This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft File: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft (raw, json) Hash identifier: +FPbIEHnyLo+vD0/N4ceJC8M8qVRq6ACgewnZAobNNw= Subject key identifier: 21:84:A5:C8:69:8D:CE:43:20:0B:C9:96:E0:37:CC:E0:E2:DD:E8:B1 Authority key identifier: 8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E Certificate issuer: /CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Certificate serial: 1893A39C017653F7E7501002FBA988DD2B4FC2A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft Manifest number: 01B7 Signing time: Tue 02 Dec 2025 03:11:30 +0000 Manifest this update: Tue 02 Dec 2025 03:06:30 +0000 Manifest next update: Fri 05 Dec 2025 10:44:30 +0000 Files and hashes: 1: 8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl (hash: 2lgU1AGgCb72YWrarECEOSCjuej5UewauMUnG6z9A+0=) 2: 3130332e3137392e3235322e302f32332d3233203d3e20313439333530.roa (hash: SOLno68sPPJ1WEP8d6UDWvS0+ZdY5j1GxBVKsZxB5cY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:93:a3:9c:01:76:53:f7:e7:50:10:02:fb:a9:88:dd:2b:4f:c2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E Validity Not Before: Dec 2 03:06:30 2025 GMT Not After : Dec 5 10:44:30 2025 GMT Subject: CN=2184A5C8698DCE43200BC996E037CCE0E2DDE8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:78:f1:24:36:05:da:94:e6:00:b8:0a:d2: de:46:25:86:83:e4:64:f1:68:ac:13:9f:9e:32:03: f3:17:34:a3:b7:57:5d:37:d5:65:19:61:09:d6:4c: 87:fc:b4:3f:40:e6:46:62:ea:7b:13:cc:21:67:bf: c2:85:ac:81:47:6b:92:85:b8:53:bb:e7:bf:04:9a: 47:32:ef:dc:3f:07:93:07:69:62:a0:ab:30:9e:39: dc:24:0b:61:bb:e2:3f:ac:ed:d7:9a:5e:33:07:23: e7:52:68:ca:47:10:17:1e:2c:17:71:9a:2e:4b:aa: c8:f3:11:82:b7:c0:d1:52:ef:e2:38:50:3b:39:be: f7:a8:98:ce:02:8b:c5:31:6e:de:5d:fa:36:d3:1e: 5a:7f:de:ce:d1:ad:72:94:33:f7:ca:98:e5:04:11: 81:0b:a3:5b:fc:08:e3:9e:11:cf:eb:51:95:6f:bb: bd:7c:e6:00:da:f8:30:83:df:aa:db:93:3b:50:dd: 70:c9:e6:b4:85:e4:25:49:25:34:60:eb:6e:22:96: 92:49:03:77:d0:44:31:53:1d:89:c4:d8:5f:a2:ba: 92:a0:d5:a5:8c:99:4e:fc:b7:88:ae:5a:af:28:2f: 94:d3:29:57:d7:2a:60:33:62:54:31:be:fa:41:75: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:A5:C8:69:8D:CE:43:20:0B:C9:96:E0:37:CC:E0:E2:DD:E8:B1 X509v3 Authority Key Identifier: keyid:8A:CB:52:0B:0E:2D:E6:6C:E5:28:B8:0D:A6:A5:ED:66:E4:B5:CF:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/785bff41-2420-42b1-9b83-d41c18043d65/0/8ACB520B0E2DE66CE528B80DA6A5ED66E4B5CF2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4b:a2:d8:d4:39:54:94:16:ab:88:86:3b:14:57:96:ff:83: 