This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: drNSxXWs05GG7JbVr1PZgsWaoi+TmTAzgkdyVZlSJbM= Subject key identifier: EF:64:91:F6:41:89:A0:CD:FA:E0:0F:67:F7:F7:CF:5E:26:DA:14:79 Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 7461B03B6CF396FDF3C00C0AA0593C8C0F412FC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0393 Signing time: Sat 06 Dec 2025 14:11:52 +0000 Manifest this update: Sat 06 Dec 2025 14:06:52 +0000 Manifest next update: Wed 10 Dec 2025 01:45:52 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 2: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) 3: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: 4a+csccHLhYOB7f9QEvN2gL2LB1bGBf0Y8PD6kWo/Tc=) 4: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:61:b0:3b:6c:f3:96:fd:f3:c0:0c:0a:a0:59:3c:8c:0f:41:2f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Dec 6 14:06:52 2025 GMT Not After : Dec 10 01:45:52 2025 GMT Subject: CN=EF6491F64189A0CDFAE00F67F7F7CF5E26DA1479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:20:9b:76:44:54:9a:e7:19:7c:d5:95:a0:22: fe:3d:2c:93:c7:de:74:d5:01:51:9e:35:47:1b:a9: 3a:47:20:23:3e:ef:2c:02:c4:be:fc:2b:8e:ec:fe: 15:c1:c3:d0:e8:05:4d:35:bb:8f:8c:7b:e8:88:38: ef:07:79:90:a4:e6:20:37:41:2f:0d:ef:8d:85:aa: 0c:0f:65:11:f4:2a:48:f3:22:88:da:5a:35:e9:74: 6d:40:48:90:03:31:15:5b:b9:49:53:2a:6b:b9:b0: 21:ce:6b:85:4e:5b:f8:4b:20:52:7a:e7:8c:ed:4c: f7:b9:14:8f:24:ed:dd:90:a4:33:f5:6e:b7:5b:9f: 2b:02:53:8a:30:12:f4:50:ae:ef:77:21:82:17:dc: 10:18:b4:9a:2d:a5:b2:d3:eb:10:b4:3f:3d:53:da: fa:ef:79:e0:aa:fb:a1:5c:92:da:48:2e:50:2a:7d: df:7e:47:87:ca:3b:21:d5:ae:9d:2c:60:ea:d6:57: b2:44:21:30:24:d1:bd:7e:5f:fe:8b:d8:b9:1f:4c: e8:70:cc:ba:5b:38:eb:a5:f5:11:c2:8f:29:1f:9f: fa:f1:69:50:2d:b2:fe:02:e0:87:05:3b:4a:1d:76: d1:90:30:ac:de:0d:9b:ea:a7:3b:c7:fd:48:60:53: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:64:91:F6:41:89:A0:CD:FA:E0:0F:67:F7:F7:CF:5E:26:DA:14:79 X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d2:5b:5a:2a:29:cd:36:88:4a:7b:ac:ba:72:00:b0:5f:30: d3:19:a5:a6:5a:8e:cb:20:78:68:0b:74:cd:be:af:2e:87:17: 8a:cb:96:8d:c4:c5:53:88:c0:e5:7a:71:a4:74:55:a7:eb:c3: 8c:59:5c:ed:bb:ba:c8:fa:5e:bd:43:9e:a6:57:6c:56:f0:ab: 0e:fc:92:b4:12:d6:45:2b:73:ac:e4:4a:38:c5:f7:74:96:28: 77:a3:3a:f3:53:56:0a:ed:6c:5a:ed:84:9f:9d:02:b7:19:49: ae:06:03:4d:eb:dc:bb:2f:00:e4:4e:65:f0:9d:08:4c:c8:49: 11:0f:af:91:45:2e:78:ec:e4:bb:63:9d:9f:e8:3f:71:8c:6f: 88:e2:a8:66:83:3a:77:bd:55:78:17:53:55:b1:b5:61:f1:dd: f4:ad:63:39:f4:24:14:b1:22:42:96:8b:29:cb:23:da:c1:5b: 9c:a4:e6:9e:9e:c3:56:41:16:45:cc:33:2e:ad:f8:ba:cd:6b: 08:ac:91:ae:c7:7a:52:b4:70:9a:09:ad:ec:2e:89:de:9d:7d: 24:7a:19:01:33:26:f1:0a:ed:75:22:ae:d4:ea:91:41:18:02: dc:92:4d:3e:e9:06:76:fc:e5:d6:a8:4a:3e:74:ed:0b:eb:b0: 58:24:47:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdGGwO2zzlv3zwAwKoFk8jA9BL8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTEyMDYxNDA2NTJaFw0yNTEyMTAwMTQ1NTJaMDMxMTAvBgNV BAMTKEVGNjQ5MUY2NDE4OUEwQ0RGQUUwMEY2N0Y3RjdDRjVFMjZEQTE0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIJt2RFSa5xl81ZWgIv49LJPH 3nTVAVGeNUcbqTpHICM+7ywCxL78K47s/hXBw9DoBU01u4+Me+iIOO8HeZCk5iA3 QS8N742FqgwPZRH0KkjzIojaWjXpdG1ASJADMRVbuUlTKmu5sCHOa4VOW/hLIFJ6 54ztTPe5FI8k7d2QpDP1brdbnysCU4owEvRQru93IYIX3BAYtJotpbLT6xC0Pz1T 2vrveeCq+6FcktpILlAqfd9+R4fKOyHVrp0sYOrWV7JEITAk0b1+X/6L2LkfTOhw zLpbOOul9RHCjykfn/rxaVAtsv4C4IcFO0oddtGQMKzeDZvqpzvH/UhgUxIlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU72SR9kGJoM364A9n9/fPXibaFHkwHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPSW1oqKc02iEp7rLpyALBfMNMZpaZajssg eGgLdM2+ry6HF4rLlo3ExVOIwOV6caR0Vafrw4xZXO27usj6Xr1DnqZXbFbwqw78 krQS1kUrc6zkSjjF93SWKHejOvNTVgrtbFrthJ+dArcZSa4GA03r3LsvAOROZfCd CEzISREPr5FFLnjs5LtjnZ/oP3GMb4jiqGaDOne9VXgXU1WxtWHx3fStYzn0JBSx IkKWiynLI9rBW5yk5p6ew1ZBFkXMMy6t+LrNawiska7HelK0cJoJrewuid6dfSR6 GQEzJvEK7XUirtTqkUEYAtySTT7pBnb85daoSj507QvrsFgkR/U= -----END CERTIFICATE-----Generated at Sat Dec 6 23:58:13 2025 by rpki-client