This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft File: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft (raw, json) Hash identifier: N1TCzRV00nvpWmtFdM8bu2BH3kzDR+oIJbo2ZMs6JWw= Subject key identifier: 17:A9:C8:B0:CB:06:38:5D:93:E9:71:1C:A2:F9:A4:39:47:D3:42:35 Authority key identifier: B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A Certificate issuer: /CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Certificate serial: 7E4F70C6886B7519E112CB4E06A869E7EF530792 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft Manifest number: 0221 Signing time: Sun 07 Dec 2025 02:30:40 +0000 Manifest this update: Sun 07 Dec 2025 02:25:40 +0000 Manifest next update: Wed 10 Dec 2025 08:09:40 +0000 Files and hashes: 1: B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl (hash: wY5jep7nAl3B23LpGCqoY6MX1DIT/3qrVNaCycdiTZM=) 2: 3130332e352e3134392e302f32342d3234203d3e20313439393338.roa (hash: aIp2Ip0KA7a4+VvE23OSDrVGb4sJGrWUPloeyjyWxtA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4f:70:c6:88:6b:75:19:e1:12:cb:4e:06:a8:69:e7:ef:53:07:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E467F9AD3F6AB1EEF3A9099A390231708C790A Validity Not Before: Dec 7 02:25:40 2025 GMT Not After : Dec 10 08:09:40 2025 GMT Subject: CN=17A9C8B0CB06385D93E9711CA2F9A43947D34235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:d0:06:2b:3e:45:b9:7f:64:1a:07:3e:48: 0b:ae:d5:b5:c6:76:bb:67:ff:ff:43:ec:56:c6:b2: b6:0d:7f:f6:ee:7e:e3:19:4a:09:1c:0d:65:21:1b: b7:48:c6:dd:48:a2:16:78:89:b0:c1:81:eb:fa:6d: 0c:be:f3:60:f2:c4:db:ca:84:35:37:c0:fe:80:7b: 48:dd:83:53:dd:f4:8e:ee:66:b8:b0:a3:aa:42:67: b4:54:fc:91:c0:60:3d:97:cd:54:92:4f:8c:60:8a: 77:79:88:be:f3:d1:66:b2:a3:00:75:b2:7b:3a:f3: 61:a3:fb:85:c6:b7:67:e4:a7:3b:a5:ea:b8:71:ac: 08:32:e7:fd:e5:25:44:ac:c0:93:e0:d1:ee:e3:49: 70:10:d8:23:12:5e:c6:a4:3c:39:65:96:13:81:a1: 4a:6c:3d:86:a6:cf:31:50:b2:7b:1b:67:4a:ad:19: 57:2c:38:b4:b2:d4:e8:bc:b4:25:7e:35:52:ad:57: 7c:c6:8b:a1:60:af:f7:96:f3:61:2e:99:7b:4d:e0: 1d:a0:7e:35:2d:f8:ec:a8:80:84:8a:03:f0:40:4a: d2:16:61:f0:62:2b:b2:73:9a:94:3f:09:64:0b:0b: 32:cd:3b:d4:32:77:66:7c:cb:13:69:1a:e7:fe:bc: db:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A9:C8:B0:CB:06:38:5D:93:E9:71:1C:A2:F9:A4:39:47:D3:42:35 X509v3 Authority Key Identifier: keyid:B8:E4:67:F9:AD:3F:6A:B1:EE:F3:A9:09:9A:39:02:31:70:8C:79:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9497d828-984a-43f1-9b6e-a01ba21bb518/0/B8E467F9AD3F6AB1EEF3A9099A390231708C790A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ed:ad:80:b6:09:09:fb:ad:2d:47:a3:40:bb:37:08:de:c6: 