This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: O66QJ9uOuJeOHp2n0n/F59M5+T/z0OiHsHdVt0J/WYE= Subject key identifier: 6B:A2:80:EA:E6:2D:D5:2F:8B:9B:25:56:9F:65:66:6C:93:FA:94:87 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 2CE957246CF50863496B94A30370F06330CF4CD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 023F Signing time: Thu 18 Dec 2025 06:10:49 +0000 Manifest this update: Thu 18 Dec 2025 06:05:49 +0000 Manifest next update: Sun 21 Dec 2025 11:01:49 +0000 Files and hashes: 1: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) 2: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: lA+pTbA//dZpYwDgExi0Jeh0XVdiesrXGGcdkhsj/l4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 11:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:e9:57:24:6c:f5:08:63:49:6b:94:a3:03:70:f0:63:30:cf:4c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Dec 18 06:05:49 2025 GMT Not After : Dec 21 11:01:49 2025 GMT Subject: CN=6BA280EAE62DD52F8B9B25569F65666C93FA9487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:93:d0:4b:e3:06:35:47:01:f2:43:ed:ea:be: ed:b8:23:dd:2c:40:83:72:e1:3c:ec:e8:3f:7c:fa: 32:7e:f5:08:de:98:09:95:5e:84:3d:2c:25:b8:bc: 00:73:98:0a:63:4d:d1:6d:8c:5c:78:be:59:73:5f: 1f:5f:de:f0:cd:4c:de:67:7c:d4:a9:2e:84:12:97: 5a:65:ea:1c:ca:1e:66:fa:f5:36:ab:6f:b3:76:39: 00:6f:30:17:e8:2c:f7:14:cf:69:12:d0:5b:a8:b7: e0:31:51:32:ef:0a:e1:44:a6:ca:97:46:66:d8:31: f4:55:0b:cb:6d:6c:eb:a2:6a:f0:3c:b2:04:9e:8a: e4:41:35:06:9c:ec:aa:9a:3b:03:9d:11:31:a0:40: e4:92:42:1a:6f:5a:fc:76:c5:fe:38:ca:17:46:14: 03:b5:a1:47:d6:81:77:48:f5:7b:a2:fa:ad:69:5d: 17:d1:50:63:76:38:00:2d:b6:f2:8f:3a:ec:6c:7b: b0:2d:2e:cc:b7:6b:26:ae:52:50:ac:f7:52:93:21: ed:14:43:7f:65:67:26:f8:97:c0:c8:fe:17:74:2e: 6f:c3:5f:79:30:42:f8:c4:d9:d9:3c:a9:86:6d:66: 2c:0f:1f:83:60:88:8e:0f:bc:45:be:de:01:a1:81: a4:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A2:80:EA:E6:2D:D5:2F:8B:9B:25:56:9F:65:66:6C:93:FA:94:87 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:99:9a:68:ef:dd:23:47:d8:2b:43:a2:99:7d:c5:62:d3:f3: 6d:f4:d7:44:9c:ac:c9:82:98:6c:fb:c6:41:cf:6f:e3:67:d0: 55:62:aa:96:0c:a7:d0:1b:6f:98:18:e3:27:bf:fd:93:4c:e0: 0d:34:17:70:cd:2f:7f:1a:9c:87:b7:10:82:3c:63:a0:c3:35: 04:f7:13:98:95:41:92:e0:3c:e4:b3:36:f6:bb:ea:4d:b7:76: 5f:6b:be:7b:3a:f9:95:09:1b:b9:f3:bb:13:f0:1b:e3:4d:28: cb:6b:fe:58:fb:0a:10:01:eb:ec:38:4d:da:e0:e5:b9:e1:2b: d2:fa:04:15:b0:67:7b:db:7b:e7:7c:14:f8:c3:6f:57:e6:29: 91:93:5b:61:9e:4c:c0:5c:50:aa:56:e0:60:23:a1:71:53:6c: 63:b2:db:ac:57:b2:91:14:a6:dc:10:0d:3b:d4:78:71:22:0a: a1:dc:e0:a8:d0:6a:da:0c:6d:a5:15:f9:26:88:18:a5:af:d6: e0:77:6f:24:b7:2f:bc:11:ae:94:5e:f8:9f:4f:c6:b7:ca:bc: 11:79:72:f8:20:d2:a9:6b:32:c3:cb:95:f9:73:f1:13:56:77: 6a:94:84:ec:c6:28:57:8d:51:64:77:80:7d:3b:d0:f9:66:a6: 42:92:d6:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULOlXJGz1CGNJa5SjA3DwYzDPTNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTEyMTgwNjA1NDlaFw0yNTEyMjExMTAxNDlaMDMxMTAvBgNV BAMTKDZCQTI4MEVBRTYyREQ1MkY4QjlCMjU1NjlGNjU2NjZDOTNGQTk0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrk9BL4wY1RwHyQ+3qvu24I90s QINy4Tzs6D98+jJ+9QjemAmVXoQ9LCW4vABzmApjTdFtjFx4vllzXx9f3vDNTN5n fNSpLoQSl1pl6hzKHmb69Tarb7N2OQBvMBfoLPcUz2kS0Fuot+AxUTLvCuFEpsqX RmbYMfRVC8ttbOuiavA8sgSeiuRBNQac7KqaOwOdETGgQOSSQhpvWvx2xf44yhdG FAO1oUfWgXdI9Xui+q1pXRfRUGN2OAAttvKPOuxse7AtLsy3ayauUlCs91KTIe0U Q39lZyb4l8DI/hd0Lm/DX3kwQvjE2dk8qYZtZiwPH4NgiI4PvEW+3gGhgaQVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa6KA6uYt1S+LmyVWn2VmbJP6lIcwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASZmmjv3SNH2CtDopl9xWLT823010ScrMmC mGz7xkHPb+Nn0FViqpYMp9Abb5gY4ye//ZNM4A00F3DNL38anIe3EII8Y6DDNQT3 E5iVQZLgPOSzNva76k23dl9rvns6+ZUJG7nzuxPwG+NNKMtr/lj7ChAB6+w4Tdrg 5bnhK9L6BBWwZ3vbe+d8FPjDb1fmKZGTW2GeTMBcUKpW4GAjoXFTbGOy26xXspEU ptwQDTvUeHEiCqHc4KjQatoMbaUV+SaIGKWv1uB3byS3L7wRrpRe+J9PxrfKvBF5 cvgg0qlrMsPLlflz8RNWd2qUhOzGKFeNUWR3gH070PlmpkKS1rw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:02 2025 by rpki-client