This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: PH2nsSxXvQHTFeauoKvZrdjtBm8lxG38IAHhrfBlQIg= Subject key identifier: 1C:72:C3:56:E5:5D:7D:31:2C:CF:41:38:11:E3:BB:37:42:AF:A3:8E Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 5ADD5534418EFA2EA8E136971C365B609F233C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 01B0 Signing time: Wed 03 Dec 2025 08:00:05 +0000 Manifest this update: Wed 03 Dec 2025 07:55:05 +0000 Manifest next update: Sat 06 Dec 2025 15:32:05 +0000 Files and hashes: 1: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 2: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: ZuLcrbgB0i0uVL81F/yeFrqhxfDaQkhhS9RAU/mhWCw=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:dd:55:34:41:8e:fa:2e:a8:e1:36:97:1c:36:5b:60:9f:23:3c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Dec 3 07:55:05 2025 GMT Not After : Dec 6 15:32:05 2025 GMT Subject: CN=1C72C356E55D7D312CCF413811E3BB3742AFA38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:b4:f6:0c:14:89:60:92:5c:b8:8a:da:9e: aa:7a:f4:c8:0d:b7:06:13:15:cf:04:c6:ab:f6:82: 8c:b7:23:76:b4:4d:a9:0e:d5:54:33:ee:48:54:04: 00:62:b3:26:aa:c3:f6:6c:c6:1c:83:5d:10:58:73: 07:fe:7b:77:8c:b3:74:32:d7:36:51:b0:c2:f8:f1: e4:35:ae:ad:22:7a:a7:1e:83:f4:9c:6d:c7:d2:9a: 9e:42:37:6d:d4:90:0a:57:23:95:61:78:ac:96:b6: cc:60:8b:b4:f0:9a:19:72:33:67:ff:49:16:fb:a2: d4:40:3f:5a:34:9d:12:98:44:e8:80:f7:a9:e3:96: e3:34:16:7a:5f:a8:c0:60:48:bb:67:40:b9:36:03: 67:6a:46:6b:22:76:ae:d4:b1:a9:47:1c:77:5b:a8: e1:ee:7c:99:a2:6b:8a:1a:57:ed:92:19:71:dc:12: fb:c2:6f:d9:ce:7d:52:c8:8a:ed:92:4e:ab:f2:3f: 38:f4:db:5d:de:fc:7c:92:6e:ae:8a:27:4c:01:db: 21:8e:a7:3d:36:86:61:c3:df:08:74:41:63:d5:a9: 17:37:dd:5e:62:ca:0d:4b:8e:3f:26:36:77:19:b3: d6:3e:60:d1:e7:ad:67:05:15:67:02:42:2a:b2:26: 8c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:72:C3:56:E5:5D:7D:31:2C:CF:41:38:11:E3:BB:37:42:AF:A3:8E X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3c:5a:be:0d:9e:9d:b6:dd:43:ee:2e:4e:ff:9f:90:3c:dd: 32:59:c4:13:d3:14:1b:79:90:c1:32:75:e5:b0:fb:4e:ae:a9: 09:3e:9b:86:c7:3a:10:cb:ac:06:84:a7:6c:1b:82:47:2a:2d: bc:fa:2b:06:ec:67:35:d2:9e:c9:0d:08:bb:52:a7:51:48:62: f5:92:7e:84:f4:8f:05:52:9d:a7:7d:aa:3d:9e:a7:8d:f9:f9: 29:52:53:4e:2e:1b:d3:76:8e:a2:c3:3d:bc:9a:27:ac:7a:42: 48:88:12:66:47:60:88:9c:13:54:b7:27:65:8a:aa:bb:b3:2f: 3d:dc:80:89:c2:47:12:db:e9:06:96:33:c7:93:2b:48:5a:fa: 82:c0:50:b2:08:a9:90:ce:ac:da:34:04:c6:1b:88:5c:5e:ca: a5:f1:c4:d1:0c:9c:98:12:d7:ff:d0:67:0e:f2:3f:f8:f0:e7: 99:3d:86:bf:b2:57:c7:7c:0b:2f:84:61:fd:bf:7a:01:99:8a: ab:9b:ed:dc:d3:60:fc:5b:ce:46:a9:17:df:ef:da:18:87:9e: d6:ef:34:a1:5b:5a:91:f5:c3:e9:24:47:7e:66:2e:e2:6e:25: ff:69:5e:26:b4:2f:43:fd:cc:ee:75:6d:84:ff:bf:76:ab:fd: 62:e1:88:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWt1VNEGO+i6o4TaXHDZbYJ8jPIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTEyMDMwNzU1MDVaFw0yNTEyMDYxNTMyMDVaMDMxMTAvBgNV BAMTKDFDNzJDMzU2RTU1RDdEMzEyQ0NGNDEzODExRTNCQjM3NDJBRkEzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr3rT2DBSJYJJcuIranqp69MgN twYTFc8Exqv2goy3I3a0TakO1VQz7khUBABisyaqw/ZsxhyDXRBYcwf+e3eMs3Qy 1zZRsML48eQ1rq0ieqceg/ScbcfSmp5CN23UkApXI5VheKyWtsxgi7TwmhlyM2f/ SRb7otRAP1o0nRKYROiA96njluM0FnpfqMBgSLtnQLk2A2dqRmsidq7UsalHHHdb qOHufJmia4oaV+2SGXHcEvvCb9nOfVLIiu2STqvyPzj0213e/HySbq6KJ0wB2yGO pz02hmHD3wh0QWPVqRc33V5iyg1Ljj8mNncZs9Y+YNHnrWcFFWcCQiqyJoyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHHLDVuVdfTEsz0E4EeO7N0Kvo44wHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE48Wr4Nnp223UPuLk7/n5A83TJZxBPTFBt5 kMEydeWw+06uqQk+m4bHOhDLrAaEp2wbgkcqLbz6KwbsZzXSnskNCLtSp1FIYvWS foT0jwVSnad9qj2ep435+SlSU04uG9N2jqLDPbyaJ6x6QkiIEmZHYIicE1S3J2WK qruzLz3cgInCRxLb6QaWM8eTK0ha+oLAULIIqZDOrNo0BMYbiFxeyqXxxNEMnJgS 1//QZw7yP/jw55k9hr+yV8d8Cy+EYf2/egGZiqub7dzTYPxbzkapF9/v2hiHntbv NKFbWpH1w+kkR35mLuJuJf9pXia0L0P9zO51bYT/v3ar/WLhiJo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:32 2025 by rpki-client