This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft File: 8B7E0099F26BEEE90826C9B0E424575BDE128403.mft (raw, json) Hash identifier: tHa04wNDWIwUPt5oaso6vlLlw3uP7VAvOeh27/3ub00= Subject key identifier: 98:34:9C:44:FB:DE:77:9A:DC:80:A6:DD:96:C9:E7:BB:56:32:F8:58 Authority key identifier: 8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 Certificate issuer: /CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Certificate serial: 5292514B8B85C20CA021D564A92ED674E1F1FBDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft Manifest number: 02B5 Signing time: Fri 05 Dec 2025 01:12:10 +0000 Manifest this update: Fri 05 Dec 2025 01:07:10 +0000 Manifest next update: Mon 08 Dec 2025 03:05:10 +0000 Files and hashes: 1: 3130332e3137392e38362e302f32332d3234203d3e20313430333839.roa (hash: E6T8Gt5EtL567pGgeSiX6DPJMeUcOvm0iW+qF8Vx1Vo=) 2: 8B7E0099F26BEEE90826C9B0E424575BDE128403.crl (hash: foJfoXXBXh2KwiGsY4CbT6q36/Azu/kGnahkiYRovlw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 03:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:92:51:4b:8b:85:c2:0c:a0:21:d5:64:a9:2e:d6:74:e1:f1:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7E0099F26BEEE90826C9B0E424575BDE128403 Validity Not Before: Dec 5 01:07:10 2025 GMT Not After : Dec 8 03:05:10 2025 GMT Subject: CN=98349C44FBDE779ADC80A6DD96C9E7BB5632F858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:c4:8f:e4:69:5a:e5:00:61:3c:3a:85:df: 2f:4d:ee:5f:92:b8:74:d7:8b:df:2d:bd:cf:55:0d: 9e:ad:d3:8c:a9:5a:dc:81:82:14:a0:5d:c7:97:89: 48:8b:3c:eb:e5:e7:f4:35:eb:ad:3b:9b:f4:18:32: 80:6b:95:86:7a:e7:03:45:3c:10:06:f2:d8:c2:47: e1:f0:43:ab:62:ca:30:5e:95:fd:4d:c9:be:dc:5b: 21:ab:5f:72:20:3e:b4:c3:f3:f9:5a:34:7d:ff:61: b6:bd:43:56:e0:30:32:66:3e:74:dd:ce:54:a8:9a: ee:18:8e:51:6a:e2:67:b2:99:46:b8:2e:a4:d2:1b: c8:8e:df:6a:d2:54:36:0e:d1:a4:bc:1d:9d:d8:e5: 5f:f3:0d:38:d9:e4:fb:05:fb:d5:44:a2:16:39:d6: d4:7f:22:4d:59:e7:69:57:59:e1:77:3c:93:51:cd: b4:d3:56:e0:50:81:f8:bc:b9:95:61:27:f1:4d:1f: 19:9d:6a:80:4c:0b:be:96:61:80:76:8b:0e:3f:e9: 19:2a:eb:c5:b9:34:76:18:9d:6c:d3:93:27:0d:b2: 01:69:7d:c7:99:0c:31:6a:23:76:52:16:32:3f:22: de:af:c9:6b:00:04:82:7e:e3:19:1c:74:c2:d4:05: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:34:9C:44:FB:DE:77:9A:DC:80:A6:DD:96:C9:E7:BB:56:32:F8:58 X509v3 Authority Key Identifier: keyid:8B:7E:00:99:F2:6B:EE:E9:08:26:C9:B0:E4:24:57:5B:DE:12:84:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7E0099F26BEEE90826C9B0E424575BDE128403.