This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft File: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft (raw, json) Hash identifier: gwZcQx3qtoX8rPAK2Z61FoAANIoyAyVVK6eJze696TM= Subject key identifier: 11:E0:B8:03:87:E3:D1:5B:D4:2A:CF:3D:ED:2A:0D:3C:0E:AC:30:0E Authority key identifier: 8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 Certificate issuer: /CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Certificate serial: 6291FD8B20276C7C15DB809F40D4B5865AC57471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft Manifest number: 011A Signing time: Fri 05 Dec 2025 17:01:42 +0000 Manifest this update: Fri 05 Dec 2025 16:56:42 +0000 Manifest next update: Mon 08 Dec 2025 21:45:42 +0000 Files and hashes: 1: 3130332e3231302e37302e302f32332d3234203d3e20313530393936.roa (hash: 9twnyIhBB5/nG5JidLHITBuzB/j3WQpuRt6+R8EPn7s=) 2: 8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl (hash: S7Kz/FkR9lUHkPnVyInlEoIEvcSHxHm80TC/aEbTji0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 21:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:91:fd:8b:20:27:6c:7c:15:db:80:9f:40:d4:b5:86:5a:c5:74:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AE8A9B51BDA923FC8956ACB086F56E776D409C8 Validity Not Before: Dec 5 16:56:42 2025 GMT Not After : Dec 8 21:45:42 2025 GMT Subject: CN=11E0B80387E3D15BD42ACF3DED2A0D3C0EAC300E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a2:63:0a:40:b9:35:c3:3b:bb:eb:d8:05:87: 2e:57:1b:1c:e0:68:5d:1a:6b:6f:f0:83:45:eb:3b: 5e:c2:e0:5b:c3:ad:26:62:b4:e1:17:77:f0:89:fd: ad:df:aa:f4:ab:01:c6:22:13:01:fc:79:92:e2:35: 78:4b:2d:af:fe:98:a0:56:0e:a1:4b:83:b5:2d:fe: 33:0c:30:0d:08:81:8d:0d:d5:91:30:db:39:75:56: 75:64:7a:68:21:1e:b7:f2:dd:ac:b2:4b:8b:f7:93: ee:4c:fd:47:02:bb:1e:90:a1:1c:66:03:39:5d:ec: 9f:c9:c2:eb:4f:18:30:07:56:8e:40:79:29:60:c2: 33:a2:ec:02:8e:81:4d:38:93:7c:78:04:97:b3:12: 41:8d:bf:44:03:5e:0d:8c:c3:ee:9e:84:6a:22:6d: 38:6f:35:65:16:78:21:2b:38:eb:75:d7:49:d7:60: 6c:07:fb:2d:f7:5e:95:c7:84:67:99:11:42:60:06: b2:f0:ea:cc:47:f9:7d:f2:50:f0:2b:ab:8a:71:63: 28:3b:0b:a1:ad:8c:cb:98:1f:6e:ec:d3:02:ca:7e: d6:1c:31:ce:ce:92:00:7e:1c:5f:10:a9:3e:3d:9b: 55:b8:69:43:e8:9b:32:f8:09:09:17:2e:e7:2a:69: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:B8:03:87:E3:D1:5B:D4:2A:CF:3D:ED:2A:0D:3C:0E:AC:30:0E X509v3 Authority Key Identifier: keyid:8A:E8:A9:B5:1B:DA:92:3F:C8:95:6A:CB:08:6F:56:E7:76:D4:09:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc6f0700-9116-4a05-8f6b-d8edafdb72ec/0/8AE8A9B51BDA923FC8956ACB086F56E776D409C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c5:ee:7a:80:85:07:9a:fe:d5:b1:8e:7a:52:e1:ae:6f:17: ef:f5:a2:cd:d1:14:38:3e:40:7b:bc:76:43:09:25:23:7d:75: 04:9a:7d:19:f9:a4:27:01:63:a3:80:bb:b4:b2:ec:6f:02:d8: d0:a9:a9:4b:11:8a:69:ff:65:9f:ff:20:86:e6:ac:bf:c4:86: a6:1f:8a:e5:59:17:20:fe:7d:ad:0a:70:1b:5d:ee:78:94:f2: ab:3c:8d:f0:2a:25:a6:57:80:75:91:72:b0:8f:36:7f:f3:3f: 5e:93:6d:2c:e4:5c:7a:f0:2c:0b:74:0b:44:bf:20:9f:d8:07: da:14:68:1c:a3:36:6f:f1:1b:dc:50:69:a9:c7:42:30:a0:3b: 5f:17:4f:51:2f:be:cd:0a:88:2d:7f:68:f3:ae:0b:e6:93:96: 7c:84:62:7a:4c:98:db:5b:7e:95:ae:7d:3a:c5:c5:0d:01:64: 54:84:c4:8f:16:c0:e7:04:51:1d:4d:a2:c3:75:11:dc:0c:b9: 3a:41:9d:c4:8f:44:94:89:f1:86:2a:c6:d3:c5:81:d7:3c:1b: 76:62:72:ae:d6:54:20:f3:86:90:9f:66:e7:77:75:4b:8b:a9: 03:35:7f:76:1d:99:51:b9:ab:e6:af:6b:7c:70:34:54:1a:ed: 5b:44:f8:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpH9iyAnbHwV24CfQNS1hlrFdHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3 NkQ0MDlDODAeFw0yNTEyMDUxNjU2NDJaFw0yNTEyMDgyMTQ1NDJaMDMxMTAvBgNV BAMTKDExRTBCODAzODdFM0QxNUJENDJBQ0YzREVEMkEwRDNDMEVBQzMwMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNomMKQLk1wzu769gFhy5XGxzg aF0aa2/wg0XrO17C4FvDrSZitOEXd/CJ/a3fqvSrAcYiEwH8eZLiNXhLLa/+mKBW DqFLg7Ut/jMMMA0IgY0N1ZEw2zl1VnVkemghHrfy3ayyS4v3k+5M/UcCux6QoRxm Azld7J/JwutPGDAHVo5AeSlgwjOi7AKOgU04k3x4BJezEkGNv0QDXg2Mw+6ehGoi bThvNWUWeCErOOt110nXYGwH+y33XpXHhGeZEUJgBrLw6sxH+X3yUPArq4pxYyg7 C6GtjMuYH27s0wLKftYcMc7OkgB+HF8QqT49m1W4aUPomzL4CQkXLucqaQKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEeC4A4fj0VvUKs897SoNPA6sMA4wHwYDVR0j BBgwFoAUiuiptRvakj/IlWrLCG9W53bUCcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YzZmMDcwMC05MTE2LTRhMDUtOGY2Yi1kOGVkYWZkYjcyZWMvMC84QUU4QTlCNTFC REE5MjNGQzg5NTZBQ0IwODZGNTZFNzc2RDQwOUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2RTc3NkQ0 MDlDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM2ZjA3MDAtOTExNi00YTA1LThm NmItZDhlZGFmZGI3MmVjLzAvOEFFOEE5QjUxQkRBOTIzRkM4OTU2QUNCMDg2RjU2 RTc3NkQ0MDlDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjF7nqAhQea/tWxjnpS4a5vF+/1os3RFDg+ QHu8dkMJJSN9dQSafRn5pCcBY6OAu7Sy7G8C2NCpqUsRimn/ZZ//IIbmrL/EhqYf iuVZFyD+fa0KcBtd7niU8qs8jfAqJaZXgHWRcrCPNn/zP16TbSzkXHrwLAt0C0S/ IJ/YB9oUaByjNm/xG9xQaanHQjCgO18XT1Evvs0KiC1/aPOuC+aTlnyEYnpMmNtb fpWufTrFxQ0BZFSExI8WwOcEUR1NosN1EdwMuTpBncSPRJSJ8YYqxtPFgdc8G3Zi cq7WVCDzhpCfZud3dUuLqQM1f3YdmVG5q+ava3xwNFQa7VtE+IY= -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:47 2025 by rpki-client