This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: ZtCjQdhU+X0TKEM0FrBdXgalqdY6TQpIHtfo4+ifh+8= Subject key identifier: 63:39:8B:25:9A:78:F3:FC:07:85:F1:53:23:3B:45:3A:E7:C1:9D:B6 Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 1A192229F6B5C975521CADFC88F86BD8328DC9B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 0535 Signing time: Wed 17 Dec 2025 01:02:20 +0000 Manifest this update: Wed 17 Dec 2025 00:57:20 +0000 Manifest next update: Sat 20 Dec 2025 09:07:20 +0000 Files and hashes: 1: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 2: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: 0MUk2g/TkIWkYV7H6dTqIiGYrD8OIRCOEQM2zeH9EV8=) 3: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 4: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) 5: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:19:22:29:f6:b5:c9:75:52:1c:ad:fc:88:f8:6b:d8:32:8d:c9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Dec 17 00:57:20 2025 GMT Not After : Dec 20 09:07:20 2025 GMT Subject: CN=63398B259A78F3FC0785F153233B453AE7C19DB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:a7:2a:a6:df:e5:41:74:e3:e4:09:80:90: fe:01:fd:1d:f9:96:bd:89:63:71:c9:47:7f:ff:ae: 71:47:fd:c7:7f:da:eb:c7:55:98:a0:c6:66:7e:06: a0:be:4d:d5:cf:75:e5:7d:a9:fa:fc:a0:d6:a6:5d: 2b:6b:f6:ec:e9:8e:b8:4b:77:dc:cb:7f:d6:18:94: b8:cf:df:93:d9:3c:6b:c9:63:94:17:ee:c2:f3:e2: 68:55:7e:3a:f4:87:7c:45:29:c7:7e:4e:76:c5:0f: 55:6f:07:3a:ff:81:55:de:22:f3:51:8e:69:ba:e0: 83:43:d7:e6:96:04:b4:35:db:15:cc:04:91:1d:ab: ca:04:93:fd:5e:db:e8:e3:79:43:ba:7e:54:2c:64: 97:99:f3:b6:32:b8:4f:e6:f5:8f:c5:63:73:32:b1: 34:22:fb:64:c3:ec:73:c8:0e:9b:61:0f:3a:b3:3e: 96:d5:f1:7b:15:48:92:53:93:83:12:75:8f:a1:eb: b7:11:12:91:77:88:38:e9:05:35:e4:d4:08:f3:3c: d3:0e:6b:0a:01:50:c8:e2:b6:a2:97:04:08:df:82: aa:5d:a1:a8:69:46:72:5e:41:63:65:1c:62:5a:1e: df:74:c9:9c:38:24:85:a0:b4:cd:61:65:85:71:f2: 96:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:39:8B:25:9A:78:F3:FC:07:85:F1:53:23:3B:45:3A:E7:C1:9D:B6 X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:76:96:9c:38:16:f8:ed:4e:53:2a:b0:b4:ca:7d:61:31:6d: 04:b0:8d:30:d7:13:99:08:b8:a6:2d:8c:91:8f:c0:0d:cc:7d: de:63:51:a5:5c:cc:f2:b3:f6:d3:76:85:96:ab:b0:95:19:28: 01:72:ea:61:59:3b:fe:ab:82:66:c9:e7:8e:ab:f7:db:e3:32: aa:cb:02:73:9a:5b:c9:3e:42:1b:0d:07:ce:fb:3d:09:b5:bd: eb:da:bf:98:a2:46:0b:c7:00:00:8c:fd:1d:cd:33:79:1c:6f: 30:ac:64:e8:39:72:73:cb:f3:81:16:dd:76:8f:eb:8b:be:31: 10:ca:97:26:67:98:7b:7c:df:8b:73:a0:f8:37:2c:ae:af:45: fa:f9:49:e6:02:e7:ff:14:7d:ff:55:8a:1d:7e:a1:40:a3:aa: 35:cc:12:be:1e:34:01:f9:42:00:f0:5a:3d:d3:80:eb:99:18: 05:46:3a:d0:43:87:08:0b:56:e7:2d:2e:72:8f:46:54:05:c5: ba:76:39:88:f4:d4:39:fa:c9:20:1d:fa:d7:81:2b:02:01:b2: 99:1e:62:ba:76:38:c6:6e:68:c9:5a:da:17:c4:82:59:b2:d3: 4f:47:9e:8d:c1:bb:bd:8f:53:57:dc:c1:23:be:e9:71:ee:8c: 63:23:0c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhkiKfa1yXVSHK38iPhr2DKNybIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTEyMTcwMDU3MjBaFw0yNTEyMjAwOTA3MjBaMDMxMTAvBgNV BAMTKDYzMzk4QjI1OUE3OEYzRkMwNzg1RjE1MzIzM0I0NTNBRTdDMTlEQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8g6cqpt/lQXTj5AmAkP4B/R35 lr2JY3HJR3//rnFH/cd/2uvHVZigxmZ+BqC+TdXPdeV9qfr8oNamXStr9uzpjrhL d9zLf9YYlLjP35PZPGvJY5QX7sLz4mhVfjr0h3xFKcd+TnbFD1VvBzr/gVXeIvNR jmm64IND1+aWBLQ12xXMBJEdq8oEk/1e2+jjeUO6flQsZJeZ87YyuE/m9Y/FY3My sTQi+2TD7HPIDpthDzqzPpbV8XsVSJJTk4MSdY+h67cREpF3iDjpBTXk1AjzPNMO awoBUMjitqKXBAjfgqpdoahpRnJeQWNlHGJaHt90yZw4JIWgtM1hZYVx8pYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzmLJZp48/wHhfFTIztFOufBnbYwHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAp2lpw4FvjtTlMqsLTKfWExbQSwjTDXE5kI uKYtjJGPwA3Mfd5jUaVczPKz9tN2hZarsJUZKAFy6mFZO/6rgmbJ546r99vjMqrL AnOaW8k+QhsNB877PQm1vevav5iiRgvHAACM/R3NM3kcbzCsZOg5cnPL84EW3XaP 64u+MRDKlyZnmHt834tzoPg3LK6vRfr5SeYC5/8Uff9Vih1+oUCjqjXMEr4eNAH5 QgDwWj3TgOuZGAVGOtBDhwgLVuctLnKPRlQFxbp2OYj01Dn6ySAd+teBKwIBspke Yrp2OMZuaMla2hfEglmy009Hno3Bu72PU1fcwSO+6XHujGMjDDY= -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:39 2025 by rpki-client