This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft File: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft (raw, json) Hash identifier: tfnuX91PtdVDAtcL5AeJPdX8XN2POz65hbIv/RSjY4s= Subject key identifier: 6C:9A:65:82:04:44:8F:D8:9C:A8:1C:52:7F:F6:97:50:0A:82:D5:9F Authority key identifier: 8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 Certificate issuer: /CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Certificate serial: 596EC3789D03DC58724B412431BEB0F113A04AA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft Manifest number: 0530 Signing time: Sat 06 Dec 2025 03:32:18 +0000 Manifest this update: Sat 06 Dec 2025 03:27:18 +0000 Manifest next update: Tue 09 Dec 2025 06:08:18 +0000 Files and hashes: 1: 8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl (hash: y5yGqFP02FNi2NTzJa6TrzQH5WqghIiQcCTOj1zHeDk=) 2: 34332e3232392e32302e302f32322d3234203d3e203233393439.roa (hash: eFCW4mBhrgv32rd+aPVfExuT3QEaHahKTCkeKrhzQUs=) 3: 323430313a653438303a3a2f33322d3438203d3e203233393439.roa (hash: q0Z2WqXpQvlzVZIU6Q59ptVgRkR649YYCAjkMQ1tqcE=) 4: 3130332e32342e3134382e302f32322d3234203d3e203233393439.roa (hash: ZdZBTzxEvF0Eo40CSK2hJ56qvhPrglPp9cbPLo54JU8=) 5: 3230322e3135302e3132382e302f31392d3234203d3e203233393439.roa (hash: IcMuwwFWI9N+s2xXptufPfoLzyxZbJESlpNOp3hNLjk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:08:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6e:c3:78:9d:03:dc:58:72:4b:41:24:31:be:b0:f1:13:a0:4a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8FB177AE83526D713C1240D5CEFAF73844F7F4E5 Validity Not Before: Dec 6 03:27:18 2025 GMT Not After : Dec 9 06:08:18 2025 GMT Subject: CN=6C9A658204448FD89CA81C527FF697500A82D59F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:53:88:29:38:a8:8f:b9:f4:67:48:76:95:7e: 27:94:f3:c0:73:eb:ac:9d:0d:e2:d2:d1:6d:8b:14: bd:d3:24:46:33:5e:64:36:d9:5d:be:a1:d0:04:78: 5c:e7:21:1a:8f:28:fe:43:4c:5f:25:64:af:11:13: 11:fc:73:e4:f3:43:e6:da:05:4e:7e:38:ca:24:53: 65:57:8b:b5:75:f3:bc:72:b7:fb:08:29:99:27:99: 4f:21:26:e2:10:61:80:6c:ca:96:ab:6f:c5:e8:ad: e8:2e:28:c6:c6:2c:4f:6e:c5:cc:b2:02:4d:d5:0b: 3e:22:99:38:c1:a3:0b:03:3c:3f:a0:58:5f:f0:42: f6:5b:c6:cd:f4:58:3e:9f:69:29:2d:ec:e0:79:b5: 94:48:1e:23:c3:96:75:ad:82:10:41:58:7c:bb:3f: c5:f0:22:70:07:95:a1:57:f0:db:4f:5b:ed:54:74: f5:e7:64:39:de:3c:af:ba:3a:fc:3e:0b:b9:ff:de: 51:2e:15:65:3a:ee:09:e8:3e:11:54:84:8b:a5:55: 0a:21:57:0e:3e:19:50:67:7f:7a:f7:60:78:a8:43: ec:e3:63:b5:ce:d7:0a:3c:85:e0:56:7a:3d:3c:d3: 60:cb:fe:9d:1c:7e:45:a7:18:08:e7:2a:5a:0f:1c: b5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9A:65:82:04:44:8F:D8:9C:A8:1C:52:7F:F6:97:50:0A:82:D5:9F X509v3 Authority Key