This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: nXcsqksOlGoRBCjI4k7gOop9FiBlPo6Rx/pVAIMsojQ= Subject key identifier: 01:2A:66:9D:1F:27:CF:7A:BD:3E:E4:9C:37:75:C8:95:3E:3F:89:AF Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 2BC2AD130196C167BBB6E3CB8697E16B40C1094E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 01A4 Signing time: Sat 06 Dec 2025 13:10:47 +0000 Manifest this update: Sat 06 Dec 2025 13:05:47 +0000 Manifest next update: Tue 09 Dec 2025 13:57:47 +0000 Files and hashes: 1: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) 2: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: xUb8ECucmGT2rcmP+ZA3m/JUrHQ2bP5ZNIELfphlf30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 13:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c2:ad:13:01:96:c1:67:bb:b6:e3:cb:86:97:e1:6b:40:c1:09:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Dec 6 13:05:47 2025 GMT Not After : Dec 9 13:57:47 2025 GMT Subject: CN=012A669D1F27CF7ABD3EE49C3775C8953E3F89AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fd:47:37:fa:68:eb:93:35:15:88:fa:61:86: 0b:50:2e:6b:e9:78:fb:c7:b8:a5:46:39:3e:aa:bc: cd:e4:b7:d7:fa:dd:8f:1e:c5:75:1b:a2:be:3c:50: 37:29:56:1a:18:0e:50:f8:3d:76:e6:d3:11:ae:5a: 8b:45:1e:d2:84:39:7c:c9:db:97:54:ea:3d:39:27: df:9a:4c:12:7b:cf:48:cd:c7:c4:5a:32:46:72:18: 85:c0:4c:24:2d:09:ef:27:eb:c9:aa:bb:6f:f8:98: b8:ae:9e:d7:0c:44:91:1f:72:c7:84:1e:bb:5b:69: b9:74:e8:f5:d8:10:2f:50:6c:28:84:31:12:ea:de: 33:40:8e:3c:de:28:8d:10:3b:86:f1:cd:cb:1a:26: 97:e5:ab:4b:51:7f:67:19:99:97:b9:60:8f:9a:62: 72:15:f6:58:24:6c:99:ef:10:c2:99:0b:87:3e:fd: f7:49:ce:c3:03:66:cd:af:38:21:ff:2d:af:61:d7: 4c:db:00:e6:85:c6:d3:b0:d1:9c:09:69:ac:8e:a5: 06:f2:9c:8c:46:31:f0:a0:53:d3:d9:be:82:35:ce: 6e:15:ae:03:63:ab:4b:f3:bc:4a:f0:f9:47:23:d5: 6d:df:c0:4e:f9:4f:f5:67:87:64:17:06:b2:e5:e3: bb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2A:66:9D:1F:27:CF:7A:BD:3E:E4:9C:37:75:C8:95:3E:3F:89:AF X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:46:a7:3b:09:b2:ad:29:de:56:79:f8:46:12:2f:15:12:c3: 47:80:47:c2:ce:27:c5:39:c0:98:a8:81:11:31:e3:22:86:21: 37:19:11:38:82:37:c2:f3:d3:df:2e:ee:32:00:e8:7c:e4:13: 7a:88:da:1b:30:d3:4f:2e:f2:53:5a:97:d7:8b:db:6a:cf:fb: 0b:a4:f4:8c:8b:74:54:45:8f:85:54:59:11:ef:84:94:51:86: af:4d:a3:74:24:8b:15:6b:31:2f:5c:a8:3c:75:8a:0a:6b:2e: db:5e:4d:3e:c6:3b:b9:b9:b2:db:09:db:07:cf:a8:68:ac:fd: cc:4c:f4:4f:f1:92:d7:b7:61:ae:f7:e4:d7:78:dc:e6:03:1c: 3b:ac:2d:16:9d:ec:f4:c1:11:4d:b8:dd:66:c2:d0:d9:dc:84: f1:21:5c:1e:d5:d0:c6:2a:96:68:39:0a:c2:00:d5:99:14:ff: bb:d1:3c:41:82:0d:ee:65:11:f8:a2:81:b5:63:c3:9f:07:5b: 97:6b:42:18:1a:55:77:09:dd:13:b2:3f:89:c2:26:58:12:ee: 36:71:f2:4e:ab:81:c6:97:04:b0:57:87:ab:84:a2:a1:b5:f2: 23:e0:90:c1:68:b0:c9:11:1f:fc:09:51:51:49:05:c6:e3:90: b7:79:ac:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8KtEwGWwWe7tuPLhpfha0DBCU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTEyMDYxMzA1NDdaFw0yNTEyMDkxMzU3NDdaMDMxMTAvBgNV BAMTKDAxMkE2NjlEMUYyN0NGN0FCRDNFRTQ5QzM3NzVDODk1M0UzRjg5QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0/Uc3+mjrkzUViPphhgtQLmvp ePvHuKVGOT6qvM3kt9f63Y8exXUbor48UDcpVhoYDlD4PXbm0xGuWotFHtKEOXzJ 25dU6j05J9+aTBJ7z0jNx8RaMkZyGIXATCQtCe8n68mqu2/4mLiuntcMRJEfcseE Hrtbabl06PXYEC9QbCiEMRLq3jNAjjzeKI0QO4bxzcsaJpflq0tRf2cZmZe5YI+a YnIV9lgkbJnvEMKZC4c+/fdJzsMDZs2vOCH/La9h10zbAOaFxtOw0ZwJaayOpQby nIxGMfCgU9PZvoI1zm4VrgNjq0vzvErw+Ucj1W3fwE75T/Vnh2QXBrLl47vvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASpmnR8nz3q9PuScN3XIlT4/ia8wHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9GpzsJsq0p3lZ5+EYSLxUSw0eAR8LOJ8U5 wJiogREx4yKGITcZETiCN8Lz098u7jIA6HzkE3qI2hsw008u8lNal9eL22rP+wuk 9IyLdFRFj4VUWRHvhJRRhq9No3QkixVrMS9cqDx1igprLtteTT7GO7m5stsJ2wfP qGis/cxM9E/xkte3Ya735Nd43OYDHDusLRad7PTBEU243WbC0NnchPEhXB7V0MYq lmg5CsIA1ZkU/7vRPEGCDe5lEfiigbVjw58HW5drQhgaVXcJ3ROyP4nCJlgS7jZx 8k6rgcaXBLBXh6uEoqG18iPgkMFosMkRH/wJUVFJBcbjkLd5rAU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:02:52 2025 by rpki-client