This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: CNGTVg+LGZpy+r8jRCMQrqaDeh7pYYcHFMImEMtaw2M= Subject key identifier: 12:37:96:58:E5:5C:BB:0E:8F:83:B2:FB:A1:5D:44:2A:3C:F3:9A:69 Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 13768C6E8BE258851C01A3C28AC84706B7823C8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 018C Signing time: Tue 02 Dec 2025 16:22:18 +0000 Manifest this update: Tue 02 Dec 2025 16:17:18 +0000 Manifest next update: Fri 05 Dec 2025 17:06:18 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: 0DZEtRid7cZjGEUee/PU8BgeY+sIymQzozi8ssa3Lsg=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:76:8c:6e:8b:e2:58:85:1c:01:a3:c2:8a:c8:47:06:b7:82:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Dec 2 16:17:18 2025 GMT Not After : Dec 5 17:06:18 2025 GMT Subject: CN=12379658E55CBB0E8F83B2FBA15D442A3CF39A69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fe:90:e6:a3:13:11:f1:f5:e3:0e:a9:7d:e8: f8:32:a3:35:bb:62:dd:1e:2f:04:3d:96:54:0b:c6: c5:54:93:81:37:8f:44:e8:b1:d3:9e:93:d5:a5:87: ab:ac:a2:b4:cf:4f:b2:e5:dd:dc:5d:a9:3b:15:09: 44:48:33:c4:f9:71:45:9e:3f:d5:ea:31:16:d9:9c: 82:1f:15:71:eb:f6:2b:72:8c:7a:a8:96:89:12:b3: f3:34:da:47:62:8e:1b:20:84:e3:0c:74:bb:f0:0a: 82:69:ed:c7:6d:eb:a5:ed:bd:f5:93:91:8e:7e:36: 18:34:b5:d6:6d:98:9f:1b:61:c2:84:6f:8e:d0:f5: 1f:0c:b8:52:09:d3:4b:f0:b4:b7:19:e5:a0:d9:2a: 14:23:19:e7:7c:6b:b2:49:31:55:fb:63:cc:0b:73: a2:06:62:bf:73:db:99:04:1c:d7:49:e2:66:62:2f: ee:1b:ab:12:82:b6:0c:15:8a:21:6f:2e:c0:53:aa: 2c:bf:5d:9f:e2:c6:6c:d4:5b:cc:f3:2e:54:4a:ee: ae:db:bd:69:ed:53:d6:d6:3c:ee:57:d7:7e:fe:1c: 81:a4:a3:be:0a:55:05:ff:b3:be:7c:21:e0:a2:32: 05:ad:6a:8d:47:1d:f6:8c:46:d4:5e:1b:23:db:ad: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:96:58:E5:5C:BB:0E:8F:83:B2:FB:A1:5D:44:2A:3C:F3:9A:69 X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:7c:3b:82:35:38:59:e5:fa:7e:c8:ed:dc:21:54:79:a7:8e: ff:fc:91:05:b1:03:9a:75:a9:14:51:01:aa:11:99:cf:23:ad: ce:96:1f:96:14:57:01:6b:6e:85:cf:e8:f4:bf:cb:1d:37:38: 3a:42:1b:80:66:07:eb:e4:f1:48:48:a3:85:d0:e0:5e:ed:94: e7:f8:aa:fe:9e:1d:98:50:0c:7a:58:01:c3:db:03:21:49:f1: 0b:f1:d8:2d:39:4c:6e:f7:a7:d8:9f:f9:3f:9b:8a:29:4c:3e: d0:cf:06:e4:bc:db:11:81:90:9e:f6:67:7e:8e:f3:6c:b7:43: 4a:69:ae:21:10:41:61:59:39:40:ad:01:8d:12:fe:1f:4d:f0: 4c:7d:0c:a0:dc:4e:02:64:a7:64:08:bf:0d:72:37:f5:02:51: a2:a6:4f:ab:22:36:ec:8b:70:fc:d7:b0:af:96:29:9b:f2:e4: 74:18:64:73:f2:25:00:f5:dd:00:c3:12:03:35:20:4c:43:e8: d2:ce:e1:5f:c0:01:e5:d3:64:6e:ac:3e:3f:fa:fd:53:06:8a: 5f:76:ed:2c:4d:25:c9:7c:73:6a:d3:be:45:2c:6f:6f:d9:40: 51:5c:5c:d4:f5:5d:73:d2:f7:d9:3f:3e:db:84:ea:d6:b0:41: 2e:91:93:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE3aMboviWIUcAaPCishHBreCPIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTEyMDIxNjE3MThaFw0yNTEyMDUxNzA2MThaMDMxMTAvBgNV BAMTKDEyMzc5NjU4RTU1Q0JCMEU4RjgzQjJGQkExNUQ0NDJBM0NGMzlBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/pDmoxMR8fXjDql96PgyozW7 Yt0eLwQ9llQLxsVUk4E3j0TosdOek9Wlh6usorTPT7Ll3dxdqTsVCURIM8T5cUWe P9XqMRbZnIIfFXHr9ityjHqolokSs/M02kdijhsghOMMdLvwCoJp7cdt66XtvfWT kY5+Nhg0tdZtmJ8bYcKEb47Q9R8MuFIJ00vwtLcZ5aDZKhQjGed8a7JJMVX7Y8wL c6IGYr9z25kEHNdJ4mZiL+4bqxKCtgwViiFvLsBTqiy/XZ/ixmzUW8zzLlRK7q7b vWntU9bWPO5X137+HIGko74KVQX/s758IeCiMgWtao1HHfaMRtReGyPbrYMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEjeWWOVcuw6Pg7L7oV1EKjzzmmkwHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM18O4I1OFnl+n7I7dwhVHmnjv/8kQWxA5p1 qRRRAaoRmc8jrc6WH5YUVwFrboXP6PS/yx03ODpCG4BmB+vk8UhIo4XQ4F7tlOf4 qv6eHZhQDHpYAcPbAyFJ8Qvx2C05TG73p9if+T+biilMPtDPBuS82xGBkJ72Z36O 82y3Q0ppriEQQWFZOUCtAY0S/h9N8Ex9DKDcTgJkp2QIvw1yN/UCUaKmT6siNuyL cPzXsK+WKZvy5HQYZHPyJQD13QDDEgM1IExD6NLO4V/AAeXTZG6sPj/6/VMGil92 7SxNJcl8c2rTvkUsb2/ZQFFcXNT1XXPS99k/PtuE6tawQS6Rk/o= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:42 2025 by rpki-client