This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: YxavT5bXjchpFAA3Tkhj0AfI8+3gCmFceqN2QxP8mdA= Subject key identifier: 10:42:6C:05:9F:19:9E:9F:7D:2F:D9:B6:BB:E3:EA:43:39:C5:0F:22 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 5839E8D593661757007D4E863AE3C047B71453D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0151 Signing time: Tue 02 Dec 2025 05:00:05 +0000 Manifest this update: Tue 02 Dec 2025 04:55:05 +0000 Manifest next update: Fri 05 Dec 2025 10:41:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: Vfzw7qNdPxkgeCz2dYAoEFXzJ0E3L2uDZejNpItkPv0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:41:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:39:e8:d5:93:66:17:57:00:7d:4e:86:3a:e3:c0:47:b7:14:53:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Dec 2 04:55:05 2025 GMT Not After : Dec 5 10:41:05 2025 GMT Subject: CN=10426C059F199E9F7D2FD9B6BBE3EA4339C50F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:ab:a9:d2:3c:6e:c5:9f:c5:b8:68:3f:35: 9e:a6:45:5d:0c:98:03:4a:e0:92:4a:74:8b:79:f9: 44:d8:95:c7:61:e6:4b:c8:e9:6b:ea:69:dd:9f:01: b5:87:b9:6b:51:ab:10:ca:e1:b9:cd:7e:c4:6e:8f: 9f:48:de:79:c6:83:ed:0e:ca:5d:a0:9a:0b:a8:5d: ce:81:41:37:47:25:10:35:b9:cf:f9:26:e9:06:33: 02:9b:51:66:7f:ca:44:49:15:c0:c6:55:39:7d:39: b4:ef:29:d8:c1:0e:4e:fa:02:c4:4f:1e:ea:46:3d: a2:a2:c1:1d:48:fb:51:ea:9d:67:2d:17:88:50:ae: 32:ee:9e:23:d7:5c:34:99:82:6b:4c:19:47:fb:cb: 9d:19:e7:11:37:ed:55:bd:fb:44:28:f8:8f:1c:3f: 55:6c:5b:84:59:a6:a4:96:bc:a0:d2:52:4b:27:93: b6:38:9b:24:65:d5:fc:f7:0a:93:5b:2b:e9:46:c1: 71:b0:b3:e9:7f:6c:65:18:3a:75:39:23:e0:a7:d8: 5a:6f:8d:28:1b:79:a5:c9:eb:b0:a7:5f:0d:5c:e8: 31:cb:1a:fa:9d:4c:0b:31:8a:85:66:39:1d:d1:de: b6:74:49:ae:94:5d:84:f5:0d:8f:05:a4:c3:e6:55: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:42:6C:05:9F:19:9E:9F:7D:2F:D9:B6:BB:E3:EA:43:39:C5:0F:22 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:11:16:f4:ff:91:0e:70:8c:20:5e:5d:79:81:38:1f:a7:f8: 74:d9:8d:37:0d:78:21:dd:37:c4:5b:1c:75:6d:0d:bc:18:83: 02:02:ca:31:13:1b:c7:82:01:5e:cb:4e:98:63:96:76:7a:9f: 0f:c0:2f:88:95:8f:f1:ac:3c:0a:ef:ca:72:07:fe:e9:b8:97: 25:91:98:e6:4a:ae:94:ae:eb:19:a8:d3:5f:80:95:45:93:8c: f3:21:10:ff:6d:ed:b7:ad:d2:40:bf:4f:78:87:79:c2:3c:4a: 1d:88:68:00:d6:f2:86:7f:85:7c:7f:88:ac:b4:c3:c5:61:7f: 9c:13:eb:1a:da:43:30:d0:4a:54:82:f4:41:2c:27:63:82:fb: f7:62:87:bb:a7:4b:c4:20:d5:52:80:cc:b2:70:d7:d9:bd:f1: 81:df:89:a0:5a:fe:03:86:3a:58:64:39:a1:6a:dc:3c:8c:aa: a8:4d:79:79:be:e9:01:a7:5a:fe:66:27:9f:5a:5a:a0:25:ef: 8d:9f:7e:dd:5e:af:18:62:f5:7c:12:e6:30:65:cb:ec:32:25: 0c:62:f4:b9:e7:10:fa:1f:8f:9f:36:69:a6:b4:c7:90:2f:28: 97:aa:65:b7:4e:1d:94:79:9c:a3:d0:6a:72:58:b3:46:c8:7d: e6:8f:2a:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWDno1ZNmF1cAfU6GOuPAR7cUU9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTEyMDIwNDU1MDVaFw0yNTEyMDUxMDQxMDVaMDMxMTAvBgNV BAMTKDEwNDI2QzA1OUYxOTlFOUY3RDJGRDlCNkJCRTNFQTQzMzlDNTBGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkqup0jxuxZ/FuGg/NZ6mRV0M mANK4JJKdIt5+UTYlcdh5kvI6Wvqad2fAbWHuWtRqxDK4bnNfsRuj59I3nnGg+0O yl2gmguoXc6BQTdHJRA1uc/5JukGMwKbUWZ/ykRJFcDGVTl9ObTvKdjBDk76AsRP HupGPaKiwR1I+1HqnWctF4hQrjLuniPXXDSZgmtMGUf7y50Z5xE37VW9+0Qo+I8c P1VsW4RZpqSWvKDSUksnk7Y4myRl1fz3CpNbK+lGwXGws+l/bGUYOnU5I+Cn2Fpv jSgbeaXJ67CnXw1c6DHLGvqdTAsxioVmOR3R3rZ0Sa6UXYT1DY8FpMPmVf1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEJsBZ8Znp99L9m2u+PqQznFDyIwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADoRFvT/kQ5wjCBeXXmBOB+n+HTZjTcNeCHd N8RbHHVtDbwYgwICyjETG8eCAV7LTphjlnZ6nw/AL4iVj/GsPArvynIH/um4lyWR mOZKrpSu6xmo01+AlUWTjPMhEP9t7bet0kC/T3iHecI8Sh2IaADW8oZ/hXx/iKy0 w8Vhf5wT6xraQzDQSlSC9EEsJ2OC+/dih7unS8Qg1VKAzLJw19m98YHfiaBa/gOG OlhkOaFq3DyMqqhNeXm+6QGnWv5mJ59aWqAl742fft1erxhi9XwS5jBly+wyJQxi 9LnnEPofj582aaa0x5AvKJeqZbdOHZR5nKPQanJYs0bIfeaPKmk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:12 2025 by rpki-client