This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft (raw, json) Hash identifier: 0/rQkf8USb58GTr0uxK99sZREheSt7/uS86GohUjnQ4= Subject key identifier: D8:68:92:67:72:0B:8D:03:9C:66:2D:34:C7:64:4D:09:D7:A7:92:99 Authority key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Certificate issuer: /CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Certificate serial: 647F8EC10A4350E611F741967E6054D12873E1EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft Manifest number: 033A Signing time: Fri 05 Dec 2025 02:02:29 +0000 Manifest this update: Fri 05 Dec 2025 01:57:29 +0000 Manifest next update: Mon 08 Dec 2025 08:41:29 +0000 Files and hashes: 1: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl (hash: 2PeiaqO0F0SJAuyItTmmNuV5a1+mQejXQD8cX75gv4U=) 2: 3130332e3131382e332e302f32342d3234203d3e20313337333732.roa (hash: CnYInR0edgXU+mYMJQGAiAKWjbNlk8PVPSzC/8WPG5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7f:8e:c1:0a:43:50:e6:11:f7:41:96:7e:60:54:d1:28:73:e1:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Validity Not Before: Dec 5 01:57:29 2025 GMT Not After : Dec 8 08:41:29 2025 GMT Subject: CN=D8689267720B8D039C662D34C7644D09D7A79299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:47:f8:31:7c:bb:e6:c4:05:2c:63:f8:ca:f2: 69:13:cf:c8:c4:13:74:3e:a7:b4:18:b5:30:66:bb: c7:d1:9d:22:9c:a3:db:ef:2e:ea:90:a6:a5:06:f5: f6:cd:dd:f2:37:8d:f4:a9:10:53:a1:fa:ea:0b:90: 04:34:3c:5a:28:73:eb:cf:31:8b:be:15:83:f4:53: df:1d:03:a9:31:c5:9b:b9:0c:8a:de:bb:9a:bb:1e: bf:aa:43:4b:ec:c4:3a:7f:9e:6f:db:a3:91:ef:a4: 9e:9b:d2:3b:1a:17:78:99:e1:ad:68:31:17:c6:4c: 43:c8:ee:3a:75:18:e4:88:a1:f4:2b:ce:ff:3b:78: e5:7b:74:3e:18:3b:b0:e4:08:fb:76:7d:ce:1f:2e: 9b:bc:a3:8a:34:9a:62:b7:de:44:70:a7:a4:09:48: d0:bb:d0:31:11:09:d4:ca:e7:7e:36:1d:94:7c:7f: c9:f7:97:10:25:94:5b:d0:5a:2b:6d:ff:98:25:f5: c4:1d:b6:ad:4a:71:53:58:55:c4:20:06:33:77:2e: e4:a1:03:81:5d:fe:6d:20:c2:e1:ec:fa:b6:3e:a9: 1e:17:31:c0:2c:ef:af:4e:21:13:08:9e:cb:14:70: 09:32:79:81:a8:4d:c5:61:d2:b0:ca:07:49:a8:20: 68:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:68:92:67:72:0B:8D:03:9C:66:2D:34:C7:64:4D:09:D7:A7:92:99 X509v3 Authority Key Identifier: keyid:8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:ed:7a:27:f7:ec:a8:c5:56:b5:44:a6:07:81:c7:ca:f2:48: e1:a0:25:f6:ce:85:39:ae:5a:d6:d2:ab:4a:77:a2:d3:17:f8: 63:b8:5d:a9:e9:76:72:49:f7:51:d2:6c:58:0d:32:eb:e5:36: bc:a8:28:aa:b4:d4:e9:f6:ec:be:3c:a9:b3:40:36:e7:78:2f: 46:d5:02:cd:01:53:bf:b3:36:dc:74:6d:80:21:ca:2b:f0:a4: 8f:10:a8:7d:13:d8:56:65:9c:04:9e:56:f7:9a:4d:08:f6:6f: ed:63:1f:b9:34:43:b5:45:bb:d0:26:36:88:2e:55:ed:e3:ec: 0d:1a:f8:de:76:79:db:1d:4d:ca:3f:17:cc:c9:d2:c1:72:b8: 84:f7:93:b1:98:7f:d2:a9:d0:8e:93:69:6e:ed:85:66:41:6f: 78:ec:3c:a5:57:df:cb:8b:bf:d3:ef:ef:40:c9:b3:2b:37:01: a9:7c:4f:f2:4e:96:15:8e:ce:44:7e:42:a7:c6:5e:bc:0f:6b: 88:6b:ae:0a:7a:a8:13:03:f5:6b:05:e1:16:93:84:ab:c2:51: 99:35:bb:9e:1e:3d:97:fe:a9:ad:5d:05:01:8b:a7:e4:9f:1d: 3a:62:66:18:a0:2a:9b:ff:30:97:78:27:84:0a:1b:65:53:51: da:7d:91:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZH+OwQpDUOYR90GWfmBU0Shz4e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQz QzlDRkVBMTAeFw0yNTEyMDUwMTU3MjlaFw0yNTEyMDgwODQxMjlaMDMxMTAvBgNV BAMTKEQ4Njg5MjY3NzIwQjhEMDM5QzY2MkQzNEM3NjQ0RDA5RDdBNzkyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGR/gxfLvmxAUsY/jK8mkTz8jE E3Q+p7QYtTBmu8fRnSKco9vvLuqQpqUG9fbN3fI3jfSpEFOh+uoLkAQ0PFooc+vP MYu+FYP0U98dA6kxxZu5DIreu5q7Hr+qQ0vsxDp/nm/bo5HvpJ6b0jsaF3iZ4a1o MRfGTEPI7jp1GOSIofQrzv87eOV7dD4YO7DkCPt2fc4fLpu8o4o0mmK33kRwp6QJ SNC70DERCdTK5342HZR8f8n3lxAllFvQWitt/5gl9cQdtq1KcVNYVcQgBjN3LuSh A4Fd/m0gwuHs+rY+qR4XMcAs769OIRMInssUcAkyeYGoTcVh0rDKB0moIGg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GiSZ3ILjQOcZi00x2RNCdenkpkwHwYDVR0j BBgwFoAUiw3Hm2apb6f6MYDCCwalxDyc/qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMC84QjBEQzc5QjY2 QTk2RkE3RkEzMTgwQzIwQjA2QTVDNDNDOUNGRUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1QzQzQzlD RkVBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQ1YmJkODEtMDMzMi00MjAyLTlj OTItZWIxNzQ2YThjZDlkLzAvOEIwREM3OUI2NkE5NkZBN0ZBMzE4MEMyMEIwNkE1 QzQzQzlDRkVBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALfteif37KjFVrVEpgeBx8rySOGgJfbOhTmu WtbSq0p3otMX+GO4XanpdnJJ91HSbFgNMuvlNryoKKq01On27L48qbNANud4L0bV As0BU7+zNtx0bYAhyivwpI8QqH0T2FZlnASeVveaTQj2b+1jH7k0Q7VFu9AmNogu Ve3j7A0a+N52edsdTco/F8zJ0sFyuIT3k7GYf9Kp0I6TaW7thWZBb3jsPKVX38uL v9Pv70DJsys3Aal8T/JOlhWOzkR+QqfGXrwPa4hrrgp6qBMD9WsF4RaThKvCUZk1 u54ePZf+qa1dBQGLp+SfHTpiZhigKpv/MJd4J4QKG2VTUdp9kYw= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:15 2025 by rpki-client