This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: Ja8P85veq+0P92gWZg80PVU559NIg4ynsvYckZ5ME2I= Subject key identifier: 9F:3D:61:8A:37:D7:08:F4:97:E6:63:65:25:CE:9E:0B:AB:0F:8B:01 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 0F6622801089934715BFF0095C6A02E427A4A534 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 0228 Signing time: Tue 23 Dec 2025 14:01:11 +0000 Manifest this update: Tue 23 Dec 2025 13:56:11 +0000 Manifest next update: Fri 26 Dec 2025 19:22:11 +0000 Files and hashes: 1: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) 2: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: aC2+z8a77wdNY5ufSYIjEEWqTq/MaRb0eSEqUU62SMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 19:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:66:22:80:10:89:93:47:15:bf:f0:09:5c:6a:02:e4:27:a4:a5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Dec 23 13:56:11 2025 GMT Not After : Dec 26 19:22:11 2025 GMT Subject: CN=9F3D618A37D708F497E6636525CE9E0BAB0F8B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:86:76:46:15:e9:ce:74:6a:dd:aa:ac:f6:fe: fc:96:a8:6a:d4:72:1a:41:50:5f:74:3f:c8:c7:bf: 9e:3b:98:4f:35:d5:63:6e:6c:a1:f6:f6:6a:2f:6f: 2b:b0:c3:82:3b:83:f1:83:8d:5d:aa:05:ba:77:0a: a9:5f:15:54:3b:96:c7:3a:dd:73:34:8a:ee:00:b6: c5:79:d9:17:30:7e:c3:d5:de:32:37:99:bd:8e:b2: 94:52:99:70:be:8a:cd:5a:a8:c7:7a:b1:cb:fd:90: d5:c4:15:86:5d:5c:fd:68:73:03:dc:6c:bd:bd:21: e8:dd:78:f9:22:5b:49:06:f4:09:d9:57:a6:45:fc: 94:21:46:70:69:a6:b2:fe:53:ff:56:2d:ed:bf:ef: 9a:0f:ac:b9:5f:6d:2f:6a:53:86:93:24:fa:6a:d7: 56:6d:91:9b:fe:d5:3b:e9:b1:0c:5f:46:1b:c2:09: 1c:dd:46:c9:b6:e1:18:4a:03:3c:ef:91:f8:f5:33: e6:89:9f:53:8e:98:fb:19:e4:83:00:31:24:c2:23: 97:58:0d:0b:50:34:3e:1f:82:d6:e8:42:8d:b6:67: df:62:22:63:52:ca:55:24:74:f1:a7:14:c8:d9:4c: bd:9a:60:77:b1:15:dd:bb:cf:7f:2d:cf:4a:0a:54: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3D:61:8A:37:D7:08:F4:97:E6:63:65:25:CE:9E:0B:AB:0F:8B:01 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:9f:a9:d8:83:c4:32:46:ec:49:ae:55:ae:1f:99:fd:92:1a: ac:23:72:c8:9e:3c:30:10:01:ef:4c:5b:4c:65:90:8a:64:23: ae:ba:3c:50:28:cb:c9:6c:21:3a:9b:e8:fe:8d:e5:71:be:56: 6b:be:b3:7b:7c:bd:df:a7:6e:cc:df:85:52:6a:86:80:78:d7: 79:85:e6:38:89:c1:bf:76:0e:c1:5d:7d:a2:ac:9e:8d:38:12: 8c:1d:39:5b:ae:4d:31:1d:17:28:70:f0:aa:69:fd:09:43:8d: be:e6:c0:c0:2b:81:ed:a7:d2:20:2d:e7:4a:07:6b:d7:fb:fc: c3:04:17:da:a7:a4:b1:27:9b:6d:ab:42:0d:3f:ef:3b:c5:c6: bd:31:e6:fb:86:a6:38:fe:fc:a7:c3:d4:27:8b:50:e0:c3:c7: 92:01:68:67:a8:5f:73:1f:51:11:9e:65:fa:ed:30:25:05:a6: 50:11:fc:35:6e:28:4e:d1:6d:33:d8:3e:ce:b7:39:f0:a6:1f: db:de:80:d2:3c:e0:01:fc:fc:12:25:b6:0f:1f:d3:3d:c7:e9: dd:cb:85:cd:1b:5f:2c:13:74:b8:04:89:a1:c0:e5:5c:43:56: 45:9b:ef:52:44:c4:a6:00:71:ed:21:20:cc:9c:1c:47:e7:4e: 90:34:1f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD2YigBCJk0cVv/AJXGoC5CekpTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTEyMjMxMzU2MTFaFw0yNTEyMjYxOTIyMTFaMDMxMTAvBgNV BAMTKDlGM0Q2MThBMzdENzA4RjQ5N0U2NjM2NTI1Q0U5RTBCQUIwRjhCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDchnZGFenOdGrdqqz2/vyWqGrU chpBUF90P8jHv547mE811WNubKH29movbyuww4I7g/GDjV2qBbp3CqlfFVQ7lsc6 3XM0iu4AtsV52RcwfsPV3jI3mb2OspRSmXC+is1aqMd6scv9kNXEFYZdXP1ocwPc bL29IejdePkiW0kG9AnZV6ZF/JQhRnBpprL+U/9WLe2/75oPrLlfbS9qU4aTJPpq 11ZtkZv+1TvpsQxfRhvCCRzdRsm24RhKAzzvkfj1M+aJn1OOmPsZ5IMAMSTCI5dY DQtQND4fgtboQo22Z99iImNSylUkdPGnFMjZTL2aYHexFd27z38tz0oKVA0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnz1hijfXCPSX5mNlJc6eC6sPiwEwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKfqdiDxDJG7EmuVa4fmf2SGqwjcsiePDAQ Ae9MW0xlkIpkI666PFAoy8lsITqb6P6N5XG+Vmu+s3t8vd+nbszfhVJqhoB413mF 5jiJwb92DsFdfaKsno04EowdOVuuTTEdFyhw8Kpp/QlDjb7mwMArge2n0iAt50oH a9f7/MMEF9qnpLEnm22rQg0/7zvFxr0x5vuGpjj+/KfD1CeLUODDx5IBaGeoX3Mf URGeZfrtMCUFplAR/DVuKE7RbTPYPs63OfCmH9vegNI84AH8/BIltg8f0z3H6d3L hc0bXywTdLgEiaHA5VxDVkWb71JExKYAce0hIMycHEfnTpA0H58= -----END CERTIFICATE-----Generated at Thu Dec 25 00:42:35 2025 by rpki-client