This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft (raw, json) Hash identifier: JJv8EvskA4c0SO9YjK9WIVMtw830GiYZUZyH6romli8= Subject key identifier: 0F:66:AE:3E:82:E0:55:E3:5C:D4:92:9C:92:63:8A:B4:B9:C3:A9:82 Authority key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Certificate issuer: /CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Certificate serial: 1C6036DBDACA6341952C4CE1D15551435A7E2619 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft Manifest number: 0225 Signing time: Fri 05 Dec 2025 11:31:56 +0000 Manifest this update: Fri 05 Dec 2025 11:26:56 +0000 Manifest next update: Mon 08 Dec 2025 11:56:56 +0000 Files and hashes: 1: 3130332e3139312e3231362e302f32332d3234203d3e20313439393239.roa (hash: EzMh3H3LMpcsDj1VtV66jHz9y8osKoSaALLtXZ0KBbY=) 2: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl (hash: rzguPeA1D+EvrMakxoFB5DRP/B7yEqVAgNxJ+0LDKG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:60:36:db:da:ca:63:41:95:2c:4c:e1:d1:55:51:43:5a:7e:26:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Validity Not Before: Dec 5 11:26:56 2025 GMT Not After : Dec 8 11:56:56 2025 GMT Subject: CN=0F66AE3E82E055E35CD4929C92638AB4B9C3A982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:07:6b:6c:38:42:9f:52:c7:43:52:1f:e9:80: 6d:d7:d7:47:6d:f7:c1:35:34:05:34:50:6b:c7:1d: cd:ec:a4:ea:0a:42:07:2f:4c:ce:30:61:4c:24:6e: bb:75:64:a0:14:df:8d:bf:3b:72:21:45:b9:a7:09: 97:02:c7:48:07:77:3b:1a:2a:fe:6a:bf:15:f8:4f: 86:79:1b:9a:52:80:48:63:87:f2:6d:ea:8d:4e:90: d8:e0:26:cf:6f:7b:a3:f9:02:3b:85:4b:c5:32:4d: 2c:08:20:a8:ca:b4:7a:00:04:b2:8e:a7:f5:40:b9: 10:3f:18:0f:3c:d8:a0:d6:ab:cb:8e:7d:91:29:12: 55:b8:a5:33:4e:92:7a:7c:97:8f:93:86:4f:80:12: af:c8:61:01:01:ed:fe:69:97:19:7a:81:02:ef:3d: 71:b9:60:88:71:76:e4:f4:1f:80:e7:3c:9a:e2:73: a7:ec:4a:3a:e8:78:1a:ba:96:fd:fb:cf:87:42:52: d5:b4:b8:ee:b3:ee:03:b7:39:ab:ad:aa:83:82:23: f2:ef:04:30:b4:cc:44:d7:15:01:83:fd:37:f8:59: cb:53:db:10:61:d4:f8:73:7c:79:d2:fc:46:2e:00: 06:1b:76:66:5d:01:0a:5c:52:8f:44:b6:d1:5a:45: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:66:AE:3E:82:E0:55:E3:5C:D4:92:9C:92:63:8A:B4:B9:C3:A9:82 X509v3 Authority Key Identifier: keyid:A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3d:4f:04:4b:83:dd:25:32:f3:27:6d:02:83:c7:c4:e9:83: 90:bd:f0:4f:19:f3:67:6b:9c:72:82:f6:e4:60:8f:e8:a5:4f: 7a:c4:cd:27:35:7e:c3:46:3b:b4:78:3f:77:eb:0e:18:72:3e: e8:fe:c0:49:0d:61:94:73:ba:d2:45:80:cd:c9:f8:56:20:37: 32:c9:38:a5:8a:cd:cd:2e:0a:b2:a4:2a:c5:e7:b2:78:31:ab: b3:3f:62:0c:54:40:d0:69:1c:e0:3d:c3:52:ac:0f:da:3e:f0: 7c:6e:cd:a5:35:49:16:a7:79:d7:78:9e:d9:a0:c6:03:64:40: 73:c9:e5:d2:cc:c8:93:b8:59:56:ec:31:a7:f6:76:d3:5e:5e: f4:33:c6:01:18:c7:80:07:96:6c:c5:05:23:70:66:81:c9:7d: 5a:19:30:94:57:90:bf:52:81:95:39:11:dd:24:7d:94:aa:c9: 3d:7b:1d:ec:ca:de:21:44:53:78:7b:4c:9e:a6:81:ad:c7:26: 4d:28:f5:c9:52:a8:33:dc:fa:7b:b0:de:c0:c1:68:fc:db:e9: 78:1c:e1:16:55:bc:ae:9b:0d:09:95:fb:76:77:42:fc:81:37: 75:42:ef:ab:fa:92:d9:10:05:09:68:8b:1a:03:ac:9c:95:25: 0d:48:4a:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHGA229rKY0GVLEzh0VVRQ1p+JhkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcx MUUzRTdGQTAeFw0yNTEyMDUxMTI2NTZaFw0yNTEyMDgxMTU2NTZaMDMxMTAvBgNV BAMTKDBGNjZBRTNFODJFMDU1RTM1Q0Q0OTI5QzkyNjM4QUI0QjlDM0E5ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOB2tsOEKfUsdDUh/pgG3X10dt 98E1NAU0UGvHHc3spOoKQgcvTM4wYUwkbrt1ZKAU342/O3IhRbmnCZcCx0gHdzsa Kv5qvxX4T4Z5G5pSgEhjh/Jt6o1OkNjgJs9ve6P5AjuFS8UyTSwIIKjKtHoABLKO p/VAuRA/GA882KDWq8uOfZEpElW4pTNOknp8l4+Thk+AEq/IYQEB7f5plxl6gQLv PXG5YIhxduT0H4DnPJric6fsSjroeBq6lv37z4dCUtW0uO6z7gO3OautqoOCI/Lv BDC0zETXFQGD/Tf4WctT2xBh1PhzfHnS/EYuAAYbdmZdAQpcUo9EttFaRUydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2auPoLgVeNc1JKckmOKtLnDqYIwHwYDVR0j BBgwFoAUqBBMqaoxRZ4Yu3pZeFfdpxHj5/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMC9BODEwNENBOUFB MzE0NTlFMThCQjdBNTk3ODU3RERBNzExRTNFN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0REQTcxMUUz RTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU0Nzg0N2MtYmMyYy00MGRhLWIy YWEtOTE1OTUxNDI4YWFkLzAvQTgxMDRDQTlBQTMxNDU5RTE4QkI3QTU5Nzg1N0RE QTcxMUUzRTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHc9TwRLg90lMvMnbQKDx8Tpg5C98E8Z82dr nHKC9uRgj+ilT3rEzSc1fsNGO7R4P3frDhhyPuj+wEkNYZRzutJFgM3J+FYgNzLJ OKWKzc0uCrKkKsXnsngxq7M/YgxUQNBpHOA9w1KsD9o+8HxuzaU1SRanedd4ntmg xgNkQHPJ5dLMyJO4WVbsMaf2dtNeXvQzxgEYx4AHlmzFBSNwZoHJfVoZMJRXkL9S gZU5Ed0kfZSqyT17HezK3iFEU3h7TJ6mga3HJk0o9clSqDPc+nuw3sDBaPzb6Xgc 4RZVvK6bDQmV+3Z3QvyBN3VC76v6ktkQBQloixoDrJyVJQ1ISg0= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:38 2025 by rpki-client