This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: Vp/8swOEc4fEe4A8Mpb3G4x/G3Nkou1ZvSRKofaLaio= Subject key identifier: 10:3D:7E:91:68:DF:D8:74:46:23:2C:2C:9C:F3:24:FB:16:13:2A:A0 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 6E2DC04B1FA9273D6B1185989DD3574F620D2E00 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 0529 Signing time: Wed 03 Dec 2025 09:52:14 +0000 Manifest this update: Wed 03 Dec 2025 09:47:14 +0000 Manifest next update: Sat 06 Dec 2025 17:39:14 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: 9ppd5dWECN1JL2LbM4sFOFQNdZdLjWwaBBkCU03J1+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2d:c0:4b:1f:a9:27:3d:6b:11:85:98:9d:d3:57:4f:62:0d:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Dec 3 09:47:14 2025 GMT Not After : Dec 6 17:39:14 2025 GMT Subject: CN=103D7E9168DFD87446232C2C9CF324FB16132AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:b5:a4:e4:b1:f3:8c:20:9e:31:26:a9:ed: ee:12:7c:29:89:c1:03:61:62:ce:21:64:18:09:a4: fd:03:38:a2:e1:7c:15:a5:d5:4e:f3:35:55:41:a6: 77:af:01:9b:8b:01:35:ee:d0:0a:3b:9c:d8:a9:f8: ed:54:25:c1:d1:88:a9:03:79:94:37:17:8d:71:7a: e9:1e:6b:c9:cd:ed:8e:fd:5d:7f:06:b9:d1:d3:c9: d1:5e:f4:22:27:dd:6a:d9:0f:3e:4f:94:5c:21:65: d0:5f:79:0d:77:96:8d:5a:cf:a3:5e:21:c7:3b:03: c0:dc:e5:43:c7:cf:b3:da:ea:54:3f:b2:2e:fb:76: e7:99:80:cc:73:52:21:16:3b:f6:8a:e5:e7:9a:0b: 41:d2:08:94:22:b8:af:e7:2d:91:bd:85:1c:ee:43: 73:30:ca:92:24:10:61:0d:fe:02:99:1d:4c:35:10: 6a:2c:49:89:66:eb:9b:cf:4d:8a:3a:c3:e1:6c:43: e0:27:64:d0:fb:50:92:d7:26:c6:d4:09:e7:04:de: d5:ae:97:69:2f:6b:db:7a:db:62:93:ed:b6:59:19: c7:58:b3:34:92:3b:b8:b8:78:ae:a5:2f:03:fe:13: fb:ff:26:1d:11:5d:cb:ed:82:09:49:e8:36:f2:b6: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3D:7E:91:68:DF:D8:74:46:23:2C:2C:9C:F3:24:FB:16:13:2A:A0 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1f:89:51:fe:df:01:2f:95:5b:21:fa:56:48:37:9b:66:0b: 77:1d:b4:26:56:09:6e:b6:d3:5f:38:2e:47:f7:07:ce:60:78: 49:55:b1:59:60:71:1c:78:01:dd:99:f3:ca:96:60:3c:bf:a1: 12:94:01:ef:86:b5:51:48:7c:80:1b:44:fb:4b:fa:77:21:b3: c6:42:f7:62:2e:00:4d:d2:03:6e:f5:4f:01:06:e0:63:f7:bc: 2d:8d:12:7e:7e:4e:83:16:cb:37:4c:fb:4b:f0:ed:1c:76:42: 19:bd:17:56:0d:06:cb:9d:8e:06:f5:59:81:07:45:69:21:c2: a3:b8:b0:cf:ad:b9:c9:50:fb:05:1c:6b:3e:97:0b:99:04:c8: 6a:b0:31:cf:99:b7:4e:b7:02:e8:1d:e2:78:7c:bc:d9:90:3d: 6d:a4:e2:26:5c:b9:d2:57:b6:fb:73:cc:fc:ee:27:33:20:50: d6:46:09:5f:ae:47:25:06:7b:0d:13:66:96:94:46:a0:df:79: 34:d1:51:d2:62:d4:ad:6c:b8:0e:b4:76:f6:a9:36:1d:64:17: c9:e8:94:43:78:fe:9e:bf:23:6f:21:fa:23:b0:02:96:37:e7: 1d:b9:9c:7e:ad:e6:62:23:6b:b1:f1:f0:1b:05:1d:16:76:cb: 5d:65:52:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbi3ASx+pJz1rEYWYndNXT2INLgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTEyMDMwOTQ3MTRaFw0yNTEyMDYxNzM5MTRaMDMxMTAvBgNV BAMTKDEwM0Q3RTkxNjhERkQ4NzQ0NjIzMkMyQzlDRjMyNEZCMTYxMzJBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZbWk5LHzjCCeMSap7e4SfCmJ wQNhYs4hZBgJpP0DOKLhfBWl1U7zNVVBpnevAZuLATXu0Ao7nNip+O1UJcHRiKkD eZQ3F41xeukea8nN7Y79XX8GudHTydFe9CIn3WrZDz5PlFwhZdBfeQ13lo1az6Ne Icc7A8Dc5UPHz7Pa6lQ/si77dueZgMxzUiEWO/aK5eeaC0HSCJQiuK/nLZG9hRzu Q3MwypIkEGEN/gKZHUw1EGosSYlm65vPTYo6w+FsQ+AnZND7UJLXJsbUCecE3tWu l2kva9t622KT7bZZGcdYszSSO7i4eK6lLwP+E/v/Jh0RXcvtgglJ6DbytsRZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUED1+kWjf2HRGIywsnPMk+xYTKqAwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUfiVH+3wEvlVsh+lZIN5tmC3cdtCZWCW62 0184Lkf3B85geElVsVlgcRx4Ad2Z88qWYDy/oRKUAe+GtVFIfIAbRPtL+nchs8ZC 92IuAE3SA271TwEG4GP3vC2NEn5+ToMWyzdM+0vw7Rx2Qhm9F1YNBsudjgb1WYEH RWkhwqO4sM+tuclQ+wUcaz6XC5kEyGqwMc+Zt063Augd4nh8vNmQPW2k4iZcudJX tvtzzPzuJzMgUNZGCV+uRyUGew0TZpaURqDfeTTRUdJi1K1suA60dvapNh1kF8no lEN4/p6/I28h+iOwApY35x25nH6t5mIja7Hx8BsFHRZ2y11lUtY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:36 2025 by rpki-client