This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft File: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft (raw, json) Hash identifier: lga+xzPeJX3BGH1xpundtfqXnuiY8xUp9iPEO1OkT+U= Subject key identifier: 43:77:8C:4A:64:FD:A9:51:98:4C:70:94:D1:5A:EF:F2:56:25:C9:A9 Authority key identifier: B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 Certificate issuer: /CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Certificate serial: 6CB8D62ED93FAB670621F2F5204210DD6E02DDC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft Manifest number: 01D2 Signing time: Thu 04 Dec 2025 19:01:12 +0000 Manifest this update: Thu 04 Dec 2025 18:56:12 +0000 Manifest next update: Mon 08 Dec 2025 00:22:12 +0000 Files and hashes: 1: 3131372e35342e302e302f31362d3234203d3e2039333430.roa (hash: UieSxZjEvKIMrWcJdH2TDXUustdkDqF4w0J/hh4yLRA=) 2: 3230322e3135392e302e302f31382d3234203d3e2039333430.roa (hash: Juur4GxLWpPp32FXP5B1lQD8F+2wWzZU/lQ5cSimSag=) 3: 3230322e3135392e35302e302f32332d3234203d3e203435373239.roa (hash: 7LPe2lEj9jSSghBzwzWvEJHD1rdTalK2jKZeyt7h7R0=) 4: 3230322e3135392e39362e302f31392d3234203d3e2039333430.roa (hash: 4CYpX855PsKjE7pRqG0I65N8tDE2yevHm2JcGXCxF84=) 5: 3230322e3135332e3232342e302f31392d3234203d3e2039333430.roa (hash: vY8tbOcXriyCtT6FUxDmURMpeDa3xL/alWeAEYVK8DM=) 6: B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl (hash: s5VNyo5AbyAaNkTxKM0tp0C7uGRHrDWB0Hbs/6QmEio=) 7: 3230322e35332e3232342e302f31392d3234203d3e2039333430.roa (hash: cxySA+7GoKy0ZBQ953Jz7wXFE+7U1S6vU/NAFozpO4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:22:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b8:d6:2e:d9:3f:ab:67:06:21:f2:f5:20:42:10:dd:6e:02:dd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308 Validity Not Before: Dec 4 18:56:12 2025 GMT Not After : Dec 8 00:22:12 2025 GMT Subject: CN=43778C4A64FDA951984C7094D15AEFF25625C9A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:30:8b:46:53:88:6d:b0:fc:12:67:e4:a2:e7: e3:8f:a2:fb:2d:12:4f:f1:e3:fb:1d:58:79:75:3d: d9:4c:46:80:27:23:21:e8:fd:d2:74:c6:d0:61:e4: 2c:dc:23:11:09:17:63:0a:7e:1b:72:d7:7e:b6:3e: c0:3b:a7:68:18:47:4c:fa:bb:69:47:bb:05:4d:d4: 06:c5:29:66:a9:f9:54:29:1b:a9:64:ef:52:19:fd: 7b:9b:04:bc:4c:f7:a5:97:e1:a2:b0:3e:43:75:f9: 32:47:e5:57:63:fa:68:f7:5c:fa:21:66:5f:3c:4a: 08:22:df:a7:01:79:80:92:3f:14:12:eb:be:69:91: c2:bd:83:2d:ed:65:61:42:bc:0f:a7:79:46:ab:03: e7:9a:f5:26:32:e2:34:16:9c:30:89:be:2f:61:26: 82:03:e5:53:bd:af:bd:39:64:c8:37:c9:b7:72:e9: a8:b9:5e:18:74:a4:37:1c:8f:b3:20:3e:d3:6f:b5: 3b:63:8c:8e:f6:b5:b4:67:f5:ff:92:97:3c:74:96: 16:23:22:88:33:87:cf:46:f1:a6:f5:2b:e3:28:1c: 3c:0e:e8:03:79:d8:04:e4:88:2b:a3:8b:87:3a:81: 9e:6a:29:1a:d8:fb:e2:ab:cb:da:3e:7a:80:8c:b8: 6c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:77:8C:4A:64:FD:A9:51:98:4C:70:94:D1:5A:EF:F2:56:25:C9:A9 X509v3 Authority Key Identifier: keyid:B8:C2:A2:B1:B2:11:64:AF:8E:AE:E3:87:C7:D9:A5:D9:4D:4F:83:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5b1e57e-a0f1-467f-a46f-55a3157b0d65/0/B8C2A2B1B21164AF8EAEE387C7D9A5D94D4F8308.