This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: I0lc5SEEmv44ZYOP24KujJmHc3z29xoPpUFb1AckylY= Subject key identifier: C9:8D:DB:61:B1:BD:2C:C0:65:B5:D7:2E:30:76:D6:E4:7F:E8:2F:0F Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 035047A4CCCB2C1849123554DEFC6413A79A84C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 01DA Signing time: Sat 20 Dec 2025 05:11:41 +0000 Manifest this update: Sat 20 Dec 2025 05:06:41 +0000 Manifest next update: Tue 23 Dec 2025 14:52:41 +0000 Files and hashes: 1: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 2: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: BaYsay1y9KaAcCWtZCqyaJ7MVqSmeMc3Sn2+aqIJBtg=) 3: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: Ovv2ETM/TwcVTfyu6Kr+ausDEpr6HmSaSG285SkzGoE=) 4: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=) 5: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 7LPe2lEj9jSSghBzwzWvEJHD1rdTalK2jKZeyt7h7R0=) 6: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=) 7: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: PymGJBtcf2BbEhLIvNoHiy1Mb2P/x61Bs29YxaHSsg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:50:47:a4:cc:cb:2c:18:49:12:35:54:de:fc:64:13:a7:9a:84:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Dec 20 05:06:41 2025 GMT Not After : Dec 23 14:52:41 2025 GMT Subject: CN=C98DDB61B1BD2CC065B5D72E3076D6E47FE82F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:5b:53:f8:05:5c:dd:8e:13:80:66:17:e9: 54:5b:ba:77:0e:fc:c6:20:0c:23:b1:88:21:16:0d: eb:0d:8e:4d:5a:35:fa:46:d7:ef:5c:1e:34:a6:96: 19:c6:2a:aa:50:ff:95:89:82:48:a3:5f:27:b9:fa: fa:2e:1e:fe:93:b9:e2:d7:dc:51:f2:8b:b6:83:56: ea:7e:88:0d:d8:45:bf:18:4d:cd:36:7b:2e:bc:9e: 6f:aa:77:12:04:9a:c9:bb:bd:40:27:16:09:5b:a3: 21:e5:3a:d2:48:6c:6a:cb:29:36:f8:df:f5:c6:a5: e8:71:c7:4f:4e:6d:09:ed:3f:8c:5b:dc:c0:c2:ef: 74:66:94:c7:76:01:7f:a3:3f:eb:85:63:2e:6c:20: f9:37:8d:80:19:49:79:d7:38:36:c4:7d:8f:17:8b: 13:04:dd:be:bf:b3:2f:d7:2b:35:bb:31:10:a0:1f: 61:75:91:4f:19:b1:70:45:d3:07:5f:47:2d:d6:61: 91:fc:45:0a:4f:3f:64:5b:11:14:1a:ee:1c:18:8f: a4:d4:27:23:6d:c4:40:0f:aa:f1:48:e2:1d:0e:bb: d7:14:7d:6b:98:f5:37:0c:1c:2f:27:83:6e:27:24: c7:2c:63:d0:36:77:0a:52:72:a8:51:a9:94:8b:2a: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:8D:DB:61:B1:BD:2C:C0:65:B5:D7:2E:30:76:D6:E4:7F:E8:2F:0F X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:2a:7b:18:9d:7d:1c:57:ac:c5:f7:bc:f1:96:63:72:1e:4d: 70:d6:7d:c9:66:4e:7c:ad:f7:4b:af:9a:59:ba:01:76:a5:b7: 91:1e:0d:1f:5e:c4:1f:64:c3:17:df:5b:1b:d8:79:e0:ff:a0: 95:04:a8:41:f5:c1:e1:be:9a:4a:7d:62:55:3a:1d:f4:9b:63: b0:59:01:ce:1f:e2:cc:22:24:d0:6b:a2:f8:ca:fa:58:03:8b: 31:29:0e:53:75:47:c7:a4:78:30:f9:b2:71:a3:d6:2f:7e:3f: a0:fd:7e:e6:6d:ac:25:c6:1f:c9:51:ef:05:eb:e4:8d:34:48: 08:70:35:1a:9c:5b:be:13:54:e1:cd:0f:f4:3e:10:a5:d7:34: 4e:78:40:51:04:b4:a6:68:e3:03:56:70:49:f8:76:f3:04:fd: 66:36:d6:d8:72:c0:54:36:45:0e:df:ef:2f:f0:0f:7d:05:af: 55:3d:e4:4c:be:cb:f3:ff:69:31:e3:93:88:b7:d6:e3:5a:63: 1a:f7:ff:ea:8c:51:99:de:a1:5e:ed:c0:86:28:5f:31:36:2a: f8:92:3b:9c:a3:3f:28:1e:66:5e:4d:39:74:5a:c2:28:ca:7e: 9e:cd:c6:2e:85:2e:27:c5:50:d5:49:00:8c:c9:85:db:2d:a1: 6c:01:34:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA1BHpMzLLBhJEjVU3vxkE6eahMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTEyMjAwNTA2NDFaFw0yNTEyMjMxNDUyNDFaMDMxMTAvBgNV BAMTKEM5OEREQjYxQjFCRDJDQzA2NUI1RDcyRTMwNzZENkU0N0ZFODJGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuFtT+AVc3Y4TgGYX6VRbuncO /MYgDCOxiCEWDesNjk1aNfpG1+9cHjSmlhnGKqpQ/5WJgkijXye5+vouHv6TueLX 3FHyi7aDVup+iA3YRb8YTc02ey68nm+qdxIEmsm7vUAnFglboyHlOtJIbGrLKTb4 3/XGpehxx09ObQntP4xb3MDC73RmlMd2AX+jP+uFYy5sIPk3jYAZSXnXODbEfY8X ixME3b6/sy/XKzW7MRCgH2F1kU8ZsXBF0wdfRy3WYZH8RQpPP2RbERQa7hwYj6TU JyNtxEAPqvFI4h0Ou9cUfWuY9TcMHC8ng24nJMcsY9A2dwpScqhRqZSLKtS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyY3bYbG9LMBltdcuMHbW5H/oLw8wHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0qexidfRxXrMX3vPGWY3IeTXDWfclmTnyt 90uvmlm6AXalt5EeDR9exB9kwxffWxvYeeD/oJUEqEH1weG+mkp9YlU6HfSbY7BZ Ac4f4swiJNBrovjK+lgDizEpDlN1R8ekeDD5snGj1i9+P6D9fuZtrCXGH8lR7wXr 5I00SAhwNRqcW74TVOHND/Q+EKXXNE54QFEEtKZo4wNWcEn4dvME/WY21thywFQ2 RQ7f7y/wD30Fr1U95Ey+y/P/aTHjk4i31uNaYxr3/+qMUZneoV7twIYoXzE2KviS O5yjPygeZl5NOXRawijKfp7Nxi6FLifFUNVJAIzJhdstoWwBNF8= -----END CERTIFICATE-----Generated at Mon Dec 22 05:46:17 2025 by rpki-client