This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json)
Hash identifier: VWmGWVAeidBP8DzMUdBirSqkjNpErbMlH0+L7aF6ceo=
Subject key identifier: 07:05:DE:14:BD:B8:61:01:C9:A9:B1:FD:93:13:56:14:83:CE:C5:FC
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial: 3B27C1441BCC7734C11F39469972A1DE1D9AC9E9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
Manifest number: 01B6
Signing time: Wed 17 Dec 2025 03:10:05 +0000
Manifest this update: Wed 17 Dec 2025 03:05:05 +0000
Manifest next update: Sat 20 Dec 2025 09:57:05 +0000
Files and hashes: 1: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: hJHwzL4b7OAMi5WrOde3+hJoumq2S4k3BOlcDxw9iOk=)
2: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=)
3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 09:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:27:c1:44:1b:cc:77:34:c1:1f:39:46:99:72:a1:de:1d:9a:c9:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Validity
Not Before: Dec 17 03:05:05 2025 GMT
Not After : Dec 20 09:57:05 2025 GMT
Subject: CN=0705DE14BDB86101C9A9B1FD9313561483CEC5FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f3:60:02:38:df:e1:52:5b:14:d7:0e:43:90:
4c:68:47:23:33:ef:9b:e0:16:bf:3a:c0:f9:b8:93:
fc:fc:a6:97:40:89:70:bd:09:d4:b5:af:a1:5c:f9:
e0:59:b0:69:84:29:47:fd:01:22:8e:37:5b:01:f3:
88:b0:28:7c:6b:6a:71:61:61:8a:15:d2:5c:3d:df:
36:84:70:fa:f4:bc:fd:08:e1:a7:d9:24:81:a4:5c:
1d:3d:41:cd:af:7b:ad:dc:fa:14:7d:1a:ab:11:d4:
7d:41:12:5b:28:ac:23:d5:3c:ea:47:aa:3e:63:6c:
30:cc:78:67:cd:bd:47:ce:da:74:a2:22:7a:68:fc:
1e:5b:7f:bb:89:dd:5e:7b:7a:af:7a:8c:1f:6b:5c:
88:17:45:1f:b6:42:0e:94:5d:ba:2a:90:e3:0f:08:
35:d3:5d:ce:6e:87:aa:29:98:1d:2f:80:2a:de:c8:
af:5b:54:88:6e:93:7a:77:d4:a6:f3:7a:40:44:be:
b6:fe:89:94:99:e5:e8:9b:ea:9a:56:4f:fa:a9:3a:
ec:16:3c:30:c6:41:44:8e:06:ea:0a:6f:27:35:35:
18:b7:85:61:7e:39:15:8c:b2:ed:fb:50:91:87:0d:
45:33:b5:83:2f:60:0c:13:22:ad:f4:a7:d3:4b:de:
b7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:05:DE:14:BD:B8:61:01:C9:A9:B1:FD:93:13:56:14:83:CE:C5:FC
X509v3 Authority Key Identifier:
keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4d:96:c9:f0:65:50:8f:87:8a:89:69:5c:34:6e:47:d4:af:
bc:66:ea:b7:cf:2b:b3:dc:1a:97:6e:b4:fe:a1:b8:f6:5b:02:
a1:69:6f:78:95:6e:c9:6b:c8:35:af:13:de:9a:09:59:02:41:
33:1a:c3:19:f3:65:ba:24:09:e5:35:b0:55:bd:e7:44:06:75:
88:ec:bf:2c:40:c2:5e:35:49:81:ae:4d:41:36:88:f4:17:69:
6b:a2:d5:3e:41:a1:c6:bc:41:57:7f:50:06:74:26:01:a4:81:
eb:f3:2d:bb:bb:99:65:06:b4:1b:e7:4c:07:b4:b7:8b:6b:5a:
cd:ca:a2:fd:2d:f4:b3:e9:d1:10:b2:a8:55:da:10:92:2b:ce:
d7:33:5e:0a:51:cc:e7:f0:ea:9d:2d:1a:03:35:26:dd:55:95:
01:1c:8f:2d:61:5a:0c:5f:93:da:f2:b2:fe:d4:8f:e5:9c:04:
77:f2:32:6b:f6:6a:14:23:a9:d3:51:cd:6b:b6:4d:c9:f4:52:
92:2c:0d:9c:73:56:1d:86:ae:39:b3:ee:b5:61:db:6a:de:77:
80:94:8a:5f:82:06:b6:13:c6:3d:e8:bc:ec:16:ee:ca:2e:75:
46:27:a8:d3:cd:9b:32:3c:d0:4b:0b:22:92:be:76:2d:63:c4:
9b:52:6e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:00:15 2025 by rpki-client