70:b9:78:bd:78:3d:1d:fa:29:f8:2d:ae:4b:f0:5a:32:2e:84: 44:0d:1b:6d:50:c4:e8:ff:dc:10:e6:32:d6:f5:70:38:02:5e: ef:ce:6e:a1:ce:ba:da:fd:90:39:2b:82:1f:5f:3f:f6:17:47: 08:73:d8:05:64:58:23:79:1e:fc:5a:dc:f6:b4:11:65:d2:d3: 37:7e:55:4e:1b:09:88:3b:dd:bd:be:67:bd:c3:fd:a3:ca:3c: f5:c2:25:03:0e:9b:06:fe:5d:f3:00:3d:28:5d:59:6c:41:68: 68:e1:af:d9:10:7a:e9:8e:4c:f6:54:67:92:1c:ca:bd:c9:ff: 38:83:2e:ea:2e:07:4c:25:bf:77:46:f1:26:9f:1f:93:73:ba: 66:74:72:d4:64:84:9b:da:6b:4c:27:ea:03:f3:c9:a4:58:66: a8:be:bc:f7:8b:d0:63:23:e8:c0:34:b7:c2:15:90:78:f3:6c: b6:71:97:37:2f:6f:f7:2b:28:a0:1b:af:91:0d:18:8d:bf:0f: 5b:91:c4:93:6c:b9:89:f6:77:b1:1a:4f:cb:92:f0:31:dd:00: 9f:b3:62:97:bf:9f:60:da:6a:8c:c2:76:c7:11:96:b9:57:46: 08:42:2e:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfk9wxohrdRnhEstOBqhp5+9TB5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3 MDhDNzkwQTAeFw0yNTEyMDcwMjI1NDBaFw0yNTEyMTAwODA5NDBaMDMxMTAvBgNV BAMTKDE3QTlDOEIwQ0IwNjM4NUQ5M0U5NzExQ0EyRjlBNDM5NDdEMzQyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqutAGKz5FuX9kGgc+SAuu1bXG drtn//9D7FbGsrYNf/bufuMZSgkcDWUhG7dIxt1IohZ4ibDBgev6bQy+82DyxNvK hDU3wP6Ae0jdg1Pd9I7uZriwo6pCZ7RU/JHAYD2XzVSST4xgind5iL7z0WayowB1 sns682Gj+4XGt2fkpzul6rhxrAgy5/3lJUSswJPg0e7jSXAQ2CMSXsakPDlllhOB oUpsPYamzzFQsnsbZ0qtGVcsOLSy1Oi8tCV+NVKtV3zGi6Fgr/eW82EumXtN4B2g fjUt+OyogISKA/BAStIWYfBiK7JzmpQ/CWQLCzLNO9Qyd2Z8yxNpGuf+vNslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF6nIsMsGOF2T6XEcovmkOUfTQjUwHwYDVR0j BBgwFoAUuORn+a0/arHu86kJmjkCMXCMeQowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDk3ZDgyOC05ODRhLTQzZjEtOWI2ZS1hMDFiYTIxYmI1MTgvMC9COEU0NjdGOUFE M0Y2QUIxRUVGM0E5MDk5QTM5MDIzMTcwOEM3OTBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAyMzE3MDhD NzkwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ5N2Q4MjgtOTg0YS00M2YxLTli NmUtYTAxYmEyMWJiNTE4LzAvQjhFNDY3RjlBRDNGNkFCMUVFRjNBOTA5OUEzOTAy MzE3MDhDNzkwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/trYC2CQn7rS1Ho0C7NwjexnC5eL14PR36 KfgtrkvwWjIuhEQNG21QxOj/3BDmMtb1cDgCXu/ObqHOutr9kDkrgh9fP/YXRwhz 2AVkWCN5Hvxa3Pa0EWXS0zd+VU4bCYg73b2+Z73D/aPKPPXCJQMOmwb+XfMAPShd WWxBaGjhr9kQeumOTPZUZ5Icyr3J/ziDLuouB0wlv3dG8SafH5NzumZ0ctRkhJva a0wn6gPzyaRYZqi+vPeL0GMj6MA0t8IVkHjzbLZxlzcvb/crKKAbr5ENGI2/D1uR xJNsuYn2d7EaT8uS8DHdAJ+zYpe/n2DaaozCdscRlrlXRghCLjs= -----END CERTIFICATE-----Generated at Sun Dec 7 04:35:29 2025 by rpki-client