This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: 1yJCBijMbkbUYWj4RI+5lbpmLQaBfDu/VqtZFhupLBo= Subject key identifier: B3:88:C4:2E:F7:A9:33:26:A1:2C:AB:0C:F2:3B:3F:8F:C3:9F:75:9B Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 1B6D3AC52747892CCD123590C3485B85C6A07508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 0546 Signing time: Thu 11 Dec 2025 05:21:46 +0000 Manifest this update: Thu 11 Dec 2025 05:16:46 +0000 Manifest next update: Sun 14 Dec 2025 15:45:46 +0000 Files and hashes: 1: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=) 2: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=) 3: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=) 4: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: +fZ3PY9lPhhDRD1AsNErFcVw23tfLDbpsvBVWxSTRgU=) 5: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=) 6: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=) 7: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=) 8: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=) 9: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=) 10: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=) 11: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=) 12: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=) 13: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=) 14: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=) 15: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=) 16: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=) 17: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=) 18: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=) 19: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 15:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:6d:3a:c5:27:47:89:2c:cd:12:35:90:c3:48:5b:85:c6:a0:75:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Dec 11 05:16:46 2025 GMT Not After : Dec 14 15:45:46 2025 GMT Subject: CN=B388C42EF7A93326A12CAB0CF23B3F8FC39F759B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:14:84:3e:c9:8d:41:a1:4f:5b:1e:7f:6e: 03:1e:c8:33:43:46:1c:1d:e2:ba:9a:ab:a7:49:c3: 5c:47:2c:81:99:22:c0:09:bc:85:43:92:8f:25:fc: 28:b9:23:53:2e:55:59:b0:6c:a9:8d:05:16:b4:05: 8a:0c:ef:48:5c:c0:85:d5:29:49:d0:69:49:79:2a: 6a:ce:c8:69:6c:18:70:0f:36:e8:21:89:6e:db:db: e1:d0:30:85:a7:24:33:34:7d:d2:16:c5:ab:b9:ba: 29:47:28:9d:d6:cb:10:58:18:ae:cd:d4:f9:c6:db: 30:7c:fc:20:10:fb:de:8a:52:a1:2d:6b:11:2d:26: 3b:95:11:95:a0:d2:88:b7:4b:7f:59:d4:16:9a:06: 92:be:68:23:a9:7b:cf:c0:f5:8b:18:d3:c5:4e:a8: 21:a0:6e:36:bb:4a:3b:bd:17:9d:8f:03:80:61:1e: 9d:11:e0:1b:1a:74:49:59:b9:99:e2:4d:b3:3f:11: 65:21:4e:bc:34:d5:1c:12:34:b9:b5:aa:c2:cd:7d: 33:94:e3:73:0c:e3:dc:86:b3:13:42:16:fe:5d:a8: b8:fc:51:e6:6d:48:8c:d9:45:83:e8:59:d7:b9:07: d0:73:91:ca:75:a5:8d:b8:18:02:51:0c:b1:e8:86: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:88:C4:2E:F7:A9:33:26:A1:2C:AB:0C:F2:3B:3F:8F:C3:9F:75:9B X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bf:86:e5:3a:6c:89:07:5c:1b:4d:65:32:b9:3c:40:39:bb: 59:a6:28:78:ee:24:53:3c:c0:91:55:f2:7f:64:31:53:c6:24: b3:44:6b:44:e7:3e:2e:e6:a4:38:a3:c2:c8:99:46:64:88:76: 69:ad:bb:eb:cb:3f:64:5b:9f:e5:4c:2e:35:6b:f2:d5:b3:c6: e2:18:99:7d:a9:9c:35:3c:63:3a:85:31:ad:68:de:d4:e0:87: a7:99:cb:74:39:bf:09:9f:79:06:07:2a:2a:23:cb:94:3e:cc: b5:5a:86:af:e0:58:29:01:30:28:34:23:f6:cf:0a:f8:3b:21: 4d:f0:88:95:a4:72:92:33:d4:7f:af:1b:28:f9:25:b1:f8:2c: 6e:57:74:d5:22:0a:eb:86:93:7b:4d:e8:92:c2:a5:bb:ed:e0: f7:99:52:0d:69:8a:0e:0e:a5:5c:19:84:f3:60:bc:50:6f:78: f3:3b:5c:81:48:97:0e:0f:c3:90:2a:04:ff:26:57:48:43:f2: bc:58:c3:3a:0a:c0:a4:bf:d7:6d:b6:0a:d3:39:a6:9d:66:38: f7:47:0e:f4:b1:be:6e:ad:ea:b6:80:a8:38:e4:9e:a3:f3:bc: a2:e0:ef:e0:78:18:b4:08:f8:cd:99:67:6d:10:0c:58:66:67: b6:83:6e:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG206xSdHiSzNEjWQw0hbhcagdQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTEyMTEwNTE2NDZaFw0yNTEyMTQxNTQ1NDZaMDMxMTAvBgNV BAMTKEIzODhDNDJFRjdBOTMzMjZBMTJDQUIwQ0YyM0IzRjhGQzM5Rjc1OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2WRSEPsmNQaFPWx5/bgMeyDND Rhwd4rqaq6dJw1xHLIGZIsAJvIVDko8l/Ci5I1MuVVmwbKmNBRa0BYoM70hcwIXV KUnQaUl5KmrOyGlsGHAPNughiW7b2+HQMIWnJDM0fdIWxau5uilHKJ3WyxBYGK7N 1PnG2zB8/CAQ+96KUqEtaxEtJjuVEZWg0oi3S39Z1BaaBpK+aCOpe8/A9YsY08VO qCGgbja7Sju9F52PA4BhHp0R4BsadElZuZniTbM/EWUhTrw01RwSNLm1qsLNfTOU 43MM49yGsxNCFv5dqLj8UeZtSIzZRYPoWde5B9Bzkcp1pY24GAJRDLHohrfpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4jELvepMyahLKsM8js/j8OfdZswHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+/huU6bIkHXBtNZTK5PEA5u1mmKHjuJFM8 wJFV8n9kMVPGJLNEa0TnPi7mpDijwsiZRmSIdmmtu+vLP2Rbn+VMLjVr8tWzxuIY mX2pnDU8YzqFMa1o3tTgh6eZy3Q5vwmfeQYHKiojy5Q+zLVahq/gWCkBMCg0I/bP Cvg7IU3wiJWkcpIz1H+vGyj5JbH4LG5XdNUiCuuGk3tN6JLCpbvt4PeZUg1pig4O pVwZhPNgvFBvePM7XIFIlw4Pw5AqBP8mV0hD8rxYwzoKwKS/1222CtM5pp1mOPdH DvSxvm6t6raAqDjknqPzvKLg7+B4GLQI+M2ZZ20QDFhmZ7aDbls= -----END CERTIFICATE-----Generated at Fri Dec 12 21:02:24 2025 by rpki-client