This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: ITEdpqGGcXH4gR01OGHEDGFS3k8TChjY0lXiOjE/TR0= Subject key identifier: C8:23:0D:DB:53:F8:96:28:5E:B1:4C:B9:80:19:3D:7B:02:F1:DE:8D Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 1903924F9E2DAE836ABA258B0CD52BCC7BC372B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 0230 Signing time: Fri 19 Dec 2025 20:12:40 +0000 Manifest this update: Fri 19 Dec 2025 20:07:40 +0000 Manifest next update: Tue 23 Dec 2025 04:05:40 +0000 Files and hashes: 1: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: 6gIK4cEeC+O3ocE5rKSG5FxLM//C/CUGq32fxpVRx2k=) 2: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 00:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:03:92:4f:9e:2d:ae:83:6a:ba:25:8b:0c:d5:2b:cc:7b:c3:72:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Dec 19 20:07:40 2025 GMT Not After : Dec 23 04:05:40 2025 GMT Subject: CN=C8230DDB53F896285EB14CB980193D7B02F1DE8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:79:9d:f8:c6:0c:c3:f7:fd:0f:57:62:ae: a3:d3:b1:03:48:e6:70:c9:0d:b9:82:37:94:bc:5c: 00:cc:42:79:d4:8b:86:02:39:d0:1b:58:43:e5:05: a0:c5:51:3d:6b:55:16:24:b4:9a:be:34:7b:a7:55: f4:50:ed:2d:99:ad:16:29:0c:8a:ee:3b:18:23:be: 52:28:1c:3f:ef:4c:54:6c:f9:eb:48:cb:3a:3f:8f: 63:05:75:3e:c7:00:c4:f1:23:2f:c5:ab:91:40:cd: 39:d5:e1:1c:0a:d1:55:37:69:89:10:2e:d5:3d:2b: 5c:24:55:81:ba:72:60:fd:bf:3e:77:0d:5b:4e:8c: 8a:23:62:5b:03:79:88:d8:cc:25:d4:62:ed:68:2c: c9:72:d2:fd:80:44:6e:82:e5:e5:d5:20:fa:ac:65: 5f:a6:2c:0d:04:43:f3:0c:c7:38:0d:f3:5a:1b:25: fd:00:4b:00:c3:55:e9:e6:e4:d5:d1:17:fd:45:39: 9d:96:fa:9c:aa:d6:1e:84:51:b7:36:00:03:ed:55: 98:7d:91:ab:ab:a5:bb:5a:3f:76:18:35:ab:a1:bd: f3:b6:63:00:f6:66:4e:36:9a:4f:4d:52:c1:0b:90: 0c:7c:d5:be:2a:01:b8:15:a7:9e:9d:48:f7:de:36: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:23:0D:DB:53:F8:96:28:5E:B1:4C:B9:80:19:3D:7B:02:F1:DE:8D X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:36:cc:a5:0a:43:3a:39:f7:53:f6:b2:50:a6:ef:66:bb:62: 95:5a:81:0e:6e:03:c5:4d:6c:d3:96:e4:6c:ac:c3:33:a8:63: 8c:3e:1f:7e:b5:64:1b:f9:8a:75:e9:aa:d6:5b:3e:48:2e:92: 95:ec:69:43:f1:2f:3b:1d:e5:23:f1:7c:b9:b4:32:34:53:ca: 1e:5b:4f:c4:98:4e:64:53:0a:79:fa:ee:3e:68:de:ca:c1:eb: b2:49:0f:eb:1f:26:ba:83:84:98:a8:12:82:06:43:d7:65:7b: 74:26:55:16:4d:35:5a:a9:5a:1e:e3:9c:94:a3:6a:e2:37:36: ed:1d:28:9e:95:86:09:43:9b:40:d2:43:2a:f3:31:4f:09:21: e9:c4:ca:2f:08:45:54:1e:21:d7:71:0b:15:34:07:0d:17:f6: ac:ca:f9:cf:b0:d6:df:95:00:64:01:69:8e:45:28:55:34:9c: 38:ed:9c:ca:44:bb:79:3b:02:72:06:c8:98:5e:e8:b4:3c:da: 8f:fb:90:2b:c3:63:da:e1:b0:7b:ad:34:ab:4a:4f:cf:c9:d6: 7c:e5:d3:7c:43:ae:29:96:6e:87:9e:49:b9:c1:f5:19:20:42: 02:d2:d4:b0:7f:40:fe:88:f4:1e:a7:e7:c9:14:1b:a7:ce:47: a6:66:42:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQOST54troNquiWLDNUrzHvDcrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTEyMTkyMDA3NDBaFw0yNTEyMjMwNDA1NDBaMDMxMTAvBgNV BAMTKEM4MjMwRERCNTNGODk2Mjg1RUIxNENCOTgwMTkzRDdCMDJGMURFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhnXmd+MYMw/f9D1dirqPTsQNI 5nDJDbmCN5S8XADMQnnUi4YCOdAbWEPlBaDFUT1rVRYktJq+NHunVfRQ7S2ZrRYp DIruOxgjvlIoHD/vTFRs+etIyzo/j2MFdT7HAMTxIy/Fq5FAzTnV4RwK0VU3aYkQ LtU9K1wkVYG6cmD9vz53DVtOjIojYlsDeYjYzCXUYu1oLMly0v2ARG6C5eXVIPqs ZV+mLA0EQ/MMxzgN81obJf0ASwDDVenm5NXRF/1FOZ2W+pyq1h6EUbc2AAPtVZh9 kaurpbtaP3YYNauhvfO2YwD2Zk42mk9NUsELkAx81b4qAbgVp56dSPfeNj1pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyCMN21P4lihesUy5gBk9ewLx3o0wHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA2zKUKQzo591P2slCm72a7YpVagQ5uA8VN bNOW5GyswzOoY4w+H361ZBv5inXpqtZbPkgukpXsaUPxLzsd5SPxfLm0MjRTyh5b T8SYTmRTCnn67j5o3srB67JJD+sfJrqDhJioEoIGQ9dle3QmVRZNNVqpWh7jnJSj auI3Nu0dKJ6VhglDm0DSQyrzMU8JIenEyi8IRVQeIddxCxU0Bw0X9qzK+c+w1t+V AGQBaY5FKFU0nDjtnMpEu3k7AnIGyJhe6LQ82o/7kCvDY9rhsHutNKtKT8/J1nzl 03xDrimWboeeSbnB9RkgQgLS1LB/QP6I9B6n58kUG6fOR6ZmQqM= -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:50 2025 by rpki-client