This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft File: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft (raw, json) Hash identifier: MiTLRE5RR/+OUOiUbgpLPrwzhC5v8leCNMgv64M6MB4= Subject key identifier: 15:B6:45:3F:A4:5D:C6:A5:B6:5B:24:28:CC:39:3C:BB:44:F4:8A:BD Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 Certificate issuer: /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Certificate serial: 573083988DAEE34D31C5FC99A958E4E78A76C80D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft Manifest number: 0228 Signing time: Thu 04 Dec 2025 22:21:14 +0000 Manifest this update: Thu 04 Dec 2025 22:16:14 +0000 Manifest next update: Mon 08 Dec 2025 04:59:14 +0000 Files and hashes: 1: 3130332e3138362e39312e302f32342d3234203d3e20313439373037.roa (hash: v7WXEnDaWLgLHCCs0/IjJD0cW6T6d8CeSIJNddKA634=) 2: 8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl (hash: Z7eb04oFfwIKM220QiL3scmbbaMzfU19F/A0Jmz32+k=) 3: 3130332e3138362e39302e302f32342d3234203d3e20313439373037.roa (hash: 656gLN35OIXcG6Vik35XhI6XoKD7dIobeeOabAVD0UQ=) 4: 3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (hash: IxE4f1xQzeKQZjsPZmdFbJyZKv94xhwmFh4/4Aw/W0I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 04:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:30:83:98:8d:ae:e3:4d:31:c5:fc:99:a9:58:e4:e7:8a:76:c8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1 Validity Not Before: Dec 4 22:16:14 2025 GMT Not After : Dec 8 04:59:14 2025 GMT Subject: CN=15B6453FA45DC6A5B65B2428CC393CBB44F48ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:e6:4f:aa:47:1b:06:48:34:12:01:e4:43: 42:a5:70:bb:b1:f0:73:74:38:e2:91:d9:9b:76:8d: c7:85:0b:40:c0:18:c8:57:aa:d2:c6:3e:50:f6:98: aa:e1:28:7b:f2:9d:26:e6:8e:44:b3:31:f9:aa:0a: 91:17:71:ac:4f:af:30:9d:8e:14:bf:eb:25:c5:58: e4:ac:54:f9:33:37:cc:0a:cf:dd:b3:d3:8b:c4:a1: e5:7d:25:f3:8f:f3:cb:18:70:60:06:7b:f1:43:fb: 20:c6:4d:23:14:5e:c8:e6:fb:27:96:b3:a7:d1:1a: 67:8d:19:85:58:80:d0:e7:36:88:0f:0b:df:56:b6: 10:ce:00:92:5c:69:95:a7:13:a3:ab:a0:49:1c:22: 33:4d:79:de:21:c4:dc:dd:ca:d6:1a:d8:3a:5a:09: fa:40:13:aa:13:f4:4c:fd:ea:f1:55:56:96:28:08: 15:4d:ce:bb:62:bd:f1:f7:a5:fc:68:be:fa:59:c2: dc:29:04:db:63:13:ad:c9:2c:69:e6:d2:5e:1b:e6: 1c:9e:a8:4c:06:67:83:c5:02:e2:e8:8e:94:64:e7: f9:9b:a0:fe:da:1a:0b:90:6d:51:78:67:19:a3:41: 9b:c4:d1:91:fa:1c:a7:8c:a3:72:04:b8:67:fd:ca: 51:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B6:45:3F:A4:5D:C6:A5:B6:5B:24:28:CC:39:3C:BB:44:F4:8A:BD X509v3 Authority Key