This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: UGjpi+4ayfa2w+xO7Oy40856Sxc8bfSdkre0YkezupM= Subject key identifier: 15:12:19:F1:40:CC:5E:68:7A:A2:B2:89:74:75:2E:EA:0F:BE:F0:A8 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 1C57CB489A1D08251C5990AB0684E4B7D99E47F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0535 Signing time: Wed 17 Dec 2025 21:00:40 +0000 Manifest this update: Wed 17 Dec 2025 20:55:40 +0000 Manifest next update: Sun 21 Dec 2025 07:43:40 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: TiBeB42QrKQxeHiSCxV+b3ICdrMOXbz1MZ0/tNXsxLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 07:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:57:cb:48:9a:1d:08:25:1c:59:90:ab:06:84:e4:b7:d9:9e:47:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Dec 17 20:55:40 2025 GMT Not After : Dec 21 07:43:40 2025 GMT Subject: CN=151219F140CC5E687AA2B28974752EEA0FBEF0A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:98:e7:08:a6:f3:49:25:59:4a:5c:00:91:cc: b7:ee:20:8b:48:8e:f5:95:f1:d2:2f:e2:4e:c9:5a: dc:c9:f0:27:dc:47:6f:a6:8a:8a:ba:0b:69:3a:f2: 67:6b:92:c2:be:bf:d7:8c:de:ff:53:97:78:fc:4f: 17:c1:81:11:2f:80:c8:56:02:d5:24:16:67:20:db: db:9e:51:bf:fe:cd:b7:3a:a6:19:46:fb:50:99:3c: c4:88:3a:59:31:bc:4c:f9:61:07:26:66:1c:e6:b0: 32:f5:05:95:74:f1:f7:e2:12:db:95:ed:0e:d5:27: 06:0e:38:40:bf:5b:d7:a6:34:53:c1:a2:54:bd:a6: ed:20:b9:69:72:5f:97:30:4e:5e:34:6d:2e:b7:dd: e6:44:f3:81:1c:30:11:94:b7:30:3a:29:54:24:35: 57:cd:95:7e:f1:d1:21:ed:9b:5c:2f:37:f0:d1:81: 96:7f:a6:52:32:05:63:4c:14:2c:18:04:93:ed:1c: 24:4c:e9:0c:80:9b:10:13:5c:67:da:06:6b:fd:5b: ff:63:1b:88:21:9b:4f:de:8e:a9:3f:c1:3f:9e:df: 4b:60:38:da:4f:a4:44:05:c7:cc:79:ea:b5:9e:71: dd:b6:cd:17:83:c6:28:d5:d0:78:16:d2:63:fd:08: 37:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:12:19:F1:40:CC:5E:68:7A:A2:B2:89:74:75:2E:EA:0F:BE:F0:A8 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:33:dc:c2:31:d1:59:d1:80:7c:c4:55:27:5a:a2:cd:10:d0: 99:8f:38:25:c3:a8:79:d8:3f:19:9f:6f:e1:a6:ae:d8:d5:5b: 28:2d:45:f2:c8:eb:56:72:5f:c6:96:d6:2f:70:0e:ef:95:6b: ba:62:fc:ac:8a:70:5b:1a:7a:1e:5c:13:0c:fd:9a:ff:65:e6: 8b:7b:dc:0c:a5:9a:40:56:1d:62:f7:e7:2f:7c:de:f8:9c:c2: 92:c3:fc:64:be:8d:20:c5:cc:24:6d:93:14:7b:d3:eb:69:b6: 00:97:28:ea:a3:2f:d3:de:0b:37:3d:42:31:45:25:a3:25:ee: 67:34:e1:5c:a6:56:d5:10:35:eb:53:f0:1e:b0:08:32:e4:48: 85:5b:48:64:cd:6a:ed:88:a2:37:d8:e6:65:45:bb:c1:03:93: d4:d1:2d:20:24:b7:64:8e:79:89:f2:b9:7b:71:6c:46:cf:ad: 9e:44:8a:48:00:5f:f5:cc:e2:23:7c:52:7d:a9:bf:61:7e:e5: 94:5c:19:c3:29:ac:9a:86:bd:48:11:72:41:92:96:4c:b0:c1: a1:2e:55:05:4c:e5:bf:f8:41:ed:19:ac:7a:2f:12:38:09:8e: 50:c6:15:55:39:61:98:62:04:86:05:e8:5a:0d:61:08:ef:9f: af:46:ee:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFfLSJodCCUcWZCrBoTkt9meR/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTEyMTcyMDU1NDBaFw0yNTEyMjEwNzQzNDBaMDMxMTAvBgNV BAMTKDE1MTIxOUYxNDBDQzVFNjg3QUEyQjI4OTc0NzUyRUVBMEZCRUYwQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmOcIpvNJJVlKXACRzLfuIItI jvWV8dIv4k7JWtzJ8CfcR2+mioq6C2k68mdrksK+v9eM3v9Tl3j8TxfBgREvgMhW AtUkFmcg29ueUb/+zbc6phlG+1CZPMSIOlkxvEz5YQcmZhzmsDL1BZV08ffiEtuV 7Q7VJwYOOEC/W9emNFPBolS9pu0guWlyX5cwTl40bS633eZE84EcMBGUtzA6KVQk NVfNlX7x0SHtm1wvN/DRgZZ/plIyBWNMFCwYBJPtHCRM6QyAmxATXGfaBmv9W/9j G4ghm0/ejqk/wT+e30tgONpPpEQFx8x56rWecd22zReDxijV0HgW0mP9CDc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFRIZ8UDMXmh6orKJdHUu6g++8KgwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADUz3MIx0VnRgHzEVSdaos0Q0JmPOCXDqHnY Pxmfb+GmrtjVWygtRfLI61ZyX8aW1i9wDu+Va7pi/KyKcFsaeh5cEwz9mv9l5ot7 3AylmkBWHWL35y983vicwpLD/GS+jSDFzCRtkxR70+tptgCXKOqjL9PeCzc9QjFF JaMl7mc04VymVtUQNetT8B6wCDLkSIVbSGTNau2IojfY5mVFu8EDk9TRLSAkt2SO eYnyuXtxbEbPrZ5EikgAX/XM4iN8Un2pv2F+5ZRcGcMprJqGvUgRckGSlkywwaEu VQVM5b/4Qe0ZrHovEjgJjlDGFVU5YZhiBIYF6FoNYQjvn69G7pA= -----END CERTIFICATE-----Generated at Sun Dec 21 01:21:35 2025 by rpki-client