This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: 1DxkvVIF2J5gmP8fJypThIFsZ2+52MtbyNlFENT05MU= Subject key identifier: 7D:4E:C1:9A:13:52:14:A5:E3:CB:3C:D3:FB:55:13:50:F2:F8:6B:66 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 766A555141214F120C9EAB18C561A4A6F0602247 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0153 Signing time: Sat 06 Dec 2025 17:00:05 +0000 Manifest this update: Sat 06 Dec 2025 16:55:05 +0000 Manifest next update: Wed 10 Dec 2025 03:51:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: xMmL0Z3S3LgRe8bGnDfzsU6AqYy0HbUhHiynOo74z14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6a:55:51:41:21:4f:12:0c:9e:ab:18:c5:61:a4:a6:f0:60:22:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Dec 6 16:55:05 2025 GMT Not After : Dec 10 03:51:05 2025 GMT Subject: CN=7D4EC19A135214A5E3CB3CD3FB551350F2F86B66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:44:e8:93:a6:0d:2a:7c:c7:78:f1:42:85: d9:b4:9b:7e:fa:79:09:21:50:bf:32:91:c0:ca:d9: d3:f1:ef:b0:3b:bc:a5:81:d2:51:de:ae:f3:c1:34: 4d:7e:a7:1c:fd:6a:cb:ef:cd:e4:ea:d0:07:c8:a3: 36:b3:18:ab:71:d1:e7:b3:bb:43:a5:01:67:7b:bb: f9:2f:6a:28:37:fa:57:69:ac:41:59:c8:ca:56:fe: 11:c1:b6:76:0f:51:bb:ab:9f:43:5c:bc:69:6b:8f: 06:e8:8c:89:11:82:6d:fd:2a:5c:a3:6a:e7:08:d7: 8e:7b:27:3b:ea:c3:fd:06:ec:b2:cc:fb:a1:d7:f7: 14:4f:94:26:21:c8:3a:b4:b3:b2:3b:d2:e7:8b:79: 1c:a0:af:cc:f1:2c:1d:f3:bc:c3:da:f4:cf:03:9d: 6a:dd:8e:79:58:68:01:db:d9:db:b4:4f:2f:08:ba: d6:fa:18:61:56:3d:95:fc:9a:57:6b:8d:2f:cc:04: e6:ac:40:df:96:82:a4:f2:77:2c:e9:a0:3c:2f:fb: 62:55:fe:ab:5d:49:9d:d1:8a:28:7f:12:8e:cc:d3: e2:17:2f:05:78:b6:92:d4:e5:fd:0c:73:00:33:6e: 94:71:51:48:02:1c:8c:03:49:38:7c:a1:4c:68:5c: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4E:C1:9A:13:52:14:A5:E3:CB:3C:D3:FB:55:13:50:F2:F8:6B:66 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:50:f6:8f:4c:a4:23:94:28:39:1b:5e:9f:e0:e0:5a:97:5c: 39:f3:a4:1f:2a:1e:fb:d0:00:5f:30:ed:08:2d:e2:ff:32:a8: 0c:ae:1e:40:1a:49:55:65:21:82:96:1f:44:08:10:19:8b:12: 06:47:99:c0:bb:d8:2d:9d:63:b5:23:a4:bd:af:9e:37:6a:3e: bd:a9:c6:7c:6c:1d:6b:72:ef:29:64:0c:88:d6:54:34:d5:9e: 95:e6:0b:ee:29:73:48:b4:1e:25:75:59:2d:6a:d3:a6:e3:67: c2:df:f8:b6:90:03:8c:db:48:02:f8:1f:77:5f:7d:b5:59:5d: 21:bc:3e:2e:09:08:cf:85:80:71:54:82:57:a5:f5:d9:e1:2b: 44:25:c6:31:51:58:01:16:4d:16:c3:19:ff:4f:e8:66:20:66: b5:e4:d6:ab:b2:d1:be:37:d8:97:27:eb:e4:01:e6:fe:77:e0: 4a:89:66:74:89:6d:38:e5:5d:84:4f:3c:99:ae:82:7b:4b:e9: 3e:f8:ed:11:c7:d9:7c:cf:9b:5b:4e:24:3d:e8:0e:ac:69:ad: f7:e8:d3:0e:80:2a:8f:88:2b:6a:84:55:c3:c1:82:d7:b6:99: 0b:33:ed:57:1d:d7:7a:31:60:a3:2a:ef:2f:f4:19:61:15:63: 2a:ce:0a:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmpVUUEhTxIMnqsYxWGkpvBgIkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTEyMDYxNjU1MDVaFw0yNTEyMTAwMzUxMDVaMDMxMTAvBgNV BAMTKDdENEVDMTlBMTM1MjE0QTVFM0NCM0NEM0ZCNTUxMzUwRjJGODZCNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzETok6YNKnzHePFChdm0m376 eQkhUL8ykcDK2dPx77A7vKWB0lHervPBNE1+pxz9asvvzeTq0AfIozazGKtx0eez u0OlAWd7u/kvaig3+ldprEFZyMpW/hHBtnYPUburn0NcvGlrjwbojIkRgm39Klyj aucI1457Jzvqw/0G7LLM+6HX9xRPlCYhyDq0s7I70ueLeRygr8zxLB3zvMPa9M8D nWrdjnlYaAHb2du0Ty8Iutb6GGFWPZX8mldrjS/MBOasQN+WgqTydyzpoDwv+2JV /qtdSZ3Riih/Eo7M0+IXLwV4tpLU5f0McwAzbpRxUUgCHIwDSTh8oUxoXEcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfU7BmhNSFKXjyzzT+1UTUPL4a2YwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhQ9o9MpCOUKDkbXp/g4FqXXDnzpB8qHvvQ AF8w7Qgt4v8yqAyuHkAaSVVlIYKWH0QIEBmLEgZHmcC72C2dY7UjpL2vnjdqPr2p xnxsHWty7ylkDIjWVDTVnpXmC+4pc0i0HiV1WS1q06bjZ8Lf+LaQA4zbSAL4H3df fbVZXSG8Pi4JCM+FgHFUglel9dnhK0QlxjFRWAEWTRbDGf9P6GYgZrXk1quy0b43 2Jcn6+QB5v534EqJZnSJbTjlXYRPPJmugntL6T747RHH2XzPm1tOJD3oDqxprffo 0w6AKo+IK2qEVcPBgte2mQsz7Vcd13oxYKMq7y/0GWEVYyrOCnA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:07:55 2025 by rpki-client