This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: apCHPKN04D84LGt6Nsorrb8Qk0c6uaddGa2fKNA7kU0= Subject key identifier: 2C:EA:20:C6:F4:B1:16:20:7A:63:35:5A:A0:3C:39:04:28:3D:C7:21 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 3642F83C27C39E9CF9CD75F32A1BC9081E082584 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 0232 Signing time: Tue 16 Dec 2025 16:22:09 +0000 Manifest this update: Tue 16 Dec 2025 16:17:09 +0000 Manifest next update: Fri 19 Dec 2025 20:26:09 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: T+NZQn7J8tsnxhacUaZGCwi2JOq0kPrr9g0i/GVU3vc=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 20:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:42:f8:3c:27:c3:9e:9c:f9:cd:75:f3:2a:1b:c9:08:1e:08:25:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Dec 16 16:17:09 2025 GMT Not After : Dec 19 20:26:09 2025 GMT Subject: CN=2CEA20C6F4B116207A63355AA03C3904283DC721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:84:da:90:6c:9f:4d:b5:5c:d3:99:7c:5d: 42:76:f5:2c:b5:ba:1a:b0:ab:39:73:f3:97:de:3e: 87:8d:37:34:53:45:94:c5:17:2c:5d:40:9e:ef:12: fb:5a:47:c0:44:bd:fe:5d:2e:f0:6e:aa:a6:be:a8: 5b:b2:b9:d6:ea:9c:7d:bf:1a:85:67:7a:7f:0b:45: da:05:97:3d:ce:14:b8:49:ed:19:ab:7b:39:a5:4e: 32:df:ee:31:5d:83:ab:11:35:76:b6:6f:43:32:06: 4b:46:df:42:39:b2:8d:89:4e:4a:59:bb:58:af:af: d4:f7:f7:fb:99:31:af:ff:57:3e:54:54:43:68:31: 79:15:46:52:7a:e9:5f:6f:e4:cc:22:bf:bd:37:ea: ca:9f:21:cc:c9:d5:e5:4d:60:6b:19:0c:fd:6b:cd: 7c:bf:c6:ad:34:08:4b:67:71:f8:9c:11:22:25:e2: 96:4d:83:03:21:d4:42:47:20:30:4d:15:28:9b:41: 6f:eb:6a:e1:38:77:ad:f5:f1:d3:f9:13:81:b5:f4: a9:3b:bd:5e:7d:01:be:45:9a:50:55:a5:1b:9a:0d: b3:4b:6c:a7:4b:4f:4a:f2:03:74:f6:e2:98:61:7e: 78:26:a6:e6:0f:03:e2:06:fa:01:a7:9a:24:ed:6a: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:20:C6:F4:B1:16:20:7A:63:35:5A:A0:3C:39:04:28:3D:C7:21 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:c2:f8:10:66:f5:e7:c9:90:61:8d:0e:9d:ba:ed:fe:d3:80: 38:52:ba:0b:48:c6:b1:af:73:64:97:07:7f:ef:ae:09:96:dd: db:9f:38:92:d3:fc:15:f1:8a:5a:af:49:44:fa:d9:c9:b8:01: 27:b7:09:7d:65:9a:f1:fb:e0:32:52:66:ca:43:c3:02:c7:f3: ac:cd:73:d4:32:d1:b2:48:11:f5:63:65:24:e6:bd:de:7b:38: 24:df:16:ac:0e:c9:6e:36:9b:e4:ba:20:35:14:f6:b3:26:16: b6:8c:7d:24:1a:8e:67:93:a6:f9:e9:e6:66:79:3a:2d:3e:d1: 09:bb:4a:84:e0:bb:db:5d:47:fa:f3:1a:24:47:d5:11:97:da: c3:05:33:5e:bc:8b:45:9a:b3:43:83:52:f6:cf:74:fd:22:66: f3:88:65:f0:a3:f9:7c:e2:08:09:13:9d:07:49:08:a1:2c:2b: 16:d1:c5:2b:15:64:d9:fa:cf:10:9f:06:30:1f:5f:0c:a2:66: 62:b6:70:3b:32:33:e5:76:97:81:f3:d3:72:bb:1b:ae:88:f6: 52:8a:c6:98:df:4c:0f:db:c1:b6:86:84:8d:7e:49:8c:57:1e: 66:1b:1a:92:1f:8f:b6:fe:f9:07:80:30:1e:4f:03:e3:fc:cf: 29:84:9a:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkL4PCfDnpz5zXXzKhvJCB4IJYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTEyMTYxNjE3MDlaFw0yNTEyMTkyMDI2MDlaMDMxMTAvBgNV BAMTKDJDRUEyMEM2RjRCMTE2MjA3QTYzMzU1QUEwM0MzOTA0MjgzREM3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dITakGyfTbVc05l8XUJ29Sy1 uhqwqzlz85fePoeNNzRTRZTFFyxdQJ7vEvtaR8BEvf5dLvBuqqa+qFuyudbqnH2/ GoVnen8LRdoFlz3OFLhJ7RmrezmlTjLf7jFdg6sRNXa2b0MyBktG30I5so2JTkpZ u1ivr9T39/uZMa//Vz5UVENoMXkVRlJ66V9v5Mwiv7036sqfIczJ1eVNYGsZDP1r zXy/xq00CEtncficESIl4pZNgwMh1EJHIDBNFSibQW/rauE4d6318dP5E4G19Kk7 vV59Ab5FmlBVpRuaDbNLbKdLT0ryA3T24phhfngmpuYPA+IG+gGnmiTtaha9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULOogxvSxFiB6YzVaoDw5BCg9xyEwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLC+BBm9efJkGGNDp267f7TgDhSugtIxrGv c2SXB3/vrgmW3dufOJLT/BXxilqvSUT62cm4ASe3CX1lmvH74DJSZspDwwLH86zN c9Qy0bJIEfVjZSTmvd57OCTfFqwOyW42m+S6IDUU9rMmFraMfSQajmeTpvnp5mZ5 Oi0+0Qm7SoTgu9tdR/rzGiRH1RGX2sMFM168i0Was0ODUvbPdP0iZvOIZfCj+Xzi CAkTnQdJCKEsKxbRxSsVZNn6zxCfBjAfXwyiZmK2cDsyM+V2l4Hz03K7G66I9lKK xpjfTA/bwbaGhI1+SYxXHmYbGpIfj7b++QeAMB5PA+P8zymEmvU= -----END CERTIFICATE-----Generated at Thu Dec 18 12:43:37 2025 by rpki-client