This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: S+iHidTdKuspYnQO7MSbHl2ygeSeG+T5A9rSRX6GjkU= Subject key identifier: D0:23:56:B2:42:2E:DD:C4:36:DA:6F:91:5A:D0:BB:BE:01:4E:D7:E0 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 7A23BD8643DE5575CD1FD725BBC5D7242BC1755D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01BE Signing time: Thu 18 Dec 2025 23:02:27 +0000 Manifest this update: Thu 18 Dec 2025 22:57:27 +0000 Manifest next update: Mon 22 Dec 2025 05:44:27 +0000 Files and hashes: 1: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) 2: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: 48Fy+UGSxv54znYq8Ysj1F6SKU1d+113B3JH0aJCMsc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 03:43:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:23:bd:86:43:de:55:75:cd:1f:d7:25:bb:c5:d7:24:2b:c1:75:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Dec 18 22:57:27 2025 GMT Not After : Dec 22 05:44:27 2025 GMT Subject: CN=D02356B2422EDDC436DA6F915AD0BBBE014ED7E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:fc:33:55:53:f1:d2:f3:50:f1:68:71:b3: ac:8f:88:a3:6e:41:ad:1b:e3:c5:ca:62:c0:77:65: a6:c0:35:08:5f:9b:06:a5:08:13:34:8d:64:33:ce: 77:9c:3a:d6:f1:c0:4e:dd:4d:0e:04:fe:6f:41:f6: 0e:31:1c:d1:8a:80:4b:12:79:b1:7f:1a:4c:8c:c8: 1c:ee:46:25:93:a6:bd:dd:e4:9c:73:47:51:b8:a2: 91:e0:47:52:ff:ac:9c:58:28:72:cd:24:73:1f:f9: 5d:5c:d0:12:4e:49:11:fa:5c:44:97:8f:6b:c5:2a: cc:e8:3a:4a:e7:7a:6a:d9:7b:95:76:88:0e:02:1c: df:13:62:d7:6e:2d:aa:3a:a5:57:1f:5c:80:bf:1d: 69:f8:fd:5a:45:84:36:27:47:50:7a:41:86:c4:1c: eb:5a:2d:d7:60:91:7a:63:63:bf:0d:7e:00:3a:9c: bd:f0:c0:25:6f:8a:05:8a:c6:c6:92:23:89:67:95: 97:3d:9b:68:8b:46:48:5d:1d:68:86:e5:f9:54:16: dc:05:ce:74:d8:be:10:56:3b:d0:d4:91:58:9b:35: 31:5c:55:97:89:11:4b:62:8b:b0:60:9c:c6:38:cd: ab:77:dc:1c:2a:92:1b:3a:34:32:61:0f:b8:79:95: 7b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:23:56:B2:42:2E:DD:C4:36:DA:6F:91:5A:D0:BB:BE:01:4E:D7:E0 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:80:8e:2e:7e:4f:05:b9:df:5b:25:ea:6f:bb:c8:5a:04:97: eb:09:b2:39:1f:7a:56:87:62:81:1a:f4:65:19:57:c4:9f:7b: 67:05:7d:ca:4c:dc:20:5d:2e:44:73:ff:a4:41:ad:80:c4:80: 38:57:75:54:2d:b0:31:c3:07:e5:03:60:16:bc:bd:59:1a:13: bd:e4:77:4c:7c:63:29:26:c6:b8:ad:47:00:ea:59:fb:7b:8c: 03:9e:05:ad:90:5c:2f:14:b3:7a:89:ce:38:60:72:03:f8:e8: 52:b9:8c:dd:41:e2:bb:36:47:7e:e8:3d:b2:01:fd:c4:e6:93: 01:c6:20:d5:ad:a7:21:cc:c1:45:9b:66:77:81:4f:55:5f:5a: d2:55:ce:ad:8f:f4:c9:7d:a3:ba:1e:a8:05:ee:2f:a6:94:dd: a9:70:89:5e:39:bf:5a:07:3f:8d:18:4d:fb:9a:65:3a:d3:42: 3a:4d:d5:40:d0:7a:d5:0b:48:4a:4a:4c:23:29:04:6f:13:75: a7:29:39:28:74:ad:73:61:1d:2f:f4:69:ea:a2:88:04:c8:d2: 7a:a1:65:ce:5f:42:37:26:0c:4a:5a:f2:bd:66:1f:d3:d8:55: 3a:67:d6:18:11:d9:f7:33:31:4f:6c:62:30:c8:cd:e6:3a:df: 27:95:73:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiO9hkPeVXXNH9clu8XXJCvBdV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTEyMTgyMjU3MjdaFw0yNTEyMjIwNTQ0MjdaMDMxMTAvBgNV BAMTKEQwMjM1NkIyNDIyRUREQzQzNkRBNkY5MTVBRDBCQkJFMDE0RUQ3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK/wzVVPx0vNQ8Whxs6yPiKNu Qa0b48XKYsB3ZabANQhfmwalCBM0jWQzznecOtbxwE7dTQ4E/m9B9g4xHNGKgEsS ebF/GkyMyBzuRiWTpr3d5JxzR1G4opHgR1L/rJxYKHLNJHMf+V1c0BJOSRH6XESX j2vFKszoOkrnemrZe5V2iA4CHN8TYtduLao6pVcfXIC/HWn4/VpFhDYnR1B6QYbE HOtaLddgkXpjY78NfgA6nL3wwCVvigWKxsaSI4lnlZc9m2iLRkhdHWiG5flUFtwF znTYvhBWO9DUkVibNTFcVZeJEUtii7BgnMY4zat33Bwqkhs6NDJhD7h5lXvzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0CNWskIu3cQ22m+RWtC7vgFO1+AwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeAji5+TwW531sl6m+7yFoEl+sJsjkfelaH YoEa9GUZV8Sfe2cFfcpM3CBdLkRz/6RBrYDEgDhXdVQtsDHDB+UDYBa8vVkaE73k d0x8YykmxritRwDqWft7jAOeBa2QXC8Us3qJzjhgcgP46FK5jN1B4rs2R37oPbIB /cTmkwHGINWtpyHMwUWbZneBT1VfWtJVzq2P9Ml9o7oeqAXuL6aU3alwiV45v1oH P40YTfuaZTrTQjpN1UDQetULSEpKTCMpBG8TdacpOSh0rXNhHS/0aeqiiATI0nqh Zc5fQjcmDEpa8r1mH9PYVTpn1hgR2fczMU9sYjDIzeY63yeVcwU= -----END CERTIFICATE-----Generated at Fri Dec 19 18:12:21 2025 by rpki-client