This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: HSuj23YhYzQIqeKTlgqUNNhW+hwGDqi4cidAac/3x9A= Subject key identifier: 66:E1:74:21:3C:1B:7F:50:A9:5B:DB:51:88:BA:7B:83:58:91:C4:D8 Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 77368A5C23C4B13A63DA94A04A791B37AECE365F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 0216 Signing time: Mon 15 Dec 2025 16:42:28 +0000 Manifest this update: Mon 15 Dec 2025 16:37:28 +0000 Manifest next update: Thu 18 Dec 2025 22:47:28 +0000 Files and hashes: 1: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 2: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 3: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: y0bdvnKmBzdjg09jRVsaSHMbOxCEJSQ08JdV2+SQNug=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 22:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:36:8a:5c:23:c4:b1:3a:63:da:94:a0:4a:79:1b:37:ae:ce:36:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Dec 15 16:37:28 2025 GMT Not After : Dec 18 22:47:28 2025 GMT Subject: CN=66E174213C1B7F50A95BDB5188BA7B835891C4D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:3d:d1:40:0c:da:04:84:4f:5e:9e:7d:2f: e9:73:e7:22:d5:af:98:c3:a0:bc:1b:40:f4:cb:76: 32:e5:5f:fb:61:41:49:da:75:5a:66:31:73:6a:85: ae:dc:d5:fb:a8:7c:41:cf:fc:3f:78:53:8e:ec:55: 44:2f:6d:ab:4f:bb:ff:db:18:06:a2:24:c4:cd:9f: 0a:13:20:d7:db:6a:ea:90:4e:59:8a:14:8b:15:eb: 3d:91:5f:72:ff:80:73:53:e7:0c:a0:e3:2a:70:76: 91:c5:64:78:09:3d:48:d2:a9:92:4d:c8:6e:b1:6f: 87:87:a6:c2:ce:e6:35:d1:86:a4:c4:1e:93:b7:86: 06:79:10:c2:4c:3c:69:d6:0a:c1:67:3c:45:2e:64: 01:9f:12:4d:c9:d3:03:c4:65:e4:f8:b2:db:a0:c0: fb:70:48:87:e6:55:79:2e:00:a1:07:ee:d6:06:1e: bb:2a:1b:b7:b0:5f:5b:4d:97:03:48:45:c2:f0:55: a8:0c:1d:af:83:f0:04:63:67:db:2f:5c:20:18:ea: 5f:66:e0:31:3b:9b:14:6f:47:b8:7d:81:0e:67:5d: 6e:46:3d:2a:01:6c:7f:0d:88:7c:54:ea:99:27:f7: fa:84:0b:04:a3:7d:39:17:18:ff:26:fe:db:73:7f: c8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E1:74:21:3C:1B:7F:50:A9:5B:DB:51:88:BA:7B:83:58:91:C4:D8 X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:28:5e:a5:6e:05:8c:3b:73:72:41:08:d4:98:b1:32:b4:93: 9b:ac:c9:ee:55:f3:19:15:4e:09:e0:eb:2b:e1:d3:6d:59:24: 3d:14:01:8e:3f:69:d2:a6:6e:18:4f:26:3c:7d:42:b6:83:aa: 4b:6b:88:16:00:35:a6:22:21:36:5f:64:5c:dd:c1:01:04:11: 7e:e3:45:ee:d3:70:45:cf:20:02:8b:3e:dc:8a:a3:48:00:8b: c7:ea:45:1a:d2:a2:4a:92:d7:ec:61:6a:f9:c2:df:5d:1d:63: 84:2d:74:97:03:e2:51:b1:05:9a:24:55:df:2c:c8:04:82:a8: d9:48:38:47:3b:89:9c:05:7a:a1:b3:c7:83:1e:7f:ad:19:06: 8a:30:e7:db:ef:4e:74:c0:3a:4a:28:6f:3b:9f:8a:20:fb:fe: 0f:83:ad:02:46:a9:79:87:90:a3:a4:ef:43:5d:99:78:2a:c2: ff:45:80:9d:ad:8c:ce:81:03:10:0c:a6:71:38:28:32:27:8d: 6d:d8:b3:ad:08:92:80:b4:10:fa:78:8e:c3:4f:ea:19:f5:3d: f4:e5:51:d1:8f:5f:fc:94:ad:7c:01:70:32:6b:76:2b:9a:fc: 8e:cb:68:ee:be:02:0e:81:dc:21:8a:59:11:c6:25:c5:a8:90: 7c:2c:89:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdzaKXCPEsTpj2pSgSnkbN67ONl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTEyMTUxNjM3MjhaFw0yNTEyMTgyMjQ3MjhaMDMxMTAvBgNV BAMTKDY2RTE3NDIxM0MxQjdGNTBBOTVCREI1MTg4QkE3QjgzNTg5MUM0RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8gj3RQAzaBIRPXp59L+lz5yLV r5jDoLwbQPTLdjLlX/thQUnadVpmMXNqha7c1fuofEHP/D94U47sVUQvbatPu//b GAaiJMTNnwoTINfbauqQTlmKFIsV6z2RX3L/gHNT5wyg4ypwdpHFZHgJPUjSqZJN yG6xb4eHpsLO5jXRhqTEHpO3hgZ5EMJMPGnWCsFnPEUuZAGfEk3J0wPEZeT4stug wPtwSIfmVXkuAKEH7tYGHrsqG7ewX1tNlwNIRcLwVagMHa+D8ARjZ9svXCAY6l9m 4DE7mxRvR7h9gQ5nXW5GPSoBbH8NiHxU6pkn9/qECwSjfTkXGP8m/ttzf8gvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZuF0ITwbf1CpW9tRiLp7g1iRxNgwHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKQoXqVuBYw7c3JBCNSYsTK0k5usye5V8xkV Tgng6yvh021ZJD0UAY4/adKmbhhPJjx9QraDqktriBYANaYiITZfZFzdwQEEEX7j Re7TcEXPIAKLPtyKo0gAi8fqRRrSokqS1+xhavnC310dY4QtdJcD4lGxBZokVd8s yASCqNlIOEc7iZwFeqGzx4Mef60ZBoow59vvTnTAOkoobzufiiD7/g+DrQJGqXmH kKOk70NdmXgqwv9FgJ2tjM6BAxAMpnE4KDInjW3Ys60IkoC0EPp4jsNP6hn1PfTl UdGPX/yUrXwBcDJrdiua/I7LaO6+Ag6B3CGKWRHGJcWokHwsie4= -----END CERTIFICATE-----Generated at Mon Dec 15 22:16:04 2025 by rpki-client