This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft File: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft (raw, json) Hash identifier: qS6LTpZPOnGrUFUgjLMMa3OdNto0iA914KleOECW0oQ= Subject key identifier: 5D:FF:F7:F7:FC:98:A1:2E:DA:87:B4:6C:40:27:E1:70:DC:A3:B3:51 Authority key identifier: 8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB Certificate issuer: /CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Certificate serial: 62624FDA2759D66D181AF57A36E3C1B7247FBB5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft Manifest number: 022A Signing time: Sat 06 Dec 2025 06:11:51 +0000 Manifest this update: Sat 06 Dec 2025 06:06:51 +0000 Manifest next update: Tue 09 Dec 2025 14:35:51 +0000 Files and hashes: 1: 3130332e3133352e342e302f32322d3234203d3e203338333230.roa (hash: 8BpU0pm5UxOt5Z/5pCKxKlre5ZOR7m9ogADS2QXiNkA=) 2: 8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl (hash: rAsfpEEZnRSziRXSqOZze7ipJ27PwFL0tgBgcNOsGvc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 14:35:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:62:4f:da:27:59:d6:6d:18:1a:f5:7a:36:e3:c1:b7:24:7f:bb:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB Validity Not Before: Dec 6 06:06:51 2025 GMT Not After : Dec 9 14:35:51 2025 GMT Subject: CN=5DFFF7F7FC98A12EDA87B46C4027E170DCA3B351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:95:d1:98:dc:bb:e4:85:f0:97:25:45:94: a9:56:94:ab:1b:9a:82:dc:d9:30:e3:63:75:48:f3: 4a:0c:f1:45:3d:5b:0e:94:af:0d:fc:97:96:6f:d6: a9:53:50:9c:8f:ed:a2:c8:aa:71:75:e3:1c:ec:44: 9c:23:21:06:e4:05:3b:de:e5:04:87:a5:76:40:1b: 90:5c:9a:5d:b7:71:2b:f4:7b:25:4d:2d:91:ce:24: 60:0e:17:dc:03:20:81:22:fb:85:f0:b9:f0:73:35: e9:a0:1d:73:fc:0e:77:a7:ed:30:29:23:9e:1f:e3: 5c:fc:77:60:bc:67:f3:8b:88:a0:2d:49:b1:c4:1e: 1f:ae:c7:af:d4:b4:33:ea:87:5b:98:08:3f:31:8a: 82:b2:41:7d:f7:9c:bc:71:d4:50:68:06:47:e2:9b: 59:00:39:15:dd:63:b2:6f:af:0e:18:3d:67:02:da: 57:35:f2:19:17:d2:8e:53:db:00:0c:23:2b:f4:99: 79:c1:ff:bd:45:74:f0:a9:1b:81:4e:10:16:13:71: fb:8d:88:05:3a:6e:90:f5:70:bc:13:cf:21:7d:52: ee:c2:91:35:73:14:61:d7:92:d3:45:dd:07:03:6b: aa:f1:90:06:c8:a5:81:4f:e8:12:fa:93:e0:a6:87: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FF:F7:F7:FC:98:A1:2E:DA:87:B4:6C:40:27:E1:70:DC:A3:B3:51 X509v3 Authority Key Identifier: keyid:8B:F0:2D:81:72:D4:CA:8A:00:A9:EE:2E:B8:CC:09:9F:07:27:F1:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e6c2a91-6afc-4767-bbc1-750613264585/0/8BF02D8172D4CA8A00A9EE2EB8CC099F0727F1CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0e:e7:07:48:43:da:c8:27:ac:d4:b9:60:0f:09:c0:8f:bf: 