This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft File: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft (raw, json) Hash identifier: r6gRq9VMZusuO29IbrMtIIR4j98gIMIUfwAXTOI2Dvc= Subject key identifier: FA:30:62:38:32:FD:31:91:21:D5:10:4D:D3:DB:76:7E:DD:8F:36:C2 Authority key identifier: 8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D Certificate issuer: /CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Certificate serial: 35CFB58C54A632CA62503AC49CDEC414EF455577 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft Manifest number: 022F Signing time: Sun 21 Dec 2025 00:30:00 +0000 Manifest this update: Sun 21 Dec 2025 00:25:00 +0000 Manifest next update: Wed 24 Dec 2025 07:34:00 +0000 Files and hashes: 1: 8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl (hash: oJoqaw8Wb3g6XKuVWyqwDM8zTU3MV17c9StTYxpvqFE=) 2: 3130332e3139302e3131342e302f32342d3234203d3e203435333035.roa (hash: KgdQImSFXI48JOCLFSTKKPItTv1rC7N1MfwzWNtz7zI=) 3: 3130332e3139302e3131352e302f32342d3234203d3e203435333035.roa (hash: dEnaKQdLZdizpCqpcJnXth7f6FKcdGy1/gEWNghJ+nU=) 4: 3130332e3139302e3131342e302f32332d3233203d3e203435333035.roa (hash: ULVDgV6Ym293ne4NjwFyx9fV7GwDIsvmtft/evHC1jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:cf:b5:8c:54:a6:32:ca:62:50:3a:c4:9c:de:c4:14:ef:45:55:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B237B2BC0581B556DD5B4B0847F9C83408BA93D Validity Not Before: Dec 21 00:25:00 2025 GMT Not After : Dec 24 07:34:00 2025 GMT Subject: CN=FA30623832FD319121D5104DD3DB767EDD8F36C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:d2:11:4f:9f:4c:3d:e2:ed:bf:26:1f:76: 1c:e7:38:da:63:ad:66:56:df:16:90:20:e3:33:6e: 9e:eb:b7:7b:30:c4:2a:32:e0:22:72:de:a3:f9:f2: f5:e8:3b:06:a1:9e:9a:5c:6d:5e:fa:2f:e9:b1:00: a2:8c:7c:00:d1:08:c1:82:f0:9e:3f:5f:9d:7d:fa: 1c:30:cd:75:20:f0:ba:c9:89:a8:d0:da:08:4e:d8: 8e:a6:f2:fb:22:54:a8:f0:b5:70:44:45:a9:2c:61: 35:17:bd:24:c9:d1:fa:e5:4a:1a:c3:f8:44:93:b7: 9e:ec:e3:24:70:42:c5:3f:20:53:73:54:c6:cc:1f: d7:1e:07:75:b7:01:24:1c:7d:87:35:63:0a:89:1e: 20:50:c3:50:59:c0:bd:f4:e4:89:14:06:fa:f3:8b: ac:10:c4:4d:ba:4e:50:6f:84:c0:f3:17:ae:ee:8d: a7:5d:d3:e9:2f:65:06:50:4d:40:d7:a7:59:c2:5a: 2c:cf:83:1b:4c:04:8a:37:51:ab:44:16:ff:ff:63: 25:49:df:fb:c2:a4:a2:47:28:6c:7e:5e:f4:b7:bc: 46:14:94:ae:71:60:f8:58:1d:03:62:24:00:e6:d0: 7c:53:60:5e:06:4f:95:b4:e0:50:1f:74:c8:c7:21: 94:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:30:62:38:32:FD:31:91:21:D5:10:4D:D3:DB:76:7E:DD:8F:36:C2 X509v3 Authority Key Identifier: