This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: t129fDaEPp+7pGQRT5v4F67HfpXPqyu5MdJ9oUjWUoE= Subject key identifier: E0:B0:29:C6:66:7B:A2:F5:E4:2B:73:38:EC:D2:C0:4E:4C:76:A6:33 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 3380108E95823AAFC0CBD14269F5AC14BA550EC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01BA Signing time: Tue 09 Dec 2025 23:42:20 +0000 Manifest this update: Tue 09 Dec 2025 23:37:20 +0000 Manifest next update: Sat 13 Dec 2025 04:00:20 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: nNZ6CVEsQncsegM6oKgStbo3p4+yj2co0CnKQjJAPqY=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:80:10:8e:95:82:3a:af:c0:cb:d1:42:69:f5:ac:14:ba:55:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Dec 9 23:37:20 2025 GMT Not After : Dec 13 04:00:20 2025 GMT Subject: CN=E0B029C6667BA2F5E42B7338ECD2C04E4C76A633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:31:21:a6:2d:77:41:47:ba:09:6e:c4:d3: 3c:61:28:53:c1:19:cf:b4:e0:47:4d:54:26:65:48: 82:55:d3:bc:c9:73:6d:09:37:f9:1d:47:1f:b4:81: c7:33:ab:ad:06:19:a7:71:26:07:e5:97:6a:fc:f7: 1f:fb:1a:c6:26:d8:f7:a0:4d:47:67:dc:82:35:7d: 3a:9d:3e:f0:a9:58:c1:37:8c:2d:36:9b:cc:0a:5d: 64:50:3a:54:37:34:6a:d6:6a:f8:3e:1e:b0:d8:b3: 15:d8:10:ca:ba:ed:dc:2c:c3:eb:4d:24:06:cb:8f: 5b:41:a7:36:fa:1e:4d:f6:09:22:75:5a:15:a8:29: 91:7a:48:d6:1e:88:69:52:9e:df:af:be:1c:38:1c: c3:a0:e5:0b:5f:16:97:2d:a3:8b:e8:bb:d9:1a:20: 3b:ca:68:7e:2e:d4:81:dc:0f:59:24:69:44:fa:ac: 7f:1f:bc:ad:d5:3a:45:37:2e:2e:c0:8b:4d:b6:c4: dc:66:04:05:d3:1b:79:23:81:a1:e9:47:67:ca:e1: a5:29:60:a3:ef:54:44:ac:85:59:81:65:01:40:76: 01:06:f5:38:f3:82:0e:67:cd:11:74:fb:4c:ee:a6: a0:0f:ee:12:6e:d8:bf:23:33:d9:20:79:9a:7f:f2: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B0:29:C6:66:7B:A2:F5:E4:2B:73:38:EC:D2:C0:4E:4C:76:A6:33 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9a:61:16:01:b3:82:44:7c:74:55:87:ff:8a:c8:23:3c:b1: 2c:2c:7b:cd:3d:b1:30:46:1f:a4:38:9f:8e:a0:79:cf:fd:22: aa:30:6c:95:c8:89:2e:b7:43:58:97:c9:00:19:fe:c0:6f:c9: 32:ca:ba:8b:9e:dc:c9:4a:c2:e6:32:a8:f0:c7:46:b6:4e:9a: b3:15:0c:c2:ce:18:79:be:78:f7:a8:d6:1a:e8:cc:37:bc:63: 1d:ce:1c:6d:08:b8:f2:a6:11:09:13:10:28:4a:42:94:d6:79: 2e:c6:f3:39:e7:e7:33:d4:d3:1a:9c:03:ca:27:a3:39:57:fb: 0e:b1:4b:95:e2:8e:cd:2c:75:b6:e6:1c:08:22:ec:da:0d:64: 3a:1e:f0:dc:8b:9d:5e:74:06:7b:8a:11:33:f7:02:0b:9e:a7: e7:21:16:3d:00:c1:14:b2:7c:5e:77:1a:45:30:a0:fd:45:59: 01:f1:c9:f6:ef:58:72:56:4f:92:98:20:55:05:93:ca:c1:77: dc:a6:2b:2b:27:7b:e0:a5:83:79:42:1d:fb:c3:df:f7:01:76: 07:67:f7:43:bd:68:d5:a5:84:e9:3a:9d:03:e2:af:0c:b7:20: cc:1a:22:5b:0d:84:81:21:7c:ec:d6:b6:c8:e9:0f:f3:fc:13: 85:33:a8:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM4AQjpWCOq/Ay9FCafWsFLpVDsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTEyMDkyMzM3MjBaFw0yNTEyMTMwNDAwMjBaMDMxMTAvBgNV BAMTKEUwQjAyOUM2NjY3QkEyRjVFNDJCNzMzOEVDRDJDMDRFNEM3NkE2MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMAzEhpi13QUe6CW7E0zxhKFPB Gc+04EdNVCZlSIJV07zJc20JN/kdRx+0gcczq60GGadxJgfll2r89x/7GsYm2Peg TUdn3II1fTqdPvCpWME3jC02m8wKXWRQOlQ3NGrWavg+HrDYsxXYEMq67dwsw+tN JAbLj1tBpzb6Hk32CSJ1WhWoKZF6SNYeiGlSnt+vvhw4HMOg5QtfFpcto4vou9ka IDvKaH4u1IHcD1kkaUT6rH8fvK3VOkU3Li7Ai022xNxmBAXTG3kjgaHpR2fK4aUp YKPvVESshVmBZQFAdgEG9Tjzgg5nzRF0+0zupqAP7hJu2L8jM9kgeZp/8kpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4LApxmZ7ovXkK3M47NLATkx2pjMwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWaYRYBs4JEfHRVh/+KyCM8sSwse809sTBG H6Q4n46gec/9IqowbJXIiS63Q1iXyQAZ/sBvyTLKuoue3MlKwuYyqPDHRrZOmrMV DMLOGHm+ePeo1hrozDe8Yx3OHG0IuPKmEQkTEChKQpTWeS7G8znn5zPU0xqcA8on ozlX+w6xS5Xijs0sdbbmHAgi7NoNZDoe8NyLnV50BnuKETP3Aguep+chFj0AwRSy fF53GkUwoP1FWQHxyfbvWHJWT5KYIFUFk8rBd9ymKysne+Clg3lCHfvD3/cBdgdn 90O9aNWlhOk6nQPirwy3IMwaIlsNhIEhfOzWtsjpD/P8E4UzqPM= -----END CERTIFICATE-----Generated at Wed Dec 10 02:13:12 2025 by rpki-client