This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft File: 8F52E72816B856335390C4F4AFBAF207C21522F6.mft (raw, json) Hash identifier: nwtLH33kAiezkXa2JEsuUTzLuzgLqbdY94wrQM40DtM= Subject key identifier: 0D:F1:20:69:8D:06:D7:85:C7:73:D4:33:42:21:58:AB:DE:ED:5F:ED Authority key identifier: 8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 Certificate issuer: /CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Certificate serial: 3CC16F38A464B5A5CAD50854B3712EFEFE6CFE24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft Manifest number: 022D Signing time: Sat 06 Dec 2025 17:52:22 +0000 Manifest this update: Sat 06 Dec 2025 17:47:22 +0000 Manifest next update: Wed 10 Dec 2025 00:00:22 +0000 Files and hashes: 1: 3130332e3135382e3132362e302f32332d3234203d3e203338333230.roa (hash: sAEVe363BvIs2dOx1hxbCSZZoE73/9sHIDXoFlichKA=) 2: 8F52E72816B856335390C4F4AFBAF207C21522F6.crl (hash: k0B5Fs5UIaTSmv+t1Pt1QZZEvpqmH3/WckoH9WXNRyI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c1:6f:38:a4:64:b5:a5:ca:d5:08:54:b3:71:2e:fe:fe:6c:fe:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F52E72816B856335390C4F4AFBAF207C21522F6 Validity Not Before: Dec 6 17:47:22 2025 GMT Not After : Dec 10 00:00:22 2025 GMT Subject: CN=0DF120698D06D785C773D433422158ABDEED5FED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:92:68:60:97:7c:3b:94:d6:13:96:79:33:81: 46:98:89:51:97:fc:af:fa:0d:59:c3:77:4d:0f:8a: 7f:8e:b4:d9:88:c8:7f:12:c5:15:9c:04:07:35:43: 8d:3e:8b:96:b0:d0:67:b2:4d:55:2d:1a:e6:19:e4: 83:34:5b:9b:da:5a:40:4a:9e:ad:85:26:d2:4a:d7: a7:f5:0f:09:68:5e:f5:da:39:d6:71:26:e0:79:4e: 31:52:07:2e:5e:cd:a4:7f:4c:3c:0f:fc:5d:a2:3c: 14:cb:7f:7f:f4:41:92:8f:ee:33:6b:09:31:92:61: 3a:77:e9:34:03:93:5b:17:82:cc:9b:08:95:ce:fd: 05:3c:08:e5:6a:74:6a:71:b7:ee:a0:5c:e0:b9:2a: 45:0c:33:cd:1e:2f:41:53:73:f9:46:d4:c8:b5:72: 55:11:3c:7d:b3:85:da:8c:01:84:2e:8d:7b:93:6b: 0e:61:85:b2:6e:77:da:c0:ab:7c:68:69:ec:fc:4d: 26:eb:b8:03:4e:dd:c8:de:7e:fa:68:25:eb:c9:7a: c0:f5:85:cd:69:d4:bb:58:7d:9b:8a:dc:d3:25:f4: 14:01:7a:bc:b3:7a:94:80:10:e9:50:ac:5c:c6:ea: 33:d0:96:cd:b2:8e:1c:0e:67:4d:6e:57:02:0f:fd: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F1:20:69:8D:06:D7:85:C7:73:D4:33:42:21:58:AB:DE:ED:5F:ED X509v3 Authority Key Identifier: keyid:8F:52:E7:28:16:B8:56:33:53:90:C4:F4:AF:BA:F2:07:C2:15:22:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F52E72816B856335390C4F4AFBAF207C21522F6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d44dfb5a-6e24-4a4d-8969-eb3cbe34e47e/0/8F52E72816B856335390C4F4AFBAF207C21522F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ee:2c:3a:da:5a:dd:26:d4:38:79:0d:89:59:41:07:05:e8: