This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: jR7CRdfs2vuqQx52kCxtN7ASjAZe4eblGssKcudMOjQ= Subject key identifier: 95:30:C3:89:29:45:7C:B5:AA:6C:4D:A0:CA:C3:6E:9F:DE:5E:BB:24 Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 2DA88BCBB3A512764760BC75508FF16253284263 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 21:11:23 +0000 Manifest this update: Fri 05 Dec 2025 21:06:23 +0000 Manifest next update: Tue 09 Dec 2025 01:18:23 +0000 Files and hashes: 1: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) 2: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: ypEro72FUkzmQn16im0ChCwmY+x9q4GjGUSVGIj13qY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a8:8b:cb:b3:a5:12:76:47:60:bc:75:50:8f:f1:62:53:28:42:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Dec 5 21:06:23 2025 GMT Not After : Dec 9 01:18:23 2025 GMT Subject: CN=9530C38929457CB5AA6C4DA0CAC36E9FDE5EBB24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:96:6f:a6:92:ed:ae:a2:61:66:a3:66:ba:0a: e2:44:d4:53:3e:50:d9:3a:3d:ee:5e:18:70:59:9a: 45:6e:36:8e:1a:66:c1:f3:43:cc:c2:f1:ec:60:19: 52:89:a7:94:20:5c:54:c5:82:1d:d1:7c:72:dc:41: 44:5b:b5:c2:c0:48:59:9c:7a:80:8f:26:e9:84:26: 17:1d:f8:e2:dd:5e:b5:01:f7:22:d9:6d:84:2c:70: 68:99:7a:f0:71:1c:35:f7:de:ea:96:83:75:77:9e: 29:73:14:73:19:3b:76:78:13:aa:e0:a1:57:f7:12: f7:8f:c9:1f:04:73:3c:13:3a:bb:bf:1c:15:b6:bf: 83:b6:d0:c4:9f:3f:a6:f1:da:e6:6e:45:94:fa:46: df:a5:7b:a4:1e:46:49:8a:c7:5a:20:1e:99:8c:6b: 42:71:83:99:e0:3c:76:63:dc:aa:1a:70:56:62:ae: 31:a3:46:90:ac:64:95:e8:78:1a:b0:ae:b7:b9:4c: d8:f6:7b:cd:4c:99:a5:dd:93:fe:5f:e2:d5:91:f1: 3f:5d:d6:ec:3c:84:b4:07:d1:57:cf:48:e0:3c:5c: 7d:07:bc:88:33:cf:2c:41:0e:74:a8:da:9a:19:a9: 80:d5:37:46:17:ac:7b:3f:85:2a:71:c7:18:dd:f7: 1b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:30:C3:89:29:45:7C:B5:AA:6C:4D:A0:CA:C3:6E:9F:DE:5E:BB:24 X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:84:34:c3:88:87:1d:3f:5a:31:17:9b:bf:58:1e:7f:a3:cd: ef:8d:33:1b:bd:66:d2:eb:31:f4:b7:c8:20:8e:8f:2a:ed:5d: 5a:01:ff:25:b4:64:40:c7:f1:7e:66:19:91:50:f0:99:3d:6b: c1:cd:14:fd:8a:df:d6:d3:69:3a:12:a5:d7:b6:fe:e3:e1:9e: 3f:d8:ed:a1:e8:01:ad:b2:7b:dc:74:ed:b8:1c:55:8c:1d:d7: b6:c1:1a:83:4b:70:b0:41:00:d1:dc:54:48:23:f7:06:ef:b2: b1:8f:a6:ea:aa:eb:53:19:f1:fd:de:3d:77:de:92:a9:0a:26: 92:46:58:57:2b:7d:d2:5d:d3:48:66:e5:81:bb:af:ce:aa:9a: b9:72:45:d3:b7:84:81:a2:ba:70:cb:ae:81:07:8d:03:96:f6: 6b:1b:27:15:8e:9d:a6:9a:3c:90:ee:f9:99:0d:67:ec:a8:28: 89:33:80:e6:e1:7a:34:97:83:95:50:09:d5:87:26:98:72:3e: 5b:41:e8:8c:f2:2e:65:73:7e:cc:e6:3a:2f:56:ca:49:bd:f5: 49:e1:d6:2b:ee:47:ce:c8:52:c9:63:bd:12:8b:fd:97:54:ab: ad:37:be:ca:ee:fc:2c:89:76:e3:69:6e:ea:ce:23:9d:d0:0e: 58:f6:bc:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaiLy7OlEnZHYLx1UI/xYlMoQmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTEyMDUyMTA2MjNaFw0yNTEyMDkwMTE4MjNaMDMxMTAvBgNV BAMTKDk1MzBDMzg5Mjk0NTdDQjVBQTZDNERBMENBQzM2RTlGREU1RUJCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlm+mku2uomFmo2a6CuJE1FM+ UNk6Pe5eGHBZmkVuNo4aZsHzQ8zC8exgGVKJp5QgXFTFgh3RfHLcQURbtcLASFmc eoCPJumEJhcd+OLdXrUB9yLZbYQscGiZevBxHDX33uqWg3V3nilzFHMZO3Z4E6rg oVf3EvePyR8EczwTOru/HBW2v4O20MSfP6bx2uZuRZT6Rt+le6QeRkmKx1ogHpmM a0Jxg5ngPHZj3KoacFZirjGjRpCsZJXoeBqwrre5TNj2e81MmaXdk/5f4tWR8T9d 1uw8hLQH0VfPSOA8XH0HvIgzzyxBDnSo2poZqYDVN0YXrHs/hSpxxxjd9xurAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlTDDiSlFfLWqbE2gysNun95euyQwHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOENMOIhx0/WjEXm79YHn+jze+NMxu9ZtLr MfS3yCCOjyrtXVoB/yW0ZEDH8X5mGZFQ8Jk9a8HNFP2K39bTaToSpde2/uPhnj/Y 7aHoAa2ye9x07bgcVYwd17bBGoNLcLBBANHcVEgj9wbvsrGPpuqq61MZ8f3ePXfe kqkKJpJGWFcrfdJd00hm5YG7r86qmrlyRdO3hIGiunDLroEHjQOW9msbJxWOnaaa PJDu+ZkNZ+yoKIkzgObhejSXg5VQCdWHJphyPltB6IzyLmVzfszmOi9Wykm99Unh 1ivuR87IUsljvRKL/ZdUq603vsru/CyJduNpburOI53QDlj2vKg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:57 2025 by rpki-client