This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft File: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft (raw, json) Hash identifier: 3QVJWhOMzAgRhD6u6mKZxn99B0VCwHksnGpCAyLz9e4= Subject key identifier: 55:02:4A:C0:89:29:B7:EB:8E:D3:1F:21:A6:5E:27:DA:C6:D9:41:D8 Authority key identifier: 8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD Certificate issuer: /CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Certificate serial: 13DD043C1CA3A6406DC466BB90035589388A317F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft Manifest number: 052A Signing time: Fri 05 Dec 2025 17:42:15 +0000 Manifest this update: Fri 05 Dec 2025 17:37:15 +0000 Manifest next update: Mon 08 Dec 2025 22:04:15 +0000 Files and hashes: 1: 3130332e3132312e3132322e302f32342d3234203d3e20313338313331.roa (hash: 9ysblGZ5nRnpD9uRTt/CttmsXFnbP66QhYFS5MHljXI=) 2: 3130332e3131352e3136342e302f32342d3234203d3e20313338313331.roa (hash: PfYYptDyBdUl4aWzZCjnvFHr6qQWRMjgNV762Lfvv/Q=) 3: 8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl (hash: uFlTH3UmdhNc+7xqZ7Ql4hnFAaqKk95rsupEs5vKSf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:04:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:dd:04:3c:1c:a3:a6:40:6d:c4:66:bb:90:03:55:89:38:8a:31:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD Validity Not Before: Dec 5 17:37:15 2025 GMT Not After : Dec 8 22:04:15 2025 GMT Subject: CN=55024AC08929B7EB8ED31F21A65E27DAC6D941D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:c5:1f:d8:23:0a:ee:ab:fd:86:1d:8d:a8: d4:03:04:db:b6:26:45:4e:3c:bb:fd:94:c3:73:6c: e9:7a:eb:39:9c:da:3d:49:aa:8b:0a:67:78:36:2a: d0:ee:d6:83:18:7c:e2:11:85:56:b4:b0:ac:08:f3: da:cf:b8:bc:f5:b6:55:a0:97:46:f2:25:f0:e0:39: f4:58:9a:fa:e3:91:74:85:9a:ce:9a:2f:31:aa:f5: 4f:21:84:96:2d:2c:d4:cd:73:a2:e2:56:cb:ac:1d: dc:07:89:06:b4:77:ac:9d:b2:73:b2:4c:36:94:2c: 5c:9d:10:b9:5c:df:1c:de:26:12:9b:e3:38:33:bf: 4e:c5:82:c4:aa:b4:c6:8d:2b:5b:7c:a1:11:89:8f: f2:4d:04:14:60:9a:c9:a9:e0:b0:ef:74:34:71:08: 8d:be:de:6e:8f:e8:12:7c:d5:e3:e4:1c:50:36:9a: 7a:25:55:e2:65:fb:7b:ec:a2:49:42:54:72:4a:1b: a5:e6:2c:85:11:a7:04:c6:e0:54:21:bf:df:03:ea: b4:fe:46:45:da:bb:ec:64:c4:0b:6b:5a:db:0e:03: ec:17:02:61:56:57:d9:cb:3f:28:a5:39:e0:84:9b: 0e:59:2d:e2:12:dc:e5:d3:98:eb:cd:5e:1e:70:e9: 3e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:02:4A:C0:89:29:B7:EB:8E:D3:1F:21:A6:5E:27:DA:C6:D9:41:D8 X509v3 Authority Key Identifier: