This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft File: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft (raw, json) Hash identifier: 5McO+t9gfxoFBLvVrbQIEcIVgZet9xHHeLbehNjzGIg= Subject key identifier: 43:E6:AF:5B:85:10:23:24:1E:82:71:54:D3:2E:64:4E:5B:15:D0:78 Authority key identifier: 8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 Certificate issuer: /CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Certificate serial: 215F4ED44627B0018DEF95E3745716AFAC950A40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft Manifest number: 0478 Signing time: Fri 05 Dec 2025 10:11:29 +0000 Manifest this update: Fri 05 Dec 2025 10:06:29 +0000 Manifest next update: Mon 08 Dec 2025 15:10:29 +0000 Files and hashes: 1: 8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl (hash: PvwzWq2DlQUW9KUyNxQydxfzYS7UeLJVkJFucNdT2HI=) 2: 3130332e32332e32302e302f32322d3234203d3e203538333937.roa (hash: fxRWeEdUZsQcOgrNyDGJ7oXqFe+EeQD/MHcFmS1cl7s=) 3: 323030313a6466303a663830303a3a2f34382d3438203d3e203538333937.roa (hash: 706QiyM3dAZxixrKBtydGO3JlPrNbGJU4Z6sEiZVN2w=) 4: 34332e3234352e3138302e302f32322d3234203d3e203538333937.roa (hash: THVSHOfDNgrFd49wZlYvuTuPkWSURiIGaUg0EUGrcPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5f:4e:d4:46:27:b0:01:8d:ef:95:e3:74:57:16:af:ac:95:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A95FAF723EC129E336E75ACE1CD4F3094FB6481 Validity Not Before: Dec 5 10:06:29 2025 GMT Not After : Dec 8 15:10:29 2025 GMT Subject: CN=43E6AF5B851023241E827154D32E644E5B15D078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:39:06:eb:c0:98:0f:a8:aa:34:61:a2:58: 5b:9e:76:59:f7:77:e9:9c:a1:5b:bc:53:5f:c2:0f: 1f:89:dc:f1:ba:d8:dd:19:94:64:93:3b:77:be:bc: 8b:7b:48:bd:e4:a9:45:b2:60:1d:51:03:b9:75:a1: 7c:b0:61:21:f9:6c:8e:e4:ed:47:c5:43:34:d4:9a: a7:9b:ef:67:83:4a:db:56:a2:1b:68:a0:54:7d:f3: 60:d7:4f:dd:7c:17:d0:cf:46:03:e1:93:e3:5f:51: 21:6b:a4:e1:bb:53:c5:0d:0a:75:68:b3:7e:37:24: d0:71:29:65:b8:da:bb:d5:2e:5c:2c:51:fb:1a:34: 97:83:23:c1:a2:8b:7c:a9:9c:88:06:c1:5f:f2:43: b4:45:c8:77:a6:5c:09:05:e7:81:a0:19:44:6a:81: db:ea:59:dd:3d:1f:86:b1:ac:35:7a:10:02:94:7c: 65:27:e1:8c:74:b4:4b:d0:4f:ed:7c:4f:f7:41:ac: 32:4a:fe:10:0f:c3:c4:b7:a6:5f:42:47:da:c6:eb: b4:e9:ff:a4:c7:99:37:4a:a9:80:65:10:a6:7c:9b: 57:60:6d:18:37:d8:51:97:ee:2b:49:85:1e:22:0b: 21:60:cd:1f:2d:9b:96:d4:b8:60:a5:3f:36:46:aa: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E6:AF:5B:85:10:23:24:1E:82:71:54:D3:2E:64:4E:5B:15:D0:78 X509v3 Authority Key Identifier: keyid:8A:95:FA:F7:23:EC:12:9E:33:6E:75:AC:E1:CD:4F:30:94:FB:64:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8b98722-1cb4-40d4-ac8b-c3bca2bca217/0/8A95FAF723EC129E336E75ACE1CD4F3094FB6481.