This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: dP/AOy/j7qMngh8epVRsJLd/6T7kA2lw+49sh3tpp0Q= Subject key identifier: BE:EA:7F:5E:FB:C2:E1:A9:75:6B:0E:53:75:FA:2E:AB:5F:D3:99:F2 Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 18B02CBA1D0522DD60E3202A639754548E8D7CD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0534 Signing time: Sat 06 Dec 2025 21:51:22 +0000 Manifest this update: Sat 06 Dec 2025 21:46:22 +0000 Manifest next update: Wed 10 Dec 2025 06:47:22 +0000 Files and hashes: 1: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 2: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: 5zUOnd57E30cuGrHsIWAC3U7ZHodNfSJJjP4eGIBcUg=) 3: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 4: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 5: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=) 6: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 7: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b0:2c:ba:1d:05:22:dd:60:e3:20:2a:63:97:54:54:8e:8d:7c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Dec 6 21:46:22 2025 GMT Not After : Dec 10 06:47:22 2025 GMT Subject: CN=BEEA7F5EFBC2E1A9756B0E5375FA2EAB5FD399F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ae:9d:80:df:dd:3b:04:62:07:3a:91:19:b7: c6:98:07:d2:45:11:05:be:d4:72:36:9c:53:18:3a: e6:f3:eb:71:3b:9d:b4:c8:bb:c1:a4:c5:7e:d3:cc: 33:6b:b8:ae:b8:10:05:67:f7:67:67:96:72:91:eb: 70:76:cb:17:cd:e8:f9:53:a9:8c:83:24:6c:73:71: 85:5f:af:4d:39:7e:30:c4:12:6e:8a:e5:aa:90:1c: 20:c3:ce:f3:99:a8:45:ae:b1:81:a2:7f:07:4f:f0: 49:90:a8:04:d9:b4:03:d4:0a:4f:1f:07:c5:0e:70: c6:d4:35:2f:29:18:4d:62:61:09:7c:00:af:bb:28: 30:df:56:da:56:b9:a9:21:a8:1c:d7:70:43:ca:4b: bb:62:e4:d1:d7:97:13:fb:10:3c:dc:08:d2:44:d4: f5:0d:b3:70:cd:3e:b0:45:0b:c8:9c:ef:a4:59:40: 8f:76:0b:c0:91:f3:36:c9:4b:cc:02:b0:93:96:28: e2:f3:51:da:b8:76:f0:1a:e0:70:42:58:5a:b2:24: e6:9d:91:a3:88:46:f2:b0:9d:c4:ce:e2:35:af:a7: 33:3f:62:14:c5:41:ba:95:ce:00:86:eb:0f:85:4d: 62:6c:c3:1e:5e:2b:3a:63:26:1a:12:be:eb:34:53: 3f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:EA:7F:5E:FB:C2:E1:A9:75:6B:0E:53:75:FA:2E:AB:5F:D3:99:F2 X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e2:cc:67:6d:dc:70:5f:35:ce:57:dd:3e:ff:96:8d:16:23: bc:60:84:37:dc:9b:c9:63:4c:c7:f2:1d:9a:37:a5:36:c2:1f: b1:21:cf:65:e8:2c:e0:35:ac:a8:9e:63:bf:4d:8d:07:bc:3f: 4e:d0:15:cb:08:11:c7:5f:83:d7:4f:37:c5:47:a6:0a:a8:83: 80:f8:62:97:b9:0f:7e:a0:58:84:9a:f2:e1:af:17:f8:81:69: fd:41:1f:87:89:8f:ba:45:bd:de:48:9a:f3:b3:3f:41:7f:69: 07:1f:c4:6e:0e:22:c9:9c:f7:6b:26:8e:44:a2:fc:a9:11:80: 68:c7:bb:5d:70:31:00:35:66:6e:b6:bc:59:1f:5a:20:6c:e0: 7c:b8:4a:94:ff:64:b3:27:57:f9:50:04:dc:08:f1:e1:32:a2: de:ac:25:b6:bf:c5:bd:35:10:32:43:7f:5d:80:70:4f:c8:28: 39:5f:cf:07:4e:ad:e7:d8:b9:2d:c0:f1:32:68:e7:bd:61:3c: a9:0c:c8:a6:c6:34:22:26:e5:90:f7:3c:0a:7b:20:7d:30:f6: ed:38:cf:3e:a5:f7:70:7f:d5:13:07:71:24:a7:d2:83:cf:75: a6:4c:cd:33:6f:63:0f:15:6f:b4:ba:44:ee:ad:39:d9:c4:d0: b3:96:b9:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLAsuh0FIt1g4yAqY5dUVI6NfNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTEyMDYyMTQ2MjJaFw0yNTEyMTAwNjQ3MjJaMDMxMTAvBgNV BAMTKEJFRUE3RjVFRkJDMkUxQTk3NTZCMEU1Mzc1RkEyRUFCNUZEMzk5RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rp2A3907BGIHOpEZt8aYB9JF EQW+1HI2nFMYOubz63E7nbTIu8GkxX7TzDNruK64EAVn92dnlnKR63B2yxfN6PlT qYyDJGxzcYVfr005fjDEEm6K5aqQHCDDzvOZqEWusYGifwdP8EmQqATZtAPUCk8f B8UOcMbUNS8pGE1iYQl8AK+7KDDfVtpWuakhqBzXcEPKS7ti5NHXlxP7EDzcCNJE 1PUNs3DNPrBFC8ic76RZQI92C8CR8zbJS8wCsJOWKOLzUdq4dvAa4HBCWFqyJOad kaOIRvKwncTO4jWvpzM/YhTFQbqVzgCG6w+FTWJswx5eKzpjJhoSvus0Uz+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvup/XvvC4al1aw5Tdfouq1/TmfIwHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnizGdt3HBfNc5X3T7/lo0WI7xghDfcm8lj TMfyHZo3pTbCH7Ehz2XoLOA1rKieY79NjQe8P07QFcsIEcdfg9dPN8VHpgqog4D4 Ype5D36gWISa8uGvF/iBaf1BH4eJj7pFvd5ImvOzP0F/aQcfxG4OIsmc92smjkSi /KkRgGjHu11wMQA1Zm62vFkfWiBs4Hy4SpT/ZLMnV/lQBNwI8eEyot6sJba/xb01 EDJDf12AcE/IKDlfzwdOrefYuS3A8TJo571hPKkMyKbGNCIm5ZD3PAp7IH0w9u04 zz6l93B/1RMHcSSn0oPPdaZMzTNvYw8Vb7S6RO6tOdnE0LOWuWg= -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:15 2025 by rpki-client