This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: A0X+NM9/5M4/N1OsDd623bkxL3mcuekHGbvHMObysXI= Subject key identifier: 47:D9:4E:F2:82:F1:84:DF:6B:35:30:34:44:9C:07:2B:2C:4A:B9:64 Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 02C9755483E8FD8484A90AD9D99B2332AA7DE4C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 029A Signing time: Sat 06 Dec 2025 22:51:35 +0000 Manifest this update: Sat 06 Dec 2025 22:46:35 +0000 Manifest next update: Wed 10 Dec 2025 01:05:35 +0000 Files and hashes: 1: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=) 2: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: Ohkwg+w1SzDFaMy/ItuQa0/6bYKot1qJIpiUQKGCVqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:c9:75:54:83:e8:fd:84:84:a9:0a:d9:d9:9b:23:32:aa:7d:e4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Dec 6 22:46:35 2025 GMT Not After : Dec 10 01:05:35 2025 GMT Subject: CN=47D94EF282F184DF6B353034449C072B2C4AB964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a7:f7:d5:1f:09:d6:9a:5d:45:9e:e6:09:de: 45:6d:9e:40:d8:b9:28:05:fb:4e:1c:c0:0c:aa:19: e0:04:84:36:bc:55:73:ea:d0:df:30:d5:c1:91:e0: 89:5e:b1:eb:e0:db:e3:12:fe:ec:13:ea:41:ce:68: da:4c:16:8c:dd:8e:8f:c7:36:04:a5:10:c2:dd:ea: e5:c6:c6:fc:29:9f:92:9f:b2:ee:6c:78:cc:2c:c7: 90:b3:92:0d:33:3b:ef:5f:71:61:bd:de:9e:25:09: f4:d4:55:35:24:ad:9b:69:76:f0:5a:98:19:e5:b7: 00:b4:b8:ab:ca:5f:c5:f1:9a:94:fa:4a:d0:ff:50: da:79:1b:e4:3f:b4:18:2b:45:f0:3e:27:aa:81:b8: 79:f0:b4:d9:48:67:87:e4:3b:f6:15:48:8e:ce:8a: ba:b1:4f:b1:bd:a4:8b:64:ce:fb:a7:f1:a2:fa:fd: 6e:b8:86:31:5d:b9:58:c1:13:f9:8e:01:ac:7c:cd: 6a:d7:0e:28:ad:31:d5:59:44:1a:3e:32:60:89:d0: 3a:55:a4:9f:44:35:91:62:30:80:ad:c2:ad:c7:db: a0:d0:7c:fd:08:ff:f2:6b:a8:cf:ed:a5:46:18:39: 64:e8:36:7e:08:60:9a:36:16:e3:94:7f:89:5f:f3: 8d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D9:4E:F2:82:F1:84:DF:6B:35:30:34:44:9C:07:2B:2C:4A:B9:64 X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b9:58:61:6e:b6:22:f4:16:bc:03:a8:bc:bb:e4:78:d7:98: bb:62:ba:be:42:f7:8a:88:e0:e6:38:d8:55:a5:70:31:af:49: 6e:f5:72:f6:14:f7:db:50:a7:35:ff:5c:a3:ef:9f:ea:e9:68: 2c:81:8c:b0:fc:e0:c7:1d:14:1b:b6:12:3c:2f:e3:5d:14:f1: f7:05:4d:c1:7d:6b:24:e2:cf:b5:fd:5e:5c:ee:50:95:73:24: 9e:99:37:8a:fe:53:a7:0d:38:28:30:28:f8:c7:a4:39:68:b9: 54:4f:30:24:ad:aa:10:c9:d5:0f:cb:60:7a:ee:c7:95:9c:a7: 2f:79:5c:db:65:ce:5f:0a:72:74:39:a2:fd:8e:b9:81:f8:91: 43:0c:0d:ba:9c:f6:85:7e:d6:60:27:4e:f2:69:16:78:df:c2: 8a:ba:1e:9e:c8:ba:d0:a9:c6:62:93:e5:80:ac:c5:34:b7:f2: b7:2d:93:29:ca:5e:b1:a0:ca:cf:c1:8a:60:44:cb:61:6a:79: 46:43:48:40:95:88:ef:37:98:c2:54:a4:2d:43:e2:ca:61:4a: e8:32:77:24:11:d1:8b:ba:9e:7e:05:b7:e0:b4:d6:3e:3b:69: 11:56:29:08:19:87:83:f2:5d:3c:1a:a5:f6:97:e4:0f:9a:85: bb:63:65:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAsl1VIPo/YSEqQrZ2ZsjMqp95MYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTEyMDYyMjQ2MzVaFw0yNTEyMTAwMTA1MzVaMDMxMTAvBgNV BAMTKDQ3RDk0RUYyODJGMTg0REY2QjM1MzAzNDQ0OUMwNzJCMkM0QUI5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDap/fVHwnWml1FnuYJ3kVtnkDY uSgF+04cwAyqGeAEhDa8VXPq0N8w1cGR4Ilesevg2+MS/uwT6kHOaNpMFozdjo/H NgSlEMLd6uXGxvwpn5Kfsu5seMwsx5Czkg0zO+9fcWG93p4lCfTUVTUkrZtpdvBa mBnltwC0uKvKX8XxmpT6StD/UNp5G+Q/tBgrRfA+J6qBuHnwtNlIZ4fkO/YVSI7O irqxT7G9pItkzvun8aL6/W64hjFduVjBE/mOAax8zWrXDiitMdVZRBo+MmCJ0DpV pJ9ENZFiMICtwq3H26DQfP0I//JrqM/tpUYYOWToNn4IYJo2FuOUf4lf841lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9lO8oLxhN9rNTA0RJwHKyxKuWQwHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEG5WGFutiL0FrwDqLy75HjXmLtiur5C94qI 4OY42FWlcDGvSW71cvYU99tQpzX/XKPvn+rpaCyBjLD84McdFBu2Ejwv410U8fcF TcF9ayTiz7X9XlzuUJVzJJ6ZN4r+U6cNOCgwKPjHpDlouVRPMCStqhDJ1Q/LYHru x5Wcpy95XNtlzl8KcnQ5ov2OuYH4kUMMDbqc9oV+1mAnTvJpFnjfwoq6Hp7IutCp xmKT5YCsxTS38rctkynKXrGgys/BimBEy2FqeUZDSECViO83mMJUpC1D4sphSugy dyQR0Yu6nn4Ft+C01j47aRFWKQgZh4PyXTwapfaX5A+ahbtjZRM= -----END CERTIFICATE-----Generated at Sun Dec 7 02:18:44 2025 by rpki-client