This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: 01SlvqMi6eidLJkRQvqgMSRaNPhSIMVVHaerO+Jn9SM= Subject key identifier: 01:86:7B:59:2A:3D:66:0C:AA:EC:30:7D:DB:05:AB:02:07:FC:76:19 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 55ADC4718431C7903F6ED13A0DDA7F2E04C29280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 022C Signing time: Tue 02 Dec 2025 18:52:11 +0000 Manifest this update: Tue 02 Dec 2025 18:47:11 +0000 Manifest next update: Sat 06 Dec 2025 03:47:11 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: 5xQk29waAPsvkplj4hzmZQG50mTSQ+z5XDnW4kGrM7M=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 03:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ad:c4:71:84:31:c7:90:3f:6e:d1:3a:0d:da:7f:2e:04:c2:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Dec 2 18:47:11 2025 GMT Not After : Dec 6 03:47:11 2025 GMT Subject: CN=01867B592A3D660CAAEC307DDB05AB0207FC7619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:a7:6b:77:f9:bd:33:c6:2e:4b:c4:1b:21: 81:04:81:1f:bf:15:c6:35:13:48:7d:08:c1:47:5c: e3:36:ea:aa:6f:be:17:6c:74:8e:73:cd:81:11:87: 55:9e:09:de:3a:35:1a:4c:58:a8:c2:d5:9c:df:96: 62:e8:00:db:1e:f2:1e:cf:30:af:6d:1e:38:25:74: 5e:5a:9c:50:3b:1c:c0:41:f5:5c:a4:6d:41:88:ff: 08:ae:72:99:b1:fa:8b:23:35:84:86:a7:4d:b0:b6: 70:c3:cb:e3:9b:28:2d:f9:8f:31:9a:0e:4d:ec:36: 47:72:b8:5c:0c:46:97:43:2a:a2:43:12:e1:24:b3: cf:d4:f5:ef:bc:81:eb:52:59:7d:9b:7b:09:e2:6b: f2:9a:08:6a:53:ca:64:10:95:ff:9d:6b:4a:33:11: b8:0a:57:f0:bc:83:a4:6b:44:7b:db:89:55:21:2c: 66:f4:24:a7:e6:b0:0f:d0:55:e4:7e:d2:a6:61:25: 4e:a2:ee:16:71:e3:8e:2e:ab:d2:c0:9f:70:7a:8a: 65:fd:a9:d2:6e:3f:b3:54:08:30:f3:fc:b3:fd:58: cb:be:56:ae:c5:c1:1b:db:af:e8:83:80:5e:6a:ac: af:4a:ca:fd:05:fd:11:c8:bd:e4:b1:c2:7c:e5:cf: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:86:7B:59:2A:3D:66:0C:AA:EC:30:7D:DB:05:AB:02:07:FC:76:19 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bf:cc:46:77:fb:02:be:f9:83:be:3e:ae:76:8b:ab:35:9a: 4e:8e:d7:ba:bc:26:1f:f0:65:d2:69:8e:25:2b:c6:73:64:72: 4e:3e:c4:f9:8b:c8:a1:f2:d1:a5:d9:c7:61:ca:05:fa:86:4e: de:53:fc:32:40:ec:49:89:6b:84:f3:7f:32:ee:7c:50:48:14: df:28:75:a6:07:91:1f:89:fc:83:cf:ff:7b:ac:a8:ed:2b:02: 1c:83:02:9e:aa:c4:28:db:79:69:ec:25:e2:79:c4:26:8f:32: 5f:90:34:20:7b:b6:8f:9f:e7:d3:09:a3:ec:7c:9f:a7:e0:3b: 32:11:4f:96:60:39:16:59:0c:73:b0:8b:43:11:1b:5b:21:5b: 81:d6:17:fb:5a:09:bb:f6:f4:c2:64:f0:41:bb:3e:66:0c:87: b4:6b:b5:20:19:3f:5b:17:a6:70:28:5b:a5:26:64:95:d0:c8: 47:41:94:9d:62:cb:c2:63:ae:59:a9:77:86:73:ee:f2:d6:f5: d6:3d:68:18:72:6b:0d:2c:85:9a:6a:2a:b0:cc:c4:33:54:cd: ef:22:d0:80:45:b9:ef:38:b3:bd:07:18:fc:ba:aa:3b:fd:07: 7d:06:8e:8c:66:b0:23:6c:b0:d7:68:1a:76:a3:d1:24:6d:c4: 8f:55:48:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVa3EcYQxx5A/btE6Ddp/LgTCkoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTEyMDIxODQ3MTFaFw0yNTEyMDYwMzQ3MTFaMDMxMTAvBgNV BAMTKDAxODY3QjU5MkEzRDY2MENBQUVDMzA3RERCMDVBQjAyMDdGQzc2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYoadrd/m9M8YuS8QbIYEEgR+/ FcY1E0h9CMFHXOM26qpvvhdsdI5zzYERh1WeCd46NRpMWKjC1ZzflmLoANse8h7P MK9tHjgldF5anFA7HMBB9VykbUGI/wiucpmx+osjNYSGp02wtnDDy+ObKC35jzGa Dk3sNkdyuFwMRpdDKqJDEuEks8/U9e+8getSWX2bewnia/KaCGpTymQQlf+da0oz EbgKV/C8g6RrRHvbiVUhLGb0JKfmsA/QVeR+0qZhJU6i7hZx444uq9LAn3B6imX9 qdJuP7NUCDDz/LP9WMu+Vq7FwRvbr+iDgF5qrK9Kyv0F/RHIveSxwnzlz8eDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAYZ7WSo9Zgyq7DB92wWrAgf8dhkwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy/zEZ3+wK++YO+Pq52i6s1mk6O17q8Jh/w ZdJpjiUrxnNkck4+xPmLyKHy0aXZx2HKBfqGTt5T/DJA7EmJa4TzfzLufFBIFN8o daYHkR+J/IPP/3usqO0rAhyDAp6qxCjbeWnsJeJ5xCaPMl+QNCB7to+f59MJo+x8 n6fgOzIRT5ZgORZZDHOwi0MRG1shW4HWF/taCbv29MJk8EG7PmYMh7RrtSAZP1sX pnAoW6UmZJXQyEdBlJ1iy8Jjrlmpd4Zz7vLW9dY9aBhyaw0shZpqKrDMxDNUze8i 0IBFue84s70HGPy6qjv9B30GjoxmsCNssNdoGnaj0SRtxI9VSJY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:45 2025 by rpki-client