This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft File: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft (raw, json) Hash identifier: f4kiM/eF6FvBWjg3kJ/GUwH84d3TwX8rbnvaX5rXZok= Subject key identifier: CB:5D:BD:9F:F0:39:A8:88:C3:E1:FE:CE:DF:82:29:C3:22:8F:02:B1 Authority key identifier: 8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 Certificate issuer: /CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Certificate serial: 757F6CF63BD9060E81B51B712A5215CB7870F898 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft Manifest number: 0531 Signing time: Wed 17 Dec 2025 03:01:24 +0000 Manifest this update: Wed 17 Dec 2025 02:56:24 +0000 Manifest next update: Sat 20 Dec 2025 14:54:24 +0000 Files and hashes: 1: 8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl (hash: XgtA99KD9myM6ly+lZwRA5edVkPyEKb+Hv4Fh31S9yQ=) 2: 3131392e3233352e3234382e302f32312d3234203d3e203435313436.roa (hash: Gj57tszoKsJPmI3zlTc36/bgp48+5kiHS2p+sUe73DE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 14:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7f:6c:f6:3b:d9:06:0e:81:b5:1b:71:2a:52:15:cb:78:70:f8:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B266458C7DEFCF6926DCDF453C84A1D42E8D989 Validity Not Before: Dec 17 02:56:24 2025 GMT Not After : Dec 20 14:54:24 2025 GMT Subject: CN=CB5DBD9FF039A888C3E1FECEDF8229C3228F02B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:9c:cf:7a:28:cf:a8:2e:a6:c6:92:50:e0:f0: a0:6e:20:3d:17:0b:f2:17:0a:86:58:9d:55:71:75: 71:17:7b:a6:69:f2:03:c5:07:07:02:e0:5c:1b:e5: 02:c6:f7:e7:bc:ce:9d:fe:c7:fd:94:18:72:81:e6: 83:e8:96:3d:e6:e2:41:12:2c:d2:b4:c1:2d:ef:21: 64:41:ec:31:90:69:f1:92:51:16:99:a7:c6:48:ac: 30:bf:01:e0:79:7d:b2:0f:f5:2b:c8:bd:a8:17:ab: 45:c2:8a:68:1a:cd:61:b4:64:1f:98:0f:ed:d3:c8: 30:52:70:7a:1f:5e:73:2f:bb:5f:6b:bd:b4:33:8b: 93:d4:2e:ab:a5:8d:1e:e7:ec:83:f9:92:b3:e4:64: 93:7b:f2:df:3f:42:d8:84:8f:b9:13:29:5e:c3:4d: 56:56:de:d6:16:81:c3:97:8f:50:ed:d0:d4:2a:96: 01:5c:7b:c8:d8:e5:cc:dd:c8:d2:15:b6:84:d1:8f: 06:b0:53:bf:41:fd:34:a7:bc:b4:54:fe:37:63:be: 6e:9c:e8:84:98:56:06:cd:8e:ff:e7:a6:63:97:37: b3:96:be:50:4b:c8:11:0a:29:1c:59:ea:30:31:88: 92:1e:8a:c3:98:3d:0d:fb:3f:32:fa:61:ae:c5:b8: 8d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5D:BD:9F:F0:39:A8:88:C3:E1:FE:CE:DF:82:29:C3:22:8F:02:B1 X509v3 Authority Key Identifier: keyid:8B:26:64:58:C7:DE:FC:F6:92:6D:CD:F4:53:C8:4A:1D:42:E8:D9:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99e3b1d8-bf19-46e3-b609-0d160988dac8/0/8B266458C7DEFCF6926DCDF453C84A1D42E8D989.