eb:6d:42:60:f8:6b:ea:d9:de:68: 7e:1e:f1:d9:35:58:86:0c:75:3e:fc:83:41:ac:7c: f4:03:a4:80:88:7b:f5:76:e2:84:db:bf:fe:96:18: c9:4f:e4:82:6d:43:c4:ee:9d:ff:a8:3b:fa:71:19: e4:b0:86:40:ab:a0:88:3e:1c:a6:0b:50:eb:ba:d8: 66:76:dd:c9:06:53:ad:f9:94:dd:75:f2:e2:90:81: 26:4c:b6:69:ca:43:6a:34:75:11:d5:69:14:89:12: ce:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:99:72:B3:4C:82:BE:33:FC:2E:CB:55:BB:67:D2:AE:72:5D:6A:FF X509v3 Authority Key Identifier: keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f3:ca:6c:4e:00:c7:87:2f:26:69:6d:3c:28:63:dc:23:3c: 13:0a:7e:db:f8:a4:84:27:37:fa:1f:34:8b:a1:29:7a:f6:5e: 40:78:2c:b6:d1:a1:f4:44:e9:84:2b:a8:cb:e7:8b:a9:42:7f: e2:91:ed:78:66:e7:12:7d:d5:0d:50:86:92:0e:1b:b3:1f:04: 7e:95:1d:8a:1d:f2:a6:43:71:8e:1b:da:47:9d:9a:94:02:e9: 55:49:53:4d:a0:c8:8d:11:ed:da:3f:17:c9:3a:fd:48:75:bf: 4d:85:ec:84:a7:d7:2d:98:b9:4c:10:90:03:74:64:ed:fd:a5: 09:32:bf:7b:5b:3d:ed:f2:d9:eb:fd:5f:58:a4:6e:97:a8:ad: 9c:e0:a4:b4:08:70:78:17:fe:c9:ae:53:18:d7:c4:54:f4:a7: 84:2a:71:13:1a:b6:00:c3:31:3e:b2:23:0d:82:59:5f:df:b8: be:6c:d8:63:71:02:78:44:06:28:ab:0a:38:e7:ec:1d:aa:be: 10:1d:64:93:de:c8:b8:4e:e8:ab:12:a7:c8:d1:1f:f3:16:b5: 59:d3:bb:a2:c3:24:fa:ad:8a:06:6c:d9:de:25:ef:75:82:e0: a6:5b:d5:cd:f0:db:b8:5a:10:12:0d:5c:7e:ac:af:8d:1a:5b: 8c:fd:e8:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzu8HEl1L6802ElKhYdDYxgwrGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz MUY4MDJFMTAeFw0yNTEyMTYxMTI2MTlaFw0yNTEyMTkxNDQxMTlaMDMxMTAvBgNV BAMTKEVGOTk3MkIzNEM4MkJFMzNGQzJFQ0I1NUJCNjdEMkFFNzI1RDZBRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqkW13n4DOHDa1eICPUgLMiVd4 NDzuaK1ifCQNb7nSazNFpjaPLfprVR2PORcGnQibZ9rvxQXU1KBfa8z6iybYfQJZ JDghzzhLH6p/VIuL0aHVEHDhjxHcXSeh9p/KEw1BP/D9y3B6DVDtbJd5XcyM9qsI KWFKTwaGdxb8ssJVPIdB0XzcF3NRHAq6nS2paq+QWw18Aow/2EMZ621CYPhr6tne aH4e8dk1WIYMdT78g0GsfPQDpICIe/V24oTbv/6WGMlP5IJtQ8Tunf+oO/pxGeSw hkCroIg+HKYLUOu62GZ23ckGU635lN118uKQgSZMtmnKQ2o0dRHVaRSJEs6LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU75lys0yCvjP8LstVu2fSrnJdav8wHwYDVR0j BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4 MDJFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk0NWI4NmUtMDg5NS00NzU5LWE3 N2MtYTA2Y2UxNGUyNDNjLzAvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVB MjMzMUY4MDJFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDzymxOAMeHLyZpbTwoY9wjPBMKftv4pIQn N/ofNIuhKXr2XkB4LLbRofRE6YQrqMvni6lCf+KR7Xhm5xJ91Q1QhpIOG7MfBH6V HYod8qZDcY4b2kedmpQC6VVJU02gyI0R7do/F8k6/Uh1v02F7ISn1y2YuUwQkAN0 ZO39pQkyv3tbPe3y2ev9X1ikbpeorZzgpLQIcHgX/smuUxjXxFT0p4QqcRMatgDD MT6yIw2CWV/fuL5s2GNxAnhEBiirCjjn7B2qvhAdZJPeyLhO6KsSp8jRH/MWtVnT u6LDJPqtigZs2d4l73WC4KZb1c3w27haEBINXH6sr40aW4z96OY= -----END CERTIFICATE-----Generated at Wed Dec 17 21:02:01 2025 by rpki-client