This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: D6euNp/xLI+1lYHN6jNVzTwWCHru3jWzeGlvybRw1rg= Subject key identifier: 4E:C3:D4:EE:D0:AF:9B:E1:DF:7C:FF:81:90:4D:D4:2C:B5:82:BD:E4 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 3CFFF19F503E5ADFCE757A67CD61FDD28639216B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 0194 Signing time: Tue 02 Dec 2025 09:31:25 +0000 Manifest this update: Tue 02 Dec 2025 09:26:25 +0000 Manifest next update: Fri 05 Dec 2025 13:27:25 +0000 Files and hashes: 1: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 2: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 3: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: RgVMj7yR4tK6ErPNoa8cWOS5rwSi7w735h4Np9UXkao=) 4: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 5: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 6: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 7: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 8: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 9: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 10: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 11: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ff:f1:9f:50:3e:5a:df:ce:75:7a:67:cd:61:fd:d2:86:39:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Dec 2 09:26:25 2025 GMT Not After : Dec 5 13:27:25 2025 GMT Subject: CN=4EC3D4EED0AF9BE1DF7CFF81904DD42CB582BDE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:09:40:0b:41:c5:f1:5e:b5:98:9c:22:1a:19: dc:9e:5d:ab:73:68:5c:88:e5:76:a5:0e:56:3f:a8: 64:d9:17:18:a6:3f:0a:a6:84:bb:26:13:7a:3b:72: 95:d2:61:64:dc:15:08:04:5e:9b:1b:61:5a:4e:48: e5:a8:21:3d:c9:fb:81:4b:d2:3f:a3:62:b0:d5:14: 70:95:e1:bb:b1:aa:87:86:d3:b7:9e:c1:89:0c:dd: f5:2a:bb:5e:67:94:bc:6b:19:7d:d2:45:6a:b3:44: f6:04:24:27:36:a3:8d:e5:51:71:79:e2:bf:9b:32: a6:f7:65:d0:ab:2f:bc:3b:38:dc:92:32:93:ab:c5: a7:0f:53:ed:c6:b1:94:71:ee:77:eb:0b:78:c1:39: 3a:93:cc:09:47:ec:0b:0c:31:2d:f0:ad:95:d5:44: 1b:92:d2:a5:30:35:2f:ff:bd:39:d3:07:0e:e5:a0: 61:a4:7b:2a:4f:ce:f7:ed:b2:f0:28:8f:04:16:a5: 29:b2:12:4f:f6:bb:5e:37:56:05:e8:d7:8a:8a:fe: 74:ab:b3:70:c4:f0:e3:00:2b:c0:fc:55:25:29:f8: 71:a7:ed:a2:d2:e8:07:98:33:1a:1c:cf:79:f3:5e: fa:f7:ef:83:d8:7d:05:c1:6e:ce:b7:e6:dc:4e:1a: e1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:C3:D4:EE:D0:AF:9B:E1:DF:7C:FF:81:90:4D:D4:2C:B5:82:BD:E4 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cc:32:86:9e:1a:e2:ea:8c:be:ec:29:c4:f8:cb:95:13:70: f4:eb:01:00:ff:d7:f1:9e:13:02:fe:48:4f:0d:7c:63:7e:65: c9:13:62:eb:13:8b:cd:30:c6:19:a5:fc:fd:2d:41:e1:33:c7: d0:76:c4:86:c9:43:10:9c:0a:ab:bd:79:10:90:91:cb:7d:7b: 22:f1:d0:59:1c:dc:13:fe:36:e5:36:a9:ee:a4:d4:48:c9:cc: f3:cf:27:db:60:bb:9f:74:99:48:c4:bd:d9:70:1d:a2:3c:fc: 94:79:0e:65:f0:89:6c:03:64:f1:7c:7f:a1:c5:52:ba:b6:2c: 54:2d:8e:a0:49:3b:b3:69:61:73:f8:97:16:94:37:93:cc:b3: ee:3e:ed:87:c1:23:4a:0f:5b:84:9e:3a:73:d0:43:6b:9a:58: 48:73:5d:fd:35:7b:1b:4b:04:76:d8:e9:9e:02:81:96:ed:bc: da:bf:26:0d:36:f3:93:e2:05:df:a4:e5:0b:2e:34:df:20:9f: 06:63:d0:9d:e1:7c:c2:e2:74:7a:56:50:b5:16:9f:a4:3b:6a: ef:5d:ea:d2:0c:f6:7f:c0:fa:e3:42:45:a6:5b:74:61:50:cc: 93:a9:51:cb:8e:9c:46:65:72:b3:98:4b:57:c8:7f:e8:2f:ae: 54:06:5f:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP/xn1A+Wt/OdXpnzWH90oY5IWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTEyMDIwOTI2MjVaFw0yNTEyMDUxMzI3MjVaMDMxMTAvBgNV BAMTKDRFQzNENEVFRDBBRjlCRTFERjdDRkY4MTkwNERENDJDQjU4MkJERTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKCUALQcXxXrWYnCIaGdyeXatz aFyI5XalDlY/qGTZFximPwqmhLsmE3o7cpXSYWTcFQgEXpsbYVpOSOWoIT3J+4FL 0j+jYrDVFHCV4buxqoeG07eewYkM3fUqu15nlLxrGX3SRWqzRPYEJCc2o43lUXF5 4r+bMqb3ZdCrL7w7ONySMpOrxacPU+3GsZRx7nfrC3jBOTqTzAlH7AsMMS3wrZXV RBuS0qUwNS//vTnTBw7loGGkeypPzvftsvAojwQWpSmyEk/2u143VgXo14qK/nSr s3DE8OMAK8D8VSUp+HGn7aLS6AeYMxocz3nzXvr374PYfQXBbs635txOGuE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTsPU7tCvm+HffP+BkE3ULLWCveQwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXMMoaeGuLqjL7sKcT4y5UTcPTrAQD/1/Ge EwL+SE8NfGN+ZckTYusTi80wxhml/P0tQeEzx9B2xIbJQxCcCqu9eRCQkct9eyLx 0Fkc3BP+NuU2qe6k1EjJzPPPJ9tgu590mUjEvdlwHaI8/JR5DmXwiWwDZPF8f6HF Urq2LFQtjqBJO7NpYXP4lxaUN5PMs+4+7YfBI0oPW4SeOnPQQ2uaWEhzXf01extL BHbY6Z4CgZbtvNq/Jg0285PiBd+k5QsuNN8gnwZj0J3hfMLidHpWULUWn6Q7au9d 6tIM9n/A+uNCRaZbdGFQzJOpUcuOnEZlcrOYS1fIf+gvrlQGXxo= -----END CERTIFICATE-----Generated at Wed Dec 3 15:29:17 2025 by rpki-client