This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft (raw, json) Hash identifier: OytL1kJdyAh8jtvu9BGCaXzilqNd8q13gu6vgDczBXE= Subject key identifier: 43:8D:D9:1B:4B:12:F5:D9:28:E7:48:10:DE:E2:00:EB:1A:7E:26:A3 Authority key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Certificate issuer: /CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Certificate serial: 764924755D503C1776882574642B4BDC52774386 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft Manifest number: 022D Signing time: Fri 05 Dec 2025 03:52:09 +0000 Manifest this update: Fri 05 Dec 2025 03:47:09 +0000 Manifest next update: Mon 08 Dec 2025 13:16:09 +0000 Files and hashes: 1: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl (hash: lyklg02G3mNzo0Zsw5aT3996Gki9dg048SG6Cmreu44=) 2: 3130332e3138342e35362e302f32342d3234203d3e20313439363637.roa (hash: wL4jyeE9OG3mCA6Twfdl1VaSzPxamD0EwTijKmcLq7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:49:24:75:5d:50:3c:17:76:88:25:74:64:2b:4b:dc:52:77:43:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Validity Not Before: Dec 5 03:47:09 2025 GMT Not After : Dec 8 13:16:09 2025 GMT Subject: CN=438DD91B4B12F5D928E74810DEE200EB1A7E26A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c4:11:16:21:20:0c:c1:13:4b:93:77:ec:78: 71:69:4a:13:db:43:f0:ee:6a:c9:30:d8:86:7d:65: f5:3e:08:f4:48:aa:a2:45:2e:9f:b6:e3:d2:b8:44: f2:7e:b0:c4:cd:f7:df:08:f5:19:04:4a:9a:20:22: e0:69:46:2a:87:be:22:d4:c7:3e:b5:a4:fb:ca:b3: 33:30:1c:11:18:38:3d:90:6f:c1:67:f6:1f:02:f3: fe:ca:a4:e5:fd:08:51:1c:3d:47:87:78:d0:3c:13: 72:03:0d:27:f2:6b:6b:79:ac:a2:cc:f2:af:d8:e3: cb:99:f8:ac:3d:4d:61:96:e3:3e:cf:93:c6:7d:37: fa:ca:07:d0:9f:df:a2:a4:1b:06:9f:e0:65:06:d3: 61:3b:90:5d:30:48:75:7e:b0:94:c0:5f:6e:5f:7c: ae:9c:78:bb:81:41:21:77:d0:8c:3f:cf:6d:8c:93: 4d:a2:f1:88:7f:45:13:e9:19:4f:bf:ad:f8:fa:1c: 3c:b7:08:0d:ab:7c:95:f0:9d:ea:d2:27:3a:cb:13: 87:ca:ab:02:2a:9e:46:9e:e2:32:34:8e:c3:74:cb: 6f:0c:fc:6a:df:a9:48:e7:a0:3a:d1:95:f6:81:a2: c4:50:79:81:5d:06:79:2c:4a:3f:5a:db:15:14:ba: 79:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8D:D9:1B:4B:12:F5:D9:28:E7:48:10:DE:E2:00:EB:1A:7E:26:A3 X509v3 Authority Key Identifier: keyid:8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:06:1f:32:cb:3c:8c:4e:5f:1d:59:1a:19:ff:83:b4:9c:40: 9a:c1:4f:93:97:36:64:07:da:27:54:18:e8:cf:8a:ff:ba:1c: 52:22:93:47:b0:58:28:7e:09:cc:8d:70:99:43:b6:a1:04:b2: 7b:86:d8:3d:f3:74:ed:b8:c9:11:4b:23:23:79:10:97:3e:14: 41:32:a7:80:76:fc:e7:18:47:57:f9:d9:c4:c0:d2:39:61:f8: 98:27:8a:8c:bd:38:3c:79:7c:67:c6:95:1d:78:2d:7d:e4:57: 30:9e:b1:03:11:7e:0c:6c:3c:f3:56:6c:35:6f:31:bd:0d:90: 0f:fe:b8:0a:ce:6f:01:22:31:55:f9:22:c7:ed:96:73:02:e9: 8e:06:76:b2:58:47:e3:cb:14:8a:26:72:65:e0:43:e4:82:eb: 8b:16:4a:61:f9:2c:20:73:af:c5:71:26:43:17:12:f3:ce:8f: 24:0d:7a:8a:6d:96:13:98:75:84:0f:8e:46:6b:ea:97:3f:c5: d1:ea:f9:6e:72:9a:de:98:0b:2b:d0:7b:b2:58:47:7c:c8:5a: cc:c1:aa:fb:82:74:fc:57:5f:98:66:e0:8e:e8:80:ab:9a:6b: 36:d5:48:4f:cb:a7:b5:34:54:f5:8e:a6:d0:d6:58:4d:66:d3: 4d:3a:5c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkkkdV1QPBd2iCV0ZCtL3FJ3Q4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRD N0VFMDVBMjAeFw0yNTEyMDUwMzQ3MDlaFw0yNTEyMDgxMzE2MDlaMDMxMTAvBgNV BAMTKDQzOEREOTFCNEIxMkY1RDkyOEU3NDgxMERFRTIwMEVCMUE3RTI2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoxBEWISAMwRNLk3fseHFpShPb Q/Duaskw2IZ9ZfU+CPRIqqJFLp+249K4RPJ+sMTN998I9RkESpogIuBpRiqHviLU xz61pPvKszMwHBEYOD2Qb8Fn9h8C8/7KpOX9CFEcPUeHeNA8E3IDDSfya2t5rKLM 8q/Y48uZ+Kw9TWGW4z7Pk8Z9N/rKB9Cf36KkGwaf4GUG02E7kF0wSHV+sJTAX25f fK6ceLuBQSF30Iw/z22Mk02i8Yh/RRPpGU+/rfj6HDy3CA2rfJXwnerSJzrLE4fK qwIqnkae4jI0jsN0y28M/GrfqUjnoDrRlfaBosRQeYFdBnksSj9a2xUUunmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ43ZG0sS9dko50gQ3uIA6xp+JqMwHwYDVR0j BBgwFoAUiw3hQay4EeD+ZQhc8jOe5MfuBaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMC84QjBERTE0MUFD QjgxMUUwRkU2NTA4NUNGMjMzOUVFNEM3RUUwNUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlFRTRDN0VF MDVBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU2YTU3YzUtZGY3My00M2Y1LTg2 NWQtNmJkMjQ4YzIyZmJhLzAvOEIwREUxNDFBQ0I4MTFFMEZFNjUwODVDRjIzMzlF RTRDN0VFMDVBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsGHzLLPIxOXx1ZGhn/g7ScQJrBT5OXNmQH 2idUGOjPiv+6HFIik0ewWCh+CcyNcJlDtqEEsnuG2D3zdO24yRFLIyN5EJc+FEEy p4B2/OcYR1f52cTA0jlh+Jgnioy9ODx5fGfGlR14LX3kVzCesQMRfgxsPPNWbDVv Mb0NkA/+uArObwEiMVX5IsftlnMC6Y4GdrJYR+PLFIomcmXgQ+SC64sWSmH5LCBz r8VxJkMXEvPOjyQNeoptlhOYdYQPjkZr6pc/xdHq+W5ymt6YCyvQe7JYR3zIWszB qvuCdPxXX5hm4I7ogKuaazbVSE/Lp7U0VPWOptDWWE1m0006XPw= -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:49 2025 by rpki-client