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:be:74:e6:b7:6a:9d:7b:8e:94:66:c4:2f:b0:65:33:56:7a: 75:ca:d8:b1:3c:3f:f2:c9:5c:33:84:09:39:06:8f:a5:dc:1d: 4b:47:09:65:a6:72:4a:b3:1a:92:7f:dc:fc:37:dd:37:0f:0a: b2:c8:25:ec:bf:5f:79:96:46:c2:96:99:18:27:e8:43:d2:c9: 51:cc:e4:13:06:39:75:2a:4b:a6:41:1c:3f:16:b5:0a:9d:39: 14:09:64:0c:e1:b3:2b:90:f3:ea:75:3f:f0:e6:0b:e2:39:a7: c0:bc:1c:23:91:5d:79:5c:07:05:2c:2b:a2:74:bf:fd:ab:26: 5a:d2:8f:0f:33:25:57:4e:2a:9b:ae:4f:58:78:59:1f:23:ea: 60:d3:48:f0:aa:40:08:76:d8:8a:af:9d:b1:77:52:b0:cc:2e: 47:e9:33:ff:4b:de:f2:f2:6e:11:0d:94:45:d3:e9:07:6d:7b: e0:46:e0:1d:37:ab:a8:7d:08:96:82:58:3c:95:3f:75:d0:64: aa:61:43:2f:45:00:43:4b:b3:c3:da:35:3e:cb:51:0f:f9:f4: 75:22:4e:49:5c:a3:6d:d1:75:59:ab:e1:b6:73:57:b8:db:ac: 44:62:d3:c2:df:36:57:98:c0:42:de:fe:4e:cc:ed:b2:0e:84: b1:03:e9:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLjWLtk/q2cGIfL1IEIQ3W4C3cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0 RDRGODMwODAeFw0yNTEyMDQxODU2MTJaFw0yNTEyMDgwMDIyMTJaMDMxMTAvBgNV BAMTKDQzNzc4QzRBNjRGREE5NTE5ODRDNzA5NEQxNUFFRkYyNTYyNUM5QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqMItGU4htsPwSZ+Si5+OPovst Ek/x4/sdWHl1PdlMRoAnIyHo/dJ0xtBh5CzcIxEJF2MKfhty1362PsA7p2gYR0z6 u2lHuwVN1AbFKWap+VQpG6lk71IZ/XubBLxM96WX4aKwPkN1+TJH5Vdj+mj3XPoh Zl88Sggi36cBeYCSPxQS675pkcK9gy3tZWFCvA+neUarA+ea9SYy4jQWnDCJvi9h JoID5VO9r705ZMg3ybdy6ai5Xhh0pDccj7MgPtNvtTtjjI72tbRn9f+Slzx0lhYj Iogzh89G8ab1K+MoHDwO6AN52ATkiCuji4c6gZ5qKRrY++Kry9o+eoCMuGwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ3eMSmT9qVGYTHCU0Vrv8lYlyakwHwYDVR0j BBgwFoAUuMKisbIRZK+OruOHx9ml2U1PgwgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWIxZTU3ZS1hMGYxLTQ2N2YtYTQ2Zi01NWEzMTU3YjBkNjUvMC9COEMyQTJCMUIy MTE2NEFGOEVBRUUzODdDN0Q5QTVEOTRENEY4MzA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1RDk0RDRG ODMwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTViMWU1N2UtYTBmMS00NjdmLWE0 NmYtNTVhMzE1N2IwZDY1LzAvQjhDMkEyQjFCMjExNjRBRjhFQUVFMzg3QzdEOUE1 RDk0RDRGODMwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHe+dOa3ap17jpRmxC+wZTNWenXK2LE8P/LJ XDOECTkGj6XcHUtHCWWmckqzGpJ/3Pw33TcPCrLIJey/X3mWRsKWmRgn6EPSyVHM 5BMGOXUqS6ZBHD8WtQqdORQJZAzhsyuQ8+p1P/DmC+I5p8C8HCORXXlcBwUsK6J0 v/2rJlrSjw8zJVdOKpuuT1h4WR8j6mDTSPCqQAh22IqvnbF3UrDMLkfpM/9L3vLy bhENlEXT6Qdte+BG4B03q6h9CJaCWDyVP3XQZKphQy9FAENLs8PaNT7LUQ/59HUi Tklco23RdVmr4bZzV7jbrERi08LfNleYwELe/k7M7bIOhLED6QQ= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:16 2025 by rpki-client