This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: NWYZ3RKer06ODkujYCsV+WHf4HnM4AfrA7n8Q4WrDl0= Subject key identifier: 6F:79:95:47:85:B5:1E:AE:17:07:37:D2:73:B6:7A:D9:E5:63:57:F1 Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 5D9B5C074C87480A767AB3509103C9609D2C97B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 0232 Signing time: Wed 24 Dec 2025 09:12:19 +0000 Manifest this update: Wed 24 Dec 2025 09:07:19 +0000 Manifest next update: Sat 27 Dec 2025 13:51:19 +0000 Files and hashes: 1: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) 2: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: LUR5fVK6fvxou5WdlY7D3pdCINg/0FmXDSsOlLQG1Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 13:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9b:5c:07:4c:87:48:0a:76:7a:b3:50:91:03:c9:60:9d:2c:97:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Dec 24 09:07:19 2025 GMT Not After : Dec 27 13:51:19 2025 GMT Subject: CN=6F79954785B51EAE170737D273B67AD9E56357F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:b0:d4:64:0a:be:b0:67:9c:7c:33:fd:f6: a6:e9:cc:8e:91:2f:af:81:23:d3:84:25:66:5b:09: d7:d8:85:cd:28:c0:44:64:32:db:07:7e:68:92:cd: 62:59:86:b8:4a:ff:70:1c:b2:a0:ab:6d:87:1f:02: 6f:61:5c:3f:f9:7a:a6:5b:69:8f:57:23:fa:3b:80: c9:f5:7f:ac:89:0a:03:2b:2c:57:4f:32:78:1d:cd: 1d:52:58:48:ea:06:16:77:d7:52:3e:c4:16:8b:89: 1a:36:c5:66:fd:d1:13:aa:38:9e:bf:59:4b:7f:bd: d1:fc:68:79:02:ee:4a:a0:60:ae:62:d3:c7:e3:e4: ff:83:ac:cf:d3:17:c5:ad:b7:9c:77:f0:8c:c3:d5: a6:cf:98:48:c6:0b:ff:a0:14:af:fd:56:92:6b:a8: 53:9e:a0:f5:b9:17:9f:33:a2:33:b0:7b:16:c2:c9: 9e:11:bd:08:e1:e3:54:8f:b0:c6:04:e3:f7:3f:39: 2c:4b:0c:fc:45:61:cb:2c:a9:4c:4f:fd:c5:ce:ac: 07:df:9f:56:da:5a:9a:66:f5:78:79:cf:00:7e:ee: 65:ba:50:dc:89:e6:66:8f:86:05:7e:fe:39:5d:dc: 9f:60:d7:01:e9:86:5a:64:3a:f3:4c:c2:2d:00:45: 81:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:79:95:47:85:B5:1E:AE:17:07:37:D2:73:B6:7A:D9:E5:63:57:F1 X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:bc:44:3f:ed:81:d7:2b:97:95:a1:2b:28:88:83:1f:65:65: 37:7a:4b:ec:55:38:72:4d:80:8e:5e:70:1e:58:30:6d:45:f1: 20:8a:22:43:56:ba:82:59:e9:44:39:6a:a0:c1:15:9a:52:bc: 18:78:28:96:19:c1:30:33:59:c1:da:1f:a3:a0:3e:48:2e:b5: 91:fc:8f:c3:06:92:88:42:12:4c:5e:49:21:9d:0c:b6:49:27: 0f:fd:d7:65:d5:44:b7:8f:65:8b:45:e8:cc:f3:ff:9f:6c:48: 87:0b:34:24:cf:a3:e8:a6:3d:d1:d7:3c:35:14:5b:47:91:26: fe:91:9c:32:5a:31:98:d7:54:4c:62:d6:86:78:cf:07:e2:ab: f6:e4:74:e8:70:01:11:92:70:aa:22:8f:5b:c5:6a:a7:f2:76: 79:d2:e1:eb:f9:c5:eb:0e:3c:69:c7:7f:5d:ba:5e:eb:b9:77: c0:aa:83:4e:17:44:2f:23:40:7b:46:6e:df:00:2d:f7:77:a6: 4d:23:d1:cf:bd:d4:e5:38:0a:22:54:a1:d5:57:b0:62:f0:10: 18:81:cc:28:bf:87:ed:1a:1b:ad:c2:82:2e:68:dc:7f:a4:56: 49:df:bc:e3:96:3d:62:1f:3a:ca:b9:ef:03:aa:af:ce:c9:70: 72:f9:c4:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZtcB0yHSAp2erNQkQPJYJ0sl7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTEyMjQwOTA3MTlaFw0yNTEyMjcxMzUxMTlaMDMxMTAvBgNV BAMTKDZGNzk5NTQ3ODVCNTFFQUUxNzA3MzdEMjczQjY3QUQ5RTU2MzU3RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bLDUZAq+sGecfDP99qbpzI6R L6+BI9OEJWZbCdfYhc0owERkMtsHfmiSzWJZhrhK/3AcsqCrbYcfAm9hXD/5eqZb aY9XI/o7gMn1f6yJCgMrLFdPMngdzR1SWEjqBhZ311I+xBaLiRo2xWb90ROqOJ6/ WUt/vdH8aHkC7kqgYK5i08fj5P+DrM/TF8Wtt5x38IzD1abPmEjGC/+gFK/9VpJr qFOeoPW5F58zojOwexbCyZ4RvQjh41SPsMYE4/c/OSxLDPxFYcssqUxP/cXOrAff n1baWppm9Xh5zwB+7mW6UNyJ5maPhgV+/jld3J9g1wHphlpkOvNMwi0ARYGlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb3mVR4W1Hq4XBzfSc7Z62eVjV/EwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG8RD/tgdcrl5WhKyiIgx9lZTd6S+xVOHJN gI5ecB5YMG1F8SCKIkNWuoJZ6UQ5aqDBFZpSvBh4KJYZwTAzWcHaH6OgPkgutZH8 j8MGkohCEkxeSSGdDLZJJw/912XVRLePZYtF6Mzz/59sSIcLNCTPo+imPdHXPDUU W0eRJv6RnDJaMZjXVExi1oZ4zwfiq/bkdOhwARGScKoij1vFaqfydnnS4ev5xesO PGnHf126Xuu5d8Cqg04XRC8jQHtGbt8ALfd3pk0j0c+91OU4CiJUodVXsGLwEBiB zCi/h+0aG63Cgi5o3H+kVknfvOOWPWIfOsq57wOqr87JcHL5xB4= -----END CERTIFICATE-----Generated at Fri Dec 26 05:04:36 2025 by rpki-client