This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft File: 8A54C81A444D07051A24AACF743F01863F8129AB.mft (raw, json) Hash identifier: xJ6fQFN33ZW9AyQdOPomDDDflyVq1IIk+PJ7lPbgG7M= Subject key identifier: 65:D6:75:BD:15:E9:5A:3A:C8:65:8A:36:BB:CE:47:1F:8D:A8:5A:E3 Authority key identifier: 8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB Certificate issuer: /CN=8A54C81A444D07051A24AACF743F01863F8129AB Certificate serial: 22E394F2D588B83480C193C24758927866B92725 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft Manifest number: 030D Signing time: Sat 06 Dec 2025 00:10:40 +0000 Manifest this update: Sat 06 Dec 2025 00:05:40 +0000 Manifest next update: Tue 09 Dec 2025 06:55:40 +0000 Files and hashes: 1: 3130332e3136362e3135382e302f32342d3234203d3e20313431393535.roa (hash: E7SXMeinhYEx1nTb2SA2Sxos/hegF9SdTdiRzIK1k28=) 2: 8A54C81A444D07051A24AACF743F01863F8129AB.crl (hash: mmLWyz5W3eejUpJQZjnHrtFRjRYlYWgTy6ybbw7N4yM=) 3: 3130332e3136362e3135382e302f32332d3233203d3e20313431393535.roa (hash: 7dKSNEM+R7mVlaRlryOrYIy/UF51jWYewiOClTImGdg=) 4: 3130332e3136362e3135392e302f32342d3234203d3e20313431393535.roa (hash: pYma4CnUYsvh/GHuj1AR+RzC7f0+QOGrW+zKFaT9Mpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e3:94:f2:d5:88:b8:34:80:c1:93:c2:47:58:92:78:66:b9:27:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A54C81A444D07051A24AACF743F01863F8129AB Validity Not Before: Dec 6 00:05:40 2025 GMT Not After : Dec 9 06:55:40 2025 GMT Subject: CN=65D675BD15E95A3AC8658A36BBCE471F8DA85AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:55:9e:6e:30:e3:ca:fd:a8:b6:ad:64:00:c1: 10:2f:e7:2f:f9:f6:14:5c:70:bd:45:31:6c:1f:99: 39:00:87:8b:12:0f:aa:ae:19:ab:60:0e:f9:73:f1: 92:c3:d3:ca:ee:e0:f0:b6:47:04:03:9a:ec:1a:bd: 81:06:83:1a:96:4e:07:a3:7a:ef:a0:04:ae:a2:2c: 65:0d:d6:89:15:24:a1:5f:65:7d:58:57:b8:f0:63: f3:c8:38:10:eb:bc:7c:56:41:71:98:82:81:e5:ab: 09:64:73:d2:43:44:77:ef:d0:ef:d1:d9:71:22:da: a6:2f:38:eb:a4:82:12:76:42:37:3f:59:b9:4f:d2: 0a:8f:d8:79:99:32:ac:78:dc:28:93:35:68:e2:1d: ce:69:fe:3e:7a:7e:fc:6c:8d:07:8d:ff:ea:f0:97: 98:14:1b:97:63:cf:e9:bc:83:48:f7:87:ef:25:29: 87:88:c4:70:18:38:2c:d1:eb:4d:93:21:7f:f2:c5: 7f:c8:f4:e7:12:02:15:ea:59:aa:f3:e8:d3:48:06: bb:34:63:8c:c4:25:c5:28:23:ea:b4:b4:52:5b:20: 0b:99:d4:f6:e9:37:7d:58:59:60:b7:60:76:6c:f0: 91:02:88:37:98:01:8a:da:89:54:d1:64:23:ed:8d: d8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D6:75:BD:15:E9:5A:3A:C8:65:8A:36:BB:CE:47:1F:8D:A8:5A:E3 X509v3 Authority Key Identifier: keyid:8A:54:C8:1A:44:4D:07:05:1A:24:AA:CF:74:3F:01:86:3F:81:29:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A54C81A444D07051A24AACF743F01863F8129AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7ff01d0-26f9-4b20-a318-c311c267f2af/0/8A54C81A444D07051A24AACF743F01863F8129AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e7:e4:87:50:5a:b5:20:49:09:d4:bf:4d:d3:c6:a7:fe:de: 54:c0:e6:08:c6:65:5b:bb:db:70:88:0f:cc:cf:2b:81:f7:99: ad:a8:4e:2a:7c:c1:16:0b:e1:bd:57:fe:64:02:ba:0c:f4:3d: 89:bc:7b:5b:c1:6a:f5:e1:b6:9c:a4:d4:9b:d6:f9:69:0e:47: 61:93:8c:83:c3:08:c0:3b:f4:6d:fd:07:3f:be:57:c9:5d:76: b4:16:d7:1d:4e:b4:bf:b2:9c:86:82:7e:24:18:30:91:9c:fb: 8a:28:f6:7b:9a:7b:c4:21:9d:22:56:a1:fd:ec:bb:69:a1:20: 4a:b2:4f:6b:23:8a:6f:3f:d9:2c:41:a5:e7:c2:95:c1:71:6a: 08:56:2f:01:df:f0:5c:44:68:33:4f:79:69:d7:94:ac:d5:ca: f0:23:af:24:fe:c9:23:71:1b:0d:b2:b6:60:0f:a3:d7:60:40: 44:f5:c7:4a:41:ea:98:34:95:55:55:90:e9:c0:61:53:aa:c2: a4:a6:a0:c2:39:f4:62:41:91:9e:a9:b3:85:ac:26:17:90:f0: 08:73:c5:e4:52:b8:39:d4:4b:e5:2b:38:36:14:30:e2:e6:ea: 39:ff:9a:e2:0b:38:35:f5:3d:02:84:d8:92:0a:64:2d:80:70: 43:69:18:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIuOU8tWIuDSAwZPCR1iSeGa5JyUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYz RjgxMjlBQjAeFw0yNTEyMDYwMDA1NDBaFw0yNTEyMDkwNjU1NDBaMDMxMTAvBgNV BAMTKDY1RDY3NUJEMTVFOTVBM0FDODY1OEEzNkJCQ0U0NzFGOERBODVBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOVZ5uMOPK/ai2rWQAwRAv5y/5 9hRccL1FMWwfmTkAh4sSD6quGatgDvlz8ZLD08ru4PC2RwQDmuwavYEGgxqWTgej eu+gBK6iLGUN1okVJKFfZX1YV7jwY/PIOBDrvHxWQXGYgoHlqwlkc9JDRHfv0O/R 2XEi2qYvOOukghJ2Qjc/WblP0gqP2HmZMqx43CiTNWjiHc5p/j56fvxsjQeN/+rw l5gUG5djz+m8g0j3h+8lKYeIxHAYOCzR602TIX/yxX/I9OcSAhXqWarz6NNIBrs0 Y4zEJcUoI+q0tFJbIAuZ1PbpN31YWWC3YHZs8JECiDeYAYraiVTRZCPtjdhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZdZ1vRXpWjrIZYo2u85HH42oWuMwHwYDVR0j BBgwFoAUilTIGkRNBwUaJKrPdD8Bhj+BKaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2ZmMDFkMC0yNmY5LTRiMjAtYTMxOC1jMzExYzI2N2YyYWYvMC84QTU0QzgxQTQ0 NEQwNzA1MUEyNEFBQ0Y3NDNGMDE4NjNGODEyOUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAxODYzRjgx MjlBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdmZjAxZDAtMjZmOS00YjIwLWEz MTgtYzMxMWMyNjdmMmFmLzAvOEE1NEM4MUE0NDREMDcwNTFBMjRBQUNGNzQzRjAx ODYzRjgxMjlBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnn5IdQWrUgSQnUv03Txqf+3lTA5gjGZVu7 23CID8zPK4H3ma2oTip8wRYL4b1X/mQCugz0PYm8e1vBavXhtpyk1JvW+WkOR2GT jIPDCMA79G39Bz++V8lddrQW1x1OtL+ynIaCfiQYMJGc+4oo9nuae8QhnSJWof3s u2mhIEqyT2sjim8/2SxBpefClcFxaghWLwHf8FxEaDNPeWnXlKzVyvAjryT+ySNx Gw2ytmAPo9dgQET1x0pB6pg0lVVVkOnAYVOqwqSmoMI59GJBkZ6ps4WsJheQ8Ahz xeRSuDnUS+UrODYUMOLm6jn/muILODX1PQKE2JIKZC2AcENpGDQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:33 2025 by rpki-client