This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft File: B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft (raw, json) Hash identifier: NIXyS8QYnrdf0LvdZLLbh2kAorg0VwRJHoRcJz2uRew= Subject key identifier: B2:4A:42:8F:6D:18:FC:6C:B5:14:5A:78:55:6F:01:D7:42:43:1E:40 Authority key identifier: B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB Certificate issuer: /CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Certificate serial: 0BC978700CC122CDFCE4EF78FF16A6973E129EFE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft Manifest number: E6 Signing time: Thu 04 Dec 2025 16:12:07 +0000 Manifest this update: Thu 04 Dec 2025 16:07:07 +0000 Manifest next update: Sun 07 Dec 2025 22:32:07 +0000 Files and hashes: 1: B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl (hash: kf9MtZ1RrBcwtWYPUt8BDN4Df/MSMv9tGU+fbCE7wxY=) 2: 3136302e32352e33362e302f32342d3234203d3e20313532383332.roa (hash: 1SJ9LA44FkXb29+CiOLplkV9zxTaWTCw2H5Ki5oako8=) 3: 3136302e32352e33362e302f32332d3234203d3e20313532383332.roa (hash: 9wCzZBokUdgA6nDZL9CPWVnRmT/IcfmN/N7BSRO44UA=) 4: 3136302e32352e33372e302f32342d3234203d3e20313532383332.roa (hash: 2EK7G4yp/ra7lqC0aFCR3YZxswSuxrQQ2ZJJKEPHMZg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 22:32:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:c9:78:70:0c:c1:22:cd:fc:e4:ef:78:ff:16:a6:97:3e:12:9e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8D444C5B3184A4F8C8F199A432242C44E19EACB Validity Not Before: Dec 4 16:07:07 2025 GMT Not After : Dec 7 22:32:07 2025 GMT Subject: CN=B24A428F6D18FC6CB5145A78556F01D742431E40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:d4:80:bb:f2:9d:15:14:df:3f:da:1d:6b: 9e:8e:02:8a:7e:e0:fa:53:49:15:36:26:6d:5a:20: bc:ab:e0:06:33:ea:66:c0:80:c2:e8:d9:83:e6:fe: b7:5b:dc:b6:70:de:27:d9:77:95:fd:fc:f3:11:a3: 7f:29:8b:d2:71:0d:5b:89:c3:bd:74:09:3a:cf:6a: 69:8e:e1:68:88:fd:d5:2e:ad:80:bb:a4:d1:52:30: 64:dd:14:05:d9:86:35:8d:1c:ca:ee:e4:d4:8d:3c: 88:ca:a8:75:c4:7b:64:3b:75:d7:6d:60:ff:d2:97: 41:9e:12:43:02:6d:8d:fc:d3:69:ad:7c:ed:3a:88: 60:9b:76:ec:39:2c:81:a6:bc:13:74:e3:ff:e9:4c: d9:e9:cd:4a:78:c3:82:ca:6c:cf:4b:04:04:27:a9: 25:88:16:9c:fc:be:e4:d4:0b:2e:8c:be:01:20:57: 2d:35:83:3c:7e:d0:cf:e3:ef:b4:f3:36:d8:dd:cf: a1:f2:3f:ac:78:ed:0a:18:73:8a:30:7e:11:de:40: 54:fc:8f:9e:25:63:3f:0b:12:cd:57:34:05:12:05: 8e:22:dc:8e:ed:3d:ed:de:ab:68:9c:aa:7f:ec:24: 75:e2:13:d9:c3:28:cc:32:c7:3b:ad:ef:e0:1a:dc: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4A:42:8F:6D:18:FC:6C:B5:14:5A:78:55:6F:01:D7:42:43:1E:40 X509v3 Authority Key Identifier: