This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft File: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft (raw, json) Hash identifier: jfCPWxDerYh5QuQ7YGsbdy1NHCI2u0YJbheMDgrrung= Subject key identifier: 0B:6F:71:D3:B2:F1:E8:D7:F8:99:69:58:31:6A:C4:03:74:88:CB:A3 Authority key identifier: 0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F Certificate issuer: /CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Certificate serial: 19A21CE2C746EA2FD2015C7218E6D56E57603B9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft Manifest number: 0235 Signing time: Tue 02 Dec 2025 12:31:21 +0000 Manifest this update: Tue 02 Dec 2025 12:26:21 +0000 Manifest next update: Fri 05 Dec 2025 20:59:21 +0000 Files and hashes: 1: 3130332e39322e3233322e302f32332d3233203d3e20313336313132.roa (hash: 5yT7jld1qwMjQ1Wxg8xXgEk9H98NQ/9bvOuTLpVK3wE=) 2: 0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl (hash: JhvqdVrGLQbt2zHtP0s9YmLZiA+c/kL9bcykrkqzr8A=) 3: 323030313a6466313a326430303a3a2f34382d3438203d3e20313336313132.roa (hash: uiZFjhvQ9ciRjJRK7vZMZHXsl+bdrRUmgcpl6MwjW4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:59:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a2:1c:e2:c7:46:ea:2f:d2:01:5c:72:18:e6:d5:6e:57:60:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FAFA39AA3875A4CF63BCF7E873087927B499D2F Validity Not Before: Dec 2 12:26:21 2025 GMT Not After : Dec 5 20:59:21 2025 GMT Subject: CN=0B6F71D3B2F1E8D7F8996958316AC4037488CBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:bf:cd:37:b9:01:6f:c4:c2:15:d4:14:59: b3:65:2d:0b:bb:d8:21:10:4b:27:3b:5e:a2:12:e9: b8:30:3b:9b:02:3f:2c:44:41:38:cb:06:df:b5:aa: 77:93:d8:76:90:7a:76:aa:dd:a0:45:fb:05:2f:4f: 35:79:f9:33:c1:72:f0:0b:c1:e1:ec:4c:fa:c5:14: 44:d2:68:14:9d:a5:e5:7c:a1:d9:e8:ed:ed:28:54: 37:d9:4e:f1:c4:32:71:9d:0a:1c:18:57:5e:2e:bf: 8b:ca:b0:4d:d2:97:51:09:b3:90:a4:2a:17:fe:c2: 26:3b:6f:2a:7b:26:37:bb:e7:ff:3e:45:c3:50:c2: a1:1c:3d:30:21:67:57:26:5e:d8:27:7d:7d:b7:27: fb:cb:76:f1:33:0f:6e:20:2c:7e:f8:66:af:b8:03: f2:b8:29:2a:8d:9c:b3:ad:43:0a:f7:be:74:9f:05: 57:3f:e3:ac:bb:35:2c:fb:fd:19:3d:f7:b1:2c:73: 4f:31:2f:e5:2d:13:3d:22:f1:73:7e:41:ba:03:1a: fd:1c:27:31:1f:0e:27:64:60:af:b8:94:6d:60:96: a0:eb:31:0a:90:12:99:a2:0c:94:11:f5:40:25:3c: 3e:f5:6a:2d:4e:fe:ae:f1:23:a0:9f:1f:d6:3e:72: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:6F:71:D3:B2:F1:E8:D7:F8:99:69:58:31:6A:C4:03:74:88:CB:A3 X509v3 Authority Key Identifier: keyid:0F:AF:A3:9A:A3:87:5A:4C:F6:3B:CF:7E:87:30:87:92:7B:49:9D:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0e11ffc-e75a-4bf4-8448-c68e20335ee8/0/0FAFA39AA3875A4CF63BCF7E873087927B499D2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:70:8b:8d:42:6f:46:e7:96:fe:3f:e8:b5:82:e8:84:d7:fa: cb:bd:83:0c:d8:0c:1c:8d:38:58:98:b2:cc:93:63:30:f7:e1: 71:61:68:e3:ee:a2:1e:70:e2:60:e4:90:93:5a:49:8d:32:af: 73:83:ad:b0:f3:6f:ab:f2:9c:23:97:16:58:12:80:e5:fc:61: 7d:37:64:fd:51:69:53:e5:9c:07:35:1f:20:50:3f:64:fd:cc: 46:91:81:16:ed:f4:3d:5c:55:c6:6a:d7:18:b5:17:4f:dd:f8: d5:6e:7c:7d:0a:0e:51:d0:58:cc:15:06:46:fd:d2:59:d1:60: 36:3e:7d:04:53:3c:fb:79:6f:38:ec:34:b3:c9:ba:44:a3:04: 05:06:58:4a:24:19:fd:82:b7:ea:cf:2e:e8:2c:3d:28:fe:1a: ed:c8:b8:0d:d3:c9:c8:4e:6f:5c:e4:dc:3f:93:82:ef:bc:80: d0:15:c8:63:77:6d:2f:0a:24:37:da:eb:0a:f6:37:29:ef:54: ec:61:00:84:f7:94:f4:47:f6:72:7a:7c:74:fd:3f:7e:5b:39: 4f:03:46:a4:58:8d:f3:81:b0:1e:78:5a:4a:df:d4:b1:bc:ee: 8d:de:94:9e:1a:f6:00:24:78:5e:bf:06:43:0d:b7:f4:a3:1b: bf:f4:4c:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaIc4sdG6i/SAVxyGObVbldgO5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3 QjQ5OUQyRjAeFw0yNTEyMDIxMjI2MjFaFw0yNTEyMDUyMDU5MjFaMDMxMTAvBgNV BAMTKDBCNkY3MUQzQjJGMUU4RDdGODk5Njk1ODMxNkFDNDAzNzQ4OENCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Mr/NN7kBb8TCFdQUWbNlLQu7 2CEQSyc7XqIS6bgwO5sCPyxEQTjLBt+1qneT2HaQenaq3aBF+wUvTzV5+TPBcvAL weHsTPrFFETSaBSdpeV8odno7e0oVDfZTvHEMnGdChwYV14uv4vKsE3Sl1EJs5Ck Khf+wiY7byp7Jje75/8+RcNQwqEcPTAhZ1cmXtgnfX23J/vLdvEzD24gLH74Zq+4 A/K4KSqNnLOtQwr3vnSfBVc/46y7NSz7/Rk997Esc08xL+UtEz0i8XN+QboDGv0c JzEfDidkYK+4lG1glqDrMQqQEpmiDJQR9UAlPD71ai1O/q7xI6CfH9Y+cr39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC29x07Lx6Nf4mWlYMWrEA3SIy6MwHwYDVR0j BBgwFoAUD6+jmqOHWkz2O89+hzCHkntJnS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGUxMWZmYy1lNzVhLTRiZjQtODQ0OC1jNjhlMjAzMzVlZTgvMC8wRkFGQTM5QUEz ODc1QTRDRjYzQkNGN0U4NzMwODc5MjdCNDk5RDJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3OTI3QjQ5 OUQyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBlMTFmZmMtZTc1YS00YmY0LTg0 NDgtYzY4ZTIwMzM1ZWU4LzAvMEZBRkEzOUFBMzg3NUE0Q0Y2M0JDRjdFODczMDg3 OTI3QjQ5OUQyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1wi41Cb0bnlv4/6LWC6ITX+su9gwzYDByN OFiYssyTYzD34XFhaOPuoh5w4mDkkJNaSY0yr3ODrbDzb6vynCOXFlgSgOX8YX03 ZP1RaVPlnAc1HyBQP2T9zEaRgRbt9D1cVcZq1xi1F0/d+NVufH0KDlHQWMwVBkb9 0lnRYDY+fQRTPPt5bzjsNLPJukSjBAUGWEokGf2Ct+rPLugsPSj+Gu3IuA3TychO b1zk3D+Tgu+8gNAVyGN3bS8KJDfa6wr2NynvVOxhAIT3lPRH9nJ6fHT9P35bOU8D RqRYjfOBsB54Wkrf1LG87o3elJ4a9gAkeF6/BkMNt/SjG7/0TC8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:26 2025 by rpki-client