This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: IJzQGrYG2JQ9VomcX5I1qs+1fHwzz8ycTTGRu07El6Y= Subject key identifier: D7:50:58:15:70:6E:F1:10:C0:86:B1:41:81:B7:DF:A5:7C:AC:FE:CC Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 616389C5A367CA45F62C20132497622366C26CC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01F1 Signing time: Tue 02 Dec 2025 10:10:42 +0000 Manifest this update: Tue 02 Dec 2025 10:05:41 +0000 Manifest next update: Fri 05 Dec 2025 19:03:41 +0000 Files and hashes: 1: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) 3: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: uJKE6Zo44lSuqbvrp5GIIaBRpaz+3IXYsBkkIJPyoVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:63:89:c5:a3:67:ca:45:f6:2c:20:13:24:97:62:23:66:c2:6c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Dec 2 10:05:41 2025 GMT Not After : Dec 5 19:03:41 2025 GMT Subject: CN=D7505815706EF110C086B14181B7DFA57CACFECC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:fc:aa:b7:f9:07:52:78:e4:58:e6:23:4a: c7:ff:26:97:e8:05:71:7a:9f:9e:5e:89:47:f5:79: fe:e9:23:cb:74:67:53:82:66:a8:40:25:97:6f:be: e4:3d:5a:4f:f2:3e:9e:e3:ae:57:ba:31:5b:97:de: 5b:87:f7:a8:76:04:c6:1e:b9:04:f0:2f:ba:71:e0: f9:d7:57:03:36:d6:b1:a6:47:61:a3:36:4f:8b:0c: f9:27:df:fc:4f:d7:1e:7a:64:ca:75:60:e7:d6:3b: 7d:53:60:19:89:90:2b:b2:50:32:b6:f9:f8:6e:b9: c8:b8:75:87:37:b6:51:bb:8d:1e:70:fe:46:e4:05: 01:02:11:5c:a8:71:8b:0d:69:d2:61:c8:ba:28:69: 71:f4:fc:ff:c7:e8:13:c4:88:05:52:72:30:50:c0: a6:4b:1f:5b:f4:4b:38:7d:ca:a2:b2:48:e2:57:fc: 58:0f:bf:36:0f:5d:31:86:38:74:5a:b2:3c:1a:f6: 42:65:d9:18:c9:6b:ff:a5:e1:0f:65:4a:9e:8e:cc: ad:42:9a:85:21:11:2b:9e:38:37:82:42:60:a4:51: 1b:15:49:c6:4c:88:06:ac:a8:70:3d:f1:62:f8:f3: aa:7b:a0:87:4c:c0:50:a3:26:55:2f:dc:f1:7f:cc: 19:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:50:58:15:70:6E:F1:10:C0:86:B1:41:81:B7:DF:A5:7C:AC:FE:CC X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e4:a2:7c:7c:a0:b4:3b:52:7a:45:0b:43:7b:bb:f1:6b:c7: 7e:7d:dd:b6:c0:9e:61:87:84:12:18:fe:3e:7d:1f:ff:47:5b: 91:83:92:ad:2c:d8:42:b5:ae:16:4e:74:5e:7e:08:96:86:80: a0:66:d4:16:21:cf:3d:40:76:0a:8b:d0:bd:8e:7b:55:0e:86: e8:a9:8e:cf:db:02:e4:8c:6b:bf:1f:e9:90:42:cd:f8:d8:2d: fb:da:de:5e:b8:f9:70:49:4e:3c:e1:1a:43:44:27:66:6c:a6: 0d:f2:93:a2:6b:2f:14:5f:b7:fb:4a:47:af:d0:c6:8e:aa:e4: d6:91:ab:27:86:12:13:ff:df:e5:21:1f:39:b5:0f:88:ec:22: e7:7b:b3:f3:97:12:0c:fc:47:20:3c:08:89:b1:a4:e9:15:7a: 54:42:b9:38:cf:a8:76:1b:a1:36:dc:f3:33:f9:ab:0f:be:62: 77:19:85:e0:11:fb:f0:44:8e:0a:16:69:a3:50:36:17:7e:3f: 02:5e:0f:08:8a:c7:d8:12:50:34:aa:36:a6:12:4b:f7:e5:54: 40:59:5e:6f:71:2f:dd:3a:cf:f7:6c:f6:f7:92:35:0b:23:17: 90:b2:a4:09:70:60:59:f2:54:bf:72:5c:6b:db:38:2f:a4:df: 6a:e8:49:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWOJxaNnykX2LCATJJdiI2bCbMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTEyMDIxMDA1NDFaFw0yNTEyMDUxOTAzNDFaMDMxMTAvBgNV BAMTKEQ3NTA1ODE1NzA2RUYxMTBDMDg2QjE0MTgxQjdERkE1N0NBQ0ZFQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCthfyqt/kHUnjkWOYjSsf/Jpfo BXF6n55eiUf1ef7pI8t0Z1OCZqhAJZdvvuQ9Wk/yPp7jrle6MVuX3luH96h2BMYe uQTwL7px4PnXVwM21rGmR2GjNk+LDPkn3/xP1x56ZMp1YOfWO31TYBmJkCuyUDK2 +fhuuci4dYc3tlG7jR5w/kbkBQECEVyocYsNadJhyLooaXH0/P/H6BPEiAVScjBQ wKZLH1v0Szh9yqKySOJX/FgPvzYPXTGGOHRasjwa9kJl2RjJa/+l4Q9lSp6OzK1C moUhESueODeCQmCkURsVScZMiAasqHA98WL486p7oIdMwFCjJlUv3PF/zBkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU11BYFXBu8RDAhrFBgbffpXys/swwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnkonx8oLQ7UnpFC0N7u/Frx3593bbAnmGH hBIY/j59H/9HW5GDkq0s2EK1rhZOdF5+CJaGgKBm1BYhzz1AdgqL0L2Oe1UOhuip js/bAuSMa78f6ZBCzfjYLfva3l64+XBJTjzhGkNEJ2Zspg3yk6JrLxRft/tKR6/Q xo6q5NaRqyeGEhP/3+UhHzm1D4jsIud7s/OXEgz8RyA8CImxpOkVelRCuTjPqHYb oTbc8zP5qw++YncZheAR+/BEjgoWaaNQNhd+PwJeDwiKx9gSUDSqNqYSS/flVEBZ Xm9xL906z/ds9veSNQsjF5CypAlwYFnyVL9yXGvbOC+k32roSSo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:59 2025 by rpki-client