This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft File: 8659BE8500DEBB314448F1412FA1E264025A4148.mft (raw, json) Hash identifier: /R8NXJ2DAZDIweRsoUF6StrtfYUH5wAfF9MWdguxYAk= Subject key identifier: 49:03:8B:2B:4B:A2:B1:65:58:98:AE:E6:DE:4E:A6:98:0E:3E:B6:FD Authority key identifier: 86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 Certificate issuer: /CN=8659BE8500DEBB314448F1412FA1E264025A4148 Certificate serial: 78EB0E15CB0E5F57C7E3C32A5E51C6A16346C21C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft Manifest number: 01F9 Signing time: Fri 05 Dec 2025 11:01:03 +0000 Manifest this update: Fri 05 Dec 2025 10:56:03 +0000 Manifest next update: Mon 08 Dec 2025 11:47:03 +0000 Files and hashes: 1: 323030313a6466313a316263303a3a2f34382d3438203d3e20313431393339.roa (hash: E8NUcaKWe3ABHFVxNWSSIkp1m8C7YtMxKMRA2hg1NmI=) 2: 3130332e3136342e3139322e302f32342d3234203d3e20313431393339.roa (hash: V8FXW6i5FhDhWnneEy9JcwyRx6grWMlQZ/xTqZlJefU=) 3: 3130332e3136342e3139332e302f32342d3234203d3e20313431393339.roa (hash: o1EC2V3xudD67YQ4ezVJUlO4R22GwhC3UT5xp118BUc=) 4: 8659BE8500DEBB314448F1412FA1E264025A4148.crl (hash: sNtF2gzjzfKFjt5XDgJ9s2ndFY4QS5wnrfYNQcGCbnk=) 5: 3130332e3136342e3139322e302f32332d3234203d3e20313431393339.roa (hash: DGmbIbAAoCUymOY6DDh+0S4rcPuhCP+BlaH232+y3TY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:eb:0e:15:cb:0e:5f:57:c7:e3:c3:2a:5e:51:c6:a1:63:46:c2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8659BE8500DEBB314448F1412FA1E264025A4148 Validity Not Before: Dec 5 10:56:03 2025 GMT Not After : Dec 8 11:47:03 2025 GMT Subject: CN=49038B2B4BA2B1655898AEE6DE4EA6980E3EB6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:2f:20:9f:2d:2b:55:e5:06:6d:7d:13:70: 76:bd:3d:6d:2a:e2:1a:93:bf:b1:23:e7:32:5f:f3: bc:21:74:c2:aa:e9:f5:02:59:3a:89:f3:c0:b0:d2: b3:ac:a4:58:64:fd:15:ec:76:5f:05:cd:6b:fe:57: 3b:cf:0b:92:45:04:76:63:f4:ac:9a:87:ce:ea:d1: 9e:9a:41:bd:60:b9:69:66:eb:81:21:3f:db:39:34: d2:1f:95:10:c0:89:04:16:c2:5b:8a:f6:71:3f:92: bb:23:f9:e9:46:ae:e2:23:18:70:5a:37:f3:42:7b: 3f:84:2e:0c:4d:69:4c:2a:bd:5d:a6:54:c3:2e:b9: 98:f6:64:43:f5:50:26:df:f8:e6:70:57:9e:d9:37: 58:8f:67:52:aa:c9:2c:7c:c7:e8:8a:30:1b:1b:59: 93:52:74:02:17:b3:09:15:3f:d4:56:0f:c2:c7:c5: 03:a4:e7:a1:94:ee:08:b4:28:b7:aa:86:4d:4b:0f: 46:de:b4:0f:59:b8:a9:c6:02:66:c8:87:69:0f:57: 07:7b:eb:fc:80:a2:01:9c:98:c7:c5:6f:f5:f9:71: 1a:6f:7b:8e:8a:e0:fb:a7:7f:e8:1f:35:88:6f:c9: 4e:8b:e0:2c:ce:f3:20:e7:c4:85:fb:e9:76:a4:0a: 40:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:03:8B:2B:4B:A2:B1:65:58:98:AE:E6:DE:4E:A6:98:0E:3E:B6:FD X509v3 Authority Key Identifier: keyid:86:59:BE:85:00:DE:BB:31:44:48:F1:41:2F:A1:E2:64:02:5A:41:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8659BE8500DEBB314448F1412FA1E264025A4148.