This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
File: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft (raw, json)
Hash identifier: oBtwD5SvShPy8UATPj8pQsM4Q1jLQXKWd8nxYc+wDBo=
Subject key identifier: DD:96:78:13:28:16:22:47:55:61:F9:2C:7B:C7:D6:5F:43:03:B2:DD
Authority key identifier: 8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8
Certificate issuer: /CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
Certificate serial: 35CA737A6C9E59627FD66B0A037C36501E4FF094
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
Manifest number: 02FA
Signing time: Fri 05 Dec 2025 18:51:38 +0000
Manifest this update: Fri 05 Dec 2025 18:46:38 +0000
Manifest next update: Mon 08 Dec 2025 21:22:38 +0000
Files and hashes: 1: 8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl (hash: sNRvexIyXRGR/9PdkkVFGTiA9mixfPo3rHsX4lxVAck=)
2: 323430373a363338303a3a2f33322d3430203d3e20313331373133.roa (hash: d3EczDOEKFnJZSi/mXbv6kWPY6oK1SqyadhZuQpb4/8=)
3: 3130332e392e3134342e302f32322d3234203d3e20313331373133.roa (hash: DgLKkC/jF8zKIVNdNQyUD9vzgLj84NQLEk3DQtPjHPw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl
rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 08 Dec 2025 21:22:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ca:73:7a:6c:9e:59:62:7f:d6:6b:0a:03:7c:36:50:1e:4f:f0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8
Validity
Not Before: Dec 5 18:46:38 2025 GMT
Not After : Dec 8 21:22:38 2025 GMT
Subject: CN=DD967813281622475561F92C7BC7D65F4303B2DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:20:da:3e:af:fb:6d:2e:da:21:51:91:5a:
8d:58:6d:5e:49:ff:b0:d2:76:ff:cf:a1:e3:c0:92:
6b:d4:0f:4f:cd:bd:03:10:56:9a:a1:2d:f8:73:69:
92:ad:5b:bc:0d:29:dc:05:8f:1b:51:e6:8f:8e:6f:
68:80:91:55:42:8f:53:dd:ec:8d:10:94:92:fd:f7:
af:ea:06:ee:69:82:0c:c8:9e:98:c4:4c:6e:bc:70:
92:95:81:c2:90:2f:b3:06:5b:14:48:8a:8b:6e:eb:
9a:a6:37:37:a9:a6:6a:da:e4:89:99:dc:7d:4f:cb:
bf:c4:8b:99:e5:0b:8d:90:42:dc:66:5a:bc:ae:a6:
dd:e8:6c:18:18:cd:a4:36:c6:4a:4a:b7:d0:e4:13:
f9:b3:b4:a9:5b:12:c8:d2:2e:d8:85:ed:cd:9b:3f:
a5:8e:fb:e5:cc:0b:9f:48:f6:ac:32:fd:17:ab:44:
ed:b8:fb:68:c5:84:eb:68:83:17:8d:35:1a:1e:ad:
d1:d4:79:ca:91:8d:bd:7a:8e:55:b7:b0:1b:b9:4d:
2f:f8:95:82:35:f2:87:2a:0c:74:22:32:fb:b0:62:
27:c5:4e:01:d4:cf:4d:29:b1:2d:f3:73:66:b0:92:
da:da:59:4c:c1:87:02:ff:ad:e0:c9:95:e6:cd:49:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:78:13:28:16:22:47:55:61:F9:2C:7B:C7:D6:5F:43:03:B2:DD
X509v3 Authority Key Identifier:
keyid:8B:E1:F5:0A:90:93:8A:E6:D4:E6:D7:A6:A2:A2:2F:00:3B:07:2E:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/58b58aee-e8ee-4287-a2b8-616155c3eec2/0/8BE1F50A90938AE6D4E6D7A6A2A22F003B072ED8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3e:02:2e:2e:48:ba:f3:e4:10:11:2b:7f:4e:a0:1d:75:97:
e6:26:ee:e1:62:98:b6:b8:76:ed:a0:b6:62:15:2a:a6:ec:93:
c0:73:b4:59:7e:6f:30:78:d2:10:ae:79:2e:3f:68:67:2b:c4:
b4:01:af:d2:7b:85:01:4c:49:61:bf:30:fd:2d:2a:b2:70:78:
4d:fe:01:fc:31:a0:8d:23:54:3d:4b:bd:b4:8b:bf:9b:d4:a7:
69:3b:3b:88:d6:8d:2a:6c:b7:08:fd:2f:bd:69:ef:17:df:87:
d8:cb:37:40:a9:60:50:f0:20:2b:3e:d5:0f:e4:7e:8c:f5:34:
0b:12:e6:3d:6f:ea:1f:a5:ea:2f:f7:38:ad:79:16:57:06:09:
34:5a:ea:14:cd:b7:8e:ae:cf:b7:c5:1c:98:97:d4:fc:d4:97:
99:15:74:e5:11:31:23:a6:eb:3a:26:38:f1:ea:54:03:8a:2b:
34:7e:a0:c9:bb:4d:c5:06:d2:98:38:aa:dd:af:23:1e:35:69:
c6:d0:3f:98:aa:50:d9:d1:79:c4:5a:f9:1b:82:38:a4:4b:58:
30:68:9b:3c:14:6d:d5:45:31:39:98:5b:08:d8:aa:67:d1:37:
0e:92:4f:ab:4b:38:ce:da:05:72:6f:63:24:55:4a:c9:0f:b1:
59:61:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:29:38 2025 by rpki-client