This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: ujCnbh6rYjg3vxbpcSkf/4I98nTmHJAi2fgdiXXFNX8= Subject key identifier: B0:0C:34:E9:49:CD:B4:98:DC:3E:4F:2B:F2:F4:48:A8:17:F1:B5:2E Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 1C6CB3B3B000906A1023A5E5D8EDEC64484D60BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 022D Signing time: Tue 16 Dec 2025 08:51:14 +0000 Manifest this update: Tue 16 Dec 2025 08:46:14 +0000 Manifest next update: Fri 19 Dec 2025 19:12:14 +0000 Files and hashes: 1: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) 2: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 3: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: kg1FRDxn2dzxVLx2dbZvSth5yKaeSSgslR8/s+ds2xA=) 4: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 19:12:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6c:b3:b3:b0:00:90:6a:10:23:a5:e5:d8:ed:ec:64:48:4d:60:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Dec 16 08:46:14 2025 GMT Not After : Dec 19 19:12:14 2025 GMT Subject: CN=B00C34E949CDB498DC3E4F2BF2F448A817F1B52E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ab:b6:9d:50:7e:ad:9b:fc:bc:63:b3:c0:b8: 30:e2:3d:19:5a:f6:34:4b:a9:da:f9:f6:cd:10:1b: 47:d5:e0:38:4a:ef:f0:6a:30:de:4d:15:b0:1e:ba: 67:8b:d7:8c:ef:d9:c8:ed:1c:a7:da:17:d1:50:c0: 2e:af:88:2e:d8:d3:35:63:66:7b:44:04:d1:93:ab: a4:c9:df:1f:77:e3:b9:ed:d9:32:e5:7b:6b:f3:0d: ad:42:bb:32:c1:c0:db:37:fd:59:11:87:b8:b5:c1: 11:9c:c2:89:22:02:65:17:47:57:d1:bd:83:f6:77: 6a:23:00:c1:83:23:eb:e3:80:dc:c1:be:8b:10:96: 42:01:4b:42:77:7c:48:93:21:e5:91:04:ed:e1:29: 10:a6:58:64:94:4a:6f:b9:ab:0e:64:e8:34:db:f2: 7d:4a:5a:47:58:f0:60:58:0e:cb:a0:b0:3f:90:c4: 4f:8b:cb:9d:6b:96:1e:04:9d:0a:96:91:3e:1f:92: 31:b5:3b:c8:31:49:30:dc:08:b9:b7:1d:79:8a:90: b8:e0:e6:c8:12:9a:59:b4:a5:07:07:10:3a:5e:ce: 7e:1f:5a:92:e7:1f:f7:3a:f8:a7:34:d1:12:ed:0f: a0:d1:9d:ab:97:fe:a5:22:cc:af:54:d3:09:21:3d: 3b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0C:34:E9:49:CD:B4:98:DC:3E:4F:2B:F2:F4:48:A8:17:F1:B5:2E X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a7:7d:79:88:5d:53:e6:25:95:50:75:59:cf:a2:6f:21:78: f2:8e:7e:80:ad:6b:39:76:c8:54:e0:07:b3:df:ea:2f:cb:76: b2:37:94:a4:ae:ec:b1:79:0d:8b:da:4b:4f:e8:e6:0c:99:95: b1:b2:cf:df:69:97:f7:81:b5:a3:ac:01:77:ee:a2:c5:3d:eb: f9:84:63:99:b2:f6:e0:4b:30:a5:c9:ee:1a:eb:7a:70:33:0a: e7:47:ce:68:51:0e:9d:1c:5a:12:c1:fc:d9:5d:f0:ff:0c:ab: 31:4f:95:b4:e4:30:e6:65:80:7c:da:89:6d:19:e5:fe:02:2e: 90:4a:aa:3c:ac:09:16:87:1d:6e:e9:a7:eb:62:c5:24:6a:7a: e4:47:95:12:fa:3e:50:5f:36:98:4f:e5:45:58:a7:ab:8c:fb: 55:47:08:9c:de:76:bc:c8:f6:d2:04:ed:45:02:0a:67:12:f4: 93:9c:bf:75:6f:29:9c:89:8b:fb:77:15:06:a8:41:1b:45:d7: 1a:4f:4a:67:3b:10:d9:e7:d8:54:6c:40:3b:76:51:0a:9c:5c: 54:12:b6:65:d0:07:c7:da:5a:3e:08:54:48:c4:60:af:9e:58: a2:9b:da:b5:cb:ff:a8:f2:74:d2:72:a7:a4:9a:e9:f6:78:57: 83:15:ec:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGyzs7AAkGoQI6Xl2O3sZEhNYL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTEyMTYwODQ2MTRaFw0yNTEyMTkxOTEyMTRaMDMxMTAvBgNV BAMTKEIwMEMzNEU5NDlDREI0OThEQzNFNEYyQkYyRjQ0OEE4MTdGMUI1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEq7adUH6tm/y8Y7PAuDDiPRla 9jRLqdr59s0QG0fV4DhK7/BqMN5NFbAeumeL14zv2cjtHKfaF9FQwC6viC7Y0zVj ZntEBNGTq6TJ3x9347nt2TLle2vzDa1CuzLBwNs3/VkRh7i1wRGcwokiAmUXR1fR vYP2d2ojAMGDI+vjgNzBvosQlkIBS0J3fEiTIeWRBO3hKRCmWGSUSm+5qw5k6DTb 8n1KWkdY8GBYDsugsD+QxE+Ly51rlh4EnQqWkT4fkjG1O8gxSTDcCLm3HXmKkLjg 5sgSmlm0pQcHEDpezn4fWpLnH/c6+Kc00RLtD6DRnauX/qUizK9U0wkhPTuhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsAw06UnNtJjcPk8r8vRIqBfxtS4wHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCnfXmIXVPmJZVQdVnPom8hePKOfoCtazl2 yFTgB7Pf6i/LdrI3lKSu7LF5DYvaS0/o5gyZlbGyz99pl/eBtaOsAXfuosU96/mE Y5my9uBLMKXJ7hrrenAzCudHzmhRDp0cWhLB/Nld8P8MqzFPlbTkMOZlgHzaiW0Z 5f4CLpBKqjysCRaHHW7pp+tixSRqeuRHlRL6PlBfNphP5UVYp6uM+1VHCJzedrzI 9tIE7UUCCmcS9JOcv3VvKZyJi/t3FQaoQRtF1xpPSmc7ENnn2FRsQDt2UQqcXFQS tmXQB8faWj4IVEjEYK+eWKKb2rXL/6jydNJyp6Sa6fZ4V4MV7E0= -----END CERTIFICATE-----Generated at Wed Dec 17 09:47:40 2025 by rpki-client