This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft File: 8BE281D2F4ED4091746FDA568A4296F1171589E8.mft (raw, json) Hash identifier: /QYVjmC06zEcR4yrMxwEVMf/czbNebhLu5rrPKM346Y= Subject key identifier: 8A:2A:83:18:C2:A3:FB:84:9D:4E:6B:A6:9A:D6:C1:D0:60:02:88:B5 Authority key identifier: 8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 Certificate issuer: /CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Certificate serial: 73C19CFA5831220E3479149F3E5B1CB7940E665D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft Manifest number: 0530 Signing time: Sat 06 Dec 2025 21:40:40 +0000 Manifest this update: Sat 06 Dec 2025 21:35:40 +0000 Manifest next update: Wed 10 Dec 2025 00:33:40 +0000 Files and hashes: 1: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: JnMoHtL2uw/1X+XpxI+WJ5aRYCDoJDTU7TkrgplgZrw=) 2: 8BE281D2F4ED4091746FDA568A4296F1171589E8.crl (hash: mtNx6tKqdvJfRlnVIE1EQvyGtFlSwLjPyc9ToBBcRXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c1:9c:fa:58:31:22:0e:34:79:14:9f:3e:5b:1c:b7:94:0e:66:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE281D2F4ED4091746FDA568A4296F1171589E8 Validity Not Before: Dec 6 21:35:40 2025 GMT Not After : Dec 10 00:33:40 2025 GMT Subject: CN=8A2A8318C2A3FB849D4E6BA69AD6C1D0600288B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:2c:07:0e:c9:3d:43:1a:f7:3f:fb:68:6a: 67:af:74:2e:ac:57:d6:ea:19:78:79:a5:b0:e9:e4: d5:7f:39:67:e9:70:f3:2e:dd:54:be:b0:00:db:66: 7a:97:c8:09:86:b2:90:cc:24:e5:e8:83:1b:10:cc: b9:e6:4c:6a:1a:a5:f5:20:5b:58:bd:3b:e0:a9:8a: 0b:ff:16:26:e2:fb:5b:70:c8:c8:ff:3c:e1:6f:12: 7b:60:af:96:93:25:e6:a2:97:48:06:50:16:a7:6f: 7e:99:3e:3c:bf:9f:e3:c9:8f:a1:83:38:e7:43:4d: 25:f8:fd:2a:35:bc:5a:c8:4a:7e:b3:b6:9e:95:f1: a2:c5:8a:cf:c1:2b:49:1f:e1:d2:fe:2c:17:5c:2b: c2:8b:e4:8e:9b:75:51:59:d9:13:3c:a0:0f:ab:22: d3:26:f6:61:c0:e3:7f:db:87:f2:10:bb:b7:9f:ef: 6c:39:83:f6:6b:a0:cc:1f:5c:b0:58:e6:d1:b1:4d: 7c:0f:8c:1d:17:56:f7:33:64:9f:cb:e2:47:07:74: 38:8c:93:ba:14:7f:db:69:45:5f:60:c0:4b:c4:88: b6:99:80:a5:61:1d:0a:27:af:57:c3:b3:40:a9:a2: e7:b4:d5:0a:71:51:ba:7e:e9:88:a3:65:a9:73:cd: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2A:83:18:C2:A3:FB:84:9D:4E:6B:A6:9A:D6:C1:D0:60:02:88:B5 X509v3 Authority Key Identifier: keyid:8B:E2:81:D2:F4:ED:40:91:74:6F:DA:56:8A:42:96:F1:17:15:89:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE281D2F4ED4091746FDA568A4296F1171589E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/8BE281D2F4ED4091746FDA568A4296F1171589E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e3:bb:d8:8d:18:42:f7:e9:26:51:80:bd:36:a3:0f:03:7c: 