This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft File: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft (raw, json) Hash identifier: wjdYPO/JwEULCYgungI3ksLEXG80ECCc6nffRqn/JsA= Subject key identifier: F4:0C:E9:24:B1:5F:D3:64:F1:EE:89:9B:86:4C:0F:84:A6:7C:BC:58 Authority key identifier: 82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 Certificate issuer: /CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Certificate serial: 0FD213EEE4938A480746FA79D59950D6258909E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft Manifest number: 01A5 Signing time: Wed 03 Dec 2025 08:42:15 +0000 Manifest this update: Wed 03 Dec 2025 08:37:15 +0000 Manifest next update: Sat 06 Dec 2025 12:26:15 +0000 Files and hashes: 1: 3130332e3131342e3134342e302f32342d3234203d3e20313337333531.roa (hash: ty2A/+XUIZKKt+5K+zVnVNMiG2s1JjDQEBRNkGaNrQE=) 2: 323030313a6466343a663930303a3a2f34382d3438203d3e20313337333531.roa (hash: b4NjxQmSbJ+wk760b/yGVrpvatI7XP4yXIQB6LdeYtw=) 3: 8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl (hash: pbUd6g3mblmBIG3I187BEf5tGwLfCSHvubbqISTcaA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d2:13:ee:e4:93:8a:48:07:46:fa:79:d5:99:50:d6:25:89:09:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8208317A24AB4CD828CD8855F81F3EF2B53CC681 Validity Not Before: Dec 3 08:37:15 2025 GMT Not After : Dec 6 12:26:15 2025 GMT Subject: CN=F40CE924B15FD364F1EE899B864C0F84A67CBC58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2a:35:cb:3c:a3:4f:0f:40:a7:0d:d2:69:13: fa:6b:98:3a:cf:a8:b1:93:dd:1d:b4:06:89:98:45: c8:8f:df:35:95:46:12:71:f2:e9:88:8a:d9:b9:12: 82:5e:77:c3:b4:a9:02:60:f0:ae:65:68:57:86:69: ea:99:f5:bd:d6:be:8c:73:b3:ef:28:65:c6:1d:c4: 3c:a8:e6:52:94:fa:9f:18:bb:85:9b:17:cb:6d:43: 60:55:16:e8:f4:db:60:7d:dd:84:b3:bb:d7:ca:f1: 7f:29:a7:b5:a2:54:6b:aa:8d:a0:18:be:d1:b0:9a: ce:0f:f4:bb:79:af:08:90:3d:ee:c7:da:c9:8a:cd: 4d:e7:61:6a:e6:f3:cc:f8:dd:e7:f5:57:59:86:84: 85:a8:68:c0:0c:7e:cd:2c:8d:b4:77:2c:f7:30:21: 10:fd:ea:d8:6c:e8:1d:d9:a5:8b:06:bb:8b:a8:32: 3d:7d:12:f5:71:26:3b:5b:a8:fc:18:7c:6e:57:66: dd:67:55:53:2a:59:43:c8:0d:4d:91:8c:99:fa:4a: 54:d4:ca:0c:4d:cc:d2:e1:a5:5d:3a:1e:14:cd:9d: f8:51:af:9c:39:75:f3:98:90:1b:83:92:97:f8:5d: 2b:26:13:56:03:0b:6b:2c:46:5c:9c:30:b6:2f:18: 70:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0C:E9:24:B1:5F:D3:64:F1:EE:89:9B:86:4C:0F:84:A6:7C:BC:58 X509v3 Authority Key Identifier: keyid:82:08:31:7A:24:AB:4C:D8:28:CD:88:55:F8:1F:3E:F2:B5:3C:C6:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8208317A24AB4CD828CD8855F81F3EF2B53CC681.