Identifier: keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2c:89:3f:5a:a7:0b:e4:ea:ce:95:d4:3c:51:9a:e2:8b:40: df:14:63:8f:a0:49:db:63:b0:5e:98:d3:bc:b5:6d:aa:9c:99: ad:74:9f:13:23:1d:0a:ad:7c:cc:9a:10:86:51:7c:7e:ca:03: 22:fa:7e:8c:34:e8:be:a2:be:6d:ec:a0:f9:35:90:f3:30:ba: aa:6d:fb:cd:2a:a5:5f:9f:6f:04:80:08:a2:81:f9:13:20:07: 84:9b:ea:9c:cf:84:f5:90:b9:fa:ed:a4:18:48:37:8e:b1:55: 7d:37:e0:e2:fe:e4:39:79:3c:15:8c:6a:6b:75:ae:04:ba:4e: e0:b4:31:ab:80:f3:5e:9a:c2:99:2b:e4:01:1d:64:17:a2:a2: df:84:c1:87:89:ff:a8:ab:d0:c7:84:3a:e0:db:69:d7:59:0b: 6c:ef:16:02:e6:fb:9e:93:2c:1b:cc:d5:0e:f2:8d:e9:a7:08: 59:f0:a0:ed:4a:23:76:37:53:d7:7d:a3:8d:ce:2a:40:f1:3b: 21:77:a9:50:f7:ff:26:50:8f:eb:10:c9:73:cc:99:f3:14:07: de:ce:4f:19:16:50:2a:96:5c:8c:27:b8:c7:d6:77:d3:4c:1b: 73:31:79:32:36:1e:0c:5a:6f:c0:e5:8f:61:a2:d4:03:0d:94: 38:51:a2:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzCDmI2u400xxfyZqVjk54p2yA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNB NjFGOEVFMTAeFw0yNTEyMDQyMjE2MTRaFw0yNTEyMDgwNDU5MTRaMDMxMTAvBgNV BAMTKDE1QjY0NTNGQTQ1REM2QTVCNjVCMjQyOENDMzkzQ0JCNDRGNDhBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4eZPqkcbBkg0EgHkQ0KlcLux 8HN0OOKR2Zt2jceFC0DAGMhXqtLGPlD2mKrhKHvynSbmjkSzMfmqCpEXcaxPrzCd jhS/6yXFWOSsVPkzN8wKz92z04vEoeV9JfOP88sYcGAGe/FD+yDGTSMUXsjm+yeW s6fRGmeNGYVYgNDnNogPC99WthDOAJJcaZWnE6OroEkcIjNNed4hxNzdytYa2Dpa CfpAE6oT9Ez96vFVVpYoCBVNzrtivfH3pfxovvpZwtwpBNtjE63JLGnm0l4b5hye qEwGZ4PFAuLojpRk5/mboP7aGguQbVF4ZxmjQZvE0ZH6HKeMo3IEuGf9ylHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFbZFP6RdxqW2WyQozDk8u0T0ir0wHwYDVR0j BBgwFoAUjb7PMUvTyCmSOjqXv8YhE6YfjuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i OTRjMWU5NS1hNzM4LTRlNDctOGU1Yy03YWY2ODFiMzZiMDAvMC84REJFQ0YzMTRC RDNDODI5OTIzQTNBOTdCRkM2MjExM0E2MUY4RUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIxMTNBNjFG OEVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjk0YzFlOTUtYTczOC00ZTQ3LThl NWMtN2FmNjgxYjM2YjAwLzAvOERCRUNGMzE0QkQzQzgyOTkyM0EzQTk3QkZDNjIx MTNBNjFGOEVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUsiT9apwvk6s6V1DxRmuKLQN8UY4+gSdtj sF6Y07y1baqcma10nxMjHQqtfMyaEIZRfH7KAyL6fow06L6ivm3soPk1kPMwuqpt +80qpV+fbwSACKKB+RMgB4Sb6pzPhPWQufrtpBhIN46xVX034OL+5Dl5PBWMamt1 rgS6TuC0MauA816awpkr5AEdZBeiot+EwYeJ/6ir0MeEOuDbaddZC2zvFgLm+56T LBvM1Q7yjemnCFnwoO1KI3Y3U9d9o43OKkDxOyF3qVD3/yZQj+sQyXPMmfMUB97O TxkWUCqWXIwnuMfWd9NMG3MxeTI2Hgxab8Dlj2Gi1AMNlDhRoqg= -----END CERTIFICATE-----Generated at Sun Dec 7 05:58:55 2025 by rpki-client