This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: wgqrovWssTS0U/menx80wj7fORow5o048zHutDafuUQ= Subject key identifier: 35:D5:14:8E:C5:68:E4:C1:15:9A:AC:88:D6:FD:75:AB:CC:AD:7C:C1 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 1F21677166ABB7EF61DE410124A252C56C33A11C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: B8 Signing time: Sat 06 Dec 2025 13:51:20 +0000 Manifest this update: Sat 06 Dec 2025 13:46:20 +0000 Manifest next update: Tue 09 Dec 2025 23:20:20 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) 2: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: 9LUsZsO1CCvN7Sv6CAWQ0OvF6I6G9M770vio40QG6so=) 3: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) 4: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:21:67:71:66:ab:b7:ef:61:de:41:01:24:a2:52:c5:6c:33:a1:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Dec 6 13:46:20 2025 GMT Not After : Dec 9 23:20:20 2025 GMT Subject: CN=35D5148EC568E4C1159AAC88D6FD75ABCCAD7CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:ce:50:e2:2a:f2:ea:fa:99:c7:d6:4f:2f: 23:60:d0:43:04:82:fd:d4:eb:d6:dc:67:e5:57:d7: 8a:12:48:fa:2f:70:6f:02:de:d9:57:d1:26:d3:f4: 89:c6:f3:5b:ae:fb:10:0d:41:01:4a:29:3c:a2:b8: 6a:ab:55:98:33:d9:8c:6b:7b:46:50:1b:49:34:9c: a1:3d:fb:2d:75:8c:de:78:dd:87:29:3b:ef:39:e6: 26:6b:80:34:1f:d7:35:09:fb:38:cb:9e:2e:65:8e: 42:d2:6b:b1:24:eb:9f:5e:d3:88:71:01:65:da:56: 85:f9:72:14:8a:01:91:cd:89:18:64:a7:79:81:c1: cf:1b:a5:a8:15:7f:1d:ba:5d:2a:65:c4:c9:b4:67: f7:13:e8:49:fb:e0:57:74:13:ff:0b:7f:64:b2:8c: fc:c8:5e:4f:f7:e6:fc:e9:b4:f5:cc:f5:e8:a8:84: 43:f4:d1:18:07:0d:47:d6:ee:20:8c:9f:e4:bd:a8: fe:e3:34:86:22:c3:80:54:0d:90:72:d9:67:b6:22: b3:2c:90:da:c5:53:7c:87:64:76:4d:8f:18:70:12: 8a:23:a6:3a:1f:f7:21:3e:2b:7e:ca:9d:44:c7:c8: e2:63:0d:b5:80:44:12:79:18:c1:ed:7e:ee:56:c9: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D5:14:8E:C5:68:E4:C1:15:9A:AC:88:D6:FD:75:AB:CC:AD:7C:C1 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:43:bf:93:87:e8:58:b1:b1:a7:ab:39:c3:e6:f0:ce:70:a1: 3a:06:4a:24:42:62:43:04:8a:6a:00:10:e5:4c:d1:97:12:de: 48:8f:93:d0:19:c5:e5:db:6b:c8:50:e2:3a:6f:95:b1:1c:8e: 1d:23:5a:71:c0:91:a7:83:01:08:73:bd:98:e8:37:64:d3:78: 5c:84:ac:c6:bc:73:65:ae:59:4b:b2:54:5a:18:ac:65:1c:7b: 29:3f:cf:0a:c4:1b:83:5a:79:71:ef:b0:bb:b8:84:24:48:0c: e7:06:59:ec:ae:95:6c:24:3a:0e:0e:b5:9e:88:ab:01:a2:c7: 8e:ca:63:d5:75:6a:d1:6e:2c:c1:40:95:4c:04:8f:fc:d2:89: ac:aa:00:a5:49:1b:d7:88:62:a3:2a:88:bf:86:db:32:06:44: 83:e0:d2:17:2a:b2:a6:59:eb:d3:f8:d9:74:f8:4b:61:eb:b3: 9f:de:a6:b1:7d:4a:34:17:e1:a4:37:8d:a8:16:3a:78:50:ac: fb:13:de:bf:cf:31:d8:aa:f3:f0:36:df:12:c1:18:9d:9e:4f: 25:07:9c:e3:e9:43:f5:3c:86:12:37:b2:25:20:32:dc:5c:51: f0:0c:43:67:46:da:17:5c:19:ef:02:da:67:4e:cb:4b:e8:72: 69:4c:21:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyFncWart+9h3kEBJKJSxWwzoRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNTEyMDYxMzQ2MjBaFw0yNTEyMDkyMzIwMjBaMDMxMTAvBgNV BAMTKDM1RDUxNDhFQzU2OEU0QzExNTlBQUM4OEQ2RkQ3NUFCQ0NBRDdDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIM5Q4iry6vqZx9ZPLyNg0EME gv3U69bcZ+VX14oSSPovcG8C3tlX0SbT9InG81uu+xANQQFKKTyiuGqrVZgz2Yxr e0ZQG0k0nKE9+y11jN543YcpO+855iZrgDQf1zUJ+zjLni5ljkLSa7Ek659e04hx AWXaVoX5chSKAZHNiRhkp3mBwc8bpagVfx26XSplxMm0Z/cT6En74Fd0E/8Lf2Sy jPzIXk/35vzptPXM9eiohEP00RgHDUfW7iCMn+S9qP7jNIYiw4BUDZBy2We2IrMs kNrFU3yHZHZNjxhwEoojpjof9yE+K37KnUTHyOJjDbWARBJ5GMHtfu5WyQ+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNdUUjsVo5MEVmqyI1v11q8ytfMEwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhDv5OH6FixsaerOcPm8M5woToGSiRCYkME imoAEOVM0ZcS3kiPk9AZxeXba8hQ4jpvlbEcjh0jWnHAkaeDAQhzvZjoN2TTeFyE rMa8c2WuWUuyVFoYrGUceyk/zwrEG4NaeXHvsLu4hCRIDOcGWeyulWwkOg4OtZ6I qwGix47KY9V1atFuLMFAlUwEj/zSiayqAKVJG9eIYqMqiL+G2zIGRIPg0hcqsqZZ 69P42XT4S2Hrs5/eprF9SjQX4aQ3jagWOnhQrPsT3r/PMdiq8/A23xLBGJ2eTyUH nOPpQ/U8hhI3siUgMtxcUfAMQ2dG2hdcGe8C2mdOy0vocmlMIfg= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:49 2025 by rpki-client