This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: 6LtnHNZyfVZS6IwiYmup68u2MM1uT9DE5dOy+m2knXA= Subject key identifier: A3:50:9B:8D:3C:9F:0B:FD:0B:5A:A5:56:45:92:EA:B8:DA:34:C1:B5 Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 39EBFF65636AAC45ED948CD865C1D8CA98523547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 01A2 Signing time: Tue 02 Dec 2025 01:20:48 +0000 Manifest this update: Tue 02 Dec 2025 01:15:48 +0000 Manifest next update: Fri 05 Dec 2025 03:54:48 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: EEWGfY/FJf1+T8bt/7xigp5n2NuU+3YDtxq9SdocGPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 03:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:eb:ff:65:63:6a:ac:45:ed:94:8c:d8:65:c1:d8:ca:98:52:35:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Dec 2 01:15:48 2025 GMT Not After : Dec 5 03:54:48 2025 GMT Subject: CN=A3509B8D3C9F0BFD0B5AA5564592EAB8DA34C1B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f4:74:fb:a3:c2:0b:d9:97:50:f5:e8:3d:04: cb:74:20:0d:45:eb:f7:7a:52:a2:b5:6e:dd:c0:c8: 94:94:fa:57:49:81:88:b2:bb:c4:9c:cf:bb:18:48: 09:04:aa:2c:b0:33:70:c9:7d:65:c8:3d:a9:cf:2f: 76:22:9d:aa:8d:61:6e:c3:ba:64:67:b4:fa:a6:b9: df:22:ad:5d:2a:f7:0b:eb:8d:2c:08:71:fd:7d:af: f4:6f:de:e0:c8:59:f3:2b:30:86:9c:13:3a:90:c6: d1:49:b4:1b:49:ab:57:c8:61:b6:64:23:b8:5d:5d: d4:12:fd:b6:0d:e8:df:e5:dd:70:c7:05:9c:53:aa: f0:cf:59:13:0f:78:3b:29:05:d4:fe:93:93:09:a1: 90:95:41:1e:10:9f:61:94:c9:aa:e0:98:14:5d:7f: 6b:d8:ee:ce:d9:2b:44:e4:10:14:aa:ef:4f:af:66: 09:b4:5c:57:c0:22:0a:2d:a4:6a:2a:8d:89:c6:c9: 5f:80:e3:c6:ba:8c:d4:65:45:38:15:a6:fc:94:c3: 5e:3d:a8:a7:f1:12:09:36:01:13:49:5a:1e:ee:d1: 03:40:4f:65:ce:c8:2a:83:9c:82:94:d7:d6:07:21: e7:b8:86:eb:ee:02:d6:1c:9f:64:22:3e:43:c8:32: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:9B:8D:3C:9F:0B:FD:0B:5A:A5:56:45:92:EA:B8:DA:34:C1:B5 X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:cc:b9:cb:f1:70:85:cf:7f:8e:ee:bf:21:ee:1a:91:87:ef: b5:96:c0:94:cf:f1:eb:20:39:c1:57:48:fb:2b:ac:de:e6:bd: 1b:bf:45:ee:30:3f:6c:ca:c8:01:37:6a:92:9d:14:a7:8d:7b: d1:b5:ca:6e:49:91:a5:36:f6:2e:96:4d:87:29:09:1c:3c:0d: 2d:5c:07:e7:48:58:0d:68:1c:13:49:1d:82:27:24:12:4c:94: 93:f7:a0:fd:6e:ac:46:2b:9d:bb:00:1d:49:bd:9b:ce:dd:f5: 91:1c:4f:64:5e:d3:71:9a:36:dc:36:db:b8:31:12:1a:49:25: bd:cc:f6:e9:f0:3d:d4:e2:7b:24:ef:c8:32:01:47:e0:12:57: 4e:13:2c:7d:a2:40:ae:ce:cd:fb:4b:d6:45:fc:ff:93:f7:f3: 2c:de:dc:79:ed:9f:78:13:d6:ec:87:48:ea:e8:97:60:b6:5d: 31:19:0d:aa:ca:9b:3e:b5:24:46:47:ce:49:d9:fe:8c:27:e2: 30:e8:b9:c4:bf:ce:9b:cb:91:15:3f:2e:2a:58:94:ff:e8:79: 59:74:aa:2e:bf:91:6a:5e:f2:77:d0:0d:8f:14:4b:eb:e1:40: ac:ed:fa:3b:a5:03:ae:24:1b:f2:35:02:7f:83:81:8d:9f:c1: 33:db:cd:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOev/ZWNqrEXtlIzYZcHYyphSNUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTEyMDIwMTE1NDhaFw0yNTEyMDUwMzU0NDhaMDMxMTAvBgNV BAMTKEEzNTA5QjhEM0M5RjBCRkQwQjVBQTU1NjQ1OTJFQUI4REEzNEMxQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd9HT7o8IL2ZdQ9eg9BMt0IA1F 6/d6UqK1bt3AyJSU+ldJgYiyu8Scz7sYSAkEqiywM3DJfWXIPanPL3YinaqNYW7D umRntPqmud8irV0q9wvrjSwIcf19r/Rv3uDIWfMrMIacEzqQxtFJtBtJq1fIYbZk I7hdXdQS/bYN6N/l3XDHBZxTqvDPWRMPeDspBdT+k5MJoZCVQR4Qn2GUyargmBRd f2vY7s7ZK0TkEBSq70+vZgm0XFfAIgotpGoqjYnGyV+A48a6jNRlRTgVpvyUw149 qKfxEgk2ARNJWh7u0QNAT2XOyCqDnIKU19YHIee4huvuAtYcn2QiPkPIMnOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1CbjTyfC/0LWqVWRZLquNo0wbUwHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjMucvxcIXPf47uvyHuGpGH77WWwJTP8esg OcFXSPsrrN7mvRu/Re4wP2zKyAE3apKdFKeNe9G1ym5JkaU29i6WTYcpCRw8DS1c B+dIWA1oHBNJHYInJBJMlJP3oP1urEYrnbsAHUm9m87d9ZEcT2Re03GaNtw227gx EhpJJb3M9unwPdTieyTvyDIBR+ASV04TLH2iQK7OzftL1kX8/5P38yze3Hntn3gT 1uyHSOrol2C2XTEZDarKmz61JEZHzknZ/own4jDoucS/zpvLkRU/LipYlP/oeVl0 qi6/kWpe8nfQDY8US+vhQKzt+julA64kG/I1An+DgY2fwTPbzeg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:01 2025 by rpki-client