This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: NacEhmksEpB3MYNQ7ovSQAsG7smE1A9vwhH/hwWRp6Y= Subject key identifier: B2:DD:17:D2:30:65:AE:3C:63:00:8D:DF:BB:9C:A9:2E:55:90:84:75 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 715275BFD1523A71137B93B9D77D73ECA7A38685 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 2A Signing time: Sun 07 Dec 2025 08:01:07 +0000 Manifest this update: Sun 07 Dec 2025 07:56:07 +0000 Manifest next update: Wed 10 Dec 2025 11:57:07 +0000 Files and hashes: 1: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) 2: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: Ja3S/GMsciDoLtuSf45DN8L8OFuYHqoapAhJfW2MSkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:52:75:bf:d1:52:3a:71:13:7b:93:b9:d7:7d:73:ec:a7:a3:86:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Dec 7 07:56:07 2025 GMT Not After : Dec 10 11:57:07 2025 GMT Subject: CN=B2DD17D23065AE3C63008DDFBB9CA92E55908475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:61:7b:48:2a:58:ae:02:98:5e:74:b9:94:b3: 4d:13:e0:da:2e:fb:02:e8:1e:e8:73:e1:1b:a8:08: 72:05:77:54:6d:c2:96:1b:81:ab:1b:a0:fb:43:19: 97:7c:48:90:40:c7:49:86:ec:be:d3:0b:a1:70:1d: 35:b6:a4:21:c1:ac:5a:10:65:50:87:3a:cf:22:01: b9:49:4a:f5:4b:62:39:5b:ba:0f:9a:4b:4d:34:37: 5f:12:10:ea:63:d5:54:f2:fc:46:39:33:3c:39:b2: f4:85:5b:99:d8:87:ba:1d:cc:f0:0e:0b:d6:29:55: bb:48:b5:98:07:dd:65:b7:be:a1:29:bb:32:85:73: 94:5d:8b:75:0d:47:f7:9c:43:d0:ad:7d:b9:b0:bc: 73:33:03:65:3d:02:06:ff:1f:02:e0:10:85:73:a3: b9:34:4f:a4:1e:67:41:21:1e:b8:52:a3:5d:fa:b1: b4:4a:75:2e:7a:c1:08:b2:b0:e7:d1:d1:5e:52:ed: 28:23:25:b8:ed:be:7f:f8:c5:8d:d0:02:5a:b8:d9: c9:e8:08:b2:08:76:73:04:2e:90:f3:1a:42:87:6b: 70:5c:5a:89:e0:04:51:46:41:30:18:dd:39:04:49: 25:a9:7d:e5:2b:fc:a5:9b:eb:20:cb:5d:1b:e5:db: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DD:17:D2:30:65:AE:3C:63:00:8D:DF:BB:9C:A9:2E:55:90:84:75 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f5:5f:fe:db:49:c1:c6:b1:bc:30:65:58:61:76:65:ee:ee: 6a:de:d7:f3:fd:e9:d2:3c:f9:03:91:46:8c:59:c3:69:4d:f5: 3d:d7:6c:ab:0c:16:90:82:de:c3:04:97:14:c8:8e:0b:29:a7: 8b:33:15:08:83:8d:8a:32:ec:09:59:26:6c:06:01:16:7f:11: df:6e:b8:07:51:87:53:d8:14:90:fe:8c:05:3a:09:ce:5e:bc: c6:f8:9c:ff:3b:68:cc:44:00:a4:18:32:50:ff:49:e8:0d:c5: 67:13:86:41:3d:94:67:10:bf:13:34:c3:97:ca:c7:f3:68:65: b7:7c:0e:58:df:d9:65:77:c9:bb:37:6c:4f:ac:40:e6:38:b1: ce:8b:46:32:2d:88:75:5a:51:83:44:85:1f:d5:ad:cc:a0:f3: ef:d2:8f:c1:a1:17:a3:2e:56:26:1f:f7:28:ad:e3:06:32:86: 7e:85:40:1b:a3:2f:2d:cc:73:8b:3f:fb:f4:dd:36:2b:b3:e7: 60:53:f0:f8:61:8f:bf:41:e1:b3:55:3b:0f:df:17:0b:9a:28: ac:92:b2:71:50:5d:e2:ce:db:95:6d:dd:5b:56:9e:6b:30:94: ee:6d:de:fe:69:9a:ac:5b:27:ff:21:5d:77:50:ff:6f:5d:ad: a0:b2:a2:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVJ1v9FSOnETe5O5131z7KejhoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNTEyMDcwNzU2MDdaFw0yNTEyMTAxMTU3MDdaMDMxMTAvBgNV BAMTKEIyREQxN0QyMzA2NUFFM0M2MzAwOERERkJCOUNBOTJFNTU5MDg0NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYXtIKliuAphedLmUs00T4Nou +wLoHuhz4RuoCHIFd1RtwpYbgasboPtDGZd8SJBAx0mG7L7TC6FwHTW2pCHBrFoQ ZVCHOs8iAblJSvVLYjlbug+aS000N18SEOpj1VTy/EY5Mzw5svSFW5nYh7odzPAO C9YpVbtItZgH3WW3vqEpuzKFc5Rdi3UNR/ecQ9CtfbmwvHMzA2U9Agb/HwLgEIVz o7k0T6QeZ0EhHrhSo136sbRKdS56wQiysOfR0V5S7SgjJbjtvn/4xY3QAlq42cno CLIIdnMELpDzGkKHa3BcWongBFFGQTAY3TkESSWpfeUr/KWb6yDLXRvl20YDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUst0X0jBlrjxjAI3fu5ypLlWQhHUwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn1X/7bScHGsbwwZVhhdmXu7mre1/P96dI8 +QORRoxZw2lN9T3XbKsMFpCC3sMElxTIjgspp4szFQiDjYoy7AlZJmwGARZ/Ed9u uAdRh1PYFJD+jAU6Cc5evMb4nP87aMxEAKQYMlD/SegNxWcThkE9lGcQvxM0w5fK x/NoZbd8Dljf2WV3ybs3bE+sQOY4sc6LRjItiHVaUYNEhR/Vrcyg8+/Sj8GhF6Mu ViYf9yit4wYyhn6FQBujLy3Mc4s/+/TdNiuz52BT8Phhj79B4bNVOw/fFwuaKKyS snFQXeLO25Vt3VtWnmswlO5t3v5pmqxbJ/8hXXdQ/29draCyotk= -----END CERTIFICATE-----Generated at Sun Dec 7 18:51:50 2025 by rpki-client