This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: iMTAHnBVZTNXBrZ8ujutgUV02CAIJj7OHv9xgoZ5Tjg= Subject key identifier: 31:3C:87:50:07:B2:5B:88:D8:DD:20:4F:32:F4:5E:C6:CC:7A:4A:90 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 338DE8F122795A2BD3228F861CC8B9CFD44ECF36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 0195 Signing time: Tue 23 Dec 2025 00:52:55 +0000 Manifest this update: Tue 23 Dec 2025 00:47:55 +0000 Manifest next update: Fri 26 Dec 2025 11:03:55 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: XNWl3NM6DsVG1rgC55nU+efFTb7wuao5VEVtEWzOTVg=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 11:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:8d:e8:f1:22:79:5a:2b:d3:22:8f:86:1c:c8:b9:cf:d4:4e:cf:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Dec 23 00:47:55 2025 GMT Not After : Dec 26 11:03:55 2025 GMT Subject: CN=313C875007B25B88D8DD204F32F45EC6CC7A4A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d7:0e:89:4d:8d:00:79:f7:30:00:a8:81:de: ea:de:09:2d:f4:cc:61:56:62:f6:da:14:40:11:b8: 80:ea:7b:97:76:fc:63:e1:6c:06:6e:12:d1:b0:ff: bf:98:8a:f7:43:21:bf:2e:a3:d2:01:55:7b:42:76: 40:95:39:d7:49:c5:af:ca:8e:30:3f:ad:f5:b8:05: 63:bc:f4:ca:85:52:aa:69:f6:49:f1:1b:c6:c8:0a: 7d:73:80:08:12:57:7f:38:fc:a3:2d:a0:b4:6b:ea: f0:20:ca:27:4a:0a:1c:b0:c0:fb:c7:db:7e:1d:05: a8:af:8f:64:f1:8f:48:e2:25:19:42:b5:cc:55:7d: 18:05:de:4b:37:67:13:8a:b3:04:ae:e8:28:56:54: 89:45:ce:11:f0:32:7d:1f:de:79:09:bf:7d:a7:bf: a9:73:b9:4a:5c:2e:ac:5a:8b:20:b2:ec:1c:bc:97: 3f:7f:5a:fb:8b:36:ca:95:ca:c5:00:18:5a:18:4b: 36:41:41:a4:4b:31:14:bf:2b:0e:f2:01:1f:30:e8: df:72:86:68:79:fa:a3:31:9e:68:53:b4:fc:0a:62: b2:5a:22:9d:17:d0:92:6c:af:08:f5:22:f5:12:ba: b7:ae:75:00:11:7c:e9:77:73:bc:4e:74:8c:92:1e: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3C:87:50:07:B2:5B:88:D8:DD:20:4F:32:F4:5E:C6:CC:7A:4A:90 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:88:e5:f4:34:17:1d:30:76:3f:4e:e6:6f:c4:d7:5e:8d:7b: 70:fa:e6:9e:8e:25:09:5d:0d:01:af:86:46:b4:77:11:d0:2d: 20:74:dc:86:8c:1f:72:3f:8d:37:07:b7:0f:8f:d2:5f:4c:43: e1:07:29:50:99:cf:fb:9d:96:81:e8:05:a2:2f:73:10:51:3d: de:91:fa:74:67:12:1f:3e:64:06:45:c6:d3:06:c0:e2:5e:a7: 70:ab:cb:9b:c8:81:5f:0e:d1:e2:1e:b9:ca:47:10:cc:1b:a0: 2c:88:53:3f:bf:f1:9c:a5:10:d6:e8:29:c1:3a:cf:8e:a4:86: 57:ae:3e:06:96:36:5b:54:fc:2e:7b:b1:14:a5:ae:fd:72:cd: 3b:3d:94:2f:04:7f:bc:ef:fc:fb:04:5b:f3:fa:8c:be:cc:b0: 1f:39:e1:37:8e:f5:b4:9f:6a:43:29:10:e6:2f:65:03:4e:54: 37:b1:c1:f7:9c:1e:09:87:a1:1a:c3:4b:28:cd:a4:da:2c:5a: 67:ce:e1:23:77:8b:67:8f:72:42:e5:cf:80:e5:9b:a8:00:7b: 41:67:c1:69:d5:30:e9:a9:a5:0e:a0:7b:65:2c:3d:f9:25:8d: 80:7c:19:3a:34:a5:2e:87:e6:b9:cd:70:ae:ef:da:4e:41:88: 51:65:70:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM43o8SJ5WivTIo+GHMi5z9ROzzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTEyMjMwMDQ3NTVaFw0yNTEyMjYxMTAzNTVaMDMxMTAvBgNV BAMTKDMxM0M4NzUwMDdCMjVCODhEOEREMjA0RjMyRjQ1RUM2Q0M3QTRBOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz1w6JTY0AefcwAKiB3ureCS30 zGFWYvbaFEARuIDqe5d2/GPhbAZuEtGw/7+YivdDIb8uo9IBVXtCdkCVOddJxa/K jjA/rfW4BWO89MqFUqpp9knxG8bICn1zgAgSV384/KMtoLRr6vAgyidKChywwPvH 234dBaivj2Txj0jiJRlCtcxVfRgF3ks3ZxOKswSu6ChWVIlFzhHwMn0f3nkJv32n v6lzuUpcLqxaiyCy7By8lz9/WvuLNsqVysUAGFoYSzZBQaRLMRS/Kw7yAR8w6N9y hmh5+qMxnmhTtPwKYrJaIp0X0JJsrwj1IvUSureudQARfOl3c7xOdIySHtLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMTyHUAeyW4jY3SBPMvRexsx6SpAwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSI5fQ0Fx0wdj9O5m/E116Ne3D65p6OJQld DQGvhka0dxHQLSB03IaMH3I/jTcHtw+P0l9MQ+EHKVCZz/udloHoBaIvcxBRPd6R +nRnEh8+ZAZFxtMGwOJep3Cry5vIgV8O0eIeucpHEMwboCyIUz+/8ZylENboKcE6 z46khleuPgaWNltU/C57sRSlrv1yzTs9lC8Ef7zv/PsEW/P6jL7MsB854TeO9bSf akMpEOYvZQNOVDexwfecHgmHoRrDSyjNpNosWmfO4SN3i2ePckLlz4Dlm6gAe0Fn wWnVMOmppQ6ge2UsPfkljYB8GTo0pS6H5rnNcK7v2k5BiFFlcDg= -----END CERTIFICATE-----Generated at Thu Dec 25 04:34:14 2025 by rpki-client