This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: X1+rnVmAgU6oSr92yXXDM5EA+CcUVlJFoUbDvOU2n0Q= Subject key identifier: B5:86:74:18:88:DA:98:BB:2A:3B:74:0C:62:13:C3:C6:6C:32:6B:AF Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 17718A7357CAF386A428F345D4671DF4BABA3760 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 019B Signing time: Thu 18 Dec 2025 11:11:24 +0000 Manifest this update: Thu 18 Dec 2025 11:06:24 +0000 Manifest next update: Sun 21 Dec 2025 17:29:24 +0000 Files and hashes: 1: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 2: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 3: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: +St3wI6QrCbYA1dmQNYjoGJ0x1YbKSTnNc7p2Nib1Xc=) 4: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 5: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 6: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 7: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 8: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 9: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) 10: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 11: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:71:8a:73:57:ca:f3:86:a4:28:f3:45:d4:67:1d:f4:ba:ba:37:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Dec 18 11:06:24 2025 GMT Not After : Dec 21 17:29:24 2025 GMT Subject: CN=B586741888DA98BB2A3B740C6213C3C66C326BAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:5f:3f:3b:4a:42:75:b2:e6:e3:c5:13:b0: 31:ed:fe:c1:f6:7d:1c:50:dc:7d:28:14:5e:86:b9: 3b:a1:9b:23:4a:02:39:22:3f:e0:fb:36:a2:ce:db: f7:1a:c7:5e:7e:88:5f:e6:e9:00:50:a2:ed:d7:56: dd:d5:35:34:bb:fb:0a:db:95:a8:c0:b7:a3:96:b9: 87:20:db:ea:0a:f1:3d:42:ee:cb:03:ba:a4:fd:73: 35:4e:4a:62:e6:b3:26:6b:26:c6:1c:14:ed:8f:c0: 58:b4:12:e0:51:17:f3:07:ee:9d:b9:b3:39:5c:b4: 2d:4a:9e:9c:9e:4e:d1:7d:48:f8:01:f4:56:18:7a: 87:17:59:d9:87:9b:4a:e1:16:79:56:a4:68:cb:11: 27:81:9a:d5:42:95:48:23:8d:8d:54:f3:fe:56:32: 1a:27:a0:d6:3a:d4:16:a3:f2:25:14:cd:e9:5b:2d: c0:e7:a6:86:c8:f2:ef:9f:8a:64:f1:b2:5a:9e:33: 78:fe:fa:0b:86:80:b7:a4:ce:3e:70:38:ea:60:90: 12:41:9d:76:e3:0a:c0:ab:96:b6:77:48:7f:db:c3: 08:ee:73:62:7d:d6:a1:c6:20:d6:59:0e:12:03:2c: 0a:45:b3:df:84:b1:ae:59:c8:87:18:71:d2:b3:c9: d0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:86:74:18:88:DA:98:BB:2A:3B:74:0C:62:13:C3:C6:6C:32:6B:AF X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:cf:86:94:05:4c:9d:b4:da:26:59:8f:5b:8c:b2:17:1d:d1: ca:7d:e8:2a:d1:30:54:df:77:2d:1c:c5:59:7a:3a:1b:4c:0d: 10:f8:e9:a4:3d:50:f2:51:c3:12:d4:42:a0:9c:7c:81:8a:b1: 9f:c7:90:a8:30:61:32:c2:e8:22:df:8d:31:26:70:31:e7:7e: 67:cd:0b:d4:02:88:49:15:25:b6:ff:d1:dd:b7:21:d6:4c:92: 9b:e6:9d:d6:60:88:c1:6a:1b:cf:73:ab:3f:22:b5:a9:43:a2: b4:b7:3c:e3:bc:66:2b:1b:71:e7:cc:32:02:b0:d1:ce:c3:04: 14:22:7f:d6:81:85:4e:de:97:00:1a:cc:4c:57:31:c4:43:03: 2c:e5:77:5a:48:ce:a3:24:ae:8f:f8:ca:0b:e7:c5:9c:05:d0: bd:6a:7b:21:c6:7a:53:32:27:f8:5c:fa:cd:7d:b1:fd:4a:fb: c6:74:af:c4:44:0f:26:b5:4d:6d:10:cf:70:80:99:b6:27:80: 19:ad:ce:ce:56:74:a2:39:48:46:a3:8d:18:f2:4b:fd:89:1c: 90:d4:b6:0e:a3:c0:c7:cf:b6:7d:1d:75:de:46:e8:84:40:1f: 3d:c4:3e:a9:c9:d9:2b:8e:22:f7:00:66:fe:88:c6:62:1d:41: 17:dd:e5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3GKc1fK84akKPNF1Gcd9Lq6N2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTEyMTgxMTA2MjRaFw0yNTEyMjExNzI5MjRaMDMxMTAvBgNV BAMTKEI1ODY3NDE4ODhEQTk4QkIyQTNCNzQwQzYyMTNDM0M2NkMzMjZCQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLU18/O0pCdbLm48UTsDHt/sH2 fRxQ3H0oFF6GuTuhmyNKAjkiP+D7NqLO2/cax15+iF/m6QBQou3XVt3VNTS7+wrb lajAt6OWuYcg2+oK8T1C7ssDuqT9czVOSmLmsyZrJsYcFO2PwFi0EuBRF/MH7p25 szlctC1KnpyeTtF9SPgB9FYYeocXWdmHm0rhFnlWpGjLESeBmtVClUgjjY1U8/5W MhonoNY61Baj8iUUzelbLcDnpobI8u+fimTxslqeM3j++guGgLekzj5wOOpgkBJB nXbjCsCrlrZ3SH/bwwjuc2J91qHGINZZDhIDLApFs9+Esa5ZyIcYcdKzydBLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtYZ0GIjamLsqO3QMYhPDxmwya68wHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjPhpQFTJ202iZZj1uMshcd0cp96CrRMFTf dy0cxVl6OhtMDRD46aQ9UPJRwxLUQqCcfIGKsZ/HkKgwYTLC6CLfjTEmcDHnfmfN C9QCiEkVJbb/0d23IdZMkpvmndZgiMFqG89zqz8italDorS3POO8ZisbcefMMgKw 0c7DBBQif9aBhU7elwAazExXMcRDAyzld1pIzqMkro/4ygvnxZwF0L1qeyHGelMy J/hc+s19sf1K+8Z0r8REDya1TW0Qz3CAmbYngBmtzs5WdKI5SEajjRjyS/2JHJDU tg6jwMfPtn0ddd5G6IRAHz3EPqnJ2SuOIvcAZv6IxmIdQRfd5TA= -----END CERTIFICATE-----Generated at Thu Dec 18 14:17:05 2025 by rpki-client