This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: uQhqdwRTZolrWmUF0aajRTtOqZjHiobpd2EvcaBc0mk= Subject key identifier: 92:0F:3B:D3:3E:DB:6C:7A:DE:E3:45:D8:43:4D:A8:0C:28:09:62:53 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 73C52E57A362D6AF489DABA9A6702D80D38E8F5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 053F Signing time: Tue 02 Dec 2025 05:51:43 +0000 Manifest this update: Tue 02 Dec 2025 05:46:43 +0000 Manifest next update: Fri 05 Dec 2025 15:29:43 +0000 Files and hashes: 1: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 2: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: pfUFTVsuIPjmnx0LWYbFiwDyhGMbxuFA/hftBufAVsk=) 3: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: 63Tfw81BZTddeb+f1H4wsRimzGD5u+l/4PZBmxazTmA=) 4: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: U9D771UuAkGUw+fqOOekyqrm8y2+seArJf4nwvuYawE=) 5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 6: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=) 7: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: Vpfg0q3zcRmB1kniV3yEQ8JRh62LEXDJNzMI3xfSh04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c5:2e:57:a3:62:d6:af:48:9d:ab:a9:a6:70:2d:80:d3:8e:8f:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Dec 2 05:46:43 2025 GMT Not After : Dec 5 15:29:43 2025 GMT Subject: CN=920F3BD33EDB6C7ADEE345D8434DA80C28096253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:82:94:78:1e:7c:27:f2:3e:8a:61:c7:bd:0a: 35:e3:a6:c8:7b:f9:3a:07:7b:17:d7:db:6a:41:5a: 59:54:2c:53:fb:34:a3:80:a5:1c:b5:db:96:8d:42: 62:78:b6:a2:9b:97:5e:5c:24:01:0a:24:db:06:fc: da:f8:c9:e5:0c:7d:c0:b1:f2:6a:dd:d3:6c:be:a1: 2b:1b:41:e3:d1:d5:a3:5e:75:e3:93:c6:7d:0c:93: 67:80:dc:47:f8:2c:7d:88:f0:fe:8d:b1:8a:3d:7b: f9:34:31:3a:42:e9:fc:10:cf:71:e6:86:40:61:ae: 7d:66:00:50:c9:57:12:cd:62:ba:1a:c9:04:37:89: e7:11:ed:b6:54:30:4b:35:d4:05:07:ca:52:66:9a: 56:8e:6e:06:f4:64:cf:b4:da:a9:e5:8a:a0:df:9d: 42:56:66:0a:d8:7e:63:30:7b:4f:99:29:6a:a7:96: df:09:6d:2b:74:a3:e5:7a:50:ad:b0:a9:ef:45:32: 0e:85:47:66:90:19:31:b6:dc:68:66:07:b6:7a:00: 15:28:ae:70:6d:82:3a:63:9e:4b:08:56:76:16:17: 80:1b:91:37:16:1a:d5:56:53:fb:a1:38:be:56:24: 65:84:43:e9:ed:8f:ab:0b:7d:26:a6:01:dc:33:36: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:0F:3B:D3:3E:DB:6C:7A:DE:E3:45:D8:43:4D:A8:0C:28:09:62:53 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:b3:a9:62:e9:60:74:1b:ee:5d:0a:ea:a1:59:1a:93:42: 93:fd:76:cd:35:e8:17:b8:88:f6:44:95:86:be:e3:80:7d:29: 15:7e:5b:8d:b9:16:e5:23:7b:a0:68:8c:33:9e:3c:d0:82:7c: f1:47:c6:08:b7:b7:3c:a2:81:86:67:b1:17:48:0c:d6:f1:fa: 39:f0:62:ff:c4:73:f9:0a:5b:0d:eb:5d:af:ff:e5:b7:1c:3e: 6b:14:97:55:fb:4e:bc:cb:d5:1a:8f:4b:59:3c:30:d4:f2:5c: f6:05:13:da:5a:f4:23:23:c0:df:ff:63:2c:a5:d4:10:47:f2: 17:53:dd:ca:b7:2a:c4:7d:41:28:20:cb:46:0b:50:27:5d:57: 82:ad:e4:2c:58:bc:1f:c2:94:ad:f9:15:e0:f7:6d:fb:b0:2d: 70:51:fb:2a:15:95:4c:ea:1d:0c:8d:26:5a:47:4f:7e:cd:2b: 79:dd:8a:79:27:b4:83:4e:83:df:d2:7d:08:16:90:20:42:9a: f9:43:9c:0c:57:81:46:12:3b:24:c3:9a:58:8b:c5:14:f3:87: 15:a0:e6:59:ac:ae:39:69:12:4c:a2:2c:63:f5:71:ff:2e:a0: ab:ae:7e:9b:c3:23:e1:54:96:c8:e8:4f:8b:ce:d9:0b:70:87: 1c:22:3a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8UuV6Ni1q9InauppnAtgNOOj10wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTEyMDIwNTQ2NDNaFw0yNTEyMDUxNTI5NDNaMDMxMTAvBgNV BAMTKDkyMEYzQkQzM0VEQjZDN0FERUUzNDVEODQzNERBODBDMjgwOTYyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggpR4Hnwn8j6KYce9CjXjpsh7 +ToHexfX22pBWllULFP7NKOApRy125aNQmJ4tqKbl15cJAEKJNsG/Nr4yeUMfcCx 8mrd02y+oSsbQePR1aNedeOTxn0Mk2eA3Ef4LH2I8P6NsYo9e/k0MTpC6fwQz3Hm hkBhrn1mAFDJVxLNYroayQQ3iecR7bZUMEs11AUHylJmmlaObgb0ZM+02qnliqDf nUJWZgrYfmMwe0+ZKWqnlt8JbSt0o+V6UK2wqe9FMg6FR2aQGTG23GhmB7Z6ABUo rnBtgjpjnksIVnYWF4AbkTcWGtVWU/uhOL5WJGWEQ+ntj6sLfSamAdwzNj+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkg870z7bbHre40XYQ02oDCgJYlMwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYRs6li6WB0G+5dCuqhWRqTQpP9ds016Be4 iPZElYa+44B9KRV+W425FuUje6BojDOePNCCfPFHxgi3tzyigYZnsRdIDNbx+jnw Yv/Ec/kKWw3rXa//5bccPmsUl1X7TrzL1RqPS1k8MNTyXPYFE9pa9CMjwN//Yyyl 1BBH8hdT3cq3KsR9QSggy0YLUCddV4Kt5CxYvB/ClK35FeD3bfuwLXBR+yoVlUzq HQyNJlpHT37NK3ndinkntINOg9/SfQgWkCBCmvlDnAxXgUYSOyTDmliLxRTzhxWg 5lmsrjlpEkyiLGP1cf8uoKuufpvDI+FUlsjoT4vO2QtwhxwiOt0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:14 2025 by rpki-client