This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json)
Hash identifier: 5pv1HTKuehInEflt691eZMBnihys5JUD4MBVSQKaOak=
Subject key identifier: 7A:9E:DC:25:3E:39:45:6C:3D:7B:6D:C8:D5:79:89:48:33:19:A6:44
Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Certificate serial: 4E6E44B420AEF2E421F03F8AF17312B720338AA4
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
Manifest number: 0196
Signing time: Sat 06 Dec 2025 20:21:26 +0000
Manifest this update: Sat 06 Dec 2025 20:16:26 +0000
Manifest next update: Wed 10 Dec 2025 07:28:26 +0000
Files and hashes: 1: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=)
2: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=)
3: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=)
4: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=)
5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=)
6: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: lSDu52SaJ1N+hzWHC98sTqPntOnPu0IwFruR9uqXIk4=)
7: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=)
8: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=)
9: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=)
10: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=)
11: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6e:44:b4:20:ae:f2:e4:21:f0:3f:8a:f1:73:12:b7:20:33:8a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959
Validity
Not Before: Dec 6 20:16:26 2025 GMT
Not After : Dec 10 07:28:26 2025 GMT
Subject: CN=7A9EDC253E39456C3D7B6DC8D57989483319A644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:08:88:33:cd:bc:4f:45:f8:2a:8a:7d:58:
b9:9a:66:11:04:6a:8b:9f:d7:e6:c2:87:45:aa:71:
93:6f:c3:be:9e:a6:85:ad:a6:6e:68:9d:d3:dc:39:
31:87:32:bc:15:64:52:48:2d:9e:7d:8f:55:41:72:
1a:60:d2:c7:24:db:46:6e:1a:2a:53:63:a7:45:c1:
0a:8c:92:b3:c7:50:7d:7f:be:33:b8:54:b2:af:2a:
7d:5f:b1:ef:f5:b4:52:09:4a:2b:a7:1f:ea:0c:bb:
2d:6c:7f:01:d3:ae:46:be:26:a1:3a:1b:39:35:80:
66:6e:1d:eb:2e:87:ff:74:e4:49:38:b1:a4:d2:ed:
b0:04:03:3e:16:ea:e3:bb:73:54:88:fd:4e:60:aa:
3e:9e:67:b6:a6:77:67:64:0f:75:de:f2:48:3a:71:
0e:f3:a7:bf:c6:4c:b5:e0:18:56:c7:6b:9c:64:51:
de:9b:2f:2a:c7:9d:5d:e2:3e:ce:de:3c:98:a9:f2:
9c:db:04:63:95:2b:ed:a8:72:d1:f7:c2:4a:02:9e:
eb:29:72:2d:b9:9f:bd:67:33:f6:d5:ea:90:dc:1a:
d1:87:92:05:fa:45:7d:99:80:34:c2:1a:75:aa:0d:
4b:6c:4e:4b:b2:3f:60:29:0e:0a:83:4a:b3:e7:48:
68:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9E:DC:25:3E:39:45:6C:3D:7B:6D:C8:D5:79:89:48:33:19:A6:44
X509v3 Authority Key Identifier:
keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:59:08:17:06:5d:53:cf:49:b8:39:7e:89:91:58:be:9e:c1:
bf:c2:c8:6f:06:c7:fc:3f:0c:b3:64:84:dc:e2:86:21:eb:f2:
e1:24:37:0f:84:81:29:1a:cf:7c:84:e9:f7:68:04:0d:2d:71:
c5:6f:0a:ca:75:e2:af:b0:d6:9e:fe:3a:2d:92:e3:b8:7a:da:
32:67:63:d3:78:bc:80:7c:4e:61:19:21:8d:be:5e:6b:00:e7:
0d:ff:ec:cf:3a:a8:e0:6c:40:be:4d:bd:e2:a2:91:89:c0:00:
9c:e2:e3:1d:d2:06:cb:76:10:20:7c:4f:7a:eb:9b:bb:d6:e3:
7e:10:cf:df:50:50:3d:a9:e8:fe:4b:51:81:b2:c3:e3:3d:d8:
d4:e3:26:5d:4b:8d:0e:37:b8:ae:b6:d7:5e:de:9b:38:54:5b:
bb:9e:d2:c5:62:0b:33:f5:20:63:f5:bd:f2:b3:bc:84:c0:8b:
34:35:b9:69:0e:23:1f:9b:76:25:cb:17:89:2c:12:20:d4:3b:
80:fd:a0:5c:ba:d4:12:b5:42:14:cb:e3:09:a7:b9:3c:af:34:
06:3e:f7:92:4b:97:38:2b:df:91:ec:f1:f4:35:a0:71:c5:09:
ab:fa:f1:29:8c:7f:46:6d:32:fa:0b:2f:c7:fa:6b:bd:cf:65:
56:25:1c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:09:12 2025 by rpki-client