This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: LDyFx+rBQJ2Kk+zxMKBq8+0BtOfmRSZXzmDV/xwB4wM= Subject key identifier: CB:7A:FF:96:BB:6B:13:D6:69:03:BC:BA:13:D2:53:8B:81:E2:73:76 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 7162608AE828EF7CA9B23BAC9BC21771DB1368EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 0228 Signing time: Sat 06 Dec 2025 04:51:00 +0000 Manifest this update: Sat 06 Dec 2025 04:46:00 +0000 Manifest next update: Tue 09 Dec 2025 14:47:00 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: uzIMX5d9P3vft/xiRGXY+s47JIPFgId29aDISzdjet8=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:62:60:8a:e8:28:ef:7c:a9:b2:3b:ac:9b:c2:17:71:db:13:68:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Dec 6 04:46:00 2025 GMT Not After : Dec 9 14:47:00 2025 GMT Subject: CN=CB7AFF96BB6B13D66903BCBA13D2538B81E27376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:5d:e6:40:98:ae:11:c7:b9:05:bf:66:21: ad:f2:6e:14:57:27:1f:e1:2f:22:23:55:df:44:2a: 59:f6:ae:dd:6e:d3:c8:98:c3:38:9b:f6:67:34:74: 2b:59:8c:0a:67:3b:b0:9d:0f:a3:3c:ad:4c:8d:73: 0d:61:69:7e:96:d4:10:75:18:45:cb:23:9c:bf:77: 70:6f:01:e1:6f:14:de:fe:02:3c:0b:1b:dd:45:2f: 3c:65:e2:d3:b3:43:ba:9e:87:78:39:46:3a:9c:15: b6:c0:cb:9d:2a:5b:53:36:af:08:4d:ad:f1:1a:7c: 8c:9e:a6:08:42:78:91:54:23:45:24:d1:9e:a0:55: e9:d6:b1:cb:36:86:02:3e:54:4a:da:00:6a:56:18: e8:06:0e:88:dc:84:5a:fc:6d:9f:84:d1:4f:c1:b9: a5:70:d9:4c:e3:4d:4c:55:a4:47:6e:3e:a6:6f:35: ce:ec:a6:4f:28:d6:e4:e6:a8:0b:78:70:f1:40:76: 1e:74:fd:43:bc:e1:68:77:aa:0b:6e:1e:0c:d0:ea: 38:fa:45:10:8c:60:84:e5:26:60:a1:7e:22:78:c4: af:5d:fe:99:00:54:b9:99:bd:bb:b5:1a:e3:12:84: d9:d0:4e:8c:5a:b0:75:fe:3a:5f:b9:26:e6:e5:a0: 23:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:FF:96:BB:6B:13:D6:69:03:BC:BA:13:D2:53:8B:81:E2:73:76 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e4:90:c6:a1:7b:68:72:e6:f6:a4:22:79:e1:a3:60:44:4e: b4:85:6f:d8:42:5d:d4:68:59:7a:5f:d4:5f:52:3f:6a:ad:45: 55:b5:21:7a:9f:cf:7a:b4:f5:40:0d:c5:76:32:16:74:87:46: 3f:f8:3e:a9:6f:34:6e:87:4c:66:0e:7d:67:c1:7c:2e:e8:82: e2:7c:2e:2c:88:49:ae:b0:eb:11:9e:f6:4e:3b:0a:ed:cc:72: e2:48:c9:ca:1e:4f:67:fb:b1:e0:54:27:0b:82:b8:00:54:d6: 3f:19:4f:9a:48:62:a1:bb:eb:b0:96:e1:cd:bd:08:16:3a:d6: 8f:a5:fd:2b:43:7e:db:1c:80:90:17:4d:45:be:a4:6d:85:c3: d4:48:4a:05:03:77:89:e2:22:2b:e4:65:12:8e:66:b0:6f:05: 94:de:1f:db:63:f7:ed:58:40:82:c5:96:fb:64:97:9c:af:9d: b3:db:2c:11:10:ff:8e:67:f1:19:5f:82:29:13:cf:95:ca:a3: ca:95:0f:db:8a:b6:97:95:be:43:0e:e6:54:67:da:58:3f:27: fa:74:59:04:c1:12:86:94:8f:75:1f:7e:04:82:e4:45:bd:5c: 2c:61:88:22:b7:37:3b:1c:08:31:f0:e9:d5:08:bf:19:e7:b1: 5a:cb:90:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWJgiugo73ypsjusm8IXcdsTaOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTEyMDYwNDQ2MDBaFw0yNTEyMDkxNDQ3MDBaMDMxMTAvBgNV BAMTKENCN0FGRjk2QkI2QjEzRDY2OTAzQkNCQTEzRDI1MzhCODFFMjczNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Vl3mQJiuEce5Bb9mIa3ybhRX Jx/hLyIjVd9EKln2rt1u08iYwzib9mc0dCtZjApnO7CdD6M8rUyNcw1haX6W1BB1 GEXLI5y/d3BvAeFvFN7+AjwLG91FLzxl4tOzQ7qeh3g5RjqcFbbAy50qW1M2rwhN rfEafIyepghCeJFUI0Uk0Z6gVenWscs2hgI+VEraAGpWGOgGDojchFr8bZ+E0U/B uaVw2UzjTUxVpEduPqZvNc7spk8o1uTmqAt4cPFAdh50/UO84Wh3qgtuHgzQ6jj6 RRCMYITlJmChfiJ4xK9d/pkAVLmZvbu1GuMShNnQToxasHX+Ol+5JubloCOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy3r/lrtrE9ZpA7y6E9JTi4Hic3YwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjkkMahe2hy5vakInnho2BETrSFb9hCXdRo WXpf1F9SP2qtRVW1IXqfz3q09UANxXYyFnSHRj/4PqlvNG6HTGYOfWfBfC7oguJ8 LiyISa6w6xGe9k47Cu3McuJIycoeT2f7seBUJwuCuABU1j8ZT5pIYqG767CW4c29 CBY61o+l/StDftscgJAXTUW+pG2Fw9RISgUDd4niIivkZRKOZrBvBZTeH9tj9+1Y QILFlvtkl5yvnbPbLBEQ/45n8RlfgikTz5XKo8qVD9uKtpeVvkMO5lRn2lg/J/p0 WQTBEoaUj3UffgSC5EW9XCxhiCK3NzscCDHw6dUIvxnnsVrLkAI= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:47 2025 by rpki-client