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ca:16:9b:d6:27:9a:be:6b:be:20:99:7f:fd:c3:62:af:70: 86:62:9a:31:51:e6:ec:8f:fa:00:ea:e1:34:f6:65:fa:7d:47: 1d:ca:63:d8:57:8b:9e:64:1a:93:b6:09:b0:7e:81:d8:36:61: 9a:d4:20:6a:ba:b3:7c:a6:12:9e:05:a9:aa:21:2d:c1:cc:de: 80:7d:8c:3a:df:bb:f5:84:e6:e0:12:d4:7c:04:30:f2:33:de: ab:7e:49:61:a3:44:f0:d6:a0:22:c5:84:da:96:3c:94:f7:49: a2:69:65:1a:02:c7:48:a2:24:4e:a7:ad:04:0f:98:88:cc:cd: 1f:2b:af:4c:6d:ee:28:c3:51:40:28:82:ac:44:52:ae:49:6f: a9:5f:99:47:b7:06:60:24:7b:85:94:b4:23:04:ae:1d:e8:e1: 58:98:96:66:4c:48:b1:99:f3:0e:2d:85:7d:19:70:24:ea:23: ce:dc:0c:83:30:7b:53:bf:37:74:1e:37:76:e9:40:4f:93:cc: c6:1f:e0:4f:57:79:d7:5e:b1:8d:b7:88:5b:4e:7d:14:4c:0b: 88:b8:a8:9f:e7:71:5c:b9:44:1d:86:c9:f6:bf:a4:20:30:f1: c1:a8:d1:a2:d5:c4:a8:25:31:62:3e:c1:53:2e:ca:52:b0:25: 86:10:7d:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdX9s9jvZBg6BtRtxKlIVy3hw+JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0 MkU4RDk4OTAeFw0yNTEyMTcwMjU2MjRaFw0yNTEyMjAxNDU0MjRaMDMxMTAvBgNV BAMTKENCNURCRDlGRjAzOUE4ODhDM0UxRkVDRURGODIyOUMzMjI4RjAyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJnM96KM+oLqbGklDg8KBuID0X C/IXCoZYnVVxdXEXe6Zp8gPFBwcC4Fwb5QLG9+e8zp3+x/2UGHKB5oPolj3m4kES LNK0wS3vIWRB7DGQafGSURaZp8ZIrDC/AeB5fbIP9SvIvagXq0XCimgazWG0ZB+Y D+3TyDBScHofXnMvu19rvbQzi5PULquljR7n7IP5krPkZJN78t8/QtiEj7kTKV7D TVZW3tYWgcOXj1Dt0NQqlgFce8jY5czdyNIVtoTRjwawU79B/TSnvLRU/jdjvm6c 6ISYVgbNjv/npmOXN7OWvlBLyBEKKRxZ6jAxiJIeisOYPQ37PzL6Ya7FuI29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy129n/A5qIjD4f7O34IpwyKPArEwHwYDVR0j BBgwFoAUiyZkWMfe/PaSbc30U8hKHULo2YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OWUzYjFkOC1iZjE5LTQ2ZTMtYjYwOS0wZDE2MDk4OGRhYzgvMC84QjI2NjQ1OEM3 REVGQ0Y2OTI2RENERjQ1M0M4NEExRDQyRThEOTg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRBMUQ0MkU4 RDk4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTllM2IxZDgtYmYxOS00NmUzLWI2 MDktMGQxNjA5ODhkYWM4LzAvOEIyNjY0NThDN0RFRkNGNjkyNkRDREY0NTNDODRB MUQ0MkU4RDk4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACPKFpvWJ5q+a74gmX/9w2KvcIZimjFR5uyP +gDq4TT2Zfp9Rx3KY9hXi55kGpO2CbB+gdg2YZrUIGq6s3ymEp4FqaohLcHM3oB9 jDrfu/WE5uAS1HwEMPIz3qt+SWGjRPDWoCLFhNqWPJT3SaJpZRoCx0iiJE6nrQQP mIjMzR8rr0xt7ijDUUAogqxEUq5Jb6lfmUe3BmAke4WUtCMErh3o4ViYlmZMSLGZ 8w4thX0ZcCTqI87cDIMwe1O/N3QeN3bpQE+TzMYf4E9XeddesY23iFtOfRRMC4i4 qJ/ncVy5RB2Gyfa/pCAw8cGo0aLVxKglMWI+wVMuylKwJYYQfTc= -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:28 2025 by rpki-client