This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: B8f3dKA3Fbc7Qv38gCGWN3LmGITVKZCJeefM1P6ZtM8= Subject key identifier: EF:D0:51:DF:8D:70:53:F3:26:1D:2C:B9:F9:0E:5E:1C:6D:70:8F:DC Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 6A3F6ED716473EB171A8B6785AF889376B77D90A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 51 Signing time: Mon 01 Dec 2025 10:32:12 +0000 Manifest this update: Mon 01 Dec 2025 10:27:12 +0000 Manifest next update: Thu 04 Dec 2025 19:15:12 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: SrlfkGGu4LhoTiJcz2AUJLL8pZxOebIf+jbda0jfOJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3f:6e:d7:16:47:3e:b1:71:a8:b6:78:5a:f8:89:37:6b:77:d9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Dec 1 10:27:12 2025 GMT Not After : Dec 4 19:15:12 2025 GMT Subject: CN=EFD051DF8D7053F3261D2CB9F90E5E1C6D708FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:53:d6:7f:4f:71:2e:ba:06:91:cd:ed:f5: 06:1c:f5:d1:5a:61:db:ab:af:a6:6c:02:01:d2:9f: 83:b0:8f:2c:fc:eb:c4:67:fe:1d:a8:8e:79:87:3d: 0d:9c:48:f8:2d:ce:36:5a:cc:37:a2:7b:99:6e:92: 9b:4c:7d:d3:ac:0f:00:a7:10:5a:8b:2b:10:ea:84: 8b:4a:a1:5e:3b:ed:66:fc:e5:da:78:75:95:f9:6a: a7:41:37:49:11:00:49:b8:2e:18:b4:d6:33:66:75: 4f:46:3f:b9:c3:37:d2:3b:cc:2f:96:95:5a:12:b3: 55:f0:52:61:2b:3b:77:0f:d5:e6:29:a8:94:c4:a5: a9:bf:3d:1e:8d:c0:01:da:4d:a4:28:c6:f6:65:8e: 8d:68:99:59:b1:b4:0c:f7:51:79:9c:fb:89:0f:80: e6:d3:a4:b1:48:ab:bb:0b:55:38:79:5a:23:83:8e: f4:23:89:72:71:05:ec:c2:f2:cf:84:c1:bc:84:0b: 1d:bf:1e:fc:aa:60:d4:1b:28:25:c5:ab:b1:88:47: 80:d0:af:82:82:b6:63:6e:df:29:00:65:57:61:05: da:69:2b:6f:d4:77:96:e1:81:93:86:3c:2a:26:7f: 50:e1:40:2c:34:76:19:c7:aa:71:fc:51:2a:1b:d1: 8c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D0:51:DF:8D:70:53:F3:26:1D:2C:B9:F9:0E:5E:1C:6D:70:8F:DC X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b2:9f:da:97:8d:fc:1d:27:a8:70:95:a2:17:01:b4:75:b1: 08:73:7b:c2:e1:70:0a:31:a7:86:86:1b:ce:67:cf:0c:7d:59: 6d:9a:5c:e7:24:2c:d5:d0:14:e3:b8:7d:79:f4:a0:ca:5e:ad: b3:70:2f:52:b7:2c:7f:eb:4e:02:71:d5:ca:2c:c8:df:5b:fc: 30:22:b9:23:d3:90:4d:29:df:e2:f2:a5:c4:c9:3a:d2:dc:1a: 42:79:c2:1c:8c:30:ea:15:2c:a9:93:f8:29:62:3a:40:08:56: 96:ef:e0:84:a7:a7:e8:e9:b3:70:2b:24:51:b4:d4:3e:3b:35: 31:27:63:4d:55:96:97:e0:40:89:d6:e1:cc:6f:e8:6a:60:82: 9c:9d:73:7a:37:51:13:dc:22:b2:ce:52:e6:e3:d8:10:24:6f: 6e:4a:4d:c6:a8:8f:eb:bd:be:40:1c:05:2d:19:26:3b:2a:c1: 49:3d:8d:b5:38:d7:30:54:23:70:00:c7:7d:ec:51:96:d5:59: 71:eb:f3:79:6d:1a:19:d1:88:c7:90:5c:d8:89:49:5b:f2:2d: 16:97:de:de:b5:05:fe:a0:16:cc:3c:f5:b2:b5:f8:46:54:8b: cd:6a:ff:7e:a4:86:aa:0a:f9:de:e4:15:e9:40:14:f4:17:b2: 02:b5:ae:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaj9u1xZHPrFxqLZ4WviJN2t32QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNTEyMDExMDI3MTJaFw0yNTEyMDQxOTE1MTJaMDMxMTAvBgNV BAMTKEVGRDA1MURGOEQ3MDUzRjMyNjFEMkNCOUY5MEU1RTFDNkQ3MDhGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAFPWf09xLroGkc3t9QYc9dFa Ydurr6ZsAgHSn4Owjyz868Rn/h2ojnmHPQ2cSPgtzjZazDeie5lukptMfdOsDwCn EFqLKxDqhItKoV477Wb85dp4dZX5aqdBN0kRAEm4Lhi01jNmdU9GP7nDN9I7zC+W lVoSs1XwUmErO3cP1eYpqJTEpam/PR6NwAHaTaQoxvZljo1omVmxtAz3UXmc+4kP gObTpLFIq7sLVTh5WiODjvQjiXJxBezC8s+EwbyECx2/HvyqYNQbKCXFq7GIR4DQ r4KCtmNu3ykAZVdhBdppK2/Ud5bhgZOGPComf1DhQCw0dhnHqnH8USob0Yz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79BR341wU/MmHSy5+Q5eHG1wj9wwHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+yn9qXjfwdJ6hwlaIXAbR1sQhze8LhcAox p4aGG85nzwx9WW2aXOckLNXQFOO4fXn0oMperbNwL1K3LH/rTgJx1cosyN9b/DAi uSPTkE0p3+LypcTJOtLcGkJ5whyMMOoVLKmT+CliOkAIVpbv4ISnp+jps3ArJFG0 1D47NTEnY01VlpfgQInW4cxv6Gpggpydc3o3URPcIrLOUubj2BAkb25KTcaoj+u9 vkAcBS0ZJjsqwUk9jbU41zBUI3AAx33sUZbVWXHr83ltGhnRiMeQXNiJSVvyLRaX 3t61Bf6gFsw89bK1+EZUi81q/36khqoK+d7kFelAFPQXsgK1rlc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:21 2025 by rpki-client