This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: 376Z9rPKj5/VOjlFr/QlWKAq/ddWQKBHgJpyr6HK/V0= Subject key identifier: 7E:74:83:74:DF:BF:C0:2A:40:2C:C8:9A:92:B4:AB:E5:08:7A:63:A5 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 7F27F82E5728FE7744742DB6E08C9314B046A3D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: F8 Signing time: Mon 01 Dec 2025 17:51:59 +0000 Manifest this update: Mon 01 Dec 2025 17:46:59 +0000 Manifest next update: Thu 04 Dec 2025 22:22:59 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: 0OzPOx0WdQxFUj9r+O782PTqiz9ZJY181eu8QW2rloc=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 22:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:27:f8:2e:57:28:fe:77:44:74:2d:b6:e0:8c:93:14:b0:46:a3:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Dec 1 17:46:59 2025 GMT Not After : Dec 4 22:22:59 2025 GMT Subject: CN=7E748374DFBFC02A402CC89A92B4ABE5087A63A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:00:db:a0:6f:63:5d:c7:2a:e9:d0:6f:16: 07:18:89:3c:60:49:30:b2:1a:7d:20:cf:10:0e:4c: 84:f8:2a:0a:4a:32:86:1d:ef:6b:25:64:b5:9a:b6: 46:20:1b:2d:d5:e5:98:ae:e3:b6:74:77:90:5c:0f: 18:97:6f:5d:1c:9a:b5:8d:b8:9b:9e:9c:7a:02:0e: bc:00:13:dc:0f:e9:da:b2:4d:af:07:6b:9c:f4:f9: 34:cf:00:ae:f6:e3:31:ff:96:ef:f8:a9:54:f8:fc: ad:4c:00:05:b1:09:59:39:2e:26:f5:ad:f0:4e:d8: 4c:b8:27:81:4e:82:20:9a:14:55:83:1e:7f:02:80: db:b4:c1:20:1e:16:ee:9d:2b:7a:49:69:d4:c0:f8: 9b:02:c0:e8:cb:cf:31:d9:30:e7:a0:b5:2a:4b:5d: 95:1b:bf:9c:e5:1f:a1:1c:3b:a6:71:42:88:c9:5f: 24:b8:ab:8e:8b:84:f6:39:0f:b9:ba:e7:99:c7:4d: d1:ab:4a:9c:27:49:64:d2:27:51:1e:26:1a:4f:b9: 05:ec:90:fd:9b:19:8f:dc:9c:dc:d3:9b:18:6b:a6: f6:36:56:5d:5b:59:e0:a1:f8:bf:be:47:1b:d8:4b: 77:df:a2:ab:a1:be:4a:fb:e6:36:46:c4:e6:05:c5: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:74:83:74:DF:BF:C0:2A:40:2C:C8:9A:92:B4:AB:E5:08:7A:63:A5 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:1c:fe:a3:71:03:1d:14:cb:58:da:38:26:e5:7a:f4:2d:da: 07:6e:98:0f:d7:3a:ce:3d:2b:b9:a2:71:ab:39:f5:32:bf:80: 13:ed:21:5a:79:aa:9a:ff:81:bb:3b:c8:e4:46:eb:bf:e3:6c: d4:9b:3c:d3:a0:50:a8:60:fa:5b:09:71:61:70:c7:5c:06:1a: 8a:bc:3a:ad:a9:a6:6a:fb:26:fe:42:c7:a1:cf:0c:d8:1f:cf: 50:eb:61:2e:0f:37:eb:89:f9:d0:01:fb:fd:81:8b:04:c4:67: 4c:9a:81:e5:57:cb:3c:f1:08:f6:a4:00:1b:ea:74:e1:2f:05: 8b:50:f5:76:f8:e6:90:f0:89:79:43:b9:61:55:07:91:d6:ca: a6:d0:32:a4:f6:13:0f:9d:7f:8d:90:a3:7b:81:13:78:f9:75: 91:84:cd:33:01:fd:51:a1:50:ee:e3:57:f1:73:a6:7a:cc:b8: 26:e4:ea:34:02:9f:eb:52:de:c0:79:09:ba:fa:35:83:0d:5b: 53:b0:fd:18:4d:60:f3:a9:8d:76:a1:19:17:a6:cc:42:2d:98: 82:cc:48:ef:94:d3:a1:98:06:a8:8a:ae:31:20:9d:5a:34:87: 2b:c1:32:62:5f:1b:4a:dc:3b:ba:1d:5f:f7:2d:b2:d2:d7:d4: 84:de:43:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfyf4Llco/ndEdC224IyTFLBGo9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTEyMDExNzQ2NTlaFw0yNTEyMDQyMjIyNTlaMDMxMTAvBgNV BAMTKDdFNzQ4Mzc0REZCRkMwMkE0MDJDQzg5QTkyQjRBQkU1MDg3QTYzQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6PwDboG9jXccq6dBvFgcYiTxg STCyGn0gzxAOTIT4KgpKMoYd72slZLWatkYgGy3V5Ziu47Z0d5BcDxiXb10cmrWN uJuenHoCDrwAE9wP6dqyTa8Ha5z0+TTPAK724zH/lu/4qVT4/K1MAAWxCVk5Lib1 rfBO2Ey4J4FOgiCaFFWDHn8CgNu0wSAeFu6dK3pJadTA+JsCwOjLzzHZMOegtSpL XZUbv5zlH6EcO6ZxQojJXyS4q46LhPY5D7m655nHTdGrSpwnSWTSJ1EeJhpPuQXs kP2bGY/cnNzTmxhrpvY2Vl1bWeCh+L++RxvYS3ffoquhvkr75jZGxOYFxat7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnSDdN+/wCpALMiakrSr5Qh6Y6UwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEc/qNxAx0Uy1jaOCblevQt2gdumA/XOs49 K7micas59TK/gBPtIVp5qpr/gbs7yORG67/jbNSbPNOgUKhg+lsJcWFwx1wGGoq8 Oq2ppmr7Jv5Cx6HPDNgfz1DrYS4PN+uJ+dAB+/2BiwTEZ0yageVXyzzxCPakABvq dOEvBYtQ9Xb45pDwiXlDuWFVB5HWyqbQMqT2Ew+df42Qo3uBE3j5dZGEzTMB/VGh UO7jV/FzpnrMuCbk6jQCn+tS3sB5Cbr6NYMNW1Ow/RhNYPOpjXahGRemzEItmILM SO+U06GYBqiKrjEgnVo0hyvBMmJfG0rcO7odX/ctstLX1ITeQzc= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:52 2025 by rpki-client