This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft File: 8D4158039A86C34D5D36A83DDC40C959EDA21342.mft (raw, json) Hash identifier: SfnFWMb4t5cry1XgEGUX8eUXkNXIWJ/cErTTr8KUIxw= Subject key identifier: FD:74:6A:15:97:FF:80:2A:6E:AB:02:A5:1B:83:F3:65:69:06:47:4F Authority key identifier: 8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 Certificate issuer: /CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Certificate serial: 0327E8F5475E36170B621646E0BB9A061B70E004 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft Manifest number: E7 Signing time: Fri 05 Dec 2025 02:21:09 +0000 Manifest this update: Fri 05 Dec 2025 02:16:09 +0000 Manifest next update: Mon 08 Dec 2025 05:59:09 +0000 Files and hashes: 1: 323030313a6466333a643363303a3a2f34382d3438203d3e20313532373930.roa (hash: XrGI552jWV7sNKcYT4/cR05JGNQdxhyBqphUE36lIJ0=) 2: 8D4158039A86C34D5D36A83DDC40C959EDA21342.crl (hash: LSHcOfw1oxzHlkIXiOqqpaQummjeSJQ8wvjBHO3fkFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:27:e8:f5:47:5e:36:17:0b:62:16:46:e0:bb:9a:06:1b:70:e0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D4158039A86C34D5D36A83DDC40C959EDA21342 Validity Not Before: Dec 5 02:16:09 2025 GMT Not After : Dec 8 05:59:09 2025 GMT Subject: CN=FD746A1597FF802A6EAB02A51B83F3656906474F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:af:a3:5d:a0:2d:71:17:cf:b4:7a:b7:c7: f5:9f:2e:24:bb:84:fb:1e:ad:49:49:25:45:fe:fd: 00:91:56:03:73:ec:71:0c:b3:d0:fd:ed:ce:55:b1: 0c:98:92:55:07:0a:34:bb:fc:3a:1b:50:8e:7b:aa: 8c:01:82:4d:a0:53:2f:c3:c8:4d:42:97:a3:a0:0f: 5c:e9:62:34:f9:59:a5:d8:4b:7a:fb:fe:07:42:a3: 30:93:4e:4e:ef:ec:1b:cd:98:6e:22:8f:6a:42:22: 58:7d:20:69:23:cf:95:f9:63:02:af:76:63:e4:a7: 9f:61:d2:bc:41:ee:8c:fc:d6:c1:ea:71:fc:89:c3: 8b:ef:c7:c3:2b:d9:4e:3f:ea:37:09:16:88:b8:af: 3a:10:07:75:ae:0d:57:01:4d:c7:1d:fe:f8:94:4b: 74:2f:ef:07:8c:c2:4a:f1:83:9a:64:05:0b:d6:4f: 17:0e:e6:a3:d1:2d:97:04:6d:bf:17:84:47:23:08: 18:3b:ea:1b:0f:78:ce:15:03:a7:59:59:a4:29:e1: 42:a7:ce:e5:62:55:65:55:60:27:ba:33:55:5a:68: 10:e0:83:04:a0:21:0a:cf:91:1f:05:4f:d3:6d:89: b8:88:bb:26:d7:8b:5d:8e:e5:33:e4:14:9c:92:bf: 6a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:74:6A:15:97:FF:80:2A:6E:AB:02:A5:1B:83:F3:65:69:06:47:4F X509v3 Authority Key Identifier: keyid:8D:41:58:03:9A:86:C3:4D:5D:36:A8:3D:DC:40:C9:59:ED:A2:13:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D4158039A86C34D5D36A83DDC40C959EDA21342.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbb5fa4a-bea6-464f-b409-11d9a3761a6c/1/8D4158039A86C34D5D36A83DDC40C959EDA21342.