This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: OY9aRsCnsL6M8KQ39kRkwGk0Q5CglLhJ5RsQ8z+lm5E= Subject key identifier: 58:0E:6B:25:40:EB:16:C0:8F:D4:92:B0:37:D2:DD:EA:B3:98:1C:89 Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 7DCC6C76542536B8AC95B818AFA9337A55D8CB16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04CB Signing time: Thu 18 Dec 2025 10:11:45 +0000 Manifest this update: Thu 18 Dec 2025 10:06:45 +0000 Manifest next update: Sun 21 Dec 2025 10:24:45 +0000 Files and hashes: 1: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) 2: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 3: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: 1B8KK7+1kxecgl0knFMV2MHKt2EJPLgI0WbIIJ2t6Wg=) 4: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:24:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cc:6c:76:54:25:36:b8:ac:95:b8:18:af:a9:33:7a:55:d8:cb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Dec 18 10:06:45 2025 GMT Not After : Dec 21 10:24:45 2025 GMT Subject: CN=580E6B2540EB16C08FD492B037D2DDEAB3981C89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7c:14:b6:a6:01:0c:f2:2c:2a:cd:49:a1:22: c7:09:d9:72:a2:03:8b:3e:66:b6:13:6f:f1:43:11: 25:42:74:0e:70:d1:71:f6:f7:a6:31:7d:96:87:5f: d2:ff:5e:b2:90:f8:1d:c1:46:4b:dd:4c:81:81:ef: 74:94:b0:3e:2e:cb:7a:35:5e:2f:eb:e5:6f:98:19: 09:12:20:30:54:53:00:fe:fd:81:0e:de:61:57:68: 3d:03:f1:e4:21:5b:0d:87:b5:32:66:27:37:0a:69: be:1b:96:d3:cb:32:27:e4:08:66:d7:d8:b2:16:6b: 93:d2:1f:f5:59:0f:65:80:40:38:33:63:ae:47:58: 4e:9b:bd:13:f2:da:85:e8:18:17:bb:80:1b:53:73: 97:b2:10:6e:d0:44:d5:0c:4a:d0:8c:dd:8e:85:83: 38:dc:1f:d4:8c:8c:18:d0:14:54:7b:99:cc:9c:27: e1:b5:4f:26:3d:63:dc:e2:3a:46:b3:6e:ae:5a:d5: a4:15:22:fa:7a:cf:35:d3:b6:22:0f:ea:d6:5c:a6: 45:45:12:63:51:b8:e6:e7:06:e8:64:10:56:dc:f0: 81:d1:48:39:8c:07:dd:11:16:fb:99:22:0f:ff:08: 8a:1d:bc:56:90:84:02:42:bf:50:94:dd:29:62:9c: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0E:6B:25:40:EB:16:C0:8F:D4:92:B0:37:D2:DD:EA:B3:98:1C:89 X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:7b:58:50:e2:52:37:ec:cb:43:41:1c:0c:3d:e4:a6:14:30: 06:ed:6c:7f:3c:82:88:be:4b:09:bf:38:98:2e:39:6f:8d:ca: 03:b7:ba:09:79:25:f0:8c:55:04:d4:0a:0c:13:f8:5f:43:2f: 7a:1d:28:d5:a2:d0:a7:13:ef:5f:98:6e:0e:c9:fe:99:a4:10: 68:6d:cd:c8:c9:59:db:0e:d1:d5:4a:e5:3b:97:ce:08:f4:c0: 7d:84:73:6c:46:3f:75:da:9b:8f:56:b5:a0:22:92:f5:84:25: 5f:e5:78:dd:8f:bf:32:53:f3:fe:5c:d1:b3:19:98:62:5e:4e: d8:97:2d:e1:ec:1e:f1:b3:ac:3b:ad:04:5b:b6:2f:6b:d9:0b: 3e:7d:eb:8b:9c:02:17:57:c4:29:60:b5:19:32:9f:ef:f0:09: 77:76:87:e7:14:f0:fc:86:4c:4f:62:c7:9d:59:2c:26:de:a1: 5a:21:dd:4a:f3:35:ee:38:d3:75:16:ef:2a:18:9e:f0:55:36: c2:34:ff:09:ae:dd:e3:1c:fe:38:cf:62:83:b6:74:40:7b:d0: 3a:4a:c3:33:31:ce:46:0e:81:28:9a:7b:b4:d8:dd:c4:78:ea: f0:4d:b5:c3:db:0c:ae:da:cf:f8:44:63:79:c2:51:5d:91:b7: 77:4d:96:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcxsdlQlNrislbgYr6kzelXYyxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTEyMTgxMDA2NDVaFw0yNTEyMjExMDI0NDVaMDMxMTAvBgNV BAMTKDU4MEU2QjI1NDBFQjE2QzA4RkQ0OTJCMDM3RDJEREVBQjM5ODFDODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkfBS2pgEM8iwqzUmhIscJ2XKi A4s+ZrYTb/FDESVCdA5w0XH296YxfZaHX9L/XrKQ+B3BRkvdTIGB73SUsD4uy3o1 Xi/r5W+YGQkSIDBUUwD+/YEO3mFXaD0D8eQhWw2HtTJmJzcKab4bltPLMifkCGbX 2LIWa5PSH/VZD2WAQDgzY65HWE6bvRPy2oXoGBe7gBtTc5eyEG7QRNUMStCM3Y6F gzjcH9SMjBjQFFR7mcycJ+G1TyY9Y9ziOkazbq5a1aQVIvp6zzXTtiIP6tZcpkVF EmNRuObnBuhkEFbc8IHRSDmMB90RFvuZIg//CIodvFaQhAJCv1CU3SlinB95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWA5rJUDrFsCP1JKwN9Ld6rOYHIkwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZ7WFDiUjfsy0NBHAw95KYUMAbtbH88goi+ Swm/OJguOW+NygO3ugl5JfCMVQTUCgwT+F9DL3odKNWi0KcT71+Ybg7J/pmkEGht zcjJWdsO0dVK5TuXzgj0wH2Ec2xGP3Xam49WtaAikvWEJV/leN2PvzJT8/5c0bMZ mGJeTtiXLeHsHvGzrDutBFu2L2vZCz5964ucAhdXxClgtRkyn+/wCXd2h+cU8PyG TE9ix51ZLCbeoVoh3UrzNe4403UW7yoYnvBVNsI0/wmu3eMc/jjPYoO2dEB70DpK wzMxzkYOgSiae7TY3cR46vBNtcPbDK7az/hEY3nCUV2Rt3dNlvo= -----END CERTIFICATE-----Generated at Thu Dec 18 19:09:27 2025 by rpki-client