0c:35:47:41:63:eb:97:2e:09:74:3f:ed:27:93:c5:02:2f:cf: ef:c3:04:8e:1c:04:de:35:e8:e9:b8:7b:17:d1:4c:c7:55:c6: f6:d1:94:17:cd:04:1d:e9:09:f0:1d:62:26:51:8b:48:9f:66: 2d:8b:07:b7:f6:e3:d1:27:46:0c:3b:e0:39:3b:32:63:99:c1: f3:6b:50:9b:40:95:86:72:7b:00:63:be:62:ca:da:92:f7:f3: 66:95:8c:83:7b:91:62:ee:08:97:ae:25:ed:db:79:ed:45:97: 21:50:6a:78:24:77:0b:b1:ae:4f:0b:ac:9f:d7:bd:48:3e:d6: 7d:dc:6b:8e:07:46:3a:4e:b4:65:cb:8b:e9:7c:f2:76:f7:43: 3f:aa:bf:fb:c6:e8:25:56:28:a5:32:21:62:ec:54:5c:30:c8: 45:97:10:b8:66:2b:ee:5a:d7:7c:c8:7b:de:2b:e0:80:2d:d5: df:e2:e7:1e:d3:21:82:72:bc:0b:9b:f6:67:da:ae:ad:a3:6a: 6e:8d:5b:48:01:f2:a9:c1:96:0c:55:18:5c:fe:61:4b:cf:ba: 6b:5a:ea:ae:8d:b5:34:46:88:6d:8d:b8:9f:d4:2f:d7:86:8d: cb:e6:cb:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmJP2idZ1m0YGvV6NuPBtyR/u1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYw NzI3RjFDQjAeFw0yNTEyMDYwNjA2NTFaFw0yNTEyMDkxNDM1NTFaMDMxMTAvBgNV BAMTKDVERkZGN0Y3RkM5OEExMkVEQTg3QjQ2QzQwMjdFMTcwRENBM0IzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0npXRmNy75IXwlyVFlKlWlKsb moLc2TDjY3VI80oM8UU9Ww6Urw38l5Zv1qlTUJyP7aLIqnF14xzsRJwjIQbkBTve 5QSHpXZAG5Bcml23cSv0eyVNLZHOJGAOF9wDIIEi+4XwufBzNemgHXP8Dnen7TAp I54f41z8d2C8Z/OLiKAtSbHEHh+ux6/UtDPqh1uYCD8xioKyQX33nLxx1FBoBkfi m1kAORXdY7Jvrw4YPWcC2lc18hkX0o5T2wAMIyv0mXnB/71FdPCpG4FOEBYTcfuN iAU6bpD1cLwTzyF9Uu7CkTVzFGHXktNF3QcDa6rxkAbIpYFP6BL6k+CmhxHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXf/39/yYoS7ah7RsQCfhcNyjs1EwHwYDVR0j BBgwFoAUi/AtgXLUyooAqe4uuMwJnwcn8cswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTZjMmE5MS02YWZjLTQ3NjctYmJjMS03NTA2MTMyNjQ1ODUvMC84QkYwMkQ4MTcy RDRDQThBMDBBOUVFMkVCOENDMDk5RjA3MjdGMUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5OUYwNzI3 RjFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU2YzJhOTEtNmFmYy00NzY3LWJi YzEtNzUwNjEzMjY0NTg1LzAvOEJGMDJEODE3MkQ0Q0E4QTAwQTlFRTJFQjhDQzA5 OUYwNzI3RjFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQO5wdIQ9rIJ6zUuWAPCcCPvww1R0Fj65cu CXQ/7SeTxQIvz+/DBI4cBN416Om4exfRTMdVxvbRlBfNBB3pCfAdYiZRi0ifZi2L B7f249EnRgw74Dk7MmOZwfNrUJtAlYZyewBjvmLK2pL382aVjIN7kWLuCJeuJe3b ee1FlyFQangkdwuxrk8LrJ/XvUg+1n3ca44HRjpOtGXLi+l88nb3Qz+qv/vG6CVW KKUyIWLsVFwwyEWXELhmK+5a13zIe94r4IAt1d/i5x7TIYJyvAub9mfarq2jam6N W0gB8qnBlgxVGFz+YUvPumta6q6NtTRGiG2NuJ/UL9eGjcvmy8E= -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:15 2025 by rpki-client