This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft File: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft (raw, json) Hash identifier: KYwCUW+CeV7ziNcZRO6kniPZ5OwXt2EDFMoIjvYYlFI= Subject key identifier: 38:13:E8:4A:A9:99:60:BE:96:BB:BE:AF:80:4E:D5:F0:CF:B9:B3:C1 Authority key identifier: B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 Certificate issuer: /CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Certificate serial: 40A4F759CDBF0D5BF3E695747B563047C94D9F42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft Manifest number: 01B8 Signing time: Fri 05 Dec 2025 13:12:20 +0000 Manifest this update: Fri 05 Dec 2025 13:07:20 +0000 Manifest next update: Mon 08 Dec 2025 19:08:20 +0000 Files and hashes: 1: B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl (hash: bQ4oti+QO4U4Jz0Uzz/YezB3UpCIjhJMQsgfFkMRczs=) 2: 3130332e3131372e35362e302f32332d3234203d3e20313336303532.roa (hash: BAM070FvjGLMXJWAH9pbtiKqBzEQlvrgCYvemvA5CUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:a4:f7:59:cd:bf:0d:5b:f3:e6:95:74:7b:56:30:47:c9:4d:9f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5 Validity Not Before: Dec 5 13:07:20 2025 GMT Not After : Dec 8 19:08:20 2025 GMT Subject: CN=3813E84AA99960BE96BBBEAF804ED5F0CFB9B3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:2d:29:4d:43:42:6f:94:fd:4c:dd:4a:e4: 45:f5:a0:bd:a3:a2:cb:47:77:4a:4f:4f:74:be:c3: 56:e5:f5:0d:68:69:6b:74:9e:ee:af:b6:a6:ac:1c: a5:12:bf:52:60:b3:60:24:59:9a:a7:ca:c9:46:6b: 41:77:3c:56:df:0a:d6:be:e5:40:c5:ab:90:b3:ac: eb:62:f2:b1:ce:a7:8d:8e:d9:c8:a4:b6:21:49:e4: 9c:43:95:cc:0d:82:cc:64:34:19:de:70:b7:40:06: 8c:44:67:38:9f:5d:75:3e:60:74:29:ad:95:98:d4: d7:2d:4f:82:1b:90:16:d4:bb:dd:da:ed:13:42:62: 30:f0:64:ee:ec:16:4a:d0:4d:0f:d3:8b:27:c3:c2: 0e:29:26:79:ee:e2:10:09:6c:ee:d8:16:bd:82:4d: 6f:c7:bd:d5:2e:be:3c:c6:71:b0:fc:59:66:12:67: 15:a5:0c:1c:1e:f6:f6:92:f7:12:e5:64:4a:ec:42: e4:c9:40:ee:13:9f:df:ff:fd:53:23:83:1f:cd:4b: b2:49:38:19:f8:b9:48:47:b5:ef:24:9d:20:7d:6f: 1e:1a:f8:43:8c:42:01:72:20:8d:d9:08:71:ca:16: ce:4b:66:77:1a:11:f0:a1:b3:58:07:3a:ec:20:0f: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:13:E8:4A:A9:99:60:BE:96:BB:BE:AF:80:4E:D5:F0:CF:B9:B3:C1 X509v3 Authority Key Identifier: keyid:B8:B4:7D:E5:74:D4:4D:4C:C9:A3:E4:E2:E1:F7:AC:9C:B0:AE:A0:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fa674668-0613-4a64-9323-547636b7d8b0/0/B8B47DE574D44D4CC9A3E4E2E1F7AC9CB0AEA0B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:01:dd:bc:c9:eb:85:d2:b6:6d:39:1d:63:75:7d:ab:c6:3d: 