This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft File: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft (raw, json) Hash identifier: H2/+Y79/hd03xgRB8aqvitWzyDewmMfHqWzyK9dL9tA= Subject key identifier: 95:FE:8B:EE:B8:73:A3:9A:FC:1E:6F:66:D2:A4:1D:15:C1:BE:6E:95 Authority key identifier: 8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C Certificate issuer: /CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Certificate serial: 3AC9E2E112986517F613066C4168219E482B52CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft Manifest number: 023A Signing time: Sat 06 Dec 2025 17:30:48 +0000 Manifest this update: Sat 06 Dec 2025 17:25:48 +0000 Manifest next update: Tue 09 Dec 2025 17:42:48 +0000 Files and hashes: 1: 8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl (hash: n32Qvx+8uOMw/3isKoK2eJEMV/L9NhBR7onQGkzi/Ig=) 2: 3130332e3138362e36302e302f32332d3234203d3e20313439363932.roa (hash: D3mhXulAOJ2gHffXQf0w0aMiyDfxmDOfLqbB+xIObN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c9:e2:e1:12:98:65:17:f6:13:06:6c:41:68:21:9e:48:2b:52:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C Validity Not Before: Dec 6 17:25:48 2025 GMT Not After : Dec 9 17:42:48 2025 GMT Subject: CN=95FE8BEEB873A39AFC1E6F66D2A41D15C1BE6E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:8d:67:57:e6:63:77:a5:d7:ac:99:c4:56: 81:e8:d7:fa:d3:77:73:a4:53:8b:3f:fc:52:69:da: e3:35:f6:dc:fc:c7:e9:16:9a:8b:77:8c:a3:08:3d: be:aa:7a:1f:c3:a3:9f:49:4f:51:b8:6a:3d:92:5e: 2a:23:c4:f9:ea:23:40:40:1f:bf:57:92:3e:f2:32: 7a:64:2f:99:e1:ec:2a:51:74:60:52:74:a7:d8:3b: f5:38:6a:18:10:62:92:3a:96:50:3d:23:14:66:b3: df:e3:fe:96:60:8c:31:92:0f:17:73:f1:16:e9:57: 45:37:70:ff:91:7c:dd:41:63:90:b1:b0:98:54:5e: 1d:ab:39:41:02:d1:5b:aa:b0:77:ca:7b:49:32:8b: 39:9e:92:39:d1:49:d4:cf:26:d2:e1:4c:56:2a:c4: 72:ce:fc:a2:f7:51:7c:df:a4:f3:3b:58:88:76:79: 5a:00:33:cd:13:56:df:00:43:01:2e:d7:f6:e6:7d: 64:3b:63:3f:5f:81:00:1b:6e:55:62:06:1d:43:a7: 29:e1:d4:86:32:77:84:e7:2f:92:ec:ea:59:e8:6c: 8e:6c:80:5c:fa:5a:7d:a9:09:17:f9:c6:ba:fd:d7: 2b:a3:da:d4:b7:60:43:ad:d0:64:2d:cc:93:61:ee: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FE:8B:EE:B8:73:A3:9A:FC:1E:6F:66:D2:A4:1D:15:C1:BE:6E:95 X509v3 Authority Key Identifier: keyid:8B:7B:64:8E:54:AB:C4:F4:35:64:B6:B7:D8:EC:6C:A2:5E:B6:C6:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a679824f-4e08-4970-bba6-27b4726ca580/0/8B7B648E54ABC4F43564B6B7D8EC6CA25EB6C65C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f8:96:88:fe:34:14:c7:02:70:c1:e3:c1:c1:c7:25:46:a2: 