This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: x9H7g6MxgMWasfvC4o/1S4ONvwClmgoE4cqustFD174= Subject key identifier: C6:B4:47:E2:AB:C1:F4:49:75:76:88:02:66:21:68:9F:B7:B7:91:CA Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 427A59EA50549B31FEAB3C591C0E3C9EE7028F6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0535 Signing time: Fri 05 Dec 2025 12:41:38 +0000 Manifest this update: Fri 05 Dec 2025 12:36:38 +0000 Manifest next update: Mon 08 Dec 2025 16:34:38 +0000 Files and hashes: 1: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: h6vFQwgSljhT9GPIoRZUnifVR80f+OK+7q25Du2KDlk=) 2: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 3: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 4: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) 7: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 16:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7a:59:ea:50:54:9b:31:fe:ab:3c:59:1c:0e:3c:9e:e7:02:8f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Dec 5 12:36:38 2025 GMT Not After : Dec 8 16:34:38 2025 GMT Subject: CN=C6B447E2ABC1F449757688026621689FB7B791CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e1:b5:eb:70:4a:94:e0:16:17:b8:a4:b1:6a: da:37:3c:4f:2a:83:37:32:c6:43:0e:87:06:5b:ae: 45:6a:64:43:c4:bc:da:6b:67:43:3f:b4:00:3e:3a: 5f:f7:c0:eb:e4:dd:57:c7:80:05:83:91:4f:12:08: 0a:16:c1:02:db:48:7e:b7:89:4c:e7:37:64:34:41: c6:a4:e1:6f:a2:b2:5e:e3:51:dd:b9:f2:e9:71:9d: d9:85:6b:d6:13:aa:2a:03:c6:13:bb:f5:ac:e2:c8: 1c:b1:c8:51:e8:c3:8b:83:c4:04:82:90:c1:56:b3: 6c:8f:36:25:54:ec:5a:ab:fd:31:12:c2:ca:5a:86: 0d:a8:d4:aa:eb:47:bd:3c:db:4e:9b:da:00:51:c8: d1:7b:ae:72:94:03:ef:ba:be:df:2c:d5:f5:51:af: fc:7e:af:aa:34:1b:9c:63:21:cd:8a:eb:5c:53:41: 2d:ca:3f:f8:22:21:46:66:28:10:4f:92:6b:08:80: 38:b9:39:d0:71:4b:47:2d:70:6b:c0:1a:e4:2d:8c: 90:27:d1:ca:c8:8c:c6:7b:46:c6:77:21:2e:8c:dc: a2:1b:7a:ce:81:4d:a2:b7:b9:3f:ac:55:b2:96:b3: 10:14:5b:69:87:13:b8:6f:3c:e0:fb:29:3c:45:fc: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:B4:47:E2:AB:C1:F4:49:75:76:88:02:66:21:68:9F:B7:B7:91:CA X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f5:d9:d8:67:d1:e7:8f:9a:4a:2f:57:81:a8:4a:71:a3:81: 4d:b7:51:cc:71:35:cd:51:e6:a6:64:3b:57:19:b1:47:fc:4f: 5e:ea:5c:30:47:a8:6d:cb:e7:cd:5a:9d:47:c2:b4:21:49:b4: 2a:26:e5:27:15:69:3e:60:b2:e7:a3:73:27:bf:9f:ad:ab:64: 62:62:4f:82:44:1b:83:a7:89:81:24:5d:08:bf:8c:42:fb:da: 80:9f:4f:c3:cc:b9:8f:da:49:ae:5c:53:d4:9a:37:40:fb:17: cf:83:78:b1:f2:1d:0f:57:c4:bc:72:b1:85:7e:ad:18:b2:8a: 1b:f2:8f:4e:7b:f1:97:97:0a:bc:70:99:59:f7:5c:8a:2e:8f: 7f:a2:6a:c7:1e:eb:1b:c5:47:1c:36:d8:88:a8:94:fb:78:54: 31:1d:66:95:80:c0:b0:88:6d:64:d8:a0:21:68:c7:a5:c7:e2: 46:e4:36:f9:57:79:0a:dc:e2:d2:50:a9:1a:03:2d:78:d0:19: 71:8e:08:cd:2d:b5:72:f6:71:68:e6:d6:c4:6c:de:0b:79:9a: 87:a7:41:73:c7:42:3d:53:af:6b:3b:8d:60:a3:6c:c8:ce:38: fa:fa:dd:f4:7d:a3:8e:12:da:cd:96:9b:30:40:64:08:ff:b6: ff:fd:29:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnpZ6lBUmzH+qzxZHA48nucCj28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTEyMDUxMjM2MzhaFw0yNTEyMDgxNjM0MzhaMDMxMTAvBgNV BAMTKEM2QjQ0N0UyQUJDMUY0NDk3NTc2ODgwMjY2MjE2ODlGQjdCNzkxQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt4bXrcEqU4BYXuKSxato3PE8q gzcyxkMOhwZbrkVqZEPEvNprZ0M/tAA+Ol/3wOvk3VfHgAWDkU8SCAoWwQLbSH63 iUznN2Q0Qcak4W+isl7jUd258ulxndmFa9YTqioDxhO79aziyByxyFHow4uDxASC kMFWs2yPNiVU7Fqr/TESwspahg2o1KrrR708206b2gBRyNF7rnKUA++6vt8s1fVR r/x+r6o0G5xjIc2K61xTQS3KP/giIUZmKBBPkmsIgDi5OdBxS0ctcGvAGuQtjJAn 0crIjMZ7RsZ3IS6M3KIbes6BTaK3uT+sVbKWsxAUW2mHE7hvPOD7KTxF/IXpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxrRH4qvB9El1dogCZiFon7e3kcowHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE312dhn0eePmkovV4GoSnGjgU23UcxxNc1R 5qZkO1cZsUf8T17qXDBHqG3L581anUfCtCFJtCom5ScVaT5gsuejcye/n62rZGJi T4JEG4OniYEkXQi/jEL72oCfT8PMuY/aSa5cU9SaN0D7F8+DeLHyHQ9XxLxysYV+ rRiyihvyj0578ZeXCrxwmVn3XIouj3+iasce6xvFRxw22IiolPt4VDEdZpWAwLCI bWTYoCFox6XH4kbkNvlXeQrc4tJQqRoDLXjQGXGOCM0ttXL2cWjm1sRs3gt5moen QXPHQj1Tr2s7jWCjbMjOOPr63fR9o44S2s2WmzBAZAj/tv/9KfE= -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:08 2025 by rpki-client