This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft File: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft (raw, json) Hash identifier: NvAfRUhps63V9cBA+ISG/KfCGHqlM30DhPLxEMm4vMY= Subject key identifier: CE:5B:49:56:28:80:5B:BF:7C:5D:FE:E3:5C:48:8E:7A:B0:2B:06:46 Authority key identifier: 0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF Certificate issuer: /CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Certificate serial: 4012E8C74CA6A699B53181C4F1CBF59CD378C267 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft Manifest number: 29 Signing time: Thu 04 Dec 2025 20:31:07 +0000 Manifest this update: Thu 04 Dec 2025 20:26:07 +0000 Manifest next update: Mon 08 Dec 2025 07:55:07 +0000 Files and hashes: 1: 0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl (hash: 8Ur0oDpUU3t3q687z8rKhnKaRIfSlinjZmb9WaCN7O8=) 2: 3136302e3139312e3233342e302f32342d3234203d3e20313533343932.roa (hash: UIZ03usfq2XFdSk/q+e6qEltdDYNXrFthkIDpbSov1g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:12:e8:c7:4c:a6:a6:99:b5:31:81:c4:f1:cb:f5:9c:d3:78:c2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF Validity Not Before: Dec 4 20:26:07 2025 GMT Not After : Dec 8 07:55:07 2025 GMT Subject: CN=CE5B495628805BBF7C5DFEE35C488E7AB02B0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:ea:f0:2f:49:29:ad:e7:65:c7:7f:52:cd: 15:61:28:6b:02:71:c6:d2:48:f4:32:63:81:9e:bf: 9a:22:f6:b1:0b:aa:f2:8e:3b:c5:ad:d3:3a:69:e0: 17:8a:2c:71:ad:c3:e0:28:42:3c:7e:87:27:f4:c8: 86:26:a6:4a:b0:1e:4d:44:e7:0f:df:89:ce:36:73: 5e:0a:56:01:bd:2f:36:a4:99:a6:c0:e6:3c:df:b4: e8:0e:13:82:a6:21:7e:34:0e:e1:ec:c7:2d:c0:7c: bd:be:b8:94:1c:24:ad:7c:84:1a:3a:63:3e:04:f1: cc:23:4b:17:cc:ee:94:6a:5d:07:e4:f8:94:15:fd: d2:8f:15:bb:e2:bb:91:55:cb:0a:1c:72:db:d1:b3: e8:d3:72:44:e2:59:f2:e3:b8:92:f5:e7:0e:59:2c: b4:1b:6e:12:c5:c7:e2:01:ac:9e:e6:ba:0f:f1:e3: c6:9e:7b:87:f4:f3:b8:3e:c9:d5:9a:1f:ba:d7:11: d1:c8:54:b1:0d:f1:1b:3d:fc:6b:7f:06:0a:ac:f9: a3:f0:95:21:6a:ab:71:f5:04:b1:3a:40:7e:ea:91: 4a:b3:15:cc:17:e7:68:9b:9c:3a:0b:ac:ad:a2:6b: 18:8e:6b:ca:f2:08:b2:3e:00:37:86:64:12:fd:0c: 86:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:49:56:28:80:5B:BF:7C:5D:FE:E3:5C:48:8E:7A:B0:2B:06:46 X509v3 Authority Key Identifier: keyid:0A:8C:0B:B4:5F:84:12:F7:F2:DC:2F:44:2F:5F:CE:B7:92:A2:DB:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9bcc62ae-20c8-4974-aae9-b108df8e2f59/0/0A8C0BB45F8412F7F2DC2F442F5FCEB792A2DBFF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:87:95:a4:56:52:c1:ef:6e:9c:cc:96:42:e1:a6:06:57:a0: 