1f:d4:07:e7:13:79:8a:c8:71:c0:b6:28:6a:60:27:4c:45:76: f4:53:28:0e:0b:e4:4d:94:8f:f4:72:f0:73:c8:c2:4a:e8:18: e2:5c:80:bd:ed:d6:a7:4d:32:ea:b3:18:0f:6d:3f:d4:28:93: 47:8b:8a:43:b6:49:96:b7:37:bf:2e:b9:68:a3:27:2a:ad:2c: ea:c2:e6:9f:b4:d7:e6:54:d2:af:bc:71:b5:08:ca:3a:46:ca: f8:4a:6a:f0:51:2e:1b:3b:4a:4f:f4:a6:70:ce:49:2f:79:e8: 8c:00:a2:f0:0b:a9:00:91:ff:d3:d7:c1:ae:5c:1a:48:78:31: 4f:66:cf:4b:5b:0c:42:c4:83:f2:02:39:06:7c:46:8f:64:20: 6f:40:09:dd:08:f5:6d:57:fe:7e:14:fb:59:96:c8:01:30:4f: 36:16:12:b8:b9:19:76:f5:3b:4c:84:11:94:d2:47:d4:1d:68: 93:c9:df:ca:03:bb:de:1f:91:d7:a7:75:c1:71:98:fc:de:73: 69:2c:b8:b7:a4:ac:4a:56:ef:f5:a9:61:5e:6c:f3:71:68:01: a4:9c:41:5c:2d:bb:18:3a:a2:50:c1:73:0a:79:cc:02:e4:98: 36:3a:d2:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGJOjnAF2U/fnUBAC+6mI3StPwqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZF NEI1Q0YyRTAeFw0yNTEyMDIwMzA2MzBaFw0yNTEyMDUxMDQ0MzBaMDMxMTAvBgNV BAMTKDIxODRBNUM4Njk4RENFNDMyMDBCQzk5NkUwMzdDQ0UwRTJEREU4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUcnjxJDYF2pTmALgK0t5GJYaD 5GTxaKwTn54yA/MXNKO3V1031WUZYQnWTIf8tD9A5kZi6nsTzCFnv8KFrIFHa5KF uFO7578Emkcy79w/B5MHaWKgqzCeOdwkC2G74j+s7deaXjMHI+dSaMpHEBceLBdx mi5LqsjzEYK3wNFS7+I4UDs5vveomM4Ci8Uxbt5d+jbTHlp/3s7RrXKUM/fKmOUE EYELo1v8COOeEc/rUZVvu7185gDa+DCD36rbkztQ3XDJ5rSF5CVJJTRg624ilpJJ A3fQRDFTHYnE2F+iupKg1aWMmU78t4iuWq8oL5TTKVfXKmAzYlQxvvpBddwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIYSlyGmNzkMgC8mW4DfM4OLd6LEwHwYDVR0j BBgwFoAUistSCw4t5mzlKLgNpqXtZuS1zy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODViZmY0MS0yNDIwLTQyYjEtOWI4My1kNDFjMTgwNDNkNjUvMC84QUNCNTIwQjBF MkRFNjZDRTUyOEI4MERBNkE1RUQ2NkU0QjVDRjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVENjZFNEI1 Q0YyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzg1YmZmNDEtMjQyMC00MmIxLTli ODMtZDQxYzE4MDQzZDY1LzAvOEFDQjUyMEIwRTJERTY2Q0U1MjhCODBEQTZBNUVE NjZFNEI1Q0YyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFLotjUOVSUFquIhjsUV5b/gx/UB+cTeYrI ccC2KGpgJ0xFdvRTKA4L5E2Uj/Ry8HPIwkroGOJcgL3t1qdNMuqzGA9tP9Qok0eL ikO2SZa3N78uuWijJyqtLOrC5p+01+ZU0q+8cbUIyjpGyvhKavBRLhs7Sk/0pnDO SS956IwAovALqQCR/9PXwa5cGkh4MU9mz0tbDELEg/ICOQZ8Ro9kIG9ACd0I9W1X /n4U+1mWyAEwTzYWEri5GXb1O0yEEZTSR9QdaJPJ38oDu94fkdendcFxmPzec2ks uLekrEpW7/WpYV5s83FoAaScQVwtuxg6olDBcwp5zALkmDY60hw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:29 2025 by rpki-client