Identifier: keyid:8F:B1:77:AE:83:52:6D:71:3C:12:40:D5:CE:FA:F7:38:44:F7:F4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2b69822c-2e22-48be-8ba2-634f582c2ecb/0/8FB177AE83526D713C1240D5CEFAF73844F7F4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:cd:02:c0:31:b9:3b:77:dc:aa:da:e2:8a:18:72:a9:af:91: a7:5d:f3:2a:85:0d:87:30:d9:6b:87:92:cf:5e:c4:d9:94:9c: 97:af:9d:39:54:bd:4e:3f:67:14:0a:d6:cd:2c:90:bd:cd:7b: 29:59:af:a6:35:cf:3f:71:a8:27:9d:66:ea:9d:5f:ac:a5:57: ae:f3:d1:0e:e8:f8:3c:18:0d:1c:7e:a6:28:bf:96:8e:27:9f: da:1e:c9:06:1e:22:b7:4b:61:60:df:83:37:b6:a7:f3:2f:b5: dd:2a:9f:19:8d:12:8d:35:ef:ee:de:6c:eb:c2:57:7d:21:eb: e8:0f:12:35:97:4f:b8:56:58:f3:98:6a:95:95:4b:86:69:07: bc:fe:9e:15:3b:05:5c:3f:cf:79:ff:c9:d2:f0:36:0e:6b:8a: 9b:7c:a3:1c:99:81:c8:7e:bf:32:f3:53:4a:af:3d:01:97:47: 33:d5:42:13:c8:e4:4c:ed:f6:4d:5f:ee:c1:a1:71:b8:9c:1e: d2:79:74:35:49:c9:08:ba:5c:f4:cd:be:84:cd:4d:78:01:05: 39:97:16:83:90:d3:04:d7:8f:65:cd:23:f7:3c:08:c0:d7:5a: b3:d4:aa:6a:21:6a:39:4f:9d:4b:cf:ac:e8:d2:96:82:f0:47: 16:ab:b9:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW7DeJ0D3FhyS0EkMb6w8ROgSqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0 NEY3RjRFNTAeFw0yNTEyMDYwMzI3MThaFw0yNTEyMDkwNjA4MThaMDMxMTAvBgNV BAMTKDZDOUE2NTgyMDQ0NDhGRDg5Q0E4MUM1MjdGRjY5NzUwMEE4MkQ1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpU4gpOKiPufRnSHaVfieU88Bz 66ydDeLS0W2LFL3TJEYzXmQ22V2+odAEeFznIRqPKP5DTF8lZK8RExH8c+TzQ+ba BU5+OMokU2VXi7V187xyt/sIKZknmU8hJuIQYYBsyparb8XoreguKMbGLE9uxcyy Ak3VCz4imTjBowsDPD+gWF/wQvZbxs30WD6faSkt7OB5tZRIHiPDlnWtghBBWHy7 P8XwInAHlaFX8NtPW+1UdPXnZDnePK+6Ovw+C7n/3lEuFWU67gnoPhFUhIulVQoh Vw4+GVBnf3r3YHioQ+zjY7XO1wo8heBWej0802DL/p0cfkWnGAjnKloPHLVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJplggREj9icqBxSf/aXUAqC1Z8wHwYDVR0j BBgwFoAUj7F3roNSbXE8EkDVzvr3OET39OUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YjY5ODIyYy0yZTIyLTQ4YmUtOGJhMi02MzRmNTgyYzJlY2IvMC84RkIxNzdBRTgz NTI2RDcxM0MxMjQwRDVDRUZBRjczODQ0RjdGNEU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3Mzg0NEY3 RjRFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmI2OTgyMmMtMmUyMi00OGJlLThi YTItNjM0ZjU4MmMyZWNiLzAvOEZCMTc3QUU4MzUyNkQ3MTNDMTI0MEQ1Q0VGQUY3 Mzg0NEY3RjRFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANjNAsAxuTt33Kra4ooYcqmvkadd8yqFDYcw 2WuHks9exNmUnJevnTlUvU4/ZxQK1s0skL3NeylZr6Y1zz9xqCedZuqdX6ylV67z 0Q7o+DwYDRx+pii/lo4nn9oeyQYeIrdLYWDfgze2p/Mvtd0qnxmNEo017+7ebOvC V30h6+gPEjWXT7hWWPOYapWVS4ZpB7z+nhU7BVw/z3n/ydLwNg5ript8oxyZgch+ vzLzU0qvPQGXRzPVQhPI5Ezt9k1f7sGhcbicHtJ5dDVJyQi6XPTNvoTNTXgBBTmX FoOQ0wTXj2XNI/c8CMDXWrPUqmohajlPnUvPrOjSloLwRxaruYo= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:08 2025 by rpki-client