This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: EUdRUlrSI+2KWdee4l1QF8f7q2WBZuGwc/bcIhHTH2Y= Subject key identifier: 44:0A:4A:B9:98:08:45:AD:00:6A:00:74:79:27:4E:43:D9:93:15:E0 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 3313C86F5CA2074408FAD01221CDB75851F3EEB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0538 Signing time: Thu 11 Dec 2025 21:11:38 +0000 Manifest this update: Thu 11 Dec 2025 21:06:38 +0000 Manifest next update: Mon 15 Dec 2025 00:32:38 +0000 Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 2: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 4: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 5: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: T4bu14kUSnbpTVRWqSSbnw0q9xM+8ztdC3kA5BCezy8=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 7: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=) 8: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 00:32:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:c8:6f:5c:a2:07:44:08:fa:d0:12:21:cd:b7:58:51:f3:ee:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Dec 11 21:06:38 2025 GMT Not After : Dec 15 00:32:38 2025 GMT Subject: CN=440A4AB9980845AD006A007479274E43D99315E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:28:a4:ce:f2:f1:ba:c3:ae:e6:6d:b4:88: 00:c5:14:06:ef:a6:c1:19:60:d9:e1:3c:7b:c5:8b: a4:bc:5b:3e:77:d5:fe:d7:92:1b:6c:f7:0f:f5:c8: 55:96:30:8a:e3:13:1e:86:33:9b:e5:3e:37:e1:96: 1f:76:e4:e4:8b:85:8e:6c:f9:7d:a5:5d:52:3b:e4: 14:6b:da:03:d6:ab:f6:4b:b6:42:47:8b:4b:a6:40: fc:1c:aa:08:f5:bb:df:7d:55:ee:25:ed:6a:4b:fe: 54:61:77:de:9b:4e:bd:77:bd:e8:aa:bb:0a:db:da: ad:db:60:3d:e8:59:6d:aa:de:84:2f:39:ae:d0:8a: 1e:58:83:70:b3:c4:d6:57:6a:91:1d:8c:fa:a6:59: fd:68:fd:6e:4b:5e:38:84:5b:5d:e8:44:49:54:a5: 5b:41:f3:03:ff:44:81:7d:f0:c6:65:dc:8a:f6:72: e3:63:46:00:f3:5f:67:6e:ad:21:e1:bf:f5:b0:d0: cb:bd:a1:04:f9:98:1c:02:42:c5:6f:a0:e3:a0:73: eb:a3:a1:53:f6:f1:22:ed:6b:f4:45:ee:33:a7:82: 5e:ae:da:da:d5:09:eb:88:e7:05:63:16:88:13:32: b7:df:58:c2:6f:ad:7b:a7:aa:eb:55:9d:46:4d:4e: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0A:4A:B9:98:08:45:AD:00:6A:00:74:79:27:4E:43:D9:93:15:E0 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4a:2d:8b:57:4d:40:39:61:c3:ee:b0:8e:b4:bb:f6:29:ae: 1d:fa:a5:f3:05:ae:8c:63:a5:3c:e5:d2:98:8f:29:92:f7:93: 17:f4:a5:cc:ad:e0:47:16:db:d9:15:bf:43:f8:79:56:2e:92: c7:4e:25:60:72:87:29:bc:82:1f:d5:97:c8:c7:a8:d2:ee:39: 7e:4e:6b:28:4f:bb:3c:61:07:74:95:77:ce:df:c4:f6:f9:60: 3e:7a:15:1f:97:19:31:ad:5d:db:22:0f:c6:4f:06:c8:31:02: 23:1e:18:7b:13:63:96:72:11:27:ca:db:c5:71:23:57:05:2a: bd:0c:a8:c0:79:27:b2:4e:04:a1:60:db:ca:91:20:c0:db:25: 2a:e7:04:56:87:15:58:b5:a2:16:71:bf:c7:42:7c:8b:43:91: 40:23:f1:50:51:5e:51:e3:f9:c5:40:ec:82:ab:1b:73:c1:c2: 19:41:f9:a8:b3:9b:b7:0b:e3:e3:32:c2:b3:98:11:60:78:70: 5f:8c:b3:03:30:30:a9:ea:9b:36:39:cb:80:ce:fb:1f:c4:23: 79:22:74:1b:ff:53:43:e4:60:f3:f9:c4:17:91:e1:94:fe:e3: 79:00:a5:94:43:2c:45:ab:2e:15:b2:cf:41:7d:62:ea:2d:59: 72:82:ad:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMxPIb1yiB0QI+tASIc23WFHz7rEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTEyMTEyMTA2MzhaFw0yNTEyMTUwMDMyMzhaMDMxMTAvBgNV BAMTKDQ0MEE0QUI5OTgwODQ1QUQwMDZBMDA3NDc5Mjc0RTQzRDk5MzE1RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuViikzvLxusOu5m20iADFFAbv psEZYNnhPHvFi6S8Wz531f7Xkhts9w/1yFWWMIrjEx6GM5vlPjfhlh925OSLhY5s +X2lXVI75BRr2gPWq/ZLtkJHi0umQPwcqgj1u999Ve4l7WpL/lRhd96bTr13veiq uwrb2q3bYD3oWW2q3oQvOa7Qih5Yg3CzxNZXapEdjPqmWf1o/W5LXjiEW13oRElU pVtB8wP/RIF98MZl3Ir2cuNjRgDzX2durSHhv/Ww0Mu9oQT5mBwCQsVvoOOgc+uj oVP28SLta/RF7jOngl6u2trVCeuI5wVjFogTMrffWMJvrXunqutVnUZNTqBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURApKuZgIRa0AagB0eSdOQ9mTFeAwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBKLYtXTUA5YcPusI60u/Yprh36pfMFroxj pTzl0piPKZL3kxf0pcyt4EcW29kVv0P4eVYuksdOJWByhym8gh/Vl8jHqNLuOX5O ayhPuzxhB3SVd87fxPb5YD56FR+XGTGtXdsiD8ZPBsgxAiMeGHsTY5ZyESfK28Vx I1cFKr0MqMB5J7JOBKFg28qRIMDbJSrnBFaHFVi1ohZxv8dCfItDkUAj8VBRXlHj +cVA7IKrG3PBwhlB+aizm7cL4+MywrOYEWB4cF+MswMwMKnqmzY5y4DO+x/EI3ki dBv/U0PkYPP5xBeR4ZT+43kApZRDLEWrLhWyz0F9YuotWXKCrUs= -----END CERTIFICATE-----Generated at Fri Dec 12 08:09:35 2025 by rpki-client