60:ff:86:15:9a:90:b0:33:04:e1:26:7f:b1:ac:34:b2:c0:73: 4f:7b:3e:3b:ce:7e:c5:2e:59:89:37:91:15:db:8a:f5:ef:87: 84:cd:63:1d:3b:ec:65:39:76:5b:e5:71:17:cf:22:3a:ad:b5: ce:09:56:6b:b7:d7:dc:3b:72:f3:7f:d7:43:ad:14:34:86:1f: 18:8c:53:2c:65:ff:88:f1:3a:7e:99:7b:91:a2:3c:c2:4d:f5: 95:8a:0c:81:cd:7f:fd:08:e1:eb:ec:ca:55:24:f6:9b:97:22: c5:c6:d2:79:27:cb:d2:bb:78:85:51:8c:b3:bf:2f:35:83:57: a6:d8:94:47:72:bd:24:4e:62:a1:c3:f8:2b:6f:c8:de:94:44: 94:55:da:05:e1:4c:6f:ca:6c:27:b6:48:8a:e0:48:8f:1c:ba: 04:78:67:ee:f7:f1:a9:b9:53:21:e7:9e:76:59:96:fe:1d:3f: d6:89:c8:78:20:6f:f1:17:43:0e:f7:e5:65:9a:61:5d:26:c6: f6:65:1b:66:01:de:20:8b:b6:12:79:26:b9:68:4d:44:dd:cc: 36:ca:61:03:38:1f:3f:7e:7c:3c:9a:75:64:2e:fd:4d:f6:d1: 44:a3:69:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8Gc+lgxIg40eRSfPlsct5QOZl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjEx NzE1ODlFODAeFw0yNTEyMDYyMTM1NDBaFw0yNTEyMTAwMDMzNDBaMDMxMTAvBgNV BAMTKDhBMkE4MzE4QzJBM0ZCODQ5RDRFNkJBNjlBRDZDMUQwNjAwMjg4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrxSwHDsk9Qxr3P/toamevdC6s V9bqGXh5pbDp5NV/OWfpcPMu3VS+sADbZnqXyAmGspDMJOXogxsQzLnmTGoapfUg W1i9O+Cpigv/Fibi+1twyMj/POFvEntgr5aTJeail0gGUBanb36ZPjy/n+PJj6GD OOdDTSX4/So1vFrISn6ztp6V8aLFis/BK0kf4dL+LBdcK8KL5I6bdVFZ2RM8oA+r ItMm9mHA43/bh/IQu7ef72w5g/ZroMwfXLBY5tGxTXwPjB0XVvczZJ/L4kcHdDiM k7oUf9tpRV9gwEvEiLaZgKVhHQonr1fDs0Cpoue01QpxUbp+6YijZalzzTX9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiiqDGMKj+4SdTmummtbB0GACiLUwHwYDVR0j BBgwFoAUi+KB0vTtQJF0b9pWikKW8RcViegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODJkYjlkMy1kNmViLTRkNmItOWEyNC1mZWViMjFhYThmNTMvMC84QkUyODFEMkY0 RUQ0MDkxNzQ2RkRBNTY4QTQyOTZGMTE3MTU4OUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2RjExNzE1 ODlFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTgyZGI5ZDMtZDZlYi00ZDZiLTlh MjQtZmVlYjIxYWE4ZjUzLzAvOEJFMjgxRDJGNEVENDA5MTc0NkZEQTU2OEE0Mjk2 RjExNzE1ODlFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbju9iNGEL36SZRgL02ow8DfGD/hhWakLAz BOEmf7GsNLLAc097PjvOfsUuWYk3kRXbivXvh4TNYx077GU5dlvlcRfPIjqttc4J Vmu319w7cvN/10OtFDSGHxiMUyxl/4jxOn6Ze5GiPMJN9ZWKDIHNf/0I4evsylUk 9puXIsXG0nkny9K7eIVRjLO/LzWDV6bYlEdyvSROYqHD+CtvyN6URJRV2gXhTG/K bCe2SIrgSI8cugR4Z+738am5UyHnnnZZlv4dP9aJyHggb/EXQw735WWaYV0mxvZl G2YB3iCLthJ5JrloTUTdzDbKYQM4Hz9+fDyadWQu/U320USjacw= -----END CERTIFICATE-----Generated at Sun Dec 7 04:47:53 2025 by rpki-client