ce:64:25:de:26:1d:fb:7b:34:3b:5e:0b:ed:e2:f6:f2:64:48: c5:4d:b2:0f:47:74:43:cf:9d:fb:b4:58:fd:2e:ac:2e:3c:55: ac:9d:d0:9f:1f:51:39:0e:93:78:cf:8c:0e:4f:ab:1c:51:90: 65:f5:43:04:13:62:45:54:09:05:83:75:a0:ef:23:5c:88:87: fa:45:27:ac:13:9f:27:bb:9a:68:0b:fe:d6:1f:5e:67:ef:c0: 88:71:96:1e:7c:7a:0b:ce:93:09:9d:23:52:45:7c:c0:fb:5a: 21:c7:7d:5f:2b:74:45:6a:26:7f:51:8d:7f:b6:88:fa:99:af: 3e:b5:26:bb:01:c3:60:08:13:9e:5f:e8:a0:46:5c:2d:4c:e5: ca:4a:47:cf:94:22:25:8f:c2:eb:30:1a:1b:59:3a:e3:c1:c4: f2:d3:cc:d2:b6:b1:f4:35:c2:47:cd:4a:26:ca:c9:46:cf:66: 68:ca:46:5e:5f:eb:19:8f:89:97:36:ae:9b:82:1e:a3:de:7d: 8c:b0:3c:cd:47:9d:a7:41:02:e2:21:32:6f:68:3c:b6:ba:0b: de:cf:b3:cb:4f:90:a0:71:26:83:9c:6a:38:8f:ee:98:61:cd: 9c:fd:83:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPMFvOKRktaXK1QhUs3Eu/v5s/iQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdD MjE1MjJGNjAeFw0yNTEyMDYxNzQ3MjJaFw0yNTEyMTAwMDAwMjJaMDMxMTAvBgNV BAMTKDBERjEyMDY5OEQwNkQ3ODVDNzczRDQzMzQyMjE1OEFCREVFRDVGRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkmhgl3w7lNYTlnkzgUaYiVGX /K/6DVnDd00Pin+OtNmIyH8SxRWcBAc1Q40+i5aw0GeyTVUtGuYZ5IM0W5vaWkBK nq2FJtJK16f1DwloXvXaOdZxJuB5TjFSBy5ezaR/TDwP/F2iPBTLf3/0QZKP7jNr CTGSYTp36TQDk1sXgsybCJXO/QU8COVqdGpxt+6gXOC5KkUMM80eL0FTc/lG1Mi1 clURPH2zhdqMAYQujXuTaw5hhbJud9rAq3xoaez8TSbruANO3cjefvpoJevJesD1 hc1p1LtYfZuK3NMl9BQBeryzepSAEOlQrFzG6jPQls2yjhwOZ01uVwIP/e6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDfEgaY0G14XHc9QzQiFYq97tX+0wHwYDVR0j BBgwFoAUj1LnKBa4VjNTkMT0r7ryB8IVIvYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDRkZmI1YS02ZTI0LTRhNGQtODk2OS1lYjNjYmUzNGU0N2UvMC84RjUyRTcyODE2 Qjg1NjMzNTM5MEM0RjRBRkJBRjIwN0MyMTUyMkY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYyMDdDMjE1 MjJGNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ZGZiNWEtNmUyNC00YTRkLTg5 NjktZWIzY2JlMzRlNDdlLzAvOEY1MkU3MjgxNkI4NTYzMzUzOTBDNEY0QUZCQUYy MDdDMjE1MjJGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbuLDraWt0m1Dh5DYlZQQcF6M5kJd4mHft7 NDteC+3i9vJkSMVNsg9HdEPPnfu0WP0urC48Vayd0J8fUTkOk3jPjA5PqxxRkGX1 QwQTYkVUCQWDdaDvI1yIh/pFJ6wTnye7mmgL/tYfXmfvwIhxlh58egvOkwmdI1JF fMD7WiHHfV8rdEVqJn9RjX+2iPqZrz61JrsBw2AIE55f6KBGXC1M5cpKR8+UIiWP wuswGhtZOuPBxPLTzNK2sfQ1wkfNSibKyUbPZmjKRl5f6xmPiZc2rpuCHqPefYyw PM1HnadBAuIhMm9oPLa6C97Ps8tPkKBxJoOcajiP7phhzZz9g/k= -----END CERTIFICATE-----Generated at Sun Dec 7 07:34:38 2025 by rpki-client