This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft File: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft (raw, json) Hash identifier: J/lH9CT7UnoEwAhY905Ea4C+NGGg8s2Id35QQrK+oJs= Subject key identifier: AE:64:27:A1:D4:5C:37:59:8B:3E:AA:3D:9E:BD:A2:42:89:FF:36:A6 Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 Certificate issuer: /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Certificate serial: 360277D4078395B73AE7AC2B30D951B67E1A5531 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft Manifest number: 0206 Signing time: Tue 02 Dec 2025 18:12:00 +0000 Manifest this update: Tue 02 Dec 2025 18:07:00 +0000 Manifest next update: Sat 06 Dec 2025 05:15:00 +0000 Files and hashes: 1: 208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl (hash: zkVbEzHaIe/a79Wmj2N6lrRgUwRfHJRvf89B1N8LLB4=) 2: 3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (hash: SB3ckXZSDU771FOl5Gldbi57h9F2gKPuRTUa3pdS/NU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 05:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:02:77:d4:07:83:95:b7:3a:e7:ac:2b:30:d9:51:b6:7e:1a:55:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815 Validity Not Before: Dec 2 18:07:00 2025 GMT Not After : Dec 6 05:15:00 2025 GMT Subject: CN=AE6427A1D45C37598B3EAA3D9EBDA24289FF36A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4c:fc:5a:20:34:61:5f:84:2c:a1:3d:81:47: b6:dd:5a:b5:5c:cc:f2:69:03:d8:52:4f:1b:42:e8: b2:67:f9:8b:ef:d4:bf:ef:76:dc:41:7e:68:55:ed: 33:8d:53:9e:d1:a5:8d:f4:88:b6:b9:55:0b:3a:de: ef:6b:05:62:17:f9:d5:1f:53:0c:6c:3d:e2:41:ec: c7:00:e5:06:60:9d:5c:05:2b:91:ca:11:9d:20:d9: 78:a7:82:05:79:ec:4b:53:27:28:3b:f4:23:d3:ec: 73:6a:8d:14:a1:2e:7d:33:f4:bd:5e:00:7e:cc:b9: e7:5f:25:9c:f7:14:de:24:dc:c0:5e:e4:bc:de:5f: d3:2d:bb:6e:33:df:c2:a1:3b:8c:7a:6d:a0:34:83: 16:3f:29:39:45:02:6d:f0:e4:8c:1a:07:2e:70:78: 73:f0:41:17:13:4e:63:0b:e8:99:b8:65:e0:bf:39: 5e:33:f7:73:70:11:8f:fa:2b:0e:86:9c:8c:98:45: 4f:79:55:90:9f:99:0f:91:ac:8b:95:8f:5f:c2:cd: 4b:f4:a7:22:fe:7c:dc:a9:0d:d5:ee:cb:41:49:27: 70:35:da:6b:96:ac:8b:8c:a8:e9:18:b4:30:c4:50: 4d:f9:79:97:f0:e4:ac:3a:12:cd:84:66:17:d1:32: 41:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:64:27:A1:D4:5C:37:59:8B:3E:AA:3D:9E:BD:A2:42:89:FF:36:A6 X509v3 Authority Key Identifier: keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cd:53:d9:2a:d2:e2:43:c9:91:8d:b9:39:16:31:5a:c2:13: 0b:37:86:78:3c:f3:42:2c:28:65:9d:c1:b6:3b:53:80:45:d3: f1:e0:7b:5f:c1:bd:a7:87:04:df:22:85:68:f1:93:38:75:74: 59:df:09:f5:d4:29:fe:db:30:ef:0f:fa:21:a7:50:a3:95:36: ed:0c:2a:16:b3:a5:f2:b0:33:5d:f4:eb:37:29:cc:be:f8:2c: 12:ae:b1:a4:b5:96:ae:5d:f3:ca:64:d7:1e:a0:1c:89:f2:1a: ef:bf:d5:3c:b1:dc:3a:8e:7e:b6:84:f3:8c:04:de:06:ed:78: df:19:4e:c7:86:36:fa:a6:68:f8:ba:31:3b:bf:84:f2:1c:d2: 0f:30:a2:ac:3d:a3:45:70:ea:7a:c3:b6:90:4a:7b:ec:ad:59: 6c:3c:91:ff:e8:1b:0a:86:7c:c0:24:16:ff:3d:5b:4e:14:cb: c7:2a:0f:46:90:1b:ff:22:eb:12:c1:9c:99:5b:35:e6:9c:8e: ec:bb:be:e8:8e:82:15:7d:0c:b6:96:f5:de:74:38:14:a3:b6: 45:cb:aa:62:e3:42:44:82:40:b5:7a:9a:3d:7d:f1:0d:17:be: 15:93:df:55:09:0a:b9:04:4a:2c:75:05:12:e2:93:72:5c:7b: be:60:b7:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNgJ31AeDlbc656wrMNlRtn4aVTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZC NTc0NDgxNTAeFw0yNTEyMDIxODA3MDBaFw0yNTEyMDYwNTE1MDBaMDMxMTAvBgNV BAMTKEFFNjQyN0ExRDQ1QzM3NTk4QjNFQUEzRDlFQkRBMjQyODlGRjM2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0TPxaIDRhX4QsoT2BR7bdWrVc zPJpA9hSTxtC6LJn+Yvv1L/vdtxBfmhV7TONU57RpY30iLa5VQs63u9rBWIX+dUf UwxsPeJB7McA5QZgnVwFK5HKEZ0g2XinggV57EtTJyg79CPT7HNqjRShLn0z9L1e AH7MuedfJZz3FN4k3MBe5LzeX9Mtu24z38KhO4x6baA0gxY/KTlFAm3w5IwaBy5w eHPwQRcTTmML6Jm4ZeC/OV4z93NwEY/6Kw6GnIyYRU95VZCfmQ+RrIuVj1/CzUv0 pyL+fNypDdXuy0FJJ3A12muWrIuMqOkYtDDEUE35eZfw5Kw6Es2EZhfRMkFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrmQnodRcN1mLPqo9nr2iQon/NqYwHwYDVR0j BBgwFoAUIIpa83Ob/XmF13k8wnybX7V0SBUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MWQ1MWQ0MS1iNmNjLTQyMGEtYjVhOC02N2M4YmQ2YjAyYWYvMC8yMDhBNUFGMzcz OUJGRDc5ODVENzc5M0NDMjdDOUI1RkI1NzQ0ODE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlCNUZCNTc0 NDgxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDFkNTFkNDEtYjZjYy00MjBhLWI1 YTgtNjdjOGJkNmIwMmFmLzAvMjA4QTVBRjM3MzlCRkQ3OTg1RDc3OTNDQzI3QzlC NUZCNTc0NDgxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/NU9kq0uJDyZGNuTkWMVrCEws3hng880Is KGWdwbY7U4BF0/Hge1/BvaeHBN8ihWjxkzh1dFnfCfXUKf7bMO8P+iGnUKOVNu0M KhazpfKwM1306zcpzL74LBKusaS1lq5d88pk1x6gHInyGu+/1Tyx3DqOfraE84wE 3gbteN8ZTseGNvqmaPi6MTu/hPIc0g8woqw9o0Vw6nrDtpBKe+ytWWw8kf/oGwqG fMAkFv89W04Uy8cqD0aQG/8i6xLBnJlbNeacjuy7vuiOghV9DLaW9d50OBSjtkXL qmLjQkSCQLV6mj198Q0XvhWT31UJCrkESix1BRLik3Jce75gt1c= -----END CERTIFICATE-----Generated at Wed Dec 3 14:01:50 2025 by rpki-client