This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: oLjQ21hTMycMQ9NdWjGX09Bu2+VW/GAGDsZipjjwr80= Subject key identifier: 4F:E9:71:90:D6:18:32:16:E0:34:BA:4A:FF:59:E4:A7:81:6A:05:99 Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 6CDD36AC611B40711628D8ED668CE683D6D93D42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 0224 Signing time: Wed 03 Dec 2025 04:04:12 +0000 Manifest this update: Wed 03 Dec 2025 03:59:12 +0000 Manifest next update: Sat 06 Dec 2025 11:30:12 +0000 Files and hashes: 1: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: 8EOTaGfk+QWQPqpJ85LC8Pdx7ZXv6IhZ8i0yd0XhIR0=) 2: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:dd:36:ac:61:1b:40:71:16:28:d8:ed:66:8c:e6:83:d6:d9:3d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Dec 3 03:59:12 2025 GMT Not After : Dec 6 11:30:12 2025 GMT Subject: CN=4FE97190D6183216E034BA4AFF59E4A7816A0599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:14:4d:a6:96:ab:c8:fe:ca:b1:bc:8d:68:f0: 0e:07:d3:6a:09:cb:47:6d:a5:12:16:7e:de:13:5f: ad:d5:50:b2:79:49:bd:9f:7b:02:f0:e5:f7:5d:a3: 49:56:72:80:7a:37:fb:dd:df:40:ba:c4:c6:20:ab: a0:0d:cf:14:6e:9f:2f:f4:b3:eb:d2:65:b8:ce:fa: 91:e5:ec:b2:9c:1e:4f:87:a8:f8:cd:ea:16:60:4e: 6d:62:0d:d9:3c:0c:da:cd:e6:51:6a:ed:cb:cd:3c: ce:87:38:7f:f0:c5:a9:45:b7:a3:4e:f1:2d:82:64: 18:12:7e:89:77:4d:06:2a:fc:27:0b:50:6d:f8:b3: e9:ea:eb:2e:3a:11:9a:78:df:ec:9e:d2:d7:dc:51: 0f:b2:fc:7f:78:1b:6d:8f:33:da:19:b1:bc:f7:60: 0a:6f:be:33:f6:47:96:b7:d6:f5:03:89:19:ac:08: f4:56:c6:18:c9:83:5d:2c:c0:85:13:2b:c2:5a:ca: 53:3b:27:38:1c:d6:23:89:49:ac:23:d0:fc:7a:cd: 44:4d:9a:8e:e4:82:fd:ad:c8:ec:0f:f8:36:0d:87: 9e:20:4c:c2:8e:58:e7:23:b4:bf:14:6f:ab:08:14: b9:57:6d:1d:1c:4a:82:6e:9b:84:bf:7f:fe:4c:ad: ef:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:71:90:D6:18:32:16:E0:34:BA:4A:FF:59:E4:A7:81:6A:05:99 X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:3d:80:db:4c:26:8a:11:ce:83:45:97:76:50:1c:20:84:86: b5:1e:07:09:e3:18:7d:a2:43:80:22:fd:ff:ab:8a:2a:b3:57: 83:b7:94:f2:58:6e:6a:3e:1c:27:27:f4:8f:ba:60:32:c8:ee: b2:23:7f:7b:03:e9:9c:e1:35:de:39:73:bd:09:37:f7:ee:8b: a0:9f:2f:27:38:32:c6:3f:9c:bb:c2:7e:2e:30:bc:27:52:f1: cb:e1:3d:38:6f:46:4c:3d:d1:0c:15:2f:c4:7f:8a:76:39:23: a0:ee:57:92:72:dc:cf:72:8b:6f:ec:9d:7e:60:39:cb:3a:80: dd:48:10:f5:6a:7a:d6:c1:f1:c5:8e:5c:1a:05:3d:56:82:4e: 44:4e:f6:a3:45:71:a7:97:a3:16:bf:f4:d9:17:ad:cb:ce:ed: 04:99:7d:e5:f7:e7:99:12:37:18:bf:7a:27:c5:0e:d0:46:f8: 6e:d7:31:a3:c5:71:56:e0:0b:1a:dd:ae:8b:74:a0:38:a4:54: f7:91:aa:67:46:8b:1d:76:de:21:3b:39:37:e8:45:26:32:d4: 3f:ad:5c:58:bb:22:1b:79:7c:11:73:81:4f:46:f0:97:36:b0: 98:f0:7c:eb:d4:68:f8:80:93:6d:88:a2:4a:d2:f8:fe:be:be: 1a:d8:b0:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbN02rGEbQHEWKNjtZozmg9bZPUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTEyMDMwMzU5MTJaFw0yNTEyMDYxMTMwMTJaMDMxMTAvBgNV BAMTKDRGRTk3MTkwRDYxODMyMTZFMDM0QkE0QUZGNTlFNEE3ODE2QTA1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFE2mlqvI/sqxvI1o8A4H02oJ y0dtpRIWft4TX63VULJ5Sb2fewLw5fddo0lWcoB6N/vd30C6xMYgq6ANzxRuny/0 s+vSZbjO+pHl7LKcHk+HqPjN6hZgTm1iDdk8DNrN5lFq7cvNPM6HOH/wxalFt6NO 8S2CZBgSfol3TQYq/CcLUG34s+nq6y46EZp43+ye0tfcUQ+y/H94G22PM9oZsbz3 YApvvjP2R5a31vUDiRmsCPRWxhjJg10swIUTK8JaylM7Jzgc1iOJSawj0Px6zURN mo7kgv2tyOwP+DYNh54gTMKOWOcjtL8Ub6sIFLlXbR0cSoJum4S/f/5Mre/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+lxkNYYMhbgNLpK/1nkp4FqBZkwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg9gNtMJooRzoNFl3ZQHCCEhrUeBwnjGH2i Q4Ai/f+riiqzV4O3lPJYbmo+HCcn9I+6YDLI7rIjf3sD6ZzhNd45c70JN/fui6Cf Lyc4MsY/nLvCfi4wvCdS8cvhPThvRkw90QwVL8R/inY5I6DuV5Jy3M9yi2/snX5g Ocs6gN1IEPVqetbB8cWOXBoFPVaCTkRO9qNFcaeXoxa/9NkXrcvO7QSZfeX355kS Nxi/eifFDtBG+G7XMaPFcVbgCxrdrot0oDikVPeRqmdGix123iE7OTfoRSYy1D+t XFi7Iht5fBFzgU9G8Jc2sJjwfOvUaPiAk22IokrS+P6+vhrYsD4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:40 2025 by rpki-client