This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: glGlkzZ8SXsPwNjFN1fSVI0lQy8EVtqfck2KHjKUtPw= Subject key identifier: 0A:66:D0:19:FE:FA:CB:47:00:03:83:4D:34:18:4B:55:10:D2:63:F2 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 0FD07FEA4FA8A285BC9A2E3A4943810018A1E4BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 039A Signing time: Mon 22 Dec 2025 20:12:30 +0000 Manifest this update: Mon 22 Dec 2025 20:07:30 +0000 Manifest next update: Fri 26 Dec 2025 02:14:30 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 2: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) 3: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: DF5dNICrBwYirXo/AFyaYNJEPLuVzdrhWdQaPI/p9jA=) 4: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d0:7f:ea:4f:a8:a2:85:bc:9a:2e:3a:49:43:81:00:18:a1:e4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Dec 22 20:07:30 2025 GMT Not After : Dec 26 02:14:30 2025 GMT Subject: CN=0A66D019FEFACB470003834D34184B5510D263F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:f2:ca:a3:7b:e8:2a:a1:ce:c4:7a:03:2b: d4:f8:2a:6d:dd:1f:68:0d:2e:75:01:87:47:d9:9a: 34:b7:04:10:f9:cf:54:be:f3:c8:07:a4:79:67:66: 09:5a:44:df:c7:e3:55:c4:b5:85:85:53:56:ef:80: 59:57:18:9a:c3:37:66:45:61:1e:58:30:3b:63:48: 96:c6:6f:28:d1:4f:f3:92:9d:da:e0:3c:68:f9:40: cc:d7:76:fa:5d:a5:1b:fc:97:3b:6a:80:56:e6:b6: cb:01:e7:60:b1:1a:29:b6:19:52:83:21:37:af:2e: 16:96:d1:4d:a5:35:c4:0f:d9:6f:de:d2:6a:e0:f8: 88:eb:16:68:1e:cd:76:b9:50:92:38:64:cd:5b:e8: ce:f0:f0:17:d7:96:d4:35:6f:ab:2d:74:da:e9:90: 3d:96:6f:ba:56:aa:8b:b4:09:93:e3:4b:55:c0:70: 80:98:f5:87:5f:91:1f:dd:7a:90:dc:b6:dc:34:12: 5a:1d:03:37:57:9a:8c:39:54:f4:f6:19:3e:16:26: 60:2f:08:6a:d0:f2:d6:df:37:3d:2f:b6:6a:37:0b: fa:88:9e:d4:f1:6a:a1:a0:d2:5d:61:c5:4a:c1:f1: 8e:4f:b8:ce:ca:f9:f7:af:91:53:02:ea:13:bc:09: fa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:66:D0:19:FE:FA:CB:47:00:03:83:4D:34:18:4B:55:10:D2:63:F2 X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b4:1c:06:90:cc:31:69:d3:ba:7d:e5:c2:60:97:6f:ca:36: 5f:fe:72:d5:ae:60:86:be:e9:82:31:f4:88:aa:09:76:a3:32: bd:df:d9:6c:85:50:b8:26:a1:17:4b:f8:34:41:4e:19:dc:5f: f6:19:0b:c2:11:13:50:16:23:a3:14:e2:be:22:18:b9:d7:a3: 3e:2b:e9:8f:25:c1:a3:9d:23:b6:d3:45:3d:88:f0:13:d0:cb: ba:a6:6a:49:0e:a1:f2:d0:cd:e7:05:67:fe:41:fb:dc:75:08: 44:fe:e4:73:60:45:95:ea:a0:76:39:9d:16:31:b8:0a:3d:ea: fb:8f:ba:55:9c:7b:f7:46:0a:8f:d5:5a:2e:dc:68:62:8e:9f: c6:1f:ed:32:8f:78:42:0e:8b:36:b7:eb:f6:1d:4a:50:09:a6: e0:bb:a5:33:f9:b0:28:bb:5d:0c:fe:93:21:b1:29:26:06:23: 36:37:ad:e3:aa:5c:d1:94:dd:18:e6:57:cf:e7:aa:d2:9e:93: 38:a0:09:45:cc:75:3f:c5:6f:05:3b:89:c8:66:93:8d:66:ec: 68:72:44:18:bb:00:ac:fe:89:12:8c:7a:2b:91:a9:80:c1:61: 2b:28:5c:e1:f8:e4:04:4d:82:aa:3c:61:38:2e:07:69:ac:80: a7:b7:94:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9B/6k+oooW8mi46SUOBABih5LswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTEyMjIyMDA3MzBaFw0yNTEyMjYwMjE0MzBaMDMxMTAvBgNV BAMTKDBBNjZEMDE5RkVGQUNCNDcwMDAzODM0RDM0MTg0QjU1MTBEMjYzRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAz/LKo3voKqHOxHoDK9T4Km3d H2gNLnUBh0fZmjS3BBD5z1S+88gHpHlnZglaRN/H41XEtYWFU1bvgFlXGJrDN2ZF YR5YMDtjSJbGbyjRT/OSndrgPGj5QMzXdvpdpRv8lztqgFbmtssB52CxGim2GVKD ITevLhaW0U2lNcQP2W/e0mrg+IjrFmgezXa5UJI4ZM1b6M7w8BfXltQ1b6stdNrp kD2Wb7pWqou0CZPjS1XAcICY9YdfkR/depDcttw0ElodAzdXmow5VPT2GT4WJmAv CGrQ8tbfNz0vtmo3C/qIntTxaqGg0l1hxUrB8Y5PuM7K+fevkVMC6hO8CfplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCmbQGf76y0cAA4NNNBhLVRDSY/IwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC0HAaQzDFp07p95cJgl2/KNl/+ctWuYIa+ 6YIx9IiqCXajMr3f2WyFULgmoRdL+DRBThncX/YZC8IRE1AWI6MU4r4iGLnXoz4r 6Y8lwaOdI7bTRT2I8BPQy7qmakkOofLQzecFZ/5B+9x1CET+5HNgRZXqoHY5nRYx uAo96vuPulWce/dGCo/VWi7caGKOn8Yf7TKPeEIOiza36/YdSlAJpuC7pTP5sCi7 XQz+kyGxKSYGIzY3reOqXNGU3RjmV8/nqtKekzigCUXMdT/FbwU7ichmk41m7Ghy RBi7AKz+iRKMeiuRqYDBYSsoXOH45ARNgqo8YTguB2msgKe3lBU= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:14 2025 by rpki-client