4f:dc:04:27:01:14:9e:d3:4b:6d:bc:1f:4c:cc:5d:85:72:87: 21:e8:79:61:4d:47:ff:64:83:d1:02:c1:49:d9:c6:73:d7:80: 95:a1:1a:33:50:b2:7c:d6:3b:a4:ef:77:aa:a0:e7:4f:e2:69: 35:db:b0:75:35:34:2f:2c:fc:77:65:55:54:cd:05:24:9a:4e: 11:79:21:d5:13:d7:cd:2a:41:af:bb:f7:ac:4a:61:dd:0a:f3: b8:3b:ac:0d:0f:96:b8:12:f0:bb:f6:c7:2e:54:57:fa:2e:ae: e5:87:50:96:e4:58:02:bd:7f:53:37:8c:6e:52:90:70:9c:2b: 6c:59:46:fa:58:8a:9b:39:1d:34:29:10:5c:fd:d8:a3:ec:b6: 5e:25:5c:f5:ed:b6:60:cc:09:33:33:e0:d7:bd:1d:26:41:bf: 00:4e:d6:dd:38:7b:9a:66:61:35:db:6e:73:1c:dc:41:c3:1c: e1:59:b2:5e:55:f7:19:03:be:b7:3f:27:fc:52:34:91:2f:7f: e3:b2:d3:19:fb:cd:f8:12:18:3b:c1:5b:4e:be:ba:81:60:09: 39:c8:be:1d:7e:ab:a3:a1:18:bc:c1:3e:ee:fe:b5:22:f5:78: ae:d0:62:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBLox0ymppm1MYHE8cv1nNN4wmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5 MkEyREJGRjAeFw0yNTEyMDQyMDI2MDdaFw0yNTEyMDgwNzU1MDdaMDMxMTAvBgNV BAMTKENFNUI0OTU2Mjg4MDVCQkY3QzVERkVFMzVDNDg4RTdBQjAyQjA2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvurwL0kpredlx39SzRVhKGsC ccbSSPQyY4Gev5oi9rELqvKOO8Wt0zpp4BeKLHGtw+AoQjx+hyf0yIYmpkqwHk1E 5w/fic42c14KVgG9LzakmabA5jzftOgOE4KmIX40DuHsxy3AfL2+uJQcJK18hBo6 Yz4E8cwjSxfM7pRqXQfk+JQV/dKPFbviu5FVywocctvRs+jTckTiWfLjuJL15w5Z LLQbbhLFx+IBrJ7mug/x48aee4f087g+ydWaH7rXEdHIVLEN8Rs9/Gt/Bgqs+aPw lSFqq3H1BLE6QH7qkUqzFcwX52ibnDoLrK2iaxiOa8ryCLI+ADeGZBL9DIbvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzltJViiAW798Xf7jXEiOerArBkYwHwYDVR0j BBgwFoAUCowLtF+EEvfy3C9EL1/Ot5Ki2/8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YmNjNjJhZS0yMGM4LTQ5NzQtYWFlOS1iMTA4ZGY4ZTJmNTkvMC8wQThDMEJCNDVG ODQxMkY3RjJEQzJGNDQyRjVGQ0VCNzkyQTJEQkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNFQjc5MkEy REJGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWJjYzYyYWUtMjBjOC00OTc0LWFh ZTktYjEwOGRmOGUyZjU5LzAvMEE4QzBCQjQ1Rjg0MTJGN0YyREMyRjQ0MkY1RkNF Qjc5MkEyREJGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmHlaRWUsHvbpzMlkLhpgZXoE/cBCcBFJ7T S228H0zMXYVyhyHoeWFNR/9kg9ECwUnZxnPXgJWhGjNQsnzWO6Tvd6qg50/iaTXb sHU1NC8s/HdlVVTNBSSaThF5IdUT180qQa+796xKYd0K87g7rA0PlrgS8Lv2xy5U V/ouruWHUJbkWAK9f1M3jG5SkHCcK2xZRvpYips5HTQpEFz92KPstl4lXPXttmDM CTMz4Ne9HSZBvwBO1t04e5pmYTXbbnMc3EHDHOFZsl5V9xkDvrc/J/xSNJEvf+Oy 0xn7zfgSGDvBW06+uoFgCTnIvh1+q6OhGLzBPu7+tSL1eK7QYg8= -----END CERTIFICATE-----Generated at Sat Dec 6 20:20:38 2025 by rpki-client