This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: AJG2dM830UDlonDJa4EMtM3WjFmU+YqePexUp6x+t94= Subject key identifier: D3:2F:B1:F7:00:63:BB:A5:73:A8:2D:24:0A:44:1D:3C:5B:1B:0F:46 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 4867A064037A652A0FB8B93068C66C0CB116D1C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 02C7 Signing time: Mon 01 Dec 2025 20:00:49 +0000 Manifest this update: Mon 01 Dec 2025 19:55:49 +0000 Manifest next update: Fri 05 Dec 2025 04:02:49 +0000 Files and hashes: 1: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: 5OxWBN3xkvr4brmCWEnDWGedUvtEREZvC7O1haRsI0Q=) 2: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: TX3fUeZklwpUw9yIwRSZ7p2jM8uL0KvPpSOCdlPRBMk=) 3: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: bmzsNhYujGH2LmgXskz/0GWC9scVu/AXTjmp6dOWN3g=) 4: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: T+LxrVwwNKzJSOF5lHGAsP446A31BNGrPBlYYjdrOLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:67:a0:64:03:7a:65:2a:0f:b8:b9:30:68:c6:6c:0c:b1:16:d1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Dec 1 19:55:49 2025 GMT Not After : Dec 5 04:02:49 2025 GMT Subject: CN=D32FB1F70063BBA573A82D240A441D3C5B1B0F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f9:a3:e4:ec:ed:11:19:5e:ef:28:a5:40:d3: bb:87:94:03:04:ca:6b:95:a9:28:54:f6:fd:15:84: ff:65:b1:06:25:03:c9:8f:f0:45:63:ab:89:00:39: 07:07:1a:31:91:68:3c:79:c1:4e:2d:9c:4a:4d:65: 69:7f:e0:11:db:56:23:43:cc:9c:91:ef:ff:d4:d7: 5f:04:80:7a:81:27:f2:e5:84:16:e0:75:73:b4:bc: 22:06:82:44:d1:61:45:d6:1b:86:2b:f2:96:e6:ee: 7d:8d:96:aa:c0:fe:ec:f8:ec:de:cc:95:ee:6f:47: b8:f6:03:0d:45:b0:c1:5c:4b:cb:ca:f7:b6:8b:37: 5c:c9:9e:d4:7e:87:52:44:83:50:bf:8e:02:63:fb: 00:ba:89:4d:f9:40:8d:08:f1:71:61:b5:6a:5b:13: 31:34:de:75:7e:9f:55:5d:fc:7d:66:2c:0a:fd:7c: 23:94:76:dd:bc:b3:87:11:4d:d5:a6:2c:3f:7b:e6: b8:a3:70:e2:9a:68:17:7b:7c:a6:35:23:d6:da:f5: 8b:c6:28:cc:45:c3:08:c0:9b:19:fc:19:79:f0:31: e1:13:26:41:df:5f:4d:0e:3e:cb:b4:38:4e:68:63: a1:d0:b7:a3:de:c5:ab:e1:22:ad:3c:3b:3e:ff:65: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2F:B1:F7:00:63:BB:A5:73:A8:2D:24:0A:44:1D:3C:5B:1B:0F:46 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:65:ca:f8:d4:46:0b:3b:56:ec:80:bc:32:ba:72:20:25:20: f8:f5:05:ae:2d:51:e3:e1:1e:18:1f:f0:94:69:c3:ab:3a:4d: 26:cc:82:92:a1:c7:7f:ec:60:83:0f:28:01:be:38:31:dc:16: d4:99:07:7a:53:d2:81:dc:fd:29:84:b9:8b:4b:75:24:26:82: 4f:a9:e9:e8:36:b3:58:a4:ab:13:5f:3b:26:2e:22:d0:5a:3e: fb:18:b8:ce:34:35:3a:5e:ef:0f:06:45:0c:02:eb:f6:47:dd: 38:8f:83:b6:02:34:f3:64:41:15:a6:11:42:6d:62:29:d8:28: 9f:3c:46:b6:0d:a9:a2:7a:dc:10:da:97:2f:be:5b:b7:05:9a: 15:30:01:68:f9:c0:8f:99:46:ed:60:ad:8d:21:4b:d8:b1:c2: 43:c1:bd:41:fb:6c:64:86:7e:3d:d6:3f:2f:58:a4:c6:13:ec: 89:9d:1e:ef:04:8a:64:9f:36:fb:cf:17:ba:df:02:48:04:fa: 10:75:81:f7:53:2d:5d:c6:de:56:83:17:0b:c0:91:5b:6a:03: ce:e9:e2:e6:c1:d6:c1:17:d3:28:1f:f4:2d:ef:13:96:8e:3d: b5:71:d1:30:9a:20:a6:02:f6:a7:df:a0:45:90:da:5e:00:80: e9:04:03:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSGegZAN6ZSoPuLkwaMZsDLEW0cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTEyMDExOTU1NDlaFw0yNTEyMDUwNDAyNDlaMDMxMTAvBgNV BAMTKEQzMkZCMUY3MDA2M0JCQTU3M0E4MkQyNDBBNDQxRDNDNUIxQjBGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq+aPk7O0RGV7vKKVA07uHlAME ymuVqShU9v0VhP9lsQYlA8mP8EVjq4kAOQcHGjGRaDx5wU4tnEpNZWl/4BHbViND zJyR7//U118EgHqBJ/LlhBbgdXO0vCIGgkTRYUXWG4Yr8pbm7n2NlqrA/uz47N7M le5vR7j2Aw1FsMFcS8vK97aLN1zJntR+h1JEg1C/jgJj+wC6iU35QI0I8XFhtWpb EzE03nV+n1Vd/H1mLAr9fCOUdt28s4cRTdWmLD975rijcOKaaBd7fKY1I9ba9YvG KMxFwwjAmxn8GXnwMeETJkHfX00OPsu0OE5oY6HQt6PexavhIq08Oz7/ZT4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0y+x9wBju6VzqC0kCkQdPFsbD0YwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADplyvjURgs7VuyAvDK6ciAlIPj1Ba4tUePh Hhgf8JRpw6s6TSbMgpKhx3/sYIMPKAG+ODHcFtSZB3pT0oHc/SmEuYtLdSQmgk+p 6eg2s1ikqxNfOyYuItBaPvsYuM40NTpe7w8GRQwC6/ZH3TiPg7YCNPNkQRWmEUJt YinYKJ88RrYNqaJ63BDaly++W7cFmhUwAWj5wI+ZRu1grY0hS9ixwkPBvUH7bGSG fj3WPy9YpMYT7ImdHu8EimSfNvvPF7rfAkgE+hB1gfdTLV3G3laDFwvAkVtqA87p 4ubB1sEX0ygf9C3vE5aOPbVx0TCaIKYC9qffoEWQ2l4AgOkEA+o= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:27 2025 by rpki-client