This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: 8xrlPZJ4+xTtPVciddZaeIfptcbThHkcyjsW9bdsPnc= Subject key identifier: AD:49:24:DD:CC:40:DE:55:81:04:DD:DC:D0:EF:CA:82:00:13:AA:49 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 2E0AB548513E9613EBF35D5D97F76F767881CBF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0532 Signing time: Tue 23 Dec 2025 15:43:56 +0000 Manifest this update: Tue 23 Dec 2025 15:38:56 +0000 Manifest next update: Fri 26 Dec 2025 17:35:56 +0000 Files and hashes: 1: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: FG3t0NTq63ZoZmlL6Jor5RZ7Q+zQxVILHQk82TYjW04=) 2: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 3: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0a:b5:48:51:3e:96:13:eb:f3:5d:5d:97:f7:6f:76:78:81:cb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Dec 23 15:38:56 2025 GMT Not After : Dec 26 17:35:56 2025 GMT Subject: CN=AD4924DDCC40DE558104DDDCD0EFCA820013AA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:18:e1:c0:c5:2c:f7:ca:b4:66:03:ff:07:e1: 8d:fc:1f:93:01:9a:2b:54:65:8c:ba:d2:96:50:ac: 4b:3e:07:93:8f:d0:c9:f4:15:40:80:d9:d2:33:6c: fc:93:f1:35:08:e4:d8:c7:b6:08:be:76:bc:18:73: 0b:54:9e:5b:b5:b3:c7:8d:f7:01:3b:7d:fd:ac:a2: 19:6c:8c:ca:47:cd:09:c4:25:20:e6:9a:7a:c4:81: a8:6d:4d:12:b4:84:fd:0e:7c:f0:f3:99:3c:47:39: 1a:c5:bd:61:bb:6a:1a:a6:36:ba:52:ed:95:6f:49: 31:f3:e4:80:33:5c:18:f5:8a:81:23:6a:51:7f:df: a9:84:a5:d8:f1:12:99:9f:f4:c8:1d:38:7c:a3:2a: 65:af:2c:32:19:47:38:73:9a:9a:49:fb:8d:f6:0f: 46:58:17:3c:0e:e2:3d:08:57:83:15:09:32:55:ec: 79:0b:b3:4b:80:1a:8c:39:fe:e9:66:11:97:de:08: ba:90:6d:06:96:3e:1b:27:26:f0:7b:01:ab:76:f2: 7d:42:12:66:d1:88:4f:68:9d:67:81:63:98:9d:54: 1f:2f:76:82:26:59:95:c2:ab:dd:d9:6b:a1:e9:68: e6:9f:43:f0:41:a3:18:a9:a2:bb:01:4e:fd:a8:29: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:49:24:DD:CC:40:DE:55:81:04:DD:DC:D0:EF:CA:82:00:13:AA:49 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f6:f5:f3:d6:ec:5f:5e:37:07:4e:4c:f6:71:55:70:d6:d1: ce:4d:23:7d:82:75:ec:2c:77:ca:64:b2:9c:6f:1d:f9:07:43: 22:bc:78:5a:6a:14:cc:d4:9f:74:87:c6:88:24:5c:a0:cb:b1: 6f:f9:19:cf:d9:48:3c:b7:e1:c4:9d:0d:25:65:7e:39:f3:d4: 91:18:ec:d1:54:ca:37:ee:fe:de:72:cc:b8:1e:4a:6a:8e:c1: 81:0c:97:99:98:f8:97:dc:b8:d9:a3:5f:8d:69:46:da:6d:9d: 89:dc:fd:a3:3d:37:7a:2c:27:01:ad:42:0b:31:e8:f7:ad:24: 32:a5:1a:4f:db:b7:47:ed:3d:10:97:e2:7d:b1:bd:d3:1a:47: 0f:74:df:18:e8:0c:b2:6b:3f:fd:d7:cd:02:b7:65:47:19:e2: 4a:aa:9e:ae:79:80:4f:29:42:0f:58:89:1b:d7:ba:47:c5:d0: fb:95:5b:68:7c:76:fe:05:87:d3:0d:38:05:57:86:05:2e:61: 8e:62:e3:6e:4f:39:c9:6f:9f:96:2c:bd:d1:d9:70:59:01:69: 08:6c:50:03:6f:54:ea:60:58:6a:7b:87:8b:14:86:fd:d8:94: 7c:ff:df:f8:22:ac:b8:3f:7c:c5:37:c9:1a:4a:fe:54:7c:3a: dd:63:90:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULgq1SFE+lhPr811dl/dvdniBy/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTEyMjMxNTM4NTZaFw0yNTEyMjYxNzM1NTZaMDMxMTAvBgNV BAMTKEFENDkyNEREQ0M0MERFNTU4MTA0REREQ0QwRUZDQTgyMDAxM0FBNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GOHAxSz3yrRmA/8H4Y38H5MB mitUZYy60pZQrEs+B5OP0Mn0FUCA2dIzbPyT8TUI5NjHtgi+drwYcwtUnlu1s8eN 9wE7ff2sohlsjMpHzQnEJSDmmnrEgahtTRK0hP0OfPDzmTxHORrFvWG7ahqmNrpS 7ZVvSTHz5IAzXBj1ioEjalF/36mEpdjxEpmf9MgdOHyjKmWvLDIZRzhzmppJ+432 D0ZYFzwO4j0IV4MVCTJV7HkLs0uAGow5/ulmEZfeCLqQbQaWPhsnJvB7Aat28n1C EmbRiE9onWeBY5idVB8vdoImWZXCq93Za6HpaOafQ/BBoxiporsBTv2oKTBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrUkk3cxA3lWBBN3c0O/KggATqkkwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHX29fPW7F9eNwdOTPZxVXDW0c5NI32Cdews d8pkspxvHfkHQyK8eFpqFMzUn3SHxogkXKDLsW/5Gc/ZSDy34cSdDSVlfjnz1JEY 7NFUyjfu/t5yzLgeSmqOwYEMl5mY+JfcuNmjX41pRtptnYnc/aM9N3osJwGtQgsx 6PetJDKlGk/bt0ftPRCX4n2xvdMaRw903xjoDLJrP/3XzQK3ZUcZ4kqqnq55gE8p Qg9YiRvXukfF0PuVW2h8dv4Fh9MNOAVXhgUuYY5i425POclvn5YsvdHZcFkBaQhs UANvVOpgWGp7h4sUhv3YlHz/3/girLg/fMU3yRpK/lR8Ot1jkME= -----END CERTIFICATE-----Generated at Wed Dec 24 10:34:42 2025 by rpki-client