keyid:B8:D4:44:C5:B3:18:4A:4F:8C:8F:19:9A:43:22:42:C4:4E:19:EA:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B8D444C5B3184A4F8C8F199A432242C44E19EACB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4b53d8-b2ff-4973-b1ac-6f85faeadbe5/0/B8D444C5B3184A4F8C8F199A432242C44E19EACB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e9:f3:53:7e:92:a7:0e:6f:d5:a3:7b:5c:90:48:d5:f2:85: e4:e6:a0:6b:19:d6:d2:b5:b1:8b:9e:de:55:be:b2:75:56:da: 61:c4:ca:de:24:6e:3e:16:04:21:3b:ec:d9:98:3c:b5:28:69: d9:f6:ef:a0:28:06:58:7f:c6:6b:23:8f:37:c2:75:29:30:ba: 14:0c:2b:1f:94:8c:33:e6:e5:90:72:9a:9d:65:5e:9b:98:05: 0a:2d:a2:3f:dc:63:c4:1b:8f:b1:ea:ca:0e:f8:64:4b:0a:97: 47:ee:29:d0:e2:ca:37:f6:ba:2e:04:5a:65:a3:83:e1:92:0d: 89:e0:b6:c9:b1:26:27:45:51:61:ce:45:0e:75:c4:b5:85:dc: 58:90:ee:b0:dd:d5:c7:e4:c0:ab:c3:1a:69:ff:66:71:4c:ef: 1a:e2:c8:d6:fb:f2:fd:bb:22:6e:4e:44:e4:1e:cd:e4:db:ab: 39:2e:a1:11:2a:25:43:85:3f:2e:5b:91:44:4b:57:d7:74:fa: 24:44:22:c4:49:0a:7d:43:0b:47:7f:07:47:31:5c:76:fc:e6: 13:9c:be:cb:ad:cb:4b:60:d9:0d:60:98:af:6f:1a:a8:74:d4: 9d:27:31:b1:6e:4c:dc:79:81:07:2e:65:a7:06:12:f4:4b:cb: bd:8c:94:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8l4cAzBIs385O94/xamlz4Snv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0 RTE5RUFDQjAeFw0yNTEyMDQxNjA3MDdaFw0yNTEyMDcyMjMyMDdaMDMxMTAvBgNV BAMTKEIyNEE0MjhGNkQxOEZDNkNCNTE0NUE3ODU1NkYwMUQ3NDI0MzFFNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6TdSAu/KdFRTfP9oda56OAop+ 4PpTSRU2Jm1aILyr4AYz6mbAgMLo2YPm/rdb3LZw3ifZd5X9/PMRo38pi9JxDVuJ w710CTrPammO4WiI/dUurYC7pNFSMGTdFAXZhjWNHMru5NSNPIjKqHXEe2Q7dddt YP/Sl0GeEkMCbY3802mtfO06iGCbduw5LIGmvBN04//pTNnpzUp4w4LKbM9LBAQn qSWIFpz8vuTUCy6MvgEgVy01gzx+0M/j77TzNtjdz6HyP6x47QoYc4owfhHeQFT8 j54lYz8LEs1XNAUSBY4i3I7tPe3eq2icqn/sJHXiE9nDKMwyxzut7+Aa3GWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUskpCj20Y/Gy1FFp4VW8B10JDHkAwHwYDVR0j BBgwFoAUuNRExbMYSk+MjxmaQyJCxE4Z6sswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRiNTNkOC1iMmZmLTQ5NzMtYjFhYy02Zjg1ZmFlYWRiZTUvMC9COEQ0NDRDNUIz MTg0QTRGOEM4RjE5OUE0MzIyNDJDNDRFMTlFQUNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQyQzQ0RTE5 RUFDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0YjUzZDgtYjJmZi00OTczLWIx YWMtNmY4NWZhZWFkYmU1LzAvQjhENDQ0QzVCMzE4NEE0RjhDOEYxOTlBNDMyMjQy QzQ0RTE5RUFDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/p81N+kqcOb9Wje1yQSNXyheTmoGsZ1tK1 sYue3lW+snVW2mHEyt4kbj4WBCE77NmYPLUoadn276AoBlh/xmsjjzfCdSkwuhQM Kx+UjDPm5ZBymp1lXpuYBQotoj/cY8Qbj7Hqyg74ZEsKl0fuKdDiyjf2ui4EWmWj g+GSDYngtsmxJidFUWHORQ51xLWF3FiQ7rDd1cfkwKvDGmn/ZnFM7xriyNb78v27 Im5OROQezeTbqzkuoREqJUOFPy5bkURLV9d0+iREIsRJCn1DC0d/B0cxXHb85hOc vsuty0tg2Q1gmK9vGqh01J0nMbFuTNx5gQcuZacGEvRLy72MlPY= -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:36 2025 by rpki-client