keyid:8B:E4:A7:01:F2:92:4B:4B:FB:8A:98:3A:1B:0B:D5:C8:86:3B:F3:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d06347f4-ea26-4d4c-a568-1d863360e421/0/8BE4A701F2924B4BFB8A983A1B0BD5C8863BF3FD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:8a:ff:76:60:23:b6:a7:f7:76:12:cb:88:f1:b9:35:0d:e9: cd:40:d9:bf:e5:36:3a:7f:ab:f5:61:8a:60:10:e2:4a:5d:86: c7:e5:96:be:db:ad:3c:23:05:b8:c0:b2:30:d9:1e:7c:7a:a7: 31:ac:53:ad:3a:72:a0:9a:e1:c3:4c:3c:2d:d0:75:a0:41:42: 3e:50:54:ee:94:39:47:b9:32:c4:00:25:38:c8:60:c8:c5:6d: 7a:28:04:e2:2e:f4:26:65:88:6f:23:1f:95:7b:03:44:1b:b7: aa:24:0f:fa:f0:45:f9:5f:b9:69:0f:7c:b9:55:da:cc:51:0b: 0f:05:de:58:28:87:93:3d:58:26:e3:4a:48:fa:e8:ed:03:68: 7e:14:f1:1b:4a:ce:71:7f:c8:71:1f:2a:f3:55:0d:4f:e4:a5: de:6a:49:cb:9b:b7:a3:54:17:f3:f2:c8:67:f6:4b:86:28:8a: 63:2e:e3:3d:e7:7f:92:2d:5c:e5:2f:a7:51:d5:05:bc:e0:6e: ee:27:a5:ce:13:07:ad:a0:e1:7e:69:3c:1f:ab:fc:ee:ef:78: 20:96:35:12:c4:cf:cd:b5:f6:88:49:18:10:8e:a6:30:9d:71: 0e:b0:39:96:4f:6b:96:51:4f:3a:10:5d:53:35:80:d2:7e:85: d0:30:26:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE90EPByjpkBtxGa7kANViTiKMX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4 NjNCRjNGRDAeFw0yNTEyMDUxNzM3MTVaFw0yNTEyMDgyMjA0MTVaMDMxMTAvBgNV BAMTKDU1MDI0QUMwODkyOUI3RUI4RUQzMUYyMUE2NUUyN0RBQzZEOTQxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuXcUf2CMK7qv9hh2NqNQDBNu2 JkVOPLv9lMNzbOl66zmc2j1JqosKZ3g2KtDu1oMYfOIRhVa0sKwI89rPuLz1tlWg l0byJfDgOfRYmvrjkXSFms6aLzGq9U8hhJYtLNTNc6LiVsusHdwHiQa0d6ydsnOy TDaULFydELlc3xzeJhKb4zgzv07FgsSqtMaNK1t8oRGJj/JNBBRgmsmp4LDvdDRx CI2+3m6P6BJ81ePkHFA2mnolVeJl+3vsoklCVHJKG6XmLIURpwTG4FQhv98D6rT+ RkXau+xkxAtrWtsOA+wXAmFWV9nLPyilOeCEmw5ZLeIS3OXTmOvNXh5w6T71AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQJKwIkpt+uO0x8hpl4n2sbZQdgwHwYDVR0j BBgwFoAUi+SnAfKSS0v7ipg6GwvVyIY78/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDYzNDdmNC1lYTI2LTRkNGMtYTU2OC0xZDg2MzM2MGU0MjEvMC84QkU0QTcwMUYy OTI0QjRCRkI4QTk4M0ExQjBCRDVDODg2M0JGM0ZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1Qzg4NjNC RjNGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA2MzQ3ZjQtZWEyNi00ZDRjLWE1 NjgtMWQ4NjMzNjBlNDIxLzAvOEJFNEE3MDFGMjkyNEI0QkZCOEE5ODNBMUIwQkQ1 Qzg4NjNCRjNGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2K/3ZgI7an93YSy4jxuTUN6c1A2b/lNjp/ q/VhimAQ4kpdhsfllr7brTwjBbjAsjDZHnx6pzGsU606cqCa4cNMPC3QdaBBQj5Q VO6UOUe5MsQAJTjIYMjFbXooBOIu9CZliG8jH5V7A0Qbt6okD/rwRflfuWkPfLlV 2sxRCw8F3lgoh5M9WCbjSkj66O0DaH4U8RtKznF/yHEfKvNVDU/kpd5qScubt6NU F/PyyGf2S4YoimMu4z3nf5ItXOUvp1HVBbzgbu4npc4TB62g4X5pPB+r/O7veCCW NRLEz8219ohJGBCOpjCdcQ6wOZZPa5ZRTzoQXVM1gNJ+hdAwJnc= -----END CERTIFICATE-----Generated at Sun Dec 7 03:13:27 2025 by rpki-client