This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft File: 08435803278DC5796EE67697996454D656195D4C.mft (raw, json) Hash identifier: to+eWpGbTcVx3g+Z7hlSna+OYA1inK+BVGJnJW08eKc= Subject key identifier: 9D:99:25:E0:83:72:82:1F:9C:29:74:C9:86:9B:6F:FC:02:AC:A8:00 Authority key identifier: 08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C Certificate issuer: /CN=08435803278DC5796EE67697996454D656195D4C Certificate serial: 1BCB94ECA34CCC65C0600DE14AFFF95A810483E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft Manifest number: 011A Signing time: Wed 03 Dec 2025 00:20:48 +0000 Manifest this update: Wed 03 Dec 2025 00:15:48 +0000 Manifest next update: Sat 06 Dec 2025 01:43:48 +0000 Files and hashes: 1: 3130332e3233302e3234362e302f32342d3234203d3e20313331373735.roa (hash: jTbfZ/3Hx6CL4SSiGlERkjd7H5tKmVCxpeA0RfZsKRg=) 2: 08435803278DC5796EE67697996454D656195D4C.crl (hash: dxHkjUCP0JEmFh86IJGPJj4QqgPpb7IlUrVJkz/YQuk=) 3: 3130332e3138302e3136322e302f32342d3234203d3e20313439333737.roa (hash: 9RpvEpb4MDeR7vKuO5QULV5yAgtCcQbQomTWzkC1nrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cb:94:ec:a3:4c:cc:65:c0:60:0d:e1:4a:ff:f9:5a:81:04:83:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08435803278DC5796EE67697996454D656195D4C Validity Not Before: Dec 3 00:15:48 2025 GMT Not After : Dec 6 01:43:48 2025 GMT Subject: CN=9D9925E08372821F9C2974C9869B6FFC02ACA800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9c:4f:79:05:66:56:45:56:10:ed:0e:fc:3f: 9a:84:57:e8:69:de:ae:57:17:7c:78:67:11:95:72: 14:9d:29:e5:7e:1b:0e:55:cc:b4:94:6f:c8:41:05: 2d:c3:95:cd:c4:d9:2d:98:cd:06:59:5a:e3:40:d2: 12:51:89:2f:0e:b9:7c:c0:b9:2f:52:af:42:7e:e7: 93:aa:76:3d:04:66:e6:9f:42:b2:a5:f3:a3:59:e7: ef:ba:b2:db:45:83:08:a5:5c:a6:41:9b:3d:11:44: 11:51:14:53:26:8d:de:a0:32:72:2a:ed:6b:cc:e8: 54:cb:e6:64:53:82:ad:d4:a3:30:d9:22:59:ba:4b: 41:84:8a:ce:91:1a:bd:48:07:51:32:3d:d6:df:bf: 0c:37:1d:39:a1:d1:9c:4f:e1:72:82:8f:0e:38:af: 5b:29:93:c0:1d:4a:a9:96:93:0a:ec:5f:60:c9:6f: fd:f7:8e:c8:63:e3:06:9a:83:d5:8f:af:8b:ee:99: 12:33:6d:d3:c6:f1:1c:62:86:e7:25:94:84:c3:f5: b7:66:b4:57:b6:a6:6e:e7:aa:5d:87:ae:fb:b5:7c: fb:b0:b0:f2:32:06:9a:54:4b:19:3f:9d:91:e1:7a: 71:28:1a:91:e1:1a:ad:23:96:cc:ab:58:7d:17:49: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:99:25:E0:83:72:82:1F:9C:29:74:C9:86:9B:6F:FC:02:AC:A8:00 X509v3 Authority Key Identifier: