This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: 0Fv25ZDH0UAlLpSCAjVu8BnpmqGr/TtpcRnJRWfz2c0= Subject key identifier: 44:04:72:03:12:6A:8F:BA:BE:4B:8C:C8:91:D4:BE:F3:73:97:D8:7D Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 323A003E66E1713FFBF17E3BDFE2AE55E31CBF44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0532 Signing time: Tue 02 Dec 2025 18:01:23 +0000 Manifest this update: Tue 02 Dec 2025 17:56:23 +0000 Manifest next update: Fri 05 Dec 2025 20:29:23 +0000 Files and hashes: 1: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 2: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: o6v16cZDywcKKb25hVT+/DM3SUbUK9XMQnSdr5KVorg=) 3: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 4: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) 5: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=) 6: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 7: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:3a:00:3e:66:e1:71:3f:fb:f1:7e:3b:df:e2:ae:55:e3:1c:bf:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Dec 2 17:56:23 2025 GMT Not After : Dec 5 20:29:23 2025 GMT Subject: CN=44047203126A8FBABE4B8CC891D4BEF37397D87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:f1:03:88:ea:c6:36:43:68:5d:6c:20:38: 37:4c:e1:99:48:a2:38:84:cc:c3:ea:24:c3:57:e1: 32:dd:92:21:a7:ec:93:66:33:e5:e8:60:d3:53:25: 14:62:16:91:89:e7:cf:a8:0a:f1:09:59:2f:22:35: 35:7f:32:3a:24:a2:31:02:6b:2f:6c:6c:5c:5a:e5: 00:95:94:3b:45:8b:fc:ce:08:eb:d2:ac:91:1d:e7: 6f:25:68:52:9a:e0:b0:cc:9f:04:2a:7a:67:aa:19: bf:cd:71:9b:25:4c:43:00:93:8c:09:1c:a3:ee:14: ef:07:e2:5c:82:60:4f:e4:84:fb:f1:8d:7c:da:dc: 39:77:62:31:17:31:91:71:55:9d:f5:26:c9:15:dc: 56:ff:52:66:bc:d8:2a:c1:89:e9:f0:64:4d:ca:48: 82:8d:1c:28:22:31:ff:be:5b:73:91:d9:d4:82:9e: d6:00:8e:9c:5f:f9:dc:1a:0d:f8:51:71:7c:bf:b1: 82:4e:c6:35:3b:4d:eb:f5:d0:df:45:e7:2a:8a:7a: 20:bd:db:94:0d:4d:6f:8a:90:b3:19:62:60:91:11: 61:98:bd:b0:a5:ef:4b:90:18:82:e9:b7:17:bf:32: f3:39:23:21:87:60:11:4a:54:44:ca:b5:65:bd:7b: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:04:72:03:12:6A:8F:BA:BE:4B:8C:C8:91:D4:BE:F3:73:97:D8:7D X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b2:79:c9:51:46:95:ce:58:d5:63:53:22:20:39:5e:bb:6e: 1b:e6:ec:de:23:0a:10:da:db:95:e2:aa:51:76:c4:10:99:65: ed:1c:c5:87:84:03:de:35:37:05:35:6f:b6:b9:35:b2:83:98: cf:37:79:2b:fe:3b:6e:f1:30:0f:a4:9f:da:b5:60:48:c4:60: 6e:c1:81:0f:31:03:55:62:0c:2b:2b:5d:18:3c:cd:7a:25:02: f3:e0:c6:72:24:b9:9b:e5:44:f4:78:4b:79:cc:9d:ec:9b:51: cc:7e:90:79:91:6a:16:bf:93:52:50:b0:29:82:9c:64:23:13: 62:6d:64:63:09:81:4c:77:83:37:25:8b:b2:18:ad:27:95:8b: f3:bb:3e:7b:3f:7e:c2:7b:68:bd:1d:dd:bf:25:f5:ee:46:f7: dd:80:68:36:82:b9:d8:5c:01:38:e4:f9:2f:85:6b:8b:2c:5f: 03:cc:ad:88:78:b0:cd:e9:59:71:13:68:4d:d6:43:a2:4a:aa: 5b:09:46:44:12:5e:28:5a:e0:20:b6:74:c0:83:03:e1:84:4a: 6a:f6:11:64:58:f2:9d:ff:98:e1:2d:64:b1:e8:73:ab:9c:f3: 4c:ae:b2:cd:df:e4:2f:9b:25:2b:5c:f7:88:45:21:e6:77:ef: 15:3b:e6:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMjoAPmbhcT/78X473+KuVeMcv0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTEyMDIxNzU2MjNaFw0yNTEyMDUyMDI5MjNaMDMxMTAvBgNV BAMTKDQ0MDQ3MjAzMTI2QThGQkFCRTRCOENDODkxRDRCRUYzNzM5N0Q4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5zvEDiOrGNkNoXWwgODdM4ZlI ojiEzMPqJMNX4TLdkiGn7JNmM+XoYNNTJRRiFpGJ58+oCvEJWS8iNTV/MjokojEC ay9sbFxa5QCVlDtFi/zOCOvSrJEd528laFKa4LDMnwQqemeqGb/NcZslTEMAk4wJ HKPuFO8H4lyCYE/khPvxjXza3Dl3YjEXMZFxVZ31JskV3Fb/Uma82CrBienwZE3K SIKNHCgiMf++W3OR2dSCntYAjpxf+dwaDfhRcXy/sYJOxjU7Tev10N9F5yqKeiC9 25QNTW+KkLMZYmCREWGYvbCl70uQGILptxe/MvM5IyGHYBFKVETKtWW9e/fLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURARyAxJqj7q+S4zIkdS+83OX2H0wHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISyeclRRpXOWNVjUyIgOV67bhvm7N4jChDa 25XiqlF2xBCZZe0cxYeEA941NwU1b7a5NbKDmM83eSv+O27xMA+kn9q1YEjEYG7B gQ8xA1ViDCsrXRg8zXolAvPgxnIkuZvlRPR4S3nMneybUcx+kHmRaha/k1JQsCmC nGQjE2JtZGMJgUx3gzcli7IYrSeVi/O7Pns/fsJ7aL0d3b8l9e5G992AaDaCudhc ATjk+S+Fa4ssXwPMrYh4sM3pWXETaE3WQ6JKqlsJRkQSXiha4CC2dMCDA+GESmr2 EWRY8p3/mOEtZLHoc6uc80yuss3f5C+bJStc94hFIeZ37xU75qM= -----END CERTIFICATE-----Generated at Wed Dec 3 16:06:58 2025 by rpki-client