This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft File: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft (raw, json) Hash identifier: tS8AMJFB2dYAMVqz5SJCiQ0Ku9SNourXvFhGg5MTYhA= Subject key identifier: 74:DB:27:29:28:8B:EB:34:1F:58:D9:3A:4D:72:03:EE:24:EE:55:2F Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Certificate serial: 564567A36FBAC81E695F462F4F0FCDBC47982557 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft Manifest number: 0418 Signing time: Tue 02 Dec 2025 18:02:16 +0000 Manifest this update: Tue 02 Dec 2025 17:57:16 +0000 Manifest next update: Sat 06 Dec 2025 02:44:16 +0000 Files and hashes: 1: 8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl (hash: +FNeIgUM3rdIHOrvisL+KPrI5YnKJOA85poGgMTS+BY=) 2: 3130332e3232382e3234302e302f32322d3234203d3e203435373030.roa (hash: q34ctZRabkzgVMwhpjzkGD0HvYBu2zTW+lnhs8q/u94=) 3: 3230322e38372e3234382e302f32312d3234203d3e203234323031.roa (hash: YIGWj76AnaLSHaaCNOVsCHFGKespwS6XW2pML5MbQts=) 4: 323430343a3530303a3a2f33322d3438203d3e203234323031.roa (hash: ZncYvkH3fAKDn8QBBs6vlpl5n6FCs5nY6O2LpIihUog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:45:67:a3:6f:ba:c8:1e:69:5f:46:2f:4f:0f:cd:bc:47:98:25:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F Validity Not Before: Dec 2 17:57:16 2025 GMT Not After : Dec 6 02:44:16 2025 GMT Subject: CN=74DB2729288BEB341F58D93A4D7203EE24EE552F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:95:42:3c:ad:7c:8a:8e:a1:d9:f7:f1:81: bd:71:57:74:54:06:53:2a:15:5d:96:1b:01:50:5b: 2f:28:2d:80:ca:69:e6:76:be:4e:d3:d0:4a:5a:b5: a0:4e:6f:04:f3:69:ae:a3:a4:df:42:41:05:c4:34: b3:10:5c:5e:f5:f0:8a:f2:b3:67:0c:37:8e:35:c5: f9:b5:1c:fa:ad:ce:da:16:04:c3:d3:a3:53:8e:ac: ae:78:16:8b:b7:e8:a0:2b:a0:70:f0:c8:aa:98:94: c8:a3:d0:a6:c4:80:98:ab:91:10:bc:03:ad:2f:cb: 29:9f:6e:00:16:1c:61:ef:fd:a0:f5:14:ea:31:95: 80:b2:79:0c:84:1e:d7:e7:16:c0:4a:5d:a4:d5:3b: de:47:ab:85:31:a3:1d:ba:65:4d:8f:65:9e:9b:45: 61:21:e6:84:a5:fe:f1:1a:1a:38:48:d2:e7:8b:16: 60:ae:62:d5:b2:92:88:08:76:03:d4:ea:4a:90:e4: 70:20:46:31:fb:f6:64:ea:93:2e:19:c5:38:ea:a2: 96:6e:a7:ab:ab:f1:83:34:06:fe:53:5e:32:66:14: 24:3a:a8:6e:a8:6d:ef:d3:7b:b0:66:51:23:6f:c8: e3:df:6b:62:30:15:9f:64:6e:3b:f1:c4:0e:59:20: 27:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DB:27:29:28:8B:EB:34:1F:58:D9:3A:4D:72:03:EE:24:EE:55:2F X509v3 Authority Key Identifier: keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9d:b1:2f:73:13:f5:6b:9e:a5:2b:93:24:a7:2e:d8:21:2a: cd:2e:f8:91:7c:73:73:70:16:5d:c2:0e:56:99:ce:76:72:3b: 82:5b:d8:7c:28:d2:d4:ef:cb:5d:64:2e:d2:49:ad:58:7b:53: 5a:72:f4:8d:4a:8c:83:06:d2:db:31:d0:9b:29:5a:fc:d5:8b: 15:d6:26:5c:dc:77:d2:0a:ac:dc:bc:78:e1:3a:0e:41:f8:ae: cf:54:78:b8:52:80:bf:45:3a:16:06:10:71:b6:f7:4e:c5:c3: 20:be:a4:d0:42:77:37:ae:64:26:7b:2c:50:b2:a2:ee:c3:d2: 7b:7c:4a:30:f8:15:a5:81:c1:16:b3:21:04:58:7b:91:17:fe: f2:3a:63:09:14:ea:56:b7:78:57:de:7e:53:72:c2:3e:33:a9: 52:51:d2:4a:46:66:1d:5e:18:84:9b:92:85:8d:60:4d:2c:44: 83:93:ad:56:2d:63:68:5f:6b:6c:18:8b:4f:0a:9b:3c:f6:94: d2:67:ee:61:a7:1d:66:65:0d:59:d7:f8:0d:fc:d2:08:6a:b3: 83:5a:34:1c:76:93:d2:56:e7:b5:5e:8f:b0:ac:87:6f:31:f3: 64:fe:49:1e:5d:77:8c:25:90:12:e6:1e:2f:43:71:7a:b6:d9: 5b:fe:6b:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkVno2+6yB5pX0YvTw/NvEeYJVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1 Q0Y0OEY5RjAeFw0yNTEyMDIxNzU3MTZaFw0yNTEyMDYwMjQ0MTZaMDMxMTAvBgNV BAMTKDc0REIyNzI5Mjg4QkVCMzQxRjU4RDkzQTRENzIwM0VFMjRFRTU1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3epVCPK18io6h2ffxgb1xV3RU BlMqFV2WGwFQWy8oLYDKaeZ2vk7T0EpataBObwTzaa6jpN9CQQXENLMQXF718Iry s2cMN441xfm1HPqtztoWBMPTo1OOrK54Fou36KAroHDwyKqYlMij0KbEgJirkRC8 A60vyymfbgAWHGHv/aD1FOoxlYCyeQyEHtfnFsBKXaTVO95Hq4Uxox26ZU2PZZ6b RWEh5oSl/vEaGjhI0ueLFmCuYtWykogIdgPU6kqQ5HAgRjH79mTqky4ZxTjqopZu p6ur8YM0Bv5TXjJmFCQ6qG6obe/Te7BmUSNvyOPfa2IwFZ9kbjvxxA5ZICd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdNsnKSiL6zQfWNk6TXID7iTuVS8wHwYDVR0j BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0 OEY5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw ZjktNTVmYzRmYzk0ZmJjLzAvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2 MzM1Q0Y0OEY5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+dsS9zE/VrnqUrkySnLtghKs0u+JF8c3Nw Fl3CDlaZznZyO4Jb2Hwo0tTvy11kLtJJrVh7U1py9I1KjIMG0tsx0JspWvzVixXW Jlzcd9IKrNy8eOE6DkH4rs9UeLhSgL9FOhYGEHG2907FwyC+pNBCdzeuZCZ7LFCy ou7D0nt8SjD4FaWBwRazIQRYe5EX/vI6YwkU6la3eFfeflNywj4zqVJR0kpGZh1e GISbkoWNYE0sRIOTrVYtY2hfa2wYi08Kmzz2lNJn7mGnHWZlDVnX+A380ghqs4Na NBx2k9JW57Vej7Csh28x82T+SR5dd4wlkBLmHi9DcXq22Vv+a+A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:54:05 2025 by rpki-client