33:3e:8b:73:8b:b9:16:72:7e:be:47:ef:08:67:9d:88:85:c5: 2d:56:bc:83:f8:1f:29:48:8f:b7:d8:98:fe:63:20:91:08:a0: 91:ef:e8:58:55:87:67:26:c7:b8:81:15:96:c2:0a:60:d1:64: 09:7e:e9:7e:70:9a:3b:02:88:a6:71:e4:60:d2:bf:1a:51:26: 77:b9:d9:88:c5:ee:64:8a:62:9f:26:b5:6f:0e:26:f1:97:06: f7:44:6b:1b:66:22:2e:71:38:c3:68:cc:2c:32:36:53:d2:11: 7e:18:0e:1c:39:2d:5b:e3:00:61:91:24:0a:cd:6c:42:6d:2c: 2f:0c:2f:d2:3b:5c:d6:ed:45:9b:64:1c:23:f9:a9:14:1e:f9: 8a:9e:15:1c:9e:51:6d:f7:17:2a:e9:08:aa:5b:57:f6:bc:8d: 6e:c9:3b:2f:80:3f:d4:36:8b:5b:6a:26:5e:e5:22:2a:93:bf: ec:97:5f:d8:f5:38:47:df:01:09:de:bf:24:cb:2e:00:d7:11: 3b:76:56:9c:00:8a:a3:92:e0:0f:a5:59:17:99:f4:96:15:1e: c4:67:71:f9:7e:36:b5:a2:6f:91:8f:d2:7c:67:64:28:df:cf: 98:7e:b5:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQKT3Wc2/DVvz5pV0e1YwR8lNn0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNC MEFFQTBCNTAeFw0yNTEyMDUxMzA3MjBaFw0yNTEyMDgxOTA4MjBaMDMxMTAvBgNV BAMTKDM4MTNFODRBQTk5OTYwQkU5NkJCQkVBRjgwNEVENUYwQ0ZCOUIzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ey0pTUNCb5T9TN1K5EX1oL2j ostHd0pPT3S+w1bl9Q1oaWt0nu6vtqasHKUSv1Jgs2AkWZqnyslGa0F3PFbfCta+ 5UDFq5CzrOti8rHOp42O2ciktiFJ5JxDlcwNgsxkNBnecLdABoxEZzifXXU+YHQp rZWY1NctT4IbkBbUu93a7RNCYjDwZO7sFkrQTQ/TiyfDwg4pJnnu4hAJbO7YFr2C TW/HvdUuvjzGcbD8WWYSZxWlDBwe9vaS9xLlZErsQuTJQO4Tn9///VMjgx/NS7JJ OBn4uUhHte8knSB9bx4a+EOMQgFyII3ZCHHKFs5LZncaEfChs1gHOuwgD4ufAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOBPoSqmZYL6Wu76vgE7V8M+5s8EwHwYDVR0j BBgwFoAUuLR95XTUTUzJo+Ti4fesnLCuoLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YTY3NDY2OC0wNjEzLTRhNjQtOTMyMy01NDc2MzZiN2Q4YjAvMC9COEI0N0RFNTc0 RDQ0RDRDQzlBM0U0RTJFMUY3QUM5Q0IwQUVBMEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FDOUNCMEFF QTBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmE2NzQ2NjgtMDYxMy00YTY0LTkz MjMtNTQ3NjM2YjdkOGIwLzAvQjhCNDdERTU3NEQ0NEQ0Q0M5QTNFNEUyRTFGN0FD OUNCMEFFQTBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQB3bzJ64XStm05HWN1favGPTM+i3OLuRZy fr5H7whnnYiFxS1WvIP4HylIj7fYmP5jIJEIoJHv6FhVh2cmx7iBFZbCCmDRZAl+ 6X5wmjsCiKZx5GDSvxpRJne52YjF7mSKYp8mtW8OJvGXBvdEaxtmIi5xOMNozCwy NlPSEX4YDhw5LVvjAGGRJArNbEJtLC8ML9I7XNbtRZtkHCP5qRQe+YqeFRyeUW33 FyrpCKpbV/a8jW7JOy+AP9Q2i1tqJl7lIiqTv+yXX9j1OEffAQnevyTLLgDXETt2 VpwAiqOS4A+lWReZ9JYVHsRncfl+NrWib5GP0nxnZCjfz5h+tQo= -----END CERTIFICATE-----Generated at Sat Dec 6 21:47:40 2025 by rpki-client