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:62:9a:f0:65:ee:0c:56:91:da:f7:79:cb:9a:80:2a:4c:70: d5:b3:d8:11:4a:86:b6:a4:18:8b:60:f1:6f:d7:1a:52:43:0c: a3:33:d6:69:e2:bd:d5:60:0e:a6:b9:d4:28:f6:41:60:6d:d9: b5:59:22:be:30:6e:bc:83:50:28:cb:02:af:e4:f0:67:95:3e: c4:6a:64:91:ab:dd:cf:e1:50:ba:07:33:d5:1c:bf:24:ca:92: d7:8b:59:05:77:d7:88:4d:ba:b6:57:30:50:fe:e2:e4:95:99: 2d:09:8c:ba:12:a3:c4:d3:fa:a5:22:6f:b3:96:5c:8a:93:46: 31:a1:a8:b5:0b:9d:d5:d7:b4:ca:50:d2:77:39:b6:04:1a:20: 49:6f:32:55:44:65:f3:86:9c:b5:5f:84:52:aa:3f:dd:11:46: 16:23:5a:b1:6c:26:3a:3d:8f:bc:4f:33:b7:2f:93:e7:be:d5: 90:3c:2f:4d:67:fd:10:c1:b9:07:7e:b8:81:db:04:d0:22:70: 43:0a:d4:6c:78:85:b5:0a:36:32:c6:84:af:f9:b2:2e:b3:71: 29:8f:ec:a2:1a:13:02:a5:43:f1:fd:96:0b:61:46:54:d7:37: bd:4e:b8:2c:51:ad:f3:a5:a0:b7:ff:f0:22:26:13:4a:83:42: 4e:26:d3:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIV9O1EYnsAGN75XjdFcWr6yVCkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5 NEZCNjQ4MTAeFw0yNTEyMDUxMDA2MjlaFw0yNTEyMDgxNTEwMjlaMDMxMTAvBgNV BAMTKDQzRTZBRjVCODUxMDIzMjQxRTgyNzE1NEQzMkU2NDRFNUIxNUQwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bTkG68CYD6iqNGGiWFuedln3 d+mcoVu8U1/CDx+J3PG62N0ZlGSTO3e+vIt7SL3kqUWyYB1RA7l1oXywYSH5bI7k 7UfFQzTUmqeb72eDSttWohtooFR982DXT918F9DPRgPhk+NfUSFrpOG7U8UNCnVo s343JNBxKWW42rvVLlwsUfsaNJeDI8Gii3ypnIgGwV/yQ7RFyHemXAkF54GgGURq gdvqWd09H4axrDV6EAKUfGUn4Yx0tEvQT+18T/dBrDJK/hAPw8S3pl9CR9rG67Tp /6THmTdKqYBlEKZ8m1dgbRg32FGX7itJhR4iCyFgzR8tm5bUuGClPzZGquuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ+avW4UQIyQegnFU0y5kTlsV0HgwHwYDVR0j BBgwFoAUipX69yPsEp4zbnWs4c1PMJT7ZIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OGI5ODcyMi0xY2I0LTQwZDQtYWM4Yi1jM2JjYTJiY2EyMTcvMC84QTk1RkFGNzIz RUMxMjlFMzM2RTc1QUNFMUNENEYzMDk0RkI2NDgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRGMzA5NEZC NjQ4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDhiOTg3MjItMWNiNC00MGQ0LWFj OGItYzNiY2EyYmNhMjE3LzAvOEE5NUZBRjcyM0VDMTI5RTMzNkU3NUFDRTFDRDRG MzA5NEZCNjQ4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRimvBl7gxWkdr3ecuagCpMcNWz2BFKhrak GItg8W/XGlJDDKMz1mnivdVgDqa51Cj2QWBt2bVZIr4wbryDUCjLAq/k8GeVPsRq ZJGr3c/hULoHM9UcvyTKkteLWQV314hNurZXMFD+4uSVmS0JjLoSo8TT+qUib7OW XIqTRjGhqLULndXXtMpQ0nc5tgQaIElvMlVEZfOGnLVfhFKqP90RRhYjWrFsJjo9 j7xPM7cvk+e+1ZA8L01n/RDBuQd+uIHbBNAicEMK1Gx4hbUKNjLGhK/5si6zcSmP 7KIaEwKlQ/H9lgthRlTXN71OuCxRrfOloLf/8CImE0qDQk4m00k= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:32 2025 by rpki-client