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:fe:a5:3f:00:d4:ab:a0:a5:86:64:43:0e:0f:ac:ca:0e:0d: 06:1c:fd:af:43:86:2e:af:28:f1:5b:0d:b2:b6:f5:a4:44:b3: da:41:58:4e:3c:43:a6:f4:46:3e:3f:fc:b1:38:83:ed:b1:d9: 0d:c0:e6:bf:d8:31:37:b7:31:74:ee:91:8a:9a:c7:60:f0:0e: 27:96:0b:ce:11:8a:b5:30:62:3b:d2:6a:a3:71:e9:2e:2b:36: 48:62:0a:0f:3b:63:ba:6d:67:40:79:e6:dd:92:9a:07:2b:ba: bc:8e:8e:6d:88:22:f5:5d:3c:a2:03:d5:45:88:2e:57:d4:61: ac:e9:ed:53:75:08:8a:8e:ef:95:24:7f:d8:69:fe:af:93:a9: df:21:b2:a6:55:e3:0d:f2:04:77:27:e8:98:40:c8:be:61:a6: 70:5e:4f:22:48:0b:73:51:90:ed:d6:36:bb:29:d5:4f:6d:97: 71:f9:ef:52:ee:7f:8b:90:51:3c:1b:12:87:63:1e:f2:78:d0: d9:d7:6b:d5:52:07:9e:4d:b3:23:21:f7:26:27:1d:c8:eb:1b: 47:67:a2:4f:bf:29:ba:b4:31:0c:c3:0c:9f:35:db:65:2e:8c: d6:98:66:71:21:3e:9e:58:7b:8c:b4:a0:43:92:1d:6b:6a:03: 27:14:55:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyfo9UdeNhcLYhZG4LuaBhtw4AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlF REEyMTM0MjAeFw0yNTEyMDUwMjE2MDlaFw0yNTEyMDgwNTU5MDlaMDMxMTAvBgNV BAMTKEZENzQ2QTE1OTdGRjgwMkE2RUFCMDJBNTFCODNGMzY1NjkwNjQ3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCes6+jXaAtcRfPtHq3x/WfLiS7 hPserUlJJUX+/QCRVgNz7HEMs9D97c5VsQyYklUHCjS7/DobUI57qowBgk2gUy/D yE1Cl6OgD1zpYjT5WaXYS3r7/gdCozCTTk7v7BvNmG4ij2pCIlh9IGkjz5X5YwKv dmPkp59h0rxB7oz81sHqcfyJw4vvx8Mr2U4/6jcJFoi4rzoQB3WuDVcBTccd/viU S3Qv7weMwkrxg5pkBQvWTxcO5qPRLZcEbb8XhEcjCBg76hsPeM4VA6dZWaQp4UKn zuViVWVVYCe6M1VaaBDggwSgIQrPkR8FT9NtibiIuybXi12O5TPkFJySv2rZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/XRqFZf/gCpuqwKlG4PzZWkGR08wHwYDVR0j BBgwFoAUjUFYA5qGw01dNqg93EDJWe2iE0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmI1ZmE0YS1iZWE2LTQ2NGYtYjQwOS0xMWQ5YTM3NjFhNmMvMS84RDQxNTgwMzlB ODZDMzRENUQzNkE4M0REQzQwQzk1OUVEQTIxMzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5NTlFREEy MTM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJiNWZhNGEtYmVhNi00NjRmLWI0 MDktMTFkOWEzNzYxYTZjLzEvOEQ0MTU4MDM5QTg2QzM0RDVEMzZBODNEREM0MEM5 NTlFREEyMTM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFz+pT8A1KugpYZkQw4PrMoODQYc/a9Dhi6v KPFbDbK29aREs9pBWE48Q6b0Rj4//LE4g+2x2Q3A5r/YMTe3MXTukYqax2DwDieW C84RirUwYjvSaqNx6S4rNkhiCg87Y7ptZ0B55t2SmgcruryOjm2IIvVdPKID1UWI LlfUYazp7VN1CIqO75Ukf9hp/q+Tqd8hsqZV4w3yBHcn6JhAyL5hpnBeTyJIC3NR kO3WNrsp1U9tl3H571Luf4uQUTwbEodjHvJ40NnXa9VSB55NsyMh9yYnHcjrG0dn ok+/Kbq0MQzDDJ8122UujNaYZnEhPp5Ye4y0oEOSHWtqAycUVXc= -----END CERTIFICATE-----Generated at Sun Dec 7 00:48:48 2025 by rpki-client