1b:f0:72:42:12:01:f5:c5:14:03:39:3c:22:12:f0:25:68:5d: 15:73:b3:5f:f6:98:2b:22:65:5b:cc:cf:ca:be:d6:36:76:f4: 35:e4:38:65:5c:ac:38:8a:52:aa:53:f0:ee:08:c3:94:23:59: 93:10:0d:64:be:21:e1:43:8f:66:29:bf:ce:20:6e:c6:76:87: 89:cc:8e:a2:1b:cb:1f:c9:12:4c:20:72:f1:f0:85:7c:11:2d: 83:ae:ea:25:ec:dc:36:c3:3c:83:63:52:f1:af:d6:5f:4d:a3: f8:dd:ea:3e:96:f3:6e:52:38:25:41:07:fa:0e:ea:7a:e7:c3: c7:d5:e1:e6:83:93:7b:8c:45:fc:92:bd:3a:cb:23:39:cb:e0: 88:eb:dd:cc:fc:a3:ff:95:52:04:c1:38:76:2e:c7:a1:41:ae: a5:a5:b7:6d:67:a4:fc:9b:ea:72:67:15:dd:53:51:b9:07:dd: ed:88:29:9c:c1:85:54:87:d1:ee:35:ac:ed:73:11:84:03:1d: c3:0e:c7:a3:63:fc:0c:f8:05:d7:69:23:51:71:23:fc:65:9d: a4:27:62:72:16:c8:d3:e2:bf:e8:4c:dd:80:6c:ab:a6:5c:8a: 45:15:80:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsni4RKYZRf2EwZsQWghnkgrUsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1 RUI2QzY1QzAeFw0yNTEyMDYxNzI1NDhaFw0yNTEyMDkxNzQyNDhaMDMxMTAvBgNV BAMTKDk1RkU4QkVFQjg3M0EzOUFGQzFFNkY2NkQyQTQxRDE1QzFCRTZFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJrI1nV+Zjd6XXrJnEVoHo1/rT d3OkU4s//FJp2uM19tz8x+kWmot3jKMIPb6qeh/Do59JT1G4aj2SXiojxPnqI0BA H79Xkj7yMnpkL5nh7CpRdGBSdKfYO/U4ahgQYpI6llA9IxRms9/j/pZgjDGSDxdz 8RbpV0U3cP+RfN1BY5CxsJhUXh2rOUEC0VuqsHfKe0kyizmekjnRSdTPJtLhTFYq xHLO/KL3UXzfpPM7WIh2eVoAM80TVt8AQwEu1/bmfWQ7Yz9fgQAbblViBh1Dpynh 1IYyd4TnL5Ls6lnobI5sgFz6Wn2pCRf5xrr91yuj2tS3YEOt0GQtzJNh7lyHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlf6L7rhzo5r8Hm9m0qQdFcG+bpUwHwYDVR0j BBgwFoAUi3tkjlSrxPQ1ZLa32Oxsol62xlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Njc5ODI0Zi00ZTA4LTQ5NzAtYmJhNi0yN2I0NzI2Y2E1ODAvMC84QjdCNjQ4RTU0 QUJDNEY0MzU2NEI2QjdEOEVDNkNBMjVFQjZDNjVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZDQTI1RUI2 QzY1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTY3OTgyNGYtNGUwOC00OTcwLWJi YTYtMjdiNDcyNmNhNTgwLzAvOEI3QjY0OEU1NEFCQzRGNDM1NjRCNkI3RDhFQzZD QTI1RUI2QzY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr4loj+NBTHAnDB48HBxyVGohvwckISAfXF FAM5PCIS8CVoXRVzs1/2mCsiZVvMz8q+1jZ29DXkOGVcrDiKUqpT8O4Iw5QjWZMQ DWS+IeFDj2Ypv84gbsZ2h4nMjqIbyx/JEkwgcvHwhXwRLYOu6iXs3DbDPINjUvGv 1l9No/jd6j6W825SOCVBB/oO6nrnw8fV4eaDk3uMRfySvTrLIznL4Ijr3cz8o/+V UgTBOHYux6FBrqWlt21npPyb6nJnFd1TUbkH3e2IKZzBhVSH0e41rO1zEYQDHcMO x6Nj/Az4BddpI1FxI/xlnaQnYnIWyNPiv+hM3YBsq6ZcikUVgKI= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:14 2025 by rpki-client