This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft File: A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft (raw, json) Hash identifier: AHPvXhXr13mM0Thq3IiYRAhMIGNy4Zh1kxssi8yTwQE= Subject key identifier: A4:2F:CB:A1:E1:CD:1C:71:36:45:EA:FF:09:61:67:A2:F0:68:8D:EC Authority key identifier: A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF Certificate issuer: /CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Certificate serial: 0169EF4EA83B39DBFC8554450A39E214A3721665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft Manifest number: 04C5 Signing time: Fri 05 Dec 2025 09:11:45 +0000 Manifest this update: Fri 05 Dec 2025 09:06:45 +0000 Manifest next update: Mon 08 Dec 2025 14:17:45 +0000 Files and hashes: 1: 3130332e3130302e3234362e302f32342d3234203d3e20313336383432.roa (hash: L/oaDs9pEKj6iBvLwrU05wZAuGGAsyb/Z+4/d76DsQ0=) 2: 323430353a6263303a3a2f33332d3438203d3e20313336383432.roa (hash: /afnBbe9lqmeZWTu4VD92m9xOkkp/GMDn8V+1M5ITYk=) 3: A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl (hash: QRXtkCZmFurqsn+nTKdTIOLp9gTZra2ehqCSeTtxMFw=) 4: 3130332e3130302e3234372e302f32342d3234203d3e20313336383432.roa (hash: 7kcdJn0kEx4MlESTLNrz7h+lfGYcQSPT5Qkc5rykWNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:69:ef:4e:a8:3b:39:db:fc:85:54:45:0a:39:e2:14:a3:72:16:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A08B1B14AA5B6512424EDF8650A984942F27A4EF Validity Not Before: Dec 5 09:06:45 2025 GMT Not After : Dec 8 14:17:45 2025 GMT Subject: CN=A42FCBA1E1CD1C713645EAFF096167A2F0688DEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:a6:60:b9:86:b7:99:af:07:1f:af:4d:ba: 50:ff:cc:45:ad:74:32:de:00:1a:6a:ca:93:af:23: 37:61:49:f5:fb:e9:4a:55:9a:58:3a:06:8c:eb:86: 15:8a:86:78:b2:52:45:cd:fe:d0:cc:1c:46:a7:97: 66:5e:61:30:90:22:c4:1a:02:bc:2b:63:91:4f:9f: d5:43:cd:2b:00:df:46:85:6c:53:dd:a0:b2:42:28: e6:66:2a:7b:40:77:fb:8d:6d:38:da:a4:00:ad:3a: e5:31:7c:dc:56:df:bb:5e:d1:e6:ec:88:71:30:82: 0c:10:aa:d8:c1:a0:6c:02:1f:84:6b:46:23:76:69: 7a:32:8c:c0:7d:ed:ad:2e:36:e4:15:03:86:1a:86: 4f:4e:3a:3b:b2:f7:c0:2e:e5:5b:ae:c7:84:aa:ec: c5:a5:e1:22:c6:e9:27:3a:69:82:81:d3:76:de:c7: a2:ec:bd:92:81:5d:42:7b:0f:30:00:55:8d:57:4a: 02:da:8d:a4:5c:81:e2:09:e4:61:8c:39:47:a6:bc: 6d:a0:29:2c:fb:ab:35:06:9b:22:45:c5:09:03:f5: 24:0a:15:3a:01:6e:0e:2a:79:e1:b5:43:a3:b7:75: f3:bf:43:57:69:b6:ee:14:28:20:16:fc:c6:1a:be: 84:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2F:CB:A1:E1:CD:1C:71:36:45:EA:FF:09:61:67:A2:F0:68:8D:EC X509v3 Authority Key Identifier: keyid:A0:8B:1B:14:AA:5B:65:12:42:4E:DF:86:50:A9:84:94:2F:27:A4:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A08B1B14AA5B6512424EDF8650A984942F27A4EF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a97bcf4-e1aa-47d6-bde6-2e667b9d6134/0/A08B1B14AA5B6512424EDF8650A984942F27A4EF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:53:7f:e6:fd:f2:3c:3c:0f:dd:c1:ce:79:51:cd:5d:cf: 9c:8d:09:95:e2:5c:f7:ec:b9:13:8f:25:69:2a:8f:ba:6e:70: ba:11:65:78:5f:c2:9c:e6:a4:e7:90:a9:eb:80:76:9f:a0:ea: f4:44:1d:c7:33:bd:64:cc:0f:6f:74:cd:28:2e:20:4f:ae:a9: 83:33:9b:7a:73:ae:c4:18:0c:0a:f3:82:98:84:88:69:a9:7c: d9:22:10:79:d1:05:2f:b5:44:37:cf:65:d8:27:07:0c:60:14: 89:dc:c0:ed:6e:49:1d:8a:4a:b8:c4:46:ca:03:5e:20:22:8c: c6:36:bd:89:26:98:eb:8a:ec:82:b8:a7:1b:9f:14:39:79:01: 5d:7b:6f:e2:87:20:65:50:f2:79:eb:6c:fc:29:af:3e:2b:d6: 61:1d:e6:73:74:b0:bb:40:fe:6f:fb:8f:99:61:39:cd:95:4e: 99:96:ae:10:bd:a4:3a:26:35:29:16:bb:93:d8:e2:26:48:b5: 32:a5:91:16:ff:75:fc:d9:97:b9:4d:a7:c9:b0:6e:99:ce:0f: b7:29:0b:20:78:b5:0d:50:f6:a5:79:1f:2d:68:0e:f0:c3:da: c4:70:9b:52:51:9d:ba:fa:1f:60:32:cf:f3:94:4c:fc:a1:05: 53:13:a7:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAWnvTqg7Odv8hVRFCjniFKNyFmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQy RjI3QTRFRjAeFw0yNTEyMDUwOTA2NDVaFw0yNTEyMDgxNDE3NDVaMDMxMTAvBgNV BAMTKEE0MkZDQkExRTFDRDFDNzEzNjQ1RUFGRjA5NjE2N0EyRjA2ODhERUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZKZguYa3ma8HH69NulD/zEWt dDLeABpqypOvIzdhSfX76UpVmlg6BozrhhWKhniyUkXN/tDMHEanl2ZeYTCQIsQa ArwrY5FPn9VDzSsA30aFbFPdoLJCKOZmKntAd/uNbTjapACtOuUxfNxW37te0ebs iHEwggwQqtjBoGwCH4RrRiN2aXoyjMB97a0uNuQVA4Yahk9OOjuy98Au5Vuux4Sq 7MWl4SLG6Sc6aYKB03bex6LsvZKBXUJ7DzAAVY1XSgLajaRcgeIJ5GGMOUemvG2g KSz7qzUGmyJFxQkD9SQKFToBbg4qeeG1Q6O3dfO/Q1dptu4UKCAW/MYavoQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpC/LoeHNHHE2Rer/CWFnovBojewwHwYDVR0j BBgwFoAUoIsbFKpbZRJCTt+GUKmElC8npO8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTk3YmNmNC1lMWFhLTQ3ZDYtYmRlNi0yZTY2N2I5ZDYxMzQvMC9BMDhCMUIxNEFB NUI2NTEyNDI0RURGODY1MEE5ODQ5NDJGMjdBNEVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0OTQyRjI3 QTRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE5N2JjZjQtZTFhYS00N2Q2LWJk ZTYtMmU2NjdiOWQ2MTM0LzAvQTA4QjFCMTRBQTVCNjUxMjQyNEVERjg2NTBBOTg0 OTQyRjI3QTRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM6U3/m/fI8PA/dwc55Uc1dz5yNCZXiXPfs uROPJWkqj7pucLoRZXhfwpzmpOeQqeuAdp+g6vREHcczvWTMD290zSguIE+uqYMz m3pzrsQYDArzgpiEiGmpfNkiEHnRBS+1RDfPZdgnBwxgFIncwO1uSR2KSrjERsoD XiAijMY2vYkmmOuK7IK4pxufFDl5AV17b+KHIGVQ8nnrbPwprz4r1mEd5nN0sLtA /m/7j5lhOc2VTpmWrhC9pDomNSkWu5PY4iZItTKlkRb/dfzZl7lNp8mwbpnOD7cp CyB4tQ1Q9qV5Hy1oDvDD2sRwm1JRnbr6H2Ayz/OUTPyhBVMTpzM= -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:03 2025 by rpki-client