This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: 9qHFZUq0/mtyAGKCzlJ/2z2NGqAosIFlzJ/jHw39qiY= Subject key identifier: 30:81:53:16:F9:E3:1E:F8:CE:9E:D8:F4:AF:AC:94:7E:F8:59:93:C8 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 46D05B3D208287D92D9EE4125930702C93AF1D66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 0538 Signing time: Tue 23 Dec 2025 22:43:29 +0000 Manifest this update: Tue 23 Dec 2025 22:38:28 +0000 Manifest next update: Sat 27 Dec 2025 02:17:28 +0000 Files and hashes: 1: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 2: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: 7HRil5VWd1EwbM14WMkkaitVH6oul4zOjiGbOtLK7uk=) 3: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 4: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 5: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 02:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d0:5b:3d:20:82:87:d9:2d:9e:e4:12:59:30:70:2c:93:af:1d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Dec 23 22:38:28 2025 GMT Not After : Dec 27 02:17:28 2025 GMT Subject: CN=30815316F9E31EF8CE9ED8F4AFAC947EF85993C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:62:6f:c1:04:b3:11:b3:23:6f:28:cb:06:ac: 19:0e:d2:51:bc:5c:0c:56:3f:49:ee:c9:11:9d:c2: 45:7c:8e:bd:e5:48:57:60:a2:19:6c:30:a4:79:9d: 46:de:c0:4b:1c:27:70:d1:b9:ea:14:64:7b:fb:27: 1d:12:c4:22:27:54:e7:f0:4e:18:2a:6f:02:ad:ba: b9:24:a7:68:e8:fd:71:43:9a:fd:f5:a1:27:d7:3d: 74:92:3a:c3:ca:b6:5d:de:94:db:6f:31:a5:14:91: 45:2f:2e:d4:64:e2:f2:61:97:98:81:00:44:e0:c7: 74:8f:bf:12:fb:b2:69:ec:f8:32:56:80:ff:04:20: 3b:cb:5b:a6:36:dc:1d:fc:4e:f8:98:28:8e:c6:d3: ba:15:8f:c9:4d:6d:e9:88:f1:cd:48:bc:17:e4:92: 71:7e:de:3f:35:cd:61:56:f1:da:7a:35:6d:91:b5: 9d:e3:b2:13:80:a1:2a:f1:d1:16:8a:35:ce:16:2a: 15:b0:09:f7:59:c3:48:b5:76:cf:1e:c3:1f:3c:c9: 47:d6:64:98:71:3f:15:0e:e9:a4:a9:ba:40:b1:ad: 0a:48:05:eb:fc:0a:66:92:85:a3:c4:55:56:57:bd: 0c:13:a6:d3:83:fb:bd:1c:c3:f8:7a:3a:aa:1f:72: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:81:53:16:F9:E3:1E:F8:CE:9E:D8:F4:AF:AC:94:7E:F8:59:93:C8 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0a:e5:75:3d:0b:0b:7a:28:b4:da:c3:29:b7:6c:f8:93:22: 91:cf:13:c6:ae:57:88:e2:f2:e3:18:69:a7:4a:64:bc:1e:eb: b9:57:a3:18:78:ed:81:89:97:59:ef:8b:52:e0:a3:78:60:dc: be:d4:3f:d9:03:47:4e:82:b7:d3:60:73:ff:70:f8:10:26:6f: 3a:4d:11:64:e3:43:c7:f2:c6:d9:93:6b:31:19:49:0a:79:a4: 8e:e0:95:01:c1:b1:21:7e:52:39:1d:bd:0b:41:b9:27:1b:ad: 51:23:6b:4f:b8:ba:22:b2:7b:b6:53:f7:5c:c0:08:5c:ab:6d: bb:e4:28:93:36:9b:97:a5:0c:ac:83:c8:c5:46:9d:98:bf:78: 6e:0b:55:c0:8e:72:53:53:12:81:c3:7c:72:c7:fc:3a:82:01: f8:0e:0c:8e:b1:d0:3f:c2:19:39:77:ff:bf:ef:0f:e7:85:75: da:a7:03:50:0b:bb:65:79:51:37:ea:c6:06:30:94:37:2f:9c: 32:23:5a:b8:5b:d8:19:62:b0:0b:e1:c3:b9:78:7a:53:93:b3: 96:35:42:61:1f:ea:de:e4:4b:39:65:71:2a:ad:e2:84:e2:4e: 78:9a:98:d4:56:7d:ff:2d:ab:f4:43:c0:8e:13:08:95:07:38: 8b:c7:13:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURtBbPSCCh9ktnuQSWTBwLJOvHWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTEyMjMyMjM4MjhaFw0yNTEyMjcwMjE3MjhaMDMxMTAvBgNV BAMTKDMwODE1MzE2RjlFMzFFRjhDRTlFRDhGNEFGQUM5NDdFRjg1OTkzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Ym/BBLMRsyNvKMsGrBkO0lG8 XAxWP0nuyRGdwkV8jr3lSFdgohlsMKR5nUbewEscJ3DRueoUZHv7Jx0SxCInVOfw ThgqbwKturkkp2jo/XFDmv31oSfXPXSSOsPKtl3elNtvMaUUkUUvLtRk4vJhl5iB AETgx3SPvxL7smns+DJWgP8EIDvLW6Y23B38TviYKI7G07oVj8lNbemI8c1IvBfk knF+3j81zWFW8dp6NW2RtZ3jshOAoSrx0RaKNc4WKhWwCfdZw0i1ds8ewx88yUfW ZJhxPxUO6aSpukCxrQpIBev8CmaShaPEVVZXvQwTptOD+70cw/h6Oqofci5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMIFTFvnjHvjOntj0r6yUfvhZk8gwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgK5XU9Cwt6KLTawym3bPiTIpHPE8auV4ji 8uMYaadKZLwe67lXoxh47YGJl1nvi1Lgo3hg3L7UP9kDR06Ct9Ngc/9w+BAmbzpN EWTjQ8fyxtmTazEZSQp5pI7glQHBsSF+UjkdvQtBuScbrVEja0+4uiKye7ZT91zA CFyrbbvkKJM2m5elDKyDyMVGnZi/eG4LVcCOclNTEoHDfHLH/DqCAfgODI6x0D/C GTl3/7/vD+eFddqnA1ALu2V5UTfqxgYwlDcvnDIjWrhb2BlisAvhw7l4elOTs5Y1 QmEf6t7kSzllcSqt4oTiTniamNRWff8tq/RDwI4TCJUHOIvHE50= -----END CERTIFICATE-----Generated at Wed Dec 24 09:03:17 2025 by rpki-client