This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft File: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft (raw, json) Hash identifier: 2ba6t8U2VaAXC8CKzxqEPEb/OoS00cGW7L+9g58+KRE= Subject key identifier: AE:91:C7:6F:53:4F:94:47:46:EA:3B:CB:B9:1E:57:EB:71:90:A2:5F Authority key identifier: B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC Certificate issuer: /CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Certificate serial: 017E9A48B5CF98CB476FA510E06942B8764A4F98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft Manifest number: 018E Signing time: Sun 07 Dec 2025 03:42:16 +0000 Manifest this update: Sun 07 Dec 2025 03:37:16 +0000 Manifest next update: Wed 10 Dec 2025 13:21:16 +0000 Files and hashes: 1: B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl (hash: pJgYGYYbRsD1TQY/WBdscVfPifzDcqsqUcZYj9xNvTs=) 2: 3130332e34302e39322e302f32332d3233203d3e203633353034.roa (hash: SFyP6dQXcZeCfICHfcQqBzkquUF0rSVZjhOo/oTB3lM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7e:9a:48:b5:cf:98:cb:47:6f:a5:10:e0:69:42:b8:76:4a:4f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC Validity Not Before: Dec 7 03:37:16 2025 GMT Not After : Dec 10 13:21:16 2025 GMT Subject: CN=AE91C76F534F944746EA3BCBB91E57EB7190A25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:20:85:fa:23:16:13:93:ea:76:9c:cd:8e:58: 20:67:80:13:09:e1:e8:04:41:08:7c:e1:01:fd:25: c4:9e:e4:59:71:9d:2c:f8:22:8c:6c:c3:1b:d0:e7: d1:51:c2:0e:2e:30:19:fe:f7:19:ce:89:68:03:82: 0a:89:8c:42:01:e9:3d:14:60:c3:ff:b1:34:b3:22: e3:86:d9:01:21:65:85:c4:7c:18:4e:bf:6c:d9:9d: 7b:09:e8:75:e4:45:4e:fd:cc:55:9d:19:c3:f2:ac: 22:d6:14:b0:0f:6e:a2:7c:e6:c1:2c:6f:0e:59:52: 0d:87:dd:2a:27:dc:2c:30:99:6d:be:4a:6f:50:16: ad:20:88:68:58:ac:ad:ba:a9:9d:79:6c:cf:74:2c: ec:c2:fb:bf:4d:4c:41:3e:25:12:96:4f:a0:b5:cf: 3e:29:39:50:1c:ab:a0:5d:d1:e4:58:39:fd:ef:27: 0b:bf:9f:95:ed:55:e1:01:95:34:6c:94:ef:1f:2e: 45:51:11:ed:69:2d:03:79:4d:a4:60:b9:b2:5d:45: de:a8:59:29:83:81:04:05:d5:28:3e:c6:2f:16:27: 7b:92:f3:b5:a1:ab:63:67:69:87:70:19:a5:39:37: dc:6a:ed:a5:2b:87:25:4a:fc:19:a7:9b:c8:08:2e: 27:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:91:C7:6F:53:4F:94:47:46:EA:3B:CB:B9:1E:57:EB:71:90:A2:5F X509v3 Authority Key Identifier: keyid:B8:A9:E4:5E:7E:2D:EA:66:24:14:0C:03:DE:02:5D:16:B9:1C:B9:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecdae0a5-b4f6-4e08-8beb-63ebe0853df3/0/B8A9E45E7E2DEA6624140C03DE025D16B91CB9DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:41:67:67:7f:af:fb:85:e0:73:82:34:7d:1e:83:6a:8d:73: 