keyid:08:43:58:03:27:8D:C5:79:6E:E6:76:97:99:64:54:D6:56:19:5D:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08435803278DC5796EE67697996454D656195D4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d70d629a-96ed-451a-8787-34122282a706/0/08435803278DC5796EE67697996454D656195D4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:0a:5f:16:a2:35:31:92:ef:17:30:26:3c:a7:e7:ff:0a: 8e:96:fe:1d:e2:e8:13:02:98:b7:00:b2:d3:05:08:af:07:23: 47:42:71:3f:0a:e5:3f:89:2d:0a:d0:50:11:be:ad:ed:97:1a: 93:dc:ec:d1:9d:6e:09:f0:fc:37:19:2f:06:3c:88:c3:7f:71: 97:74:10:b3:a7:34:65:7d:54:c0:9b:c3:fe:75:f4:c7:6b:11: 42:df:89:23:40:be:f0:eb:f6:db:80:29:f3:1e:d5:da:ff:26: e5:9c:03:35:e8:26:08:69:f3:bd:bf:da:44:ab:30:fc:b0:bc: 75:44:9f:b2:30:fd:ad:aa:bf:79:52:af:a2:0a:7a:20:32:ab: 43:72:74:80:7e:08:22:2e:54:4a:4e:12:5f:92:37:c7:4b:ac: 7f:01:70:ab:35:73:0a:de:db:0f:10:c1:59:89:cc:b7:93:2a: c3:00:4b:47:4e:8c:90:23:06:12:ff:ce:07:d3:9e:18:32:e1: 98:16:fe:83:a1:0f:cc:28:de:27:87:54:59:16:ca:2c:df:94: dc:24:10:0a:4c:8e:e9:da:2a:e8:10:2b:76:1b:96:4e:0b:cc: b2:11:5e:8e:50:51:71:dd:07:10:dc:e1:9c:1b:ef:69:ad:01: b2:96:be:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8uU7KNMzGXAYA3hSv/5WoEEg+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1 NjE5NUQ0QzAeFw0yNTEyMDMwMDE1NDhaFw0yNTEyMDYwMTQzNDhaMDMxMTAvBgNV BAMTKDlEOTkyNUUwODM3MjgyMUY5QzI5NzRDOTg2OUI2RkZDMDJBQ0E4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDunE95BWZWRVYQ7Q78P5qEV+hp 3q5XF3x4ZxGVchSdKeV+Gw5VzLSUb8hBBS3Dlc3E2S2YzQZZWuNA0hJRiS8OuXzA uS9Sr0J+55Oqdj0EZuafQrKl86NZ5++6sttFgwilXKZBmz0RRBFRFFMmjd6gMnIq 7WvM6FTL5mRTgq3UozDZIlm6S0GEis6RGr1IB1EyPdbfvww3HTmh0ZxP4XKCjw44 r1spk8AdSqmWkwrsX2DJb/33jshj4waag9WPr4vumRIzbdPG8RxihucllITD9bdm tFe2pm7nql2Hrvu1fPuwsPIyBppUSxk/nZHhenEoGpHhGq0jlsyrWH0XSZXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZkl4INygh+cKXTJhptv/AKsqAAwHwYDVR0j BBgwFoAUCENYAyeNxXlu5naXmWRU1lYZXUwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzBkNjI5YS05NmVkLTQ1MWEtODc4Ny0zNDEyMjI4MmE3MDYvMC8wODQzNTgwMzI3 OERDNTc5NkVFNjc2OTc5OTY0NTRENjU2MTk1RDRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0RDY1NjE5 NUQ0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDcwZDYyOWEtOTZlZC00NTFhLTg3 ODctMzQxMjIyODJhNzA2LzAvMDg0MzU4MDMyNzhEQzU3OTZFRTY3Njk3OTk2NDU0 RDY1NjE5NUQ0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt0Cl8WojUxku8XMCY8p+f/Co6W/h3i6BMC mLcAstMFCK8HI0dCcT8K5T+JLQrQUBG+re2XGpPc7NGdbgnw/DcZLwY8iMN/cZd0 ELOnNGV9VMCbw/519MdrEULfiSNAvvDr9tuAKfMe1dr/JuWcAzXoJghp872/2kSr MPywvHVEn7Iw/a2qv3lSr6IKeiAyq0NydIB+CCIuVEpOEl+SN8dLrH8BcKs1cwre 2w8QwVmJzLeTKsMAS0dOjJAjBhL/zgfTnhgy4ZgW/oOhD8wo3ieHVFkWyizflNwk EApMjunaKugQK3Yblk4LzLIRXo5QUXHdBxDc4Zwb72mtAbKWvow= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:29 2025 by rpki-client