This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: xvXd8vpWt+/Q1dReGPSeZ6YRu1U57Gkk8eaUWTdjnAw= Subject key identifier: 7C:35:12:12:07:B6:55:FF:CF:14:7E:59:00:5A:B4:3B:62:53:02:E9 Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 5C801C79ADFA7CFF2897A0106706E71C770A18BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 052A Signing time: Mon 01 Dec 2025 09:01:24 +0000 Manifest this update: Mon 01 Dec 2025 08:56:24 +0000 Manifest next update: Thu 04 Dec 2025 16:16:24 +0000 Files and hashes: 1: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: NqyOkp4b9/EbQRtYLL0PWxeBP566oBbwchrbNY+5BvQ=) 2: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:80:1c:79:ad:fa:7c:ff:28:97:a0:10:67:06:e7:1c:77:0a:18:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Dec 1 08:56:24 2025 GMT Not After : Dec 4 16:16:24 2025 GMT Subject: CN=7C35121207B655FFCF147E59005AB43B625302E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:34:27:dd:86:01:54:ac:7c:f9:20:d8:be:50: b6:5e:18:0c:c0:42:f7:00:45:ea:ad:e6:2a:bc:cd: 30:46:a8:1a:3e:88:95:71:6c:25:4d:e2:f3:62:2d: 2c:ff:a9:5f:9b:43:0a:de:ec:a8:7b:d6:d6:51:91: 35:2b:ed:67:e4:7d:12:5e:da:ab:cd:d5:4e:27:b8: e3:fd:49:f6:02:80:52:9b:95:b0:8b:72:d5:ae:58: aa:6e:1b:79:44:34:d8:9c:a7:d4:81:fa:5e:27:81: 18:12:54:0f:5b:b6:b1:a3:f1:d5:24:fa:5a:26:13: ba:71:60:b5:7a:51:e0:79:16:62:93:07:e8:3e:a0: 35:a5:bc:54:04:6c:43:fe:a9:34:d9:58:b9:13:6d: 84:61:24:70:85:44:71:28:82:ec:02:0c:b6:47:19: e1:36:13:18:cf:33:c3:0e:31:e6:87:a9:ef:07:37: 14:fc:80:10:9d:4f:09:61:5e:57:d7:8a:8f:1b:70: a0:5c:e6:12:5f:f7:62:75:03:57:fb:d0:f7:52:56: 8b:0e:cd:ef:91:2e:ae:04:2e:8a:91:37:0c:ec:a7: c5:90:1c:19:f8:94:79:e3:52:50:c1:d2:33:83:12: 7f:19:9a:1d:ad:56:3f:93:3c:76:64:f7:d7:21:e2: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:35:12:12:07:B6:55:FF:CF:14:7E:59:00:5A:B4:3B:62:53:02:E9 X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:e6:56:08:bb:97:5c:a4:86:9b:16:b5:74:77:3b:d4:d9:a1: 00:bc:39:46:9a:f9:e8:b5:d8:59:67:61:85:74:dc:e4:78:5d: 9f:69:87:68:ed:73:ea:f2:db:bc:84:9c:d7:fe:3b:c0:32:42: 12:1b:7d:ea:5b:dd:7f:ae:45:33:67:63:7f:ce:14:4a:ba:74: 6a:6b:76:d7:0f:09:17:12:12:f9:bc:9c:df:87:4f:45:45:b0: 5c:4c:f4:df:31:44:12:34:a9:00:04:a4:be:09:36:73:94:c4: 27:d7:1b:e7:92:90:33:35:c9:e6:63:df:5b:51:d8:cb:93:90: 92:f6:e2:29:5d:0d:04:86:99:5b:65:ba:25:d4:69:7e:a2:73: 18:55:72:f4:c4:51:9a:b7:42:b0:d2:3f:e4:41:11:d1:4b:1e: 08:b1:85:dd:df:6e:3d:6d:11:a6:2b:d6:bf:5e:71:72:5b:37: b6:04:62:5d:65:1d:40:fe:5b:12:de:84:f2:78:06:5e:6a:83: 0d:da:05:ff:4f:23:74:26:5e:bc:b5:06:9c:bc:0e:7f:2d:85: bf:a2:d0:fd:83:d8:6e:15:f6:87:02:a1:61:9e:72:f9:cd:c8: a9:0c:21:5f:63:c8:c5:ea:91:1c:bf:fd:4c:81:15:d4:96:cd: b2:19:f6:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIAcea36fP8ol6AQZwbnHHcKGL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTEyMDEwODU2MjRaFw0yNTEyMDQxNjE2MjRaMDMxMTAvBgNV BAMTKDdDMzUxMjEyMDdCNjU1RkZDRjE0N0U1OTAwNUFCNDNCNjI1MzAyRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNCfdhgFUrHz5INi+ULZeGAzA QvcAReqt5iq8zTBGqBo+iJVxbCVN4vNiLSz/qV+bQwre7Kh71tZRkTUr7WfkfRJe 2qvN1U4nuOP9SfYCgFKblbCLctWuWKpuG3lENNicp9SB+l4ngRgSVA9btrGj8dUk +lomE7pxYLV6UeB5FmKTB+g+oDWlvFQEbEP+qTTZWLkTbYRhJHCFRHEoguwCDLZH GeE2ExjPM8MOMeaHqe8HNxT8gBCdTwlhXlfXio8bcKBc5hJf92J1A1f70PdSVosO ze+RLq4ELoqRNwzsp8WQHBn4lHnjUlDB0jODEn8Zmh2tVj+TPHZk99ch4s9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfDUSEge2Vf/PFH5ZAFq0O2JTAukwHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELmVgi7l1ykhpsWtXR3O9TZoQC8OUaa+ei1 2FlnYYV03OR4XZ9ph2jtc+ry27yEnNf+O8AyQhIbfepb3X+uRTNnY3/OFEq6dGpr dtcPCRcSEvm8nN+HT0VFsFxM9N8xRBI0qQAEpL4JNnOUxCfXG+eSkDM1yeZj31tR 2MuTkJL24ildDQSGmVtluiXUaX6icxhVcvTEUZq3QrDSP+RBEdFLHgixhd3fbj1t EaYr1r9ecXJbN7YEYl1lHUD+WxLehPJ4Bl5qgw3aBf9PI3QmXry1Bpy8Dn8thb+i 0P2D2G4V9ocCoWGecvnNyKkMIV9jyMXqkRy//UyBFdSWzbIZ9rY= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:21 2025 by rpki-client