This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: y7wL0IlZVM5ihrOs5WXeWTkU8v3KUslQA+8NhUiDxnY= Subject key identifier: 9B:3D:EE:DE:35:E9:09:C1:0C:D4:39:87:4C:AB:AB:E2:62:6C:45:A0 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 0D6C1EB4D911C74187839A84FF31DE39739BDDCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 0298 Signing time: Tue 02 Dec 2025 08:41:33 +0000 Manifest this update: Tue 02 Dec 2025 08:36:33 +0000 Manifest next update: Fri 05 Dec 2025 18:15:33 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: Pudd+8+83UXm/LnejJawl2PVnqlBbM4VseTwJYWj7aU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6c:1e:b4:d9:11:c7:41:87:83:9a:84:ff:31:de:39:73:9b:dd:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Dec 2 08:36:33 2025 GMT Not After : Dec 5 18:15:33 2025 GMT Subject: CN=9B3DEEDE35E909C10CD439874CABABE2626C45A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:e3:9e:09:69:24:45:dd:c2:fd:97:d6:c2: 2d:db:26:4a:7d:c7:94:9e:bd:40:de:c0:13:3f:28: 03:cd:06:3e:eb:ee:ee:3d:4f:2e:be:02:32:6d:c3: 6d:c5:ae:cc:50:10:68:58:99:04:50:e2:9d:d0:01: 41:03:62:5c:8f:43:69:52:28:07:b6:fd:14:90:b0: ac:a4:f6:16:ab:eb:98:50:20:2d:44:f8:85:7f:a4: fb:6b:24:72:64:7c:1f:cb:84:df:8b:37:31:09:a2: aa:f8:08:37:a2:3c:f8:a1:fc:fa:54:02:9e:1b:ae: c8:3b:00:2c:f1:82:25:32:cf:c3:7c:b7:6d:6b:6e: c2:e5:08:9e:16:da:94:1d:10:96:4f:a7:9a:b9:15: 38:a7:59:1c:02:7b:a5:86:ae:5e:00:c5:17:a1:4c: 86:91:50:a5:ed:96:71:df:3a:fc:27:66:1a:7c:80: 68:43:2b:b0:6c:61:44:93:82:ae:9b:0e:77:97:26: 81:62:56:01:fa:93:9e:fe:65:e0:47:19:23:27:3b: f8:6b:8c:c9:09:a4:a5:71:2e:92:eb:d0:a0:6b:f1: 1e:8e:85:fb:cd:49:5d:d0:1d:f6:eb:1a:34:5b:cf: f5:37:fb:59:b0:9f:21:5b:eb:96:76:ae:0b:b4:63: d6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3D:EE:DE:35:E9:09:C1:0C:D4:39:87:4C:AB:AB:E2:62:6C:45:A0 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5a:a8:1f:68:89:ae:27:d9:67:67:b6:60:58:33:ed:0e:88: 2f:c9:e6:71:79:31:97:b9:54:cf:cd:57:ae:ec:18:a1:b6:57: 54:78:09:9f:90:a5:2c:c5:5e:4f:f3:3b:c3:ba:8d:63:53:43: 86:81:b3:66:bb:a6:6b:92:8c:39:c2:39:06:9a:88:24:4f:83: 2e:04:a7:c7:3e:dd:b3:8c:f0:4f:b3:92:d7:0e:bb:cf:57:62: 5b:80:a4:ad:ff:fe:0a:b6:06:3f:22:82:9f:f2:94:4f:8f:c2: e1:11:f2:23:f5:70:11:2c:a5:26:28:5a:3d:57:66:20:f9:1f: f3:f1:7b:fd:ea:dd:6d:ff:aa:02:d9:80:e6:8f:b5:4b:76:8e: 3e:28:60:90:a5:8e:24:26:95:9b:4f:e5:a7:9f:be:17:4e:12: 6a:95:4f:bf:e5:75:f3:cd:9d:00:93:78:d6:0d:10:f1:8d:0c: 81:b4:e6:98:81:64:d8:68:70:10:58:8b:88:f2:6f:dc:4d:85: 74:b8:ab:39:71:bc:7c:03:a9:dc:49:73:d1:4a:f4:72:62:66: 96:38:35:7c:5d:ed:a9:93:32:fd:f1:55:b5:1e:df:e2:51:ba: a4:7a:48:96:67:9b:07:13:20:06:9c:62:df:6e:49:83:21:4f: 11:c0:c2:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDWwetNkRx0GHg5qE/zHeOXOb3c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTEyMDIwODM2MzNaFw0yNTEyMDUxODE1MzNaMDMxMTAvBgNV BAMTKDlCM0RFRURFMzVFOTA5QzEwQ0Q0Mzk4NzRDQUJBQkUyNjI2QzQ1QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhuOeCWkkRd3C/ZfWwi3bJkp9 x5SevUDewBM/KAPNBj7r7u49Ty6+AjJtw23FrsxQEGhYmQRQ4p3QAUEDYlyPQ2lS KAe2/RSQsKyk9har65hQIC1E+IV/pPtrJHJkfB/LhN+LNzEJoqr4CDeiPPih/PpU Ap4brsg7ACzxgiUyz8N8t21rbsLlCJ4W2pQdEJZPp5q5FTinWRwCe6WGrl4AxReh TIaRUKXtlnHfOvwnZhp8gGhDK7BsYUSTgq6bDneXJoFiVgH6k57+ZeBHGSMnO/hr jMkJpKVxLpLr0KBr8R6OhfvNSV3QHfbrGjRbz/U3+1mwnyFb65Z2rgu0Y9YRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmz3u3jXpCcEM1DmHTKur4mJsRaAwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5aqB9oia4n2WdntmBYM+0OiC/J5nF5MZe5 VM/NV67sGKG2V1R4CZ+QpSzFXk/zO8O6jWNTQ4aBs2a7pmuSjDnCOQaaiCRPgy4E p8c+3bOM8E+zktcOu89XYluApK3//gq2Bj8igp/ylE+PwuER8iP1cBEspSYoWj1X ZiD5H/Pxe/3q3W3/qgLZgOaPtUt2jj4oYJCljiQmlZtP5aefvhdOEmqVT7/ldfPN nQCTeNYNEPGNDIG05piBZNhocBBYi4jyb9xNhXS4qzlxvHwDqdxJc9FK9HJiZpY4 NXxd7amTMv3xVbUe3+JRuqR6SJZnmwcTIAacYt9uSYMhTxHAwmA= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:24 2025 by rpki-client