keyid:8B:23:7B:2B:C0:58:1B:55:6D:D5:B4:B0:84:7F:9C:83:40:8B:A9:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2b0bdd5-6e30-4a10-b993-77d48251f3a1/0/8B237B2BC0581B556DD5B4B0847F9C83408BA93D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d4:3d:77:c6:74:ef:63:77:71:60:e6:8b:ea:4c:f9:ef:62: 67:bd:34:06:a7:46:75:7f:d6:be:06:18:16:d3:8c:d2:c7:d4: 85:8d:a6:45:1d:7c:2d:54:84:34:5f:7a:da:18:8d:16:bf:1a: 5c:b5:73:39:07:d0:e4:b8:d2:bf:f7:12:dc:44:31:e0:73:3d: 21:52:a9:38:c6:50:e2:64:2a:51:af:ff:d4:1f:3b:41:fa:54: b4:72:eb:ec:94:6b:ee:10:6c:1e:ac:9d:46:c5:4d:ed:a4:a4: cd:9f:ad:62:8e:de:22:4c:f5:b9:a7:be:f4:18:f0:01:dc:7f: 4c:ce:40:9e:91:1b:ff:0c:c9:50:33:88:c4:87:13:33:1f:43: 2d:17:0b:d0:93:71:24:7c:e7:68:d7:b4:f6:8b:17:a3:06:e4: ed:6f:d3:cb:d6:b6:6b:b6:8e:f3:2b:72:4c:c6:47:33:62:5a: a5:cc:34:46:fb:19:f3:6a:d3:b9:b1:08:bb:3f:ec:5b:9e:77: 1b:4f:43:6a:3e:30:4c:3a:73:66:05:1b:55:16:22:aa:70:4e: eb:ca:d8:42:76:f0:b4:bf:b9:45:40:a0:19:5f:5d:e3:eb:2e: 1d:8d:83:c4:2a:bc:b5:32:27:6f:27:c1:f9:56:09:f1:5a:75: 69:cc:9c:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNc+1jFSmMspiUDrEnN7EFO9FVXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0 MDhCQTkzRDAeFw0yNTEyMjEwMDI1MDBaFw0yNTEyMjQwNzM0MDBaMDMxMTAvBgNV BAMTKEZBMzA2MjM4MzJGRDMxOTEyMUQ1MTA0REQzREI3NjdFREQ4RjM2QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTWdIRT59MPeLtvyYfdhznONpj rWZW3xaQIOMzbp7rt3swxCoy4CJy3qP58vXoOwahnppcbV76L+mxAKKMfADRCMGC 8J4/X519+hwwzXUg8LrJiajQ2ghO2I6m8vsiVKjwtXBERaksYTUXvSTJ0frlShrD +ESTt57s4yRwQsU/IFNzVMbMH9ceB3W3ASQcfYc1YwqJHiBQw1BZwL305IkUBvrz i6wQxE26TlBvhMDzF67ujadd0+kvZQZQTUDXp1nCWizPgxtMBIo3UatEFv//YyVJ 3/vCpKJHKGx+XvS3vEYUlK5xYPhYHQNiJADm0HxTYF4GT5W04FAfdMjHIZTVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jBiODL9MZEh1RBN09t2ft2PNsIwHwYDVR0j BBgwFoAUiyN7K8BYG1Vt1bSwhH+cg0CLqT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MmIwYmRkNS02ZTMwLTRhMTAtYjk5My03N2Q0ODI1MWYzYTEvMC84QjIzN0IyQkMw NTgxQjU1NkRENUI0QjA4NDdGOUM4MzQwOEJBOTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlDODM0MDhC QTkzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzJiMGJkZDUtNmUzMC00YTEwLWI5 OTMtNzdkNDgyNTFmM2ExLzAvOEIyMzdCMkJDMDU4MUI1NTZERDVCNEIwODQ3RjlD ODM0MDhCQTkzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHUPXfGdO9jd3Fg5ovqTPnvYme9NAanRnV/ 1r4GGBbTjNLH1IWNpkUdfC1UhDRfetoYjRa/Gly1czkH0OS40r/3EtxEMeBzPSFS qTjGUOJkKlGv/9QfO0H6VLRy6+yUa+4QbB6snUbFTe2kpM2frWKO3iJM9bmnvvQY 8AHcf0zOQJ6RG/8MyVAziMSHEzMfQy0XC9CTcSR852jXtPaLF6MG5O1v08vWtmu2 jvMrckzGRzNiWqXMNEb7GfNq07mxCLs/7FuedxtPQ2o+MEw6c2YFG1UWIqpwTuvK 2EJ28LS/uUVAoBlfXePrLh2Ng8QqvLUyJ28nwflWCfFadWnMnDA= -----END CERTIFICATE-----Generated at Mon Dec 22 15:54:53 2025 by rpki-client