This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft File: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft (raw, json) Hash identifier: elg7SvIkoAkOHu0OUA4ZbrxKoyMXRdcXh5iDDTvldLY= Subject key identifier: 55:89:F3:59:B4:03:19:91:4C:EF:20:D5:29:EC:63:AF:1C:A9:97:4A Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 Certificate issuer: /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Certificate serial: 04CAF8B6650FFD6B14645FCA6484C9672A4D84FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft Manifest number: 01B1 Signing time: Fri 05 Dec 2025 15:40:05 +0000 Manifest this update: Fri 05 Dec 2025 15:35:05 +0000 Manifest next update: Mon 08 Dec 2025 18:00:05 +0000 Files and hashes: 1: 3130332e3132322e382e302f32342d3234203d3e20313530393635.roa (hash: OBSu5NWIqhavEgs//Z/O6dTCa3LFoSwUa21LGk85Vss=) 2: 8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl (hash: Gj4szBbc+S/QrKMN5tqsNrKxOjOtBwbVIkhkJP7Iauc=) 3: 3130332e3132322e392e302f32342d3234203d3e20313530393635.roa (hash: QeU0/vEBTo6jIDTAqgbH9ossdE4o8/cj7giBqcJ2VYs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ca:f8:b6:65:0f:fd:6b:14:64:5f:ca:64:84:c9:67:2a:4d:84:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0 Validity Not Before: Dec 5 15:35:05 2025 GMT Not After : Dec 8 18:00:05 2025 GMT Subject: CN=5589F359B40319914CEF20D529EC63AF1CA9974A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2a:be:17:aa:71:42:fd:f7:83:5c:14:8d:bc: 1a:fd:6a:f9:2f:c0:4f:aa:4d:f2:23:2c:44:f7:bc: 6b:f4:11:03:85:bf:28:34:98:7e:28:01:d4:47:77: 29:b7:a3:c4:39:31:5a:ad:94:45:ee:ac:9a:38:73: 05:15:b1:b0:19:b6:63:6e:17:e5:0c:54:de:cf:dc: cf:57:dc:a0:05:d5:56:54:11:ce:d2:ee:1d:3a:08: 6a:bc:29:94:f3:f7:72:b6:fe:71:2b:7c:f5:1e:4b: 45:88:95:a0:2f:1f:0c:89:14:5c:a1:b0:00:86:93: fd:7a:4a:cb:aa:cf:b8:67:bb:cd:62:dd:12:48:aa: 83:07:14:6a:44:3a:e0:2c:ac:e8:a2:62:a4:79:9f: e6:db:49:c1:2a:33:79:38:4b:9c:6f:37:86:49:ed: 3c:e2:28:f7:8b:b6:50:3e:ff:61:e3:07:fb:32:0b: 7a:77:02:33:6c:b3:4e:8b:f2:80:9c:fd:6f:2f:f7: a3:2c:f3:7e:3c:ae:fd:55:e0:ee:db:a1:13:bf:b2: 46:e4:55:df:d8:fd:8d:79:76:80:09:8b:90:53:1f: e4:6a:07:d5:2a:e5:49:19:9c:a8:0d:9a:b8:45:3f: d1:e1:c6:43:1c:49:15:1b:03:e2:ac:be:31:d1:f8: 44:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:F3:59:B4:03:19:91:4C:EF:20:D5:29:EC:63:AF:1C:A9:97:4A X509v3 Authority Key Identifier: keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:aa:47:ca:69:48:ba:6e:d2:cf:e6:8d:60:ee:02:23:43:fa: 