This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: WER/IVpgMLpt92+e5OY9EWdNTAeULaci0buKI9lCn6A= Subject key identifier: 68:B1:57:CE:45:EC:86:BB:6D:2B:AB:A0:E9:FB:E6:1B:49:CD:1C:B3 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 49134BA184C1CD9687F462EC8174F1F882A14DAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0538 Signing time: Wed 24 Dec 2025 16:31:27 +0000 Manifest this update: Wed 24 Dec 2025 16:26:27 +0000 Manifest next update: Sat 27 Dec 2025 23:15:27 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: 0uxKKXe/oxWsOy5/4ebHDdPYE4JbjREwXslagSoMosg=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:13:4b:a1:84:c1:cd:96:87:f4:62:ec:81:74:f1:f8:82:a1:4d:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Dec 24 16:26:27 2025 GMT Not After : Dec 27 23:15:27 2025 GMT Subject: CN=68B157CE45EC86BB6D2BABA0E9FBE61B49CD1CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:6d:e0:1c:24:16:c1:f9:15:cd:24:9e:97: 7e:f8:75:b7:14:6f:1c:3e:67:57:26:c0:66:07:3b: 86:f7:62:a9:8f:b6:a9:d4:e0:a3:47:fa:d5:9d:48: 7f:45:63:57:81:b9:c6:96:f4:20:a3:ef:0d:71:91: cd:b6:18:2d:95:ed:71:a3:e9:57:27:01:96:2d:7b: 70:b5:f4:b8:79:c1:42:55:36:07:a2:72:96:69:68: 28:68:58:73:44:fd:f6:88:63:0a:57:ff:cf:1d:76: e8:36:cc:72:dd:e2:7e:db:7e:87:c1:1e:8a:49:49: 41:15:82:96:6b:ad:fa:d5:77:1c:08:c8:ad:5f:bf: 9e:c0:8b:2b:cb:94:dd:f2:18:5e:af:0e:80:f7:00: 70:a3:5d:c8:2e:6a:53:65:f8:f9:fd:8d:89:bf:41: 2f:b7:c2:87:55:b5:28:34:83:4c:c1:8a:53:79:55: ef:5c:da:1d:d6:5a:89:cd:9c:40:55:05:38:14:73: 74:34:60:81:fe:79:7c:77:00:d6:04:dc:89:6b:3c: 5d:cf:f7:7e:75:2e:b8:3b:58:19:bf:8d:8b:24:d9: 62:30:f7:22:09:e9:e3:d8:1e:1d:30:b1:40:0d:8b: 9b:a2:6b:a5:c8:83:a7:19:6b:c7:dd:03:8b:e7:14: 8d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B1:57:CE:45:EC:86:BB:6D:2B:AB:A0:E9:FB:E6:1B:49:CD:1C:B3 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7b:c7:9c:06:38:af:62:3f:55:37:50:a2:ae:24:a1:fb:6e: 53:40:27:47:99:36:41:f0:fe:89:8a:27:43:d0:b7:fc:8c:53: 00:40:b2:c7:8e:11:21:4f:18:36:1c:a9:d1:bb:bd:d6:5d:c2: 4c:03:d3:0d:3c:18:c2:1d:3b:b8:b1:6d:40:4a:b6:1d:46:02: e1:7e:74:b2:3b:5d:0f:14:5e:79:b7:d2:04:db:87:e0:9b:1b: 26:8a:5b:60:3b:16:15:71:15:21:a6:99:1f:ed:19:fe:36:76: 13:da:77:0e:3b:87:cf:96:fc:7c:c3:82:ef:3b:88:a0:81:a8: fe:22:ce:35:99:96:78:0a:82:93:90:5d:8d:9d:33:9d:9a:68: 2d:cb:77:79:60:ea:fa:a7:0e:c0:db:26:eb:fc:a7:5a:77:61: a2:bb:c7:b3:95:94:bb:72:e9:57:2b:e7:9d:b7:01:c8:75:8a: ee:f2:35:ad:67:5c:41:61:6c:ff:a6:8e:35:56:8d:cd:0f:ae: 72:32:23:1f:7f:b0:ba:5b:55:db:fd:9f:d8:fd:7f:4b:22:ce: 6b:86:b3:0e:2e:8d:3b:b1:cd:db:a5:01:10:e7:ce:42:21:61: 86:2a:5e:15:cc:3a:9d:c1:b1:1e:9b:da:52:37:29:60:1a:e6: 2d:53:ce:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRNLoYTBzZaH9GLsgXTx+IKhTa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTEyMjQxNjI2MjdaFw0yNTEyMjcyMzE1MjdaMDMxMTAvBgNV BAMTKDY4QjE1N0NFNDVFQzg2QkI2RDJCQUJBMEU5RkJFNjFCNDlDRDFDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7W3gHCQWwfkVzSSel374dbcU bxw+Z1cmwGYHO4b3YqmPtqnU4KNH+tWdSH9FY1eBucaW9CCj7w1xkc22GC2V7XGj 6VcnAZYte3C19Lh5wUJVNgeicpZpaChoWHNE/faIYwpX/88ddug2zHLd4n7bfofB HopJSUEVgpZrrfrVdxwIyK1fv57AiyvLlN3yGF6vDoD3AHCjXcgualNl+Pn9jYm/ QS+3wodVtSg0g0zBilN5Ve9c2h3WWonNnEBVBTgUc3Q0YIH+eXx3ANYE3IlrPF3P 9351Lrg7WBm/jYsk2WIw9yIJ6ePYHh0wsUANi5uia6XIg6cZa8fdA4vnFI2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaLFXzkXshrttK6ug6fvmG0nNHLMwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKh7x5wGOK9iP1U3UKKuJKH7blNAJ0eZNkHw /omKJ0PQt/yMUwBAsseOESFPGDYcqdG7vdZdwkwD0w08GMIdO7ixbUBKth1GAuF+ dLI7XQ8UXnm30gTbh+CbGyaKW2A7FhVxFSGmmR/tGf42dhPadw47h8+W/HzDgu87 iKCBqP4izjWZlngKgpOQXY2dM52aaC3Ld3lg6vqnDsDbJuv8p1p3YaK7x7OVlLty 6Vcr5523Ach1iu7yNa1nXEFhbP+mjjVWjc0PrnIyIx9/sLpbVdv9n9j9f0sizmuG sw4ujTuxzdulARDnzkIhYYYqXhXMOp3BsR6b2lI3KWAa5i1Tzl4= -----END CERTIFICATE-----Generated at Thu Dec 25 03:24:50 2025 by rpki-client