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a88897-c387-4735-acd8-1d1c53cde264/0/8B7E0099F26BEEE90826C9B0E424575BDE128403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:44:63:4c:d6:aa:63:20:fa:34:b9:69:27:74:75:66:5e:41: e7:6f:b3:59:37:f2:b1:28:fb:98:32:0d:a7:60:99:26:69:7b: 48:f7:98:18:5d:99:2b:fc:e3:07:30:e7:e0:a6:35:83:fd:1b: 34:48:ec:5c:16:35:c7:7c:e2:5d:eb:f2:48:e7:39:2e:fb:3a: 21:91:7d:ab:02:2f:04:ad:c1:59:0d:94:ef:0e:b9:53:c0:43: 27:fb:db:c7:55:30:a4:a9:e4:40:f5:1b:ca:bc:2b:c4:63:55: 82:71:3e:08:ee:d4:c2:cb:fe:45:28:ee:6f:bb:fc:c3:9b:57: a1:98:13:74:81:b0:58:50:69:c0:a8:8f:ae:1a:48:ea:ad:45: 79:fe:ef:8b:ea:39:35:4d:8b:91:14:79:78:36:a9:86:85:11: 8c:f4:76:e3:a8:f7:d6:20:93:86:1c:37:f6:e2:ce:26:ee:bc: de:d5:7d:50:d7:65:9a:24:3b:b8:0d:3e:40:f5:83:51:a1:ac: 10:0c:ea:f4:85:90:9c:2e:a5:ef:84:ea:35:21:68:f4:6e:d2: 53:36:66:08:01:56:96:0c:ea:4d:fd:77:a6:bd:52:0d:a2:43: 32:03:0c:f2:ba:59:89:7d:dc:66:ae:7e:32:64:d1:69:c2:57: f8:aa:e5:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpJRS4uFwgygIdVkqS7WdOHx+9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJE RTEyODQwMzAeFw0yNTEyMDUwMTA3MTBaFw0yNTEyMDgwMzA1MTBaMDMxMTAvBgNV BAMTKDk4MzQ5QzQ0RkJERTc3OUFEQzgwQTZERDk2QzlFN0JCNTYzMkY4NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMcSP5Gla5QBhPDqF3y9N7l+S uHTXi98tvc9VDZ6t04ypWtyBghSgXceXiUiLPOvl5/Q16607m/QYMoBrlYZ65wNF PBAG8tjCR+HwQ6tiyjBelf1Nyb7cWyGrX3IgPrTD8/laNH3/Yba9Q1bgMDJmPnTd zlSomu4YjlFq4meymUa4LqTSG8iO32rSVDYO0aS8HZ3Y5V/zDTjZ5PsF+9VEohY5 1tR/Ik1Z52lXWeF3PJNRzbTTVuBQgfi8uZVhJ/FNHxmdaoBMC76WYYB2iw4/6Rkq 68W5NHYYnWzTkycNsgFpfceZDDFqI3ZSFjI/It6vyWsABIJ+4xkcdMLUBSAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmDScRPved5rcgKbdlsnnu1Yy+FgwHwYDVR0j BBgwFoAUi34AmfJr7ukIJsmw5CRXW94ShAMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE4ODg5Ny1jMzg3LTQ3MzUtYWNkOC0xZDFjNTNjZGUyNjQvMC84QjdFMDA5OUYy NkJFRUU5MDgyNkM5QjBFNDI0NTc1QkRFMTI4NDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3NUJERTEy ODQwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhODg4OTctYzM4Ny00NzM1LWFj ZDgtMWQxYzUzY2RlMjY0LzAvOEI3RTAwOTlGMjZCRUVFOTA4MjZDOUIwRTQyNDU3 NUJERTEyODQwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1EY0zWqmMg+jS5aSd0dWZeQedvs1k38rEo +5gyDadgmSZpe0j3mBhdmSv84wcw5+CmNYP9GzRI7FwWNcd84l3r8kjnOS77OiGR fasCLwStwVkNlO8OuVPAQyf728dVMKSp5ED1G8q8K8RjVYJxPgju1MLL/kUo7m+7 /MObV6GYE3SBsFhQacCoj64aSOqtRXn+74vqOTVNi5EUeXg2qYaFEYz0duOo99Yg k4YcN/bizibuvN7VfVDXZZokO7gNPkD1g1GhrBAM6vSFkJwupe+E6jUhaPRu0lM2 ZggBVpYM6k39d6a9Ug2iQzIDDPK6WYl93GaufjJk0WnCV/iq5eM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:08 2025 by rpki-client