This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: AF7PhCkVUif9zZ9SgqeJTk1fDf14QUCeao+CTFLx7GU= Subject key identifier: 01:CF:A9:AC:8E:69:6E:EB:A8:FB:59:AB:67:C8:14:1D:40:AE:B2:2A Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 4BD8AA6E8AF6510255643ED64F56B62D1AF9FEA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: D8 Signing time: Thu 04 Dec 2025 21:21:13 +0000 Manifest this update: Thu 04 Dec 2025 21:16:13 +0000 Manifest next update: Mon 08 Dec 2025 00:59:13 +0000 Files and hashes: 1: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: M1nuy7J7o6jpwylGhIB/n1NA3pkO5wsfGJysAmjDG6I=) 2: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 00:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d8:aa:6e:8a:f6:51:02:55:64:3e:d6:4f:56:b6:2d:1a:f9:fe:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Dec 4 21:16:13 2025 GMT Not After : Dec 8 00:59:13 2025 GMT Subject: CN=01CFA9AC8E696EEBA8FB59AB67C8141D40AEB22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c0:8b:c9:8b:23:15:17:55:3d:05:a7:62:48: 2e:9e:f9:1f:7e:4c:13:dd:a2:dc:35:24:0d:e7:a5: 5e:64:41:21:d2:32:1c:e8:75:1b:ae:74:27:4f:9d: 20:b3:fd:80:e3:ca:89:17:9a:c7:18:71:7d:8a:d6: 65:fd:4c:40:af:df:05:80:c0:94:16:fd:07:d9:49: fe:0c:e8:6f:b4:6c:54:7b:7c:3b:08:37:b6:af:ea: 47:b2:a3:f1:ef:0b:16:79:95:39:2c:72:a1:69:b6: a2:a1:39:91:6f:3a:59:ba:09:32:fd:3e:f3:fe:b2: 67:51:7a:7d:69:fc:ac:62:ae:5e:c1:fa:ec:6d:8e: 88:63:fd:da:75:9b:70:ab:b6:47:0c:18:d2:21:26: bf:db:73:5a:29:66:00:68:c7:ea:fa:0d:48:23:bc: 52:e5:45:5c:a1:06:95:d4:b2:bd:97:5c:46:5c:ea: 30:98:aa:7d:0d:62:1e:9a:27:0a:8c:71:be:98:60: 11:d6:ba:54:4e:eb:94:63:9e:22:72:87:76:e8:b4: 8b:0c:56:ab:95:44:ca:07:6f:97:81:16:3b:f4:a3: a7:95:38:db:ed:4b:41:cb:7b:ed:20:19:8e:45:6b: 2c:19:7c:9f:7b:62:f0:69:dd:dc:90:d8:27:de:22: 14:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CF:A9:AC:8E:69:6E:EB:A8:FB:59:AB:67:C8:14:1D:40:AE:B2:2A X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:a3:c3:aa:37:d2:4e:22:57:a5:ac:da:c0:b5:f1:a9:7b:92: ad:86:f1:70:3f:be:ee:9e:cb:86:32:d3:87:7c:c2:a2:43:b8: 5c:37:d0:c3:fe:6b:8c:21:db:9e:20:5a:3c:bc:b9:19:3c:d8: e2:1e:3b:a9:3e:fb:f9:c5:57:1c:ce:1a:65:5e:af:db:a1:a5: 60:a6:14:fd:e6:32:60:b9:ac:d0:3f:c4:49:99:b8:da:f2:f2: bd:87:ca:30:a5:9c:bf:fa:0b:32:6e:f8:73:84:28:a7:e8:bf: ad:ad:1e:d2:c6:95:e7:36:b3:3d:b3:13:d7:19:d6:74:23:70: aa:25:9e:39:8b:96:b6:9a:8a:c5:48:53:71:92:9e:41:b6:f3: 9f:b6:c4:d1:e6:77:42:d3:97:e2:16:36:1a:01:52:23:25:b0: a2:5f:dd:36:b2:60:40:8e:d2:48:a9:88:66:35:94:47:ee:42: c5:10:93:22:3d:cf:6f:32:ed:f6:df:f4:7b:f6:04:d6:75:ba: 2c:eb:59:86:c4:f9:78:87:2f:db:60:3a:e7:12:e9:bf:6d:af: 8b:79:d4:95:89:14:f2:00:40:50:0c:3b:1c:88:9c:60:52:1c: 32:97:e4:5b:51:50:05:21:9b:2a:d1:80:b4:e4:58:9e:35:44: 41:5d:bb:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9iqbor2UQJVZD7WT1a2LRr5/qQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTEyMDQyMTE2MTNaFw0yNTEyMDgwMDU5MTNaMDMxMTAvBgNV BAMTKDAxQ0ZBOUFDOEU2OTZFRUJBOEZCNTlBQjY3QzgxNDFENDBBRUIyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wIvJiyMVF1U9BadiSC6e+R9+ TBPdotw1JA3npV5kQSHSMhzodRuudCdPnSCz/YDjyokXmscYcX2K1mX9TECv3wWA wJQW/QfZSf4M6G+0bFR7fDsIN7av6keyo/HvCxZ5lTkscqFptqKhOZFvOlm6CTL9 PvP+smdRen1p/Kxirl7B+uxtjohj/dp1m3CrtkcMGNIhJr/bc1opZgBox+r6DUgj vFLlRVyhBpXUsr2XXEZc6jCYqn0NYh6aJwqMcb6YYBHWulRO65RjniJyh3botIsM VquVRMoHb5eBFjv0o6eVONvtS0HLe+0gGY5FaywZfJ97YvBp3dyQ2CfeIhQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAc+prI5pbuuo+1mrZ8gUHUCusiowHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmjw6o30k4iV6Ws2sC18al7kq2G8XA/vu6e y4Yy04d8wqJDuFw30MP+a4wh254gWjy8uRk82OIeO6k++/nFVxzOGmVer9uhpWCm FP3mMmC5rNA/xEmZuNry8r2HyjClnL/6CzJu+HOEKKfov62tHtLGlec2sz2zE9cZ 1nQjcKolnjmLlraaisVIU3GSnkG285+2xNHmd0LTl+IWNhoBUiMlsKJf3TayYECO 0kipiGY1lEfuQsUQkyI9z28y7fbf9Hv2BNZ1uizrWYbE+XiHL9tgOucS6b9tr4t5 1JWJFPIAQFAMOxyInGBSHDKX5FtRUAUhmyrRgLTkWJ41REFdu/U= -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:00 2025 by rpki-client