This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: mXTblG9avTYa7ROr2bP1GiNXm5jcRu1u+f69WzUOc/c= Subject key identifier: CE:DD:98:A7:DC:7C:B4:A8:95:B3:32:83:34:68:27:D9:63:00:B7:08 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 025D58EA303262BF0ACFC1BA1832C369C7F4413F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 053B Signing time: Wed 31 Dec 2025 14:00:42 +0000 Manifest this update: Wed 31 Dec 2025 13:55:42 +0000 Manifest next update: Sat 03 Jan 2026 20:24:42 +0000 Files and hashes: 1: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: Zu/+afoJIhd3UYhwYKGlJ1KwVm8i/+HQMKmmtbPmbAI=) 2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 19:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5d:58:ea:30:32:62:bf:0a:cf:c1:ba:18:32:c3:69:c7:f4:41:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Dec 31 13:55:42 2025 GMT Not After : Jan 3 20:24:42 2026 GMT Subject: CN=CEDD98A7DC7CB4A895B33283346827D96300B708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:42:e7:71:e8:46:ef:ae:be:ff:ec:17:f6: 7f:1f:39:cb:c2:23:a4:0b:38:4f:98:08:90:14:c1: f6:36:e0:e0:e6:0e:d1:80:04:ab:fb:ec:e1:0e:a7: c9:c8:b4:2c:b9:84:c9:9a:da:24:d9:74:27:8c:07: bb:e3:66:e8:b7:71:1c:03:85:96:a3:55:0e:24:91: c3:1a:1b:a7:05:62:37:48:f1:57:30:b3:ec:c5:52: 02:2e:fb:7b:a4:0e:7e:61:2e:29:f2:6c:ae:f3:2a: 93:c2:84:47:d1:37:80:74:74:fe:ea:51:09:60:1c: c2:d0:bf:f1:e3:a2:c1:77:8d:4c:5c:3e:86:6d:79: bc:d4:fa:d8:72:21:4e:57:eb:4a:e5:9f:dc:ba:51: 6f:ab:34:90:31:ad:6a:7f:cf:79:41:e5:49:b2:7a: 38:36:ca:df:39:47:68:31:57:b6:d2:d4:39:da:ab: 94:c8:27:61:08:d2:6f:7f:ed:0d:ea:a6:40:73:37: 79:3b:9e:2b:a0:36:61:24:3a:7d:0e:fa:cd:66:1f: 90:3f:bb:00:b5:f0:20:8f:e1:9f:fe:4e:a3:39:17: 4b:60:9c:d9:09:bf:4a:a6:6a:41:a3:60:89:a2:02: 4c:bf:80:4e:66:f1:68:71:b5:7f:6b:86:11:6c:55: b6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DD:98:A7:DC:7C:B4:A8:95:B3:32:83:34:68:27:D9:63:00:B7:08 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:93:0f:2d:ed:12:80:bd:9b:13:7a:34:a8:0f:13:85:74:1f: c9:63:eb:aa:3c:79:74:f4:4d:b7:28:11:32:f0:a1:4a:81:89: a5:39:87:2f:0f:77:e6:89:7f:b7:d7:7e:0c:62:d8:5b:37:b4: a4:72:55:4c:8e:51:0d:c0:04:68:f5:07:44:5a:d5:36:a3:29: 0d:8c:63:4f:85:74:2a:dd:96:41:75:01:10:71:3b:e9:36:27: 72:12:a2:ad:47:89:2e:67:89:44:b4:3b:f6:d0:86:d6:c7:80: 2d:b8:a3:1d:ee:73:c0:67:86:91:51:08:dc:ad:23:cd:2b:63: bc:ad:6c:10:c1:9f:a7:e9:83:90:46:8d:11:c2:e9:5b:84:7b: 8d:18:01:81:e2:2e:05:ab:f2:96:b0:cc:45:49:ac:f7:73:32: 7d:d9:ca:07:f0:f2:05:1a:d4:95:92:a6:a8:3b:ea:85:cd:e6: c0:04:0f:27:fc:07:a6:09:6f:85:93:d8:c7:03:60:59:9b:2a: ac:1d:51:ce:ef:9b:93:e7:b9:29:2b:24:34:06:50:2f:93:11: e5:ec:b6:74:41:ec:90:8f:5f:7b:8e:fc:8b:79:9a:fa:7e:fa: 70:42:46:aa:50:36:14:ae:ba:21:6f:93:f0:40:f5:c9:78:7b: 40:42:b2:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAl1Y6jAyYr8Kz8G6GDLDacf0QT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTEyMzExMzU1NDJaFw0yNjAxMDMyMDI0NDJaMDMxMTAvBgNV BAMTKENFREQ5OEE3REM3Q0I0QTg5NUIzMzI4MzM0NjgyN0Q5NjMwMEI3MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4l0LncehG766+/+wX9n8fOcvC I6QLOE+YCJAUwfY24ODmDtGABKv77OEOp8nItCy5hMma2iTZdCeMB7vjZui3cRwD hZajVQ4kkcMaG6cFYjdI8Vcws+zFUgIu+3ukDn5hLinybK7zKpPChEfRN4B0dP7q UQlgHMLQv/HjosF3jUxcPoZtebzU+thyIU5X60rln9y6UW+rNJAxrWp/z3lB5Umy ejg2yt85R2gxV7bS1Dnaq5TIJ2EI0m9/7Q3qpkBzN3k7niugNmEkOn0O+s1mH5A/ uwC18CCP4Z/+TqM5F0tgnNkJv0qmakGjYImiAky/gE5m8WhxtX9rhhFsVbaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzt2Yp9x8tKiVszKDNGgn2WMAtwgwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCTDy3tEoC9mxN6NKgPE4V0H8lj66o8eXT0 TbcoETLwoUqBiaU5hy8Pd+aJf7fXfgxi2Fs3tKRyVUyOUQ3ABGj1B0Ra1TajKQ2M Y0+FdCrdlkF1ARBxO+k2J3ISoq1HiS5niUS0O/bQhtbHgC24ox3uc8BnhpFRCNyt I80rY7ytbBDBn6fpg5BGjRHC6VuEe40YAYHiLgWr8pawzEVJrPdzMn3Zygfw8gUa 1JWSpqg76oXN5sAEDyf8B6YJb4WT2McDYFmbKqwdUc7vm5PnuSkrJDQGUC+TEeXs tnRB7JCPX3uO/It5mvp++nBCRqpQNhSuuiFvk/BA9cl4e0BCsqo= -----END CERTIFICATE-----Generated at Wed Dec 31 20:25:41 2025 by rpki-client