02:3e:a7:24:e8:74:64:99:ef:30:01:0d:88:20:c0:be:61:b9: 8e:c0:92:30:75:87:cf:86:ee:e3:5c:41:ab:05:e0:dd:78:61: d4:61:80:16:0b:ee:3a:68:3d:75:2c:6b:db:9b:0f:0e:4d:26: a7:af:3e:52:1c:65:78:6e:8d:3f:55:0a:e9:e8:5b:79:92:42: 82:f7:7a:29:77:8d:7e:d0:84:ff:6a:b0:f8:ea:a4:1c:5f:9d: 04:40:c6:8a:f1:cb:6e:7b:5b:9c:b5:99:ee:53:bc:0f:8b:d5: 5c:a1:72:33:03:52:cd:f0:0b:59:31:54:7f:c4:5d:b9:ca:80: b7:64:2b:c5:58:b0:3a:7d:a9:cc:e0:30:e8:cc:6d:6d:4a:66: 99:ec:e4:7e:55:95:fc:2b:cd:d6:c9:79:9b:cd:5b:46:45:84: b9:5f:43:74:3f:be:4d:dd:c1:05:5e:f3:cc:e1:69:97:02:63: d7:b6:a0:f6:39:62:71:9a:13:84:e6:b8:87:c0:bc:ef:aa:4b: 1b:d6:68:39:80:ba:c8:26:c1:6e:e0:f3:2e:94:97:aa:05:a8: e6:64:1e:f6:04:a1:7e:b3:51:0e:46:12:f7:c7:2e:55:9f:1a: 42:42:09:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMr4tmUP/WsUZF/KZITJZypNhP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAy ODcyQkZDMDAeFw0yNTEyMDUxNTM1MDVaFw0yNTEyMDgxODAwMDVaMDMxMTAvBgNV BAMTKDU1ODlGMzU5QjQwMzE5OTE0Q0VGMjBENTI5RUM2M0FGMUNBOTk3NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKr4XqnFC/feDXBSNvBr9avkv wE+qTfIjLET3vGv0EQOFvyg0mH4oAdRHdym3o8Q5MVqtlEXurJo4cwUVsbAZtmNu F+UMVN7P3M9X3KAF1VZUEc7S7h06CGq8KZTz93K2/nErfPUeS0WIlaAvHwyJFFyh sACGk/16Ssuqz7hnu81i3RJIqoMHFGpEOuAsrOiiYqR5n+bbScEqM3k4S5xvN4ZJ 7TziKPeLtlA+/2HjB/syC3p3AjNss06L8oCc/W8v96Ms8348rv1V4O7boRO/skbk Vd/Y/Y15doAJi5BTH+RqB9Uq5UkZnKgNmrhFP9HhxkMcSRUbA+KsvjHR+ESnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVYnzWbQDGZFM7yDVKexjrxypl0owHwYDVR0j BBgwFoAUixms4Kc5FJKxi+J6wB0qYChyv8AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDY1MjlkYi05MzMwLTRlOTctYWRmMS1iMGRkZjFhNmU1OTkvMC84QjE5QUNFMEE3 MzkxNDkyQjE4QkUyN0FDMDFEMkE2MDI4NzJCRkMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJBNjAyODcy QkZDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2NTI5ZGItOTMzMC00ZTk3LWFk ZjEtYjBkZGYxYTZlNTk5LzAvOEIxOUFDRTBBNzM5MTQ5MkIxOEJFMjdBQzAxRDJB NjAyODcyQkZDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB2qR8ppSLpu0s/mjWDuAiND+gI+pyTodGSZ 7zABDYggwL5huY7AkjB1h8+G7uNcQasF4N14YdRhgBYL7jpoPXUsa9ubDw5NJqev PlIcZXhujT9VCunoW3mSQoL3eil3jX7QhP9qsPjqpBxfnQRAxorxy257W5y1me5T vA+L1VyhcjMDUs3wC1kxVH/EXbnKgLdkK8VYsDp9qczgMOjMbW1KZpns5H5Vlfwr zdbJeZvNW0ZFhLlfQ3Q/vk3dwQVe88zhaZcCY9e2oPY5YnGaE4TmuIfAvO+qSxvW aDmAusgmwW7g8y6Ul6oFqOZkHvYEoX6zUQ5GEvfHLlWfGkJCCTo= -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:00 2025 by rpki-client