This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: z1aUayNSddl90OXuam4x6MuBM7pQPMsV6kbuRChged4= Subject key identifier: E5:A8:5A:AB:BF:72:68:66:E1:60:43:54:B4:DF:0A:9C:60:0E:5D:01 Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 2024AC518E3A9DCEB0015AD520C366F7EC3E2A8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01F3 Signing time: Sat 06 Dec 2025 22:30:42 +0000 Manifest this update: Sat 06 Dec 2025 22:25:42 +0000 Manifest next update: Wed 10 Dec 2025 05:31:42 +0000 Files and hashes: 1: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=) 2: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: XJnJgoaNdrapAHWVcRwj/9RK7Bin/F1efplRxphn97Q=) 3: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:24:ac:51:8e:3a:9d:ce:b0:01:5a:d5:20:c3:66:f7:ec:3e:2a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Dec 6 22:25:42 2025 GMT Not After : Dec 10 05:31:42 2025 GMT Subject: CN=E5A85AABBF726866E1604354B4DF0A9C600E5D01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:c3:01:dd:ed:aa:70:81:e1:7c:eb:52:d3: bd:15:76:c5:52:7e:94:b5:78:27:cb:1f:bb:9e:b4: 47:50:ad:c2:7c:f6:b6:8e:19:15:22:11:46:e2:c2: cf:68:cc:02:01:c1:8f:aa:54:e6:31:c9:dd:3d:d2: 0e:16:43:90:34:7b:ca:f0:87:bf:57:00:c0:e7:03: f0:d5:3c:aa:99:94:88:e8:57:e3:9b:5a:5c:84:5a: 1d:04:0b:c2:e2:39:c2:50:a1:2a:89:1d:e7:82:fc: a8:a3:e1:65:fa:14:c2:c4:64:3e:a1:18:20:dc:41: 96:f3:a2:c7:a6:d0:a8:29:f8:3c:c7:58:8b:74:78: 3c:10:68:9b:6f:fb:ae:02:01:6b:9c:4f:df:12:5e: ee:e6:96:92:6c:0c:a9:a4:85:aa:85:84:d0:05:b4: 5f:1c:6f:2b:f9:93:d2:16:1e:92:27:85:34:d1:f1: 52:ab:7a:39:aa:c3:10:cd:16:ea:b6:ad:54:89:15: 79:0a:2c:ed:91:d1:72:35:47:7f:05:cc:70:6d:f9: 54:ad:6f:84:1e:84:e9:e8:73:48:75:d3:b6:b9:f2: e4:24:1c:a6:18:6b:d4:ad:5b:d1:3a:86:5c:27:27: e4:88:d0:e0:b1:83:cc:42:4f:a4:c2:13:55:6c:54: cf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:A8:5A:AB:BF:72:68:66:E1:60:43:54:B4:DF:0A:9C:60:0E:5D:01 X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:97:bd:c7:5d:c3:7d:59:ad:e8:69:c1:5c:4d:75:0f:ed:c5: 83:5d:95:97:6b:bb:af:c5:ad:9f:01:a0:b7:3d:14:10:ea:70: 8f:54:78:8d:92:ae:96:33:a0:f5:9c:f3:7a:70:61:8e:e5:d0: f0:32:17:bd:68:7d:57:78:f1:1c:10:15:69:84:25:6d:20:97: 6d:c9:3f:6c:8b:4c:54:33:1b:40:90:0b:92:88:0a:66:7a:97: 34:42:85:10:04:54:da:4c:45:e8:3a:fd:d4:02:cb:6a:dc:03: 14:0c:ac:15:88:38:55:d3:29:92:aa:2e:15:36:ff:98:22:03: f0:79:03:39:f8:ed:ac:1a:d5:4e:20:56:ce:43:7e:cd:b4:95: 70:b9:30:54:92:b5:51:f9:a9:46:60:a3:25:df:c3:4c:57:8d: 53:0c:a9:4c:4f:4f:12:27:8b:d8:f9:a0:d2:b3:89:6e:c1:a3: df:3b:8b:63:df:68:bd:ba:0b:aa:67:3e:dc:be:f7:09:fd:b9: 0e:0d:43:0d:38:4c:4c:fa:4e:5c:e5:d1:b8:16:74:47:89:aa: 18:ea:dd:5e:3f:95:62:49:a7:4c:7e:c5:b4:03:84:b4:10:a7: a3:ed:da:b3:36:00:46:d6:32:90:9e:a9:60:1c:f7:20:12:a8: 6a:73:05:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICSsUY46nc6wAVrVIMNm9+w+KoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTEyMDYyMjI1NDJaFw0yNTEyMTAwNTMxNDJaMDMxMTAvBgNV BAMTKEU1QTg1QUFCQkY3MjY4NjZFMTYwNDM1NEI0REYwQTlDNjAwRTVEMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rsMB3e2qcIHhfOtS070VdsVS fpS1eCfLH7uetEdQrcJ89raOGRUiEUbiws9ozAIBwY+qVOYxyd090g4WQ5A0e8rw h79XAMDnA/DVPKqZlIjoV+ObWlyEWh0EC8LiOcJQoSqJHeeC/Kij4WX6FMLEZD6h GCDcQZbzosem0Kgp+DzHWIt0eDwQaJtv+64CAWucT98SXu7mlpJsDKmkhaqFhNAF tF8cbyv5k9IWHpInhTTR8VKrejmqwxDNFuq2rVSJFXkKLO2R0XI1R38FzHBt+VSt b4QehOnoc0h107a58uQkHKYYa9StW9E6hlwnJ+SI0OCxg8xCT6TCE1VsVM8vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ahaq79yaGbhYENUtN8KnGAOXQEwHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADOXvcddw31ZrehpwVxNdQ/txYNdlZdru6/F rZ8BoLc9FBDqcI9UeI2SrpYzoPWc83pwYY7l0PAyF71ofVd48RwQFWmEJW0gl23J P2yLTFQzG0CQC5KICmZ6lzRChRAEVNpMReg6/dQCy2rcAxQMrBWIOFXTKZKqLhU2 /5giA/B5Azn47awa1U4gVs5Dfs20lXC5MFSStVH5qUZgoyXfw0xXjVMMqUxPTxIn i9j5oNKziW7Bo987i2PfaL26C6pnPty+9wn9uQ4NQw04TEz6Tlzl0bgWdEeJqhjq 3V4/lWJJp0x+xbQDhLQQp6Pt2rM2AEbWMpCeqWAc9yASqGpzBXM= -----END CERTIFICATE-----Generated at Sun Dec 7 07:13:19 2025 by rpki-client