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fba48e4e-fc95-4acf-beac-d93a0f694421/0/8659BE8500DEBB314448F1412FA1E264025A4148.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6b:db:da:54:a7:3c:f1:58:59:07:78:76:e0:d8:e3:d3:c2: ef:66:bd:0b:2b:1a:69:b2:f6:b1:e0:b5:2a:67:c8:02:bf:f9: 10:11:65:d4:bd:5c:a9:ea:d4:64:f3:50:4c:d3:97:35:fd:e0: 50:1d:b1:a8:62:c4:07:5c:13:7e:7f:d6:e2:c7:cc:a0:54:83: c7:65:8f:74:fd:0c:f6:54:2a:91:ea:24:ac:31:40:bc:6b:d5: 08:ab:61:8a:ba:67:02:c0:87:95:b1:98:ee:f0:fb:0b:df:b4: 1b:91:27:80:89:be:2e:cd:0d:33:a0:99:b6:51:b9:bc:6c:0a: 18:5d:a1:6b:91:38:e2:5f:78:42:25:61:4e:34:44:8a:3a:a5: 5f:8a:75:0f:ae:d8:3a:85:ab:65:0a:84:9d:97:f9:de:b2:eb: 9e:d2:15:51:0c:6a:01:95:f1:60:58:3b:ab:93:dd:5c:37:eb: bc:c7:34:8e:96:41:1a:bd:f4:3d:c6:67:36:92:06:be:61:f3: b5:18:d1:9d:59:33:c1:99:b0:79:98:84:3a:18:55:42:f1:a7: 8d:8d:3a:b3:9f:5e:e2:29:c7:91:b4:35:b7:14:57:36:49:fa: c4:71:b7:03:41:12:ca:b7:4c:cd:07:5c:20:78:5f:08:d9:78: d5:cb:50:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOsOFcsOX1fH48MqXlHGoWNGwhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQw MjVBNDE0ODAeFw0yNTEyMDUxMDU2MDNaFw0yNTEyMDgxMTQ3MDNaMDMxMTAvBgNV BAMTKDQ5MDM4QjJCNEJBMkIxNjU1ODk4QUVFNkRFNEVBNjk4MEUzRUI2RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Oy8gny0rVeUGbX0TcHa9PW0q 4hqTv7Ej5zJf87whdMKq6fUCWTqJ88Cw0rOspFhk/RXsdl8FzWv+VzvPC5JFBHZj 9Kyah87q0Z6aQb1guWlm64EhP9s5NNIflRDAiQQWwluK9nE/krsj+elGruIjGHBa N/NCez+ELgxNaUwqvV2mVMMuuZj2ZEP1UCbf+OZwV57ZN1iPZ1KqySx8x+iKMBsb WZNSdAIXswkVP9RWD8LHxQOk56GU7gi0KLeqhk1LD0betA9ZuKnGAmbIh2kPVwd7 6/yAogGcmMfFb/X5cRpve46K4Punf+gfNYhvyU6L4CzO8yDnxIX76XakCkDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQOLK0uisWVYmK7m3k6mmA4+tv0wHwYDVR0j BBgwFoAUhlm+hQDeuzFESPFBL6HiZAJaQUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmE0OGU0ZS1mYzk1LTRhY2YtYmVhYy1kOTNhMGY2OTQ0MjEvMC84NjU5QkU4NTAw REVCQjMxNDQ0OEYxNDEyRkExRTI2NDAyNUE0MTQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUyNjQwMjVB NDE0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJhNDhlNGUtZmM5NS00YWNmLWJl YWMtZDkzYTBmNjk0NDIxLzAvODY1OUJFODUwMERFQkIzMTQ0NDhGMTQxMkZBMUUy NjQwMjVBNDE0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhr29pUpzzxWFkHeHbg2OPTwu9mvQsrGmmy 9rHgtSpnyAK/+RARZdS9XKnq1GTzUEzTlzX94FAdsahixAdcE35/1uLHzKBUg8dl j3T9DPZUKpHqJKwxQLxr1QirYYq6ZwLAh5WxmO7w+wvftBuRJ4CJvi7NDTOgmbZR ubxsChhdoWuROOJfeEIlYU40RIo6pV+KdQ+u2DqFq2UKhJ2X+d6y657SFVEMagGV 8WBYO6uT3Vw367zHNI6WQRq99D3GZzaSBr5h87UY0Z1ZM8GZsHmYhDoYVULxp42N OrOfXuIpx5G0NbcUVzZJ+sRxtwNBEsq3TM0HXCB4XwjZeNXLUB8= -----END CERTIFICATE-----Generated at Sun Dec 7 07:25:01 2025 by rpki-client