This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft File: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft (raw, json) Hash identifier: NDVCLgnSwA/A7NfrfaCLxMaSdI//l9JYrv/rYBFtJOU= Subject key identifier: 35:EF:5F:BC:D7:0A:6A:7F:8B:EC:DD:A5:84:44:E8:75:BF:8C:DD:97 Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB Certificate issuer: /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Certificate serial: 6462F7B15D2D021639447B0F06E07C3C07C9B2A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft Manifest number: 0206 Signing time: Fri 05 Dec 2025 03:41:33 +0000 Manifest this update: Fri 05 Dec 2025 03:36:33 +0000 Manifest next update: Mon 08 Dec 2025 09:49:33 +0000 Files and hashes: 1: 3130332e31302e37312e302f32342d3234203d3e20313530323130.roa (hash: wDta+92k3x+gK76Z0kGm3qQTLhs6WF7nJtND4k4DV9Y=) 2: 3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (hash: 5JDd/HA007WXvt9HRMOrUb4bJ8L4vCr7oaVmKSZ2Ddg=) 3: 8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl (hash: ie61bpevZPuZpBV0i1cRSIklyVWo86RccNZSZYXqrPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 09:49:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:62:f7:b1:5d:2d:02:16:39:44:7b:0f:06:e0:7c:3c:07:c9:b2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB Validity Not Before: Dec 5 03:36:33 2025 GMT Not After : Dec 8 09:49:33 2025 GMT Subject: CN=35EF5FBCD70A6A7F8BECDDA58444E875BF8CDD97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:26:0c:f6:c7:18:8f:40:26:67:3a:48:ea: 5c:e6:b0:19:18:dd:78:d2:80:5a:97:28:44:6e:8c: 8f:08:3a:ea:53:5a:84:19:e7:c2:29:97:7d:17:24: 72:de:90:c7:a9:86:a1:2f:26:c4:35:6c:04:cd:dd: 52:5a:d5:d3:e6:cb:65:ce:da:7b:3d:6b:59:fe:e2: df:6d:d0:92:9d:76:8b:56:2c:09:1b:9b:b9:38:54: 32:cd:78:1b:5c:cb:29:32:db:78:52:55:f3:7c:b1: 4f:1b:66:e0:89:82:3a:ab:64:3d:84:c5:7d:a5:ed: d3:d8:d9:42:aa:97:3f:6d:a8:60:7e:2a:73:5b:90: 99:fe:ef:c1:d9:a2:8c:06:cf:97:91:6d:14:f2:66: 1e:98:48:18:4d:73:99:2d:58:53:0c:30:a1:ee:7d: c5:e5:16:e1:62:f5:77:fb:03:f4:6d:2e:29:bf:0c: 34:e4:89:9b:e7:1f:db:48:2f:c4:b2:ab:e6:9f:ae: 79:dd:42:2d:65:be:c5:b6:b6:40:21:ca:10:ee:c3: b0:fe:d2:7c:09:fd:fd:f4:cd:ef:d7:06:6e:4b:f6: 2e:ec:28:67:fb:0e:f4:54:58:83:e2:ce:40:bd:67: ad:44:b6:e3:20:d0:28:77:0f:f3:fc:0d:54:e0:6d: d8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EF:5F:BC:D7:0A:6A:7F:8B:EC:DD:A5:84:44:E8:75:BF:8C:DD:97 X509v3 Authority Key Identifier: keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ef:05:74:32:6d:75:4c:1b:c2:70:97:b6:92:8c:78:5a:77: d4:01:13:7d:6a:db:6c:38:a9:a9:de:68:03:d3:0e:11:39:32: a4:43:5c:0c:3e:ab:0f:b5:09:f8:af:60:44:5f:58:e6:26:a5: 89:98:0c:13:e6:79:77:f4:4a:0f:cf:93:7a:95:9d:8f:a4:9e: 3e:5e:2f:5e:df:b2:cd:ca:90:45:e5:9f:2b:cb:aa:93:d8:bb: e0:27:13:11:b2:3e:b8:d7:96:34:4b:dd:51:d7:c9:36:4f:65: 98:57:1e:11:29:4d:8f:1a:8b:e0:6e:2f:98:5c:14:7c:c0:a4: 3a:b3:fc:9d:58:c7:20:ae:24:49:f1:bb:e7:60:99:e0:b4:96: 94:30:dd:44:b9:db:f5:6f:81:41:c3:4b:5a:dd:13:da:2d:15: e2:0e:05:09:c3:12:ad:fe:bb:b8:ba:d0:6d:b5:1a:42:64:99: 21:11:83:da:37:15:65:35:0b:0c:5d:05:a7:07:db:9e:eb:f2: ed:7b:1f:b6:47:cd:7a:be:81:29:ee:56:24:18:76:5a:10:69: 63:25:bd:18:31:b1:2e:19:fe:9f:72:b2:9b:b2:c8:20:1c:09: 1f:bc:07:0b:05:e9:c7:b7:7c:0e:a5:50:ce:a1:2d:6e:15:9e: bf:0d:dd:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGL3sV0tAhY5RHsPBuB8PAfJsqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE REQyOUVGQjAeFw0yNTEyMDUwMzM2MzNaFw0yNTEyMDgwOTQ5MzNaMDMxMTAvBgNV BAMTKDM1RUY1RkJDRDcwQTZBN0Y4QkVDRERBNTg0NDRFODc1QkY4Q0REOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizSYM9scYj0AmZzpI6lzmsBkY 3XjSgFqXKERujI8IOupTWoQZ58Ipl30XJHLekMephqEvJsQ1bATN3VJa1dPmy2XO 2ns9a1n+4t9t0JKddotWLAkbm7k4VDLNeBtcyyky23hSVfN8sU8bZuCJgjqrZD2E xX2l7dPY2UKqlz9tqGB+KnNbkJn+78HZoowGz5eRbRTyZh6YSBhNc5ktWFMMMKHu fcXlFuFi9Xf7A/RtLim/DDTkiZvnH9tIL8Syq+afrnndQi1lvsW2tkAhyhDuw7D+ 0nwJ/f30ze/XBm5L9i7sKGf7DvRUWIPizkC9Z61EtuMg0Ch3D/P8DVTgbdjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNe9fvNcKan+L7N2lhETodb+M3ZcwHwYDVR0j BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy OUVGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjYjcxODctN2E1Zi00ZTIzLWJl OTQtNTkzYTBjMjg4Y2I5LzAvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4 NUFEREQyOUVGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLvBXQybXVMG8Jwl7aSjHhad9QBE31q22w4 qaneaAPTDhE5MqRDXAw+qw+1CfivYERfWOYmpYmYDBPmeXf0Sg/Pk3qVnY+knj5e L17fss3KkEXlnyvLqpPYu+AnExGyPrjXljRL3VHXyTZPZZhXHhEpTY8ai+BuL5hc FHzApDqz/J1YxyCuJEnxu+dgmeC0lpQw3US52/VvgUHDS1rdE9otFeIOBQnDEq3+ u7i60G21GkJkmSERg9o3FWU1CwxdBacH257r8u17H7ZHzXq+gSnuViQYdloQaWMl vRgxsS4Z/p9yspuyyCAcCR+8BwsF6ce3fA6lUM6hLW4Vnr8N3ZY= -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:18 2025 by rpki-client