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88788a8b-541b-4cbf-bab9-8dc377bc1284/0/8208317A24AB4CD828CD8855F81F3EF2B53CC681.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3a:44:3b:be:01:9d:99:8a:e5:8c:14:71:c9:35:ee:b5:eb: e8:ea:6a:8d:23:07:52:4c:27:e8:cf:72:52:f0:06:b0:3b:32: 12:93:9a:f8:47:05:79:af:82:98:f9:6e:80:c7:bd:b1:16:89: 8b:69:c5:13:3f:32:b1:18:fc:6f:80:da:4d:e1:c4:98:f3:13: c0:ed:b2:11:bf:b8:90:9b:10:f2:7a:7d:be:9f:76:af:c5:09: 28:b5:d0:aa:d1:0b:43:bd:ba:ef:f3:0b:08:c2:cf:af:4c:77: a7:d4:e1:8c:4a:18:63:f7:b2:ff:67:1c:72:01:5e:cd:79:eb: 90:58:2f:bc:60:25:4a:a4:53:31:b5:8d:17:d5:69:b2:10:0b: 40:25:29:98:6a:41:9d:44:10:3c:28:91:df:65:80:c1:3c:3c: 40:b2:60:91:bb:80:64:81:1d:a9:0a:4b:5f:0e:2f:4d:6c:17: 48:61:07:cd:a1:bc:77:00:e5:71:42:60:81:89:87:54:4d:a7: 57:70:6f:55:83:f0:dc:65:d6:22:b5:e0:93:12:61:92:41:06: d1:c7:9e:6c:f5:b1:a3:69:a9:6f:3e:52:4c:c9:61:e0:35:ee: 09:28:5f:c7:77:30:6c:54:85:ab:e1:5c:cd:80:d1:1f:8e:6c: 31:a4:1f:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9IT7uSTikgHRvp51ZlQ1iWJCeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJC NTNDQzY4MTAeFw0yNTEyMDMwODM3MTVaFw0yNTEyMDYxMjI2MTVaMDMxMTAvBgNV BAMTKEY0MENFOTI0QjE1RkQzNjRGMUVFODk5Qjg2NEMwRjg0QTY3Q0JDNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKjXLPKNPD0CnDdJpE/prmDrP qLGT3R20BomYRciP3zWVRhJx8umIitm5EoJed8O0qQJg8K5laFeGaeqZ9b3Wvoxz s+8oZcYdxDyo5lKU+p8Yu4WbF8ttQ2BVFuj022B93YSzu9fK8X8pp7WiVGuqjaAY vtGwms4P9Lt5rwiQPe7H2smKzU3nYWrm88z43ef1V1mGhIWoaMAMfs0sjbR3LPcw IRD96ths6B3ZpYsGu4uoMj19EvVxJjtbqPwYfG5XZt1nVVMqWUPIDU2RjJn6SlTU ygxNzNLhpV06HhTNnfhRr5w5dfOYkBuDkpf4XSsmE1YDC2ssRlycMLYvGHCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9AzpJLFf02Tx7ombhkwPhKZ8vFgwHwYDVR0j BBgwFoAUgggxeiSrTNgozYhV+B8+8rU8xoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODc4OGE4Yi01NDFiLTRjYmYtYmFiOS04ZGMzNzdiYzEyODQvMC84MjA4MzE3QTI0 QUI0Q0Q4MjhDRDg4NTVGODFGM0VGMkI1M0NDNjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNFRjJCNTND QzY4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg3ODhhOGItNTQxYi00Y2JmLWJh YjktOGRjMzc3YmMxMjg0LzAvODIwODMxN0EyNEFCNENEODI4Q0Q4ODU1RjgxRjNF RjJCNTNDQzY4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI6RDu+AZ2ZiuWMFHHJNe616+jqao0jB1JM J+jPclLwBrA7MhKTmvhHBXmvgpj5boDHvbEWiYtpxRM/MrEY/G+A2k3hxJjzE8Dt shG/uJCbEPJ6fb6fdq/FCSi10KrRC0O9uu/zCwjCz69Md6fU4YxKGGP3sv9nHHIB Xs1565BYL7xgJUqkUzG1jRfVabIQC0AlKZhqQZ1EEDwokd9lgME8PECyYJG7gGSB HakKS18OL01sF0hhB82hvHcA5XFCYIGJh1RNp1dwb1WD8Nxl1iK14JMSYZJBBtHH nmz1saNpqW8+UkzJYeA17gkoX8d3MGxUhavhXM2A0R+ObDGkH1w= -----END CERTIFICATE-----Generated at Wed Dec 3 16:12:01 2025 by rpki-client