32:8f:c3:c9:5b:a1:c0:42:94:d1:da:0b:c8:39:dd:b5:ba:08: 0f:4d:c8:9e:90:7a:ba:ab:e0:5f:6f:5f:53:ee:e9:1f:1f:a6: 8a:f6:4d:4b:c0:74:b1:f6:eb:9c:6a:6c:8a:1a:3d:a1:b6:f5: ec:38:26:d8:1d:b2:6e:37:2f:ab:ab:33:3b:9b:ad:db:4e:d2: 1e:56:b2:f9:bf:ac:00:4f:68:4d:b1:92:2f:39:8e:46:e3:6d: aa:c0:86:0d:ac:f8:7d:12:0b:4e:68:68:56:e4:5c:a7:4b:15: 7c:da:6d:62:07:7f:2d:9c:40:2c:b8:af:d2:4f:4a:96:a9:70: 29:6e:b8:21:5a:54:77:20:83:1e:98:28:a6:5c:ed:19:30:5b: fa:9e:8b:b1:e4:b3:92:c5:a2:dc:66:2d:63:ed:ae:c8:61:31: 79:62:5c:cc:e0:d0:65:0e:83:ba:25:6e:26:2e:d4:06:33:c6: ab:4f:29:81:ac:1c:bd:62:65:6f:57:8b:f2:a3:68:9f:44:b9: b7:4b:84:63:c0:68:39:7b:20:2e:0f:37:c7:20:25:a4:6c:50: 40:6d:a6:be:cf:51:01:ac:4e:1a:59:69:7b:0e:8e:02:6c:2b: b7:4f:78:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAX6aSLXPmMtHb6UQ4GlCuHZKT5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZC OTFDQjlEQzAeFw0yNTEyMDcwMzM3MTZaFw0yNTEyMTAxMzIxMTZaMDMxMTAvBgNV BAMTKEFFOTFDNzZGNTM0Rjk0NDc0NkVBM0JDQkI5MUU1N0VCNzE5MEEyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIIX6IxYTk+p2nM2OWCBngBMJ 4egEQQh84QH9JcSe5FlxnSz4IoxswxvQ59FRwg4uMBn+9xnOiWgDggqJjEIB6T0U YMP/sTSzIuOG2QEhZYXEfBhOv2zZnXsJ6HXkRU79zFWdGcPyrCLWFLAPbqJ85sEs bw5ZUg2H3Son3CwwmW2+Sm9QFq0giGhYrK26qZ15bM90LOzC+79NTEE+JRKWT6C1 zz4pOVAcq6Bd0eRYOf3vJwu/n5XtVeEBlTRslO8fLkVREe1pLQN5TaRgubJdRd6o WSmDgQQF1Sg+xi8WJ3uS87Whq2NnaYdwGaU5N9xq7aUrhyVK/Bmnm8gILicnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrpHHb1NPlEdG6jvLuR5X63GQol8wHwYDVR0j BBgwFoAUuKnkXn4t6mYkFAwD3gJdFrkcudwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2RhZTBhNS1iNGY2LTRlMDgtOGJlYi02M2ViZTA4NTNkZjMvMC9COEE5RTQ1RTdF MkRFQTY2MjQxNDBDMDNERTAyNUQxNkI5MUNCOURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVEMTZCOTFD QjlEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkYWUwYTUtYjRmNi00ZTA4LThi ZWItNjNlYmUwODUzZGYzLzAvQjhBOUU0NUU3RTJERUE2NjI0MTQwQzAzREUwMjVE MTZCOTFDQjlEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBBZ2d/r/uF4HOCNH0eg2qNczKPw8lbocBC lNHaC8g53bW6CA9NyJ6Qerqr4F9vX1Pu6R8fpor2TUvAdLH265xqbIoaPaG29ew4 Jtgdsm43L6urMzubrdtO0h5Wsvm/rABPaE2xki85jkbjbarAhg2s+H0SC05oaFbk XKdLFXzabWIHfy2cQCy4r9JPSpapcCluuCFaVHcggx6YKKZc7RkwW/qei7Hks5LF otxmLWPtrshhMXliXMzg0GUOg7olbiYu1AYzxqtPKYGsHL1iZW9Xi/KjaJ9EubdL hGPAaDl7IC4PN8cgJaRsUEBtpr7PUQGsThpZaXsOjgJsK7dPeKY= -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:27 2025 by rpki-client