This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: HNOodUuPcb08xtUFJfxc2TmCAwvUkYtMkzyhVrssEkY= Subject key identifier: B4:4F:F0:ED:A7:FE:11:A5:23:C7:84:EF:8B:ED:AD:BC:05:22:D7:B2 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 1C39B5401C9FBF79F7C56E253B57EB9C9F40DA93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 0544 Signing time: Sat 06 Dec 2025 18:01:46 +0000 Manifest this update: Sat 06 Dec 2025 17:56:46 +0000 Manifest next update: Wed 10 Dec 2025 04:48:46 +0000 Files and hashes: 1: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=) 2: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=) 3: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=) 4: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=) 5: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: ereqHA7Qv63WJGOeC2OUGuGn1wCIuuasira9jM4YHEA=) 6: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=) 7: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=) 8: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=) 9: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=) 10: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=) 11: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=) 12: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=) 13: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=) 14: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=) 15: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=) 16: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=) 17: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=) 18: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=) 19: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:39:b5:40:1c:9f:bf:79:f7:c5:6e:25:3b:57:eb:9c:9f:40:da:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Dec 6 17:56:46 2025 GMT Not After : Dec 10 04:48:46 2025 GMT Subject: CN=B44FF0EDA7FE11A523C784EF8BEDADBC0522D7B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:ed:72:a5:31:23:54:18:92:e0:68:b5:4a: 41:38:fb:0b:ad:57:b8:90:8c:48:87:37:f1:f0:2c: f7:5f:c6:fc:e1:3c:92:38:db:51:42:82:86:14:e2: b4:42:1f:0a:ab:7a:1e:19:72:ac:9e:ed:56:61:be: 05:ec:56:93:e5:14:8a:50:4d:b7:f4:95:ff:fd:b6: 51:3e:25:50:de:3d:f8:0f:cb:6e:1c:60:e5:e6:c7: 24:bb:54:7e:1c:1c:cc:bc:ab:b1:1f:30:a7:cd:37: bb:48:56:64:b6:0a:80:c4:60:43:82:fe:cf:0d:99: 00:34:43:f2:fd:bd:2c:22:c5:f9:4d:f3:4c:63:25: 50:6f:5b:59:9d:49:b8:4d:35:9f:29:77:e8:aa:13: a9:9f:49:44:aa:e9:0d:06:ea:d3:d0:ec:2c:67:df: fe:b9:ec:a2:6f:e2:2f:aa:d7:2a:d1:02:49:0a:a5: d3:82:46:70:fb:b3:e0:d3:e3:05:1d:c8:99:02:1e: bc:c8:48:0b:8b:b7:63:84:4b:c4:8d:a0:bc:a5:0d: 4c:5b:31:96:2a:6f:62:ea:1d:6d:c1:f4:6f:b0:bc: 5d:a9:30:86:2f:8c:d5:57:39:4d:9a:36:8d:5a:71: 48:12:38:59:f1:98:ab:4c:85:94:bf:82:c3:f4:aa: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:4F:F0:ED:A7:FE:11:A5:23:C7:84:EF:8B:ED:AD:BC:05:22:D7:B2 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:62:2d:81:7e:8a:a5:93:c9:51:bb:a6:f1:37:b8:7b:3f:fd: 35:62:69:60:41:8a:c0:35:7b:20:57:ef:1e:57:87:0f:ed:b7: 99:43:84:c7:53:d9:50:7a:11:ae:ee:fa:cd:1d:f1:2f:5b:94: 77:83:28:44:5e:15:13:b5:84:89:ab:7c:05:88:9c:54:d2:f2: 3d:5d:c7:84:f5:61:bc:3c:83:f4:bf:54:4b:db:cb:24:c3:07: 22:0f:0c:d8:46:3b:19:10:48:a5:f3:3b:77:62:85:c3:d8:84: a0:c3:30:02:39:2f:c4:0f:19:c0:be:5e:21:c0:94:78:41:12: 13:dd:6d:dd:e8:28:14:30:17:48:7a:7d:87:2f:c1:d7:52:58: c4:c7:b3:cf:0c:5b:bd:ea:65:fe:9b:b7:b3:2f:16:c9:8e:48: bf:87:18:86:7d:7a:72:c7:cf:e7:65:b5:b5:86:cf:73:e3:e2: 1c:61:49:7b:66:e4:02:7f:53:c7:fb:a8:7e:1c:6e:2b:a7:f9: d9:7a:55:20:fe:1e:ea:7e:0c:12:59:16:c8:b0:2a:68:71:59: 28:38:13:d2:53:0a:35:99:d0:ed:dc:a4:24:b0:77:f1:27:51: c2:84:1c:a4:1b:be:41:38:9a:d3:5c:55:17:52:f4:86:52:ca: 40:a9:f1:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDm1QByfv3n3xW4lO1frnJ9A2pMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTEyMDYxNzU2NDZaFw0yNTEyMTAwNDQ4NDZaMDMxMTAvBgNV BAMTKEI0NEZGMEVEQTdGRTExQTUyM0M3ODRFRjhCRURBREJDMDUyMkQ3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGO1ypTEjVBiS4Gi1SkE4+wut V7iQjEiHN/HwLPdfxvzhPJI421FCgoYU4rRCHwqreh4Zcqye7VZhvgXsVpPlFIpQ Tbf0lf/9tlE+JVDePfgPy24cYOXmxyS7VH4cHMy8q7EfMKfNN7tIVmS2CoDEYEOC /s8NmQA0Q/L9vSwixflN80xjJVBvW1mdSbhNNZ8pd+iqE6mfSUSq6Q0G6tPQ7Cxn 3/657KJv4i+q1yrRAkkKpdOCRnD7s+DT4wUdyJkCHrzISAuLt2OES8SNoLylDUxb MZYqb2LqHW3B9G+wvF2pMIYvjNVXOU2aNo1acUgSOFnxmKtMhZS/gsP0qnHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtE/w7af+EaUjx4Tvi+2tvAUi17IwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9iLYF+iqWTyVG7pvE3uHs//TViaWBBisA1 eyBX7x5Xhw/tt5lDhMdT2VB6Ea7u+s0d8S9blHeDKEReFRO1hImrfAWInFTS8j1d x4T1Ybw8g/S/VEvbyyTDByIPDNhGOxkQSKXzO3dihcPYhKDDMAI5L8QPGcC+XiHA lHhBEhPdbd3oKBQwF0h6fYcvwddSWMTHs88MW73qZf6bt7MvFsmOSL+HGIZ9enLH z+dltbWGz3Pj4hxhSXtm5AJ/U8f7qH4cbiun+dl6VSD+Hup+DBJZFsiwKmhxWSg4 E9JTCjWZ0O3cpCSwd/EnUcKEHKQbvkE4mtNcVRdS9IZSykCp8Zo= -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:39 2025 by rpki-client