This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: me0NKypQlrKdviTWJoFrge0bV9L3PL3m7VXJX/qRUNY= Subject key identifier: 30:DD:C9:C7:F6:3E:2A:C3:CC:72:E8:07:0C:B3:2F:C6:D9:48:79:DE Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 31B408D54D74C6230DCED92AB4CDF4E7443658EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01FF Signing time: Thu 18 Dec 2025 14:11:04 +0000 Manifest this update: Thu 18 Dec 2025 14:06:04 +0000 Manifest next update: Sun 21 Dec 2025 22:54:04 +0000 Files and hashes: 1: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) 2: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) 3: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: wIT1Ozlft/JYR5ZNwtnnqEnmn+AIhmAgoektCJhza/A=) 4: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 5: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 22:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:b4:08:d5:4d:74:c6:23:0d:ce:d9:2a:b4:cd:f4:e7:44:36:58:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Dec 18 14:06:04 2025 GMT Not After : Dec 21 22:54:04 2025 GMT Subject: CN=30DDC9C7F63E2AC3CC72E8070CB32FC6D94879DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:cf:02:f4:af:78:21:ca:42:84:db:08:ae: f0:32:68:18:fa:d2:83:91:11:52:16:33:64:db:b6: 6f:90:4f:fa:d2:71:18:aa:d5:e2:ff:44:14:e9:27: f9:a9:5e:cf:2f:99:0b:8f:66:71:81:44:c8:82:91: 2c:fe:98:14:67:d3:90:39:9a:cb:96:b3:93:58:c3: c6:e4:38:3c:76:3c:ee:c1:97:d7:63:a0:3d:28:70: fd:48:4e:dd:97:19:36:97:4b:e6:61:b8:f7:a4:c5: 0e:52:36:41:89:71:01:00:bd:f4:2d:c9:73:86:ba: ea:b9:07:6b:54:51:a4:b9:43:74:03:e4:db:24:e3: f8:5a:76:19:85:7b:3d:fc:37:ce:ce:05:cc:8d:ea: f7:6a:7a:a7:f0:f2:5d:13:1d:a3:2e:5b:03:84:8c: 56:45:25:18:66:27:12:7d:d0:6a:62:48:fb:2b:52: e8:64:78:69:1a:58:af:70:0a:30:89:62:15:55:ee: 1a:b5:a8:e8:e1:d7:de:72:3c:7c:e8:af:f7:16:bd: 76:51:63:22:7d:71:5f:77:cd:c6:3c:b2:46:82:41: 71:bc:0e:c0:36:ec:a9:32:49:f7:97:d8:23:81:87: ce:bf:0e:96:03:64:8b:00:59:d3:7d:a9:ee:5c:2c: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DD:C9:C7:F6:3E:2A:C3:CC:72:E8:07:0C:B3:2F:C6:D9:48:79:DE X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f9:73:a0:5d:87:47:cd:7d:db:5d:5a:ee:06:0d:23:55:f0: 76:d5:96:75:51:f3:44:c9:dd:fc:1a:62:84:93:c1:44:a8:d6: 2a:9c:13:e7:6a:7c:e3:e2:a8:c9:d5:29:9e:3c:b1:ad:e7:cc: c3:f4:60:2b:ee:8c:f4:22:f5:1d:9f:15:da:0d:b8:f2:9d:a2: dc:8c:36:16:1f:8b:55:bc:0b:46:f3:40:1a:6e:d0:f7:65:a2: 88:9a:a5:63:90:8f:ea:6c:31:7e:a5:7e:b0:77:b7:f5:75:8a: e8:85:99:ce:91:e6:d7:c8:f3:d4:26:e1:f6:81:3a:42:2f:bd: 3c:22:3f:4c:3f:89:b6:b8:51:5d:0b:d3:a3:4a:09:93:19:50: 9d:aa:0e:9e:2d:ba:1c:eb:8a:65:7f:4f:b4:57:12:4b:d3:cc: 18:42:9d:9e:dd:46:8d:f3:4b:2a:a8:43:11:1d:81:1a:3b:4a: df:ba:12:d8:5f:b7:e9:1e:c1:94:0d:99:2d:14:d0:be:6a:a7: fb:7f:e4:91:ba:ff:be:84:66:3f:31:ec:72:51:94:9a:50:9d: fc:e2:3f:a9:91:dc:01:ad:df:10:a7:d0:9d:c8:5d:04:e3:eb: 0c:c7:d7:01:f0:5b:3e:ce:37:f6:4d:99:04:97:26:6a:b0:14: 06:15:09:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbQI1U10xiMNztkqtM3050Q2WO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTEyMTgxNDA2MDRaFw0yNTEyMjEyMjU0MDRaMDMxMTAvBgNV BAMTKDMwRERDOUM3RjYzRTJBQzNDQzcyRTgwNzBDQjMyRkM2RDk0ODc5REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFQs8C9K94IcpChNsIrvAyaBj6 0oOREVIWM2Tbtm+QT/rScRiq1eL/RBTpJ/mpXs8vmQuPZnGBRMiCkSz+mBRn05A5 msuWs5NYw8bkODx2PO7Bl9djoD0ocP1ITt2XGTaXS+ZhuPekxQ5SNkGJcQEAvfQt yXOGuuq5B2tUUaS5Q3QD5Nsk4/hadhmFez38N87OBcyN6vdqeqfw8l0THaMuWwOE jFZFJRhmJxJ90GpiSPsrUuhkeGkaWK9wCjCJYhVV7hq1qOjh195yPHzor/cWvXZR YyJ9cV93zcY8skaCQXG8DsA27KkySfeX2COBh86/DpYDZIsAWdN9qe5cLN3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMN3Jx/Y+KsPMcugHDLMvxtlIed4wHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL5c6Bdh0fNfdtdWu4GDSNV8HbVlnVR80TJ 3fwaYoSTwUSo1iqcE+dqfOPiqMnVKZ48sa3nzMP0YCvujPQi9R2fFdoNuPKdotyM NhYfi1W8C0bzQBpu0PdlooiapWOQj+psMX6lfrB3t/V1iuiFmc6R5tfI89Qm4faB OkIvvTwiP0w/iba4UV0L06NKCZMZUJ2qDp4tuhzrimV/T7RXEkvTzBhCnZ7dRo3z SyqoQxEdgRo7St+6Ethft+kewZQNmS0U0L5qp/t/5JG6/76EZj8x7HJRlJpQnfzi P6mR3AGt3xCn0J3IXQTj6wzH1wHwWz7ON/ZNmQSXJmqwFAYVCao= -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:58 2025 by rpki-client