This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: ABb8HR6A24/Sq6KVstYfc1/ypn7xgKBknKk2mEdPEFg= Subject key identifier: CD:94:C4:8A:47:26:BD:AD:39:B6:1C:1E:AA:83:D9:7B:83:D4:E1:03 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 683B3B46300F9072596D7974C774415A6F5E844D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 02C9 Signing time: Sat 06 Dec 2025 14:30:48 +0000 Manifest this update: Sat 06 Dec 2025 14:25:48 +0000 Manifest next update: Wed 10 Dec 2025 00:40:48 +0000 Files and hashes: 1: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: bmzsNhYujGH2LmgXskz/0GWC9scVu/AXTjmp6dOWN3g=) 2: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: 4ay2yIkaz/okUggq2Q+5v6XEkZjRzdb2tCitNZZ/RdQ=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: T+LxrVwwNKzJSOF5lHGAsP446A31BNGrPBlYYjdrOLQ=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: TX3fUeZklwpUw9yIwRSZ7p2jM8uL0KvPpSOCdlPRBMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:3b:3b:46:30:0f:90:72:59:6d:79:74:c7:74:41:5a:6f:5e:84:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Dec 6 14:25:48 2025 GMT Not After : Dec 10 00:40:48 2025 GMT Subject: CN=CD94C48A4726BDAD39B61C1EAA83D97B83D4E103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:46:0b:13:c2:e5:95:1c:5b:46:9f:b5:93: fc:16:cf:24:83:1b:fa:3b:00:60:37:6a:41:79:80: d5:9f:55:67:bc:de:11:21:89:ab:6d:f8:68:05:78: f1:59:db:06:76:08:ed:4a:4c:04:77:ad:60:d6:c0: 35:fe:82:1a:7a:c8:fd:9a:be:e3:fc:8c:aa:02:ca: ae:a1:bd:1c:bd:72:51:5e:52:3d:45:fc:9c:6a:5b: 03:7c:b7:4d:65:50:50:97:3d:90:a2:21:b5:79:d2: 0c:90:40:d5:d0:0f:19:e7:f6:ec:b7:55:19:de:e0: 29:91:de:39:5c:70:f7:f9:b5:15:cf:c0:ca:15:89: 80:63:02:63:54:78:44:39:45:61:8e:9d:47:b5:42: e5:51:0c:2f:69:db:87:ed:e8:d7:09:60:a0:8d:dc: 34:cf:c4:ca:85:80:2b:68:b8:c4:83:bd:93:e0:d5: c8:75:47:4e:e8:a4:83:a7:99:89:02:f7:bf:13:dd: 09:57:63:5a:36:33:b3:6d:0d:f9:76:59:99:de:9f: af:e0:38:61:e2:ec:47:b0:d7:1b:cd:0a:89:62:84: e0:b8:4e:1c:a9:5a:56:1a:c0:8f:c8:c3:80:5a:f4: 6c:f9:eb:4b:f7:b0:48:ed:d0:9e:73:0a:32:30:fc: af:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:94:C4:8A:47:26:BD:AD:39:B6:1C:1E:AA:83:D9:7B:83:D4:E1:03 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e6:66:ed:72:db:ff:c6:b2:f7:c4:ee:66:01:d5:e7:c4:58: 1c:a2:58:41:dd:be:95:c1:c6:38:33:80:f9:5b:49:0f:08:16: 39:ad:5c:92:dd:25:2a:17:cc:bc:9d:c6:f9:bd:62:9c:b7:72: 23:76:36:87:69:b9:61:3a:da:2e:ee:51:5d:b0:8a:cf:58:9d: 5b:72:52:9f:63:a3:7e:52:2a:53:cb:87:33:66:b7:a0:8e:a8: ac:c8:82:0b:8d:38:7d:66:82:91:a7:18:cc:75:c6:63:8e:8b: a7:47:96:51:57:03:f8:5e:e9:93:39:14:73:a5:e8:62:8c:6f: 3f:5f:b5:dc:d8:11:82:fe:b8:52:5a:00:4a:e4:e6:27:81:e7: b8:a5:a0:0c:1e:22:7f:de:7c:16:da:0e:5c:42:a2:81:ca:02: ce:87:20:bd:c9:b0:f5:d8:dd:f1:91:45:a7:81:68:4e:4f:b2: a7:cf:e4:40:d2:c9:db:92:df:f9:d2:8f:d8:f1:42:ad:ba:30: 50:7b:52:11:e9:44:40:57:9c:fc:7e:d6:e7:34:61:4d:b2:58: 33:a4:47:ed:0d:eb:28:27:88:2b:f0:c9:19:57:aa:b7:a0:43: 3d:78:e6:54:87:05:2e:8d:ef:94:dc:50:b0:ef:18:50:69:50: f4:a7:cf:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDs7RjAPkHJZbXl0x3RBWm9ehE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTEyMDYxNDI1NDhaFw0yNTEyMTAwMDQwNDhaMDMxMTAvBgNV BAMTKENEOTRDNDhBNDcyNkJEQUQzOUI2MUMxRUFBODNEOTdCODNENEUxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+lEYLE8LllRxbRp+1k/wWzySD G/o7AGA3akF5gNWfVWe83hEhiatt+GgFePFZ2wZ2CO1KTAR3rWDWwDX+ghp6yP2a vuP8jKoCyq6hvRy9clFeUj1F/JxqWwN8t01lUFCXPZCiIbV50gyQQNXQDxnn9uy3 VRne4CmR3jlccPf5tRXPwMoViYBjAmNUeEQ5RWGOnUe1QuVRDC9p24ft6NcJYKCN 3DTPxMqFgCtouMSDvZPg1ch1R07opIOnmYkC978T3QlXY1o2M7NtDfl2WZnen6/g OGHi7Eew1xvNColihOC4ThypWlYawI/Iw4Ba9Gz560v3sEjt0J5zCjIw/K+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZTEikcmva05thweqoPZe4PU4QMwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzmZu1y2//GsvfE7mYB1efEWByiWEHdvpXB xjgzgPlbSQ8IFjmtXJLdJSoXzLydxvm9Ypy3ciN2NodpuWE62i7uUV2wis9YnVty Up9jo35SKlPLhzNmt6COqKzIgguNOH1mgpGnGMx1xmOOi6dHllFXA/he6ZM5FHOl 6GKMbz9ftdzYEYL+uFJaAErk5ieB57iloAweIn/efBbaDlxCooHKAs6HIL3JsPXY 3fGRRaeBaE5PsqfP5EDSyduS3/nSj9jxQq26MFB7UhHpREBXnPx+1uc0YU2yWDOk R+0N6ygniCvwyRlXqregQz145lSHBS6N75TcULDvGFBpUPSnz18= -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:31 2025 by rpki-client