This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft File: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft (raw, json) Hash identifier: 72vTNFDonEWVvgjhAIbZxgxvUGVCvxZ/3uU7/1Mv/Og= Subject key identifier: EC:67:DB:87:B1:BB:CC:36:00:47:74:F1:E9:93:04:AE:06:BF:AB:1F Authority key identifier: B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D Certificate issuer: /CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Certificate serial: 5E0DECAFE2928C9866595EC460793BFB1CD1CAF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft Manifest number: 0396 Signing time: Sat 13 Dec 2025 14:01:51 +0000 Manifest this update: Sat 13 Dec 2025 13:56:51 +0000 Manifest next update: Tue 16 Dec 2025 20:01:51 +0000 Files and hashes: 1: 3130332e3135342e32352e302f32342d3234203d3e20313430343738.roa (hash: YWVKY2G+Nvg6caG2vXoeK6bw0DFIbKqpsrtcWOftF08=) 2: 3130332e3135342e32342e302f32332d3233203d3e20313430343738.roa (hash: s1nmEcWlMGfpOr6XkgkIDAhuvP77SQ9zj5c2Qr3sr/E=) 3: B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl (hash: hHybJo6C+vVvJeJ1PB8xtX7Ye+OmyvWwk82/Rr3VVNM=) 4: 3130332e3135342e32342e302f32342d3234203d3e20313430343738.roa (hash: OPJ+0bfTR2bNFtVvMzF36s5tfMJLI0pXwTypT9BsLeE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 20:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0d:ec:af:e2:92:8c:98:66:59:5e:c4:60:79:3b:fb:1c:d1:ca:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D Validity Not Before: Dec 13 13:56:51 2025 GMT Not After : Dec 16 20:01:51 2025 GMT Subject: CN=EC67DB87B1BBCC36004774F1E99304AE06BFAB1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:96:d5:56:9e:3b:da:aa:17:4d:78:4e:38:48: d7:12:f8:90:fb:02:31:21:21:26:16:41:bf:54:bc: c6:dd:56:4a:df:e4:9a:7b:6e:82:2f:19:de:91:96: 0f:3d:08:ae:b2:76:c0:8e:12:e1:15:28:54:7f:a8: 29:43:36:c3:d7:d8:aa:46:53:3c:12:92:33:8a:f1: 91:2e:4f:c3:2f:7d:61:f9:3a:36:d9:e1:45:00:0c: f9:a9:e3:36:9f:a3:bd:3d:31:e1:e7:ae:1f:df:80: e0:84:fb:3b:02:d6:27:d4:8a:2a:eb:fa:8e:7b:2d: 41:e9:67:45:f1:16:c4:8e:1b:fb:a7:b5:34:6d:30: ac:69:eb:e3:89:31:9f:fb:b6:1e:e3:17:69:0e:74: 7a:31:62:04:eb:ca:af:b0:69:ed:82:d6:63:09:1c: d1:cb:60:3d:06:08:60:46:53:e6:20:de:90:c9:61: 15:a8:2b:94:c1:13:ea:90:ad:8d:f4:63:f8:21:1b: 17:8a:8b:c9:87:18:d7:a6:f7:a4:8f:e8:76:b1:a3: 77:92:90:51:0b:04:bf:51:d4:1f:ae:db:1f:ea:23: ce:e9:7f:ad:7e:b8:4b:c7:3d:8a:91:c6:c2:0b:04: bc:6d:df:8f:89:df:90:33:9e:d7:b6:bb:43:d6:8b: 37:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:67:DB:87:B1:BB:CC:36:00:47:74:F1:E9:93:04:AE:06:BF:AB:1F X509v3 Authority Key Identifier: keyid:B8:43:6A:CB:7C:E8:F8:C2:F5:72:45:FF:E4:E6:BA:2F:52:39:3F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebefbf04-41be-48d7-ac00-8a3c498ca9ae/0/B8436ACB7CE8F8C2F57245FFE4E6BA2F52393F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:fe:8d:e1:64:9a:a2:78:3f:68:87:dc:32:f8:04:6b:e9:39: 4a:7f:00:31:e2:5e:99:83:63:13:a2:ba:60:a9:b3:34:ed:38: 6f:6c:ef:6a:15:4e:35:3d:67:51:04:d5:a3:1d:7a:5f:9c:3c: 41:86:a8:52:b7:a6:d0:20:16:37:e0:9a:7d:72:e5:0f:64:fd: c3:05:c5:e5:a2:9c:fa:fe:34:83:c6:bd:e8:6b:2e:11:de:f2: 93:c3:9d:aa:98:23:05:d4:a3:e3:a9:c3:49:04:6e:a3:e4:89: ab:5a:5c:8d:9c:63:4b:05:ba:2c:63:a8:06:d1:23:09:fb:ef: 06:e8:f7:50:6f:ca:f6:13:7a:85:61:d0:81:2e:fa:d9:a5:00: 23:7e:16:68:c2:03:22:c2:5b:e8:42:a2:63:c3:08:75:c7:3f: ba:19:13:8e:db:4e:1a:60:5d:9d:4e:29:ba:28:35:ed:26:fa: 84:30:27:7a:cd:4f:e3:dd:fd:c5:1d:5e:ab:e2:ff:4d:5c:3e: 26:0d:a7:4d:18:cb:82:fb:6b:db:f6:b0:62:8c:5a:c5:7f:01: 87:8c:ff:94:71:fb:31:d6:d9:9c:42:4d:cc:db:58:e7:a4:0d: 72:3e:ca:3c:79:e4:86:6f:9e:48:60:06:70:0e:aa:af:bc:47: 9a:19:15:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXg3sr+KSjJhmWV7EYHk7+xzRyvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1 MjM5M0Y0RDAeFw0yNTEyMTMxMzU2NTFaFw0yNTEyMTYyMDAxNTFaMDMxMTAvBgNV BAMTKEVDNjdEQjg3QjFCQkNDMzYwMDQ3NzRGMUU5OTMwNEFFMDZCRkFCMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRltVWnjvaqhdNeE44SNcS+JD7 AjEhISYWQb9UvMbdVkrf5Jp7boIvGd6Rlg89CK6ydsCOEuEVKFR/qClDNsPX2KpG UzwSkjOK8ZEuT8MvfWH5OjbZ4UUADPmp4zafo709MeHnrh/fgOCE+zsC1ifUiirr +o57LUHpZ0XxFsSOG/untTRtMKxp6+OJMZ/7th7jF2kOdHoxYgTryq+wae2C1mMJ HNHLYD0GCGBGU+Yg3pDJYRWoK5TBE+qQrY30Y/ghGxeKi8mHGNem96SP6Haxo3eS kFELBL9R1B+u2x/qI87pf61+uEvHPYqRxsILBLxt34+J35Aznte2u0PWizeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Gfbh7G7zDYAR3Tx6ZMErga/qx8wHwYDVR0j BBgwFoAUuENqy3zo+ML1ckX/5Oa6L1I5P00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YmVmYmYwNC00MWJlLTQ4ZDctYWMwMC04YTNjNDk4Y2E5YWUvMC9CODQzNkFDQjdD RThGOEMyRjU3MjQ1RkZFNEU2QkEyRjUyMzkzRjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJBMkY1MjM5 M0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWJlZmJmMDQtNDFiZS00OGQ3LWFj MDAtOGEzYzQ5OGNhOWFlLzAvQjg0MzZBQ0I3Q0U4RjhDMkY1NzI0NUZGRTRFNkJB MkY1MjM5M0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFL+jeFkmqJ4P2iH3DL4BGvpOUp/ADHiXpmD YxOiumCpszTtOG9s72oVTjU9Z1EE1aMdel+cPEGGqFK3ptAgFjfgmn1y5Q9k/cMF xeWinPr+NIPGvehrLhHe8pPDnaqYIwXUo+Opw0kEbqPkiataXI2cY0sFuixjqAbR Iwn77wbo91BvyvYTeoVh0IEu+tmlACN+FmjCAyLCW+hComPDCHXHP7oZE47bThpg XZ1OKbooNe0m+oQwJ3rNT+Pd/cUdXqvi/01cPiYNp00Yy4L7a9v2sGKMWsV/AYeM /5Rx+zHW2ZxCTczbWOekDXI+yjx55IZvnkhgBnAOqq+8R5oZFYs= -----END CERTIFICATE-----Generated at Mon Dec 15 20:20:47 2025 by rpki-client