This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: sPdQE0zrwT51titkw/tzI6E5+Etv659yzzIk9wV1jt0= Subject key identifier: D4:36:C3:81:2A:56:29:81:1F:AD:13:7A:CE:4F:11:85:37:C2:45:D5 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 681791BA16413CD64B4DDD04CB0CD048D69C585F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 0238 Signing time: Tue 02 Dec 2025 11:00:49 +0000 Manifest this update: Tue 02 Dec 2025 10:55:49 +0000 Manifest next update: Fri 05 Dec 2025 15:24:49 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: GvmJJP2QuJEib5JSSwP+JXgGnac5S44Eb5df3udC4R4=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:17:91:ba:16:41:3c:d6:4b:4d:dd:04:cb:0c:d0:48:d6:9c:58:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Dec 2 10:55:49 2025 GMT Not After : Dec 5 15:24:49 2025 GMT Subject: CN=D436C3812A5629811FAD137ACE4F118537C245D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:04:dc:e2:a6:3f:9e:13:72:19:e8:55:e3: 47:86:ea:56:83:3f:b6:f2:62:57:f8:f3:ea:1c:71: 71:72:a7:68:38:88:00:34:b2:75:48:17:fb:66:7b: 93:ed:34:5c:9d:79:98:01:4e:39:c3:43:bb:e1:15: b9:3a:31:80:6c:33:16:76:9b:cd:46:23:41:86:8c: 13:d8:27:d5:18:fd:c3:59:19:29:a6:c1:6e:33:44: 8e:84:b8:cc:f6:bd:4c:9b:4d:d0:db:27:4d:0d:36: fb:a2:fa:eb:10:94:c3:2f:9e:97:73:86:79:3f:94: 59:fe:a5:72:99:e6:f5:eb:da:cc:b4:ed:62:24:2f: 76:12:73:76:19:a2:df:73:88:35:a6:94:fe:54:fb: 7b:e1:05:85:19:2e:61:05:65:79:cc:57:10:73:58: 2c:72:2f:3f:af:0c:6e:2a:22:0c:65:c9:07:42:98: a8:e5:d7:be:ca:17:19:2f:37:5b:dc:b6:be:fe:35: f8:bd:73:20:00:d0:75:d4:a8:da:91:b8:32:40:7c: 6f:01:03:bb:a5:38:5a:54:c7:64:07:14:62:03:78: 43:cc:81:06:98:37:e1:cd:26:8e:c0:84:3b:35:cc: 86:f3:00:01:f9:64:1c:fd:bf:c2:3c:4e:98:b4:76: 84:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:C3:81:2A:56:29:81:1F:AD:13:7A:CE:4F:11:85:37:C2:45:D5 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:69:e3:75:fd:c0:17:9e:2f:ff:e6:09:bd:e5:c9:8a:b8:a9: 14:e1:d5:53:e6:16:8b:82:0c:11:b3:28:ea:9b:d9:6b:13:b0: 3d:c0:5a:98:20:d0:72:a2:8b:47:28:eb:29:94:02:af:03:b5: c4:f7:11:56:9d:88:54:b4:b9:f0:13:25:cd:4e:ff:32:6d:2d: 78:25:69:12:b7:42:58:0d:ed:8b:01:90:39:45:de:4f:14:71: cd:5a:d7:92:9a:33:7b:d9:04:77:a8:9b:c0:8a:b1:10:bd:0a: 39:44:bf:72:c9:4e:a9:f0:84:6a:3d:93:c9:07:10:68:28:24: ae:0d:ee:15:86:eb:d6:c5:53:55:d1:7b:ef:4b:2a:a3:46:0f: 31:77:2b:da:9a:25:89:ad:86:57:27:b1:67:ca:35:1f:1c:77: 5d:54:6d:92:26:c5:d5:de:98:b6:b8:75:ac:78:ef:7d:8d:bc: d4:b6:8f:89:30:a8:1d:ba:e9:dc:ab:07:61:b5:58:86:d3:eb: dc:93:88:78:ff:33:8b:8b:f3:cf:09:c5:71:d6:23:89:55:22: ca:0a:e9:df:16:16:f8:46:85:34:37:0d:88:e1:f6:dd:79:f2: d5:89:aa:75:3c:2b:2a:fb:f9:12:1f:95:e4:0c:a3:7d:8a:27: b8:44:ce:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBeRuhZBPNZLTd0EywzQSNacWF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTEyMDIxMDU1NDlaFw0yNTEyMDUxNTI0NDlaMDMxMTAvBgNV BAMTKEQ0MzZDMzgxMkE1NjI5ODExRkFEMTM3QUNFNEYxMTg1MzdDMjQ1RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nwTc4qY/nhNyGehV40eG6laD P7byYlf48+occXFyp2g4iAA0snVIF/tme5PtNFydeZgBTjnDQ7vhFbk6MYBsMxZ2 m81GI0GGjBPYJ9UY/cNZGSmmwW4zRI6EuMz2vUybTdDbJ00NNvui+usQlMMvnpdz hnk/lFn+pXKZ5vXr2sy07WIkL3YSc3YZot9ziDWmlP5U+3vhBYUZLmEFZXnMVxBz WCxyLz+vDG4qIgxlyQdCmKjl177KFxkvN1vctr7+Nfi9cyAA0HXUqNqRuDJAfG8B A7ulOFpUx2QHFGIDeEPMgQaYN+HNJo7AhDs1zIbzAAH5ZBz9v8I8Tpi0doQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1DbDgSpWKYEfrRN6zk8RhTfCRdUwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtp43X9wBeeL//mCb3lyYq4qRTh1VPmFouC DBGzKOqb2WsTsD3AWpgg0HKii0co6ymUAq8DtcT3EVadiFS0ufATJc1O/zJtLXgl aRK3QlgN7YsBkDlF3k8Ucc1a15KaM3vZBHeom8CKsRC9CjlEv3LJTqnwhGo9k8kH EGgoJK4N7hWG69bFU1XRe+9LKqNGDzF3K9qaJYmthlcnsWfKNR8cd11UbZImxdXe mLa4dax4732NvNS2j4kwqB266dyrB2G1WIbT69yTiHj/M4uL888JxXHWI4lVIsoK 6d8WFvhGhTQ3DYjh9t158tWJqnU8Kyr7+RIfleQMo32KJ7hEzrY= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:15 2025 by rpki-client