This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft (raw, json) Hash identifier: W+OpFhATrjy7wd6W5qkBoD2RQZXdNhU2jIuELrxVm+c= Subject key identifier: 9D:33:66:41:FE:75:09:79:36:25:7D:6F:C1:9B:C0:6F:C7:25:F3:74 Authority key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Certificate issuer: /CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Certificate serial: 29D016CCFA455D8F6346BD1CF593E9736F19C36F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft Manifest number: 0534 Signing time: Fri 19 Dec 2025 11:32:03 +0000 Manifest this update: Fri 19 Dec 2025 11:27:03 +0000 Manifest next update: Mon 22 Dec 2025 13:48:03 +0000 Files and hashes: 1: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl (hash: PaaS7v1MRvHtfTEzeYnOI0S1aAkkD3UzTZL/kQZWF4M=) 2: 3130332e3133392e34372e302f32342d3234203d3e203137393935.roa (hash: hRDdGequ+GhEEqBrX8O9Zq6WRslymD5ehiejKAFbvr0=) 3: 3130332e3133392e34362e302f32342d3234203d3e203137393935.roa (hash: hthNpAwJxjCDLni6mv2Gc1l+BPz0lcv9dxQLklW+A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 13:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d0:16:cc:fa:45:5d:8f:63:46:bd:1c:f5:93:e9:73:6f:19:c3:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Validity Not Before: Dec 19 11:27:03 2025 GMT Not After : Dec 22 13:48:03 2025 GMT Subject: CN=9D336641FE75097936257D6FC19BC06FC725F374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:08:91:d2:80:06:ed:a5:24:bc:97:13:47:25: 86:2d:3f:17:49:79:ff:01:81:f5:ba:02:2c:17:f1: 94:ea:0b:7a:47:0e:66:74:5f:b7:70:ac:61:dd:f8: 50:50:21:d7:f1:54:2d:23:42:f8:83:a1:7e:ab:8a: 9b:c3:bd:28:3e:ff:b7:9e:39:61:b1:1e:9b:cd:65: 91:4c:2d:33:ce:03:86:ad:42:1b:c4:5b:c0:73:cd: 1c:fd:c7:8c:9b:4c:13:37:99:e8:34:8c:77:80:0f: ae:51:44:ca:40:e4:eb:37:86:f2:24:39:01:6c:dc: 64:32:4c:fe:fb:ee:10:98:1d:e2:9d:b5:c4:30:dd: 93:21:44:65:a5:e3:8b:cc:da:56:49:64:15:61:08: 4a:6f:ae:52:3c:83:e2:4e:48:07:bc:ad:0e:d8:7e: 9c:d0:9d:18:8b:c1:24:a9:69:4f:f3:02:a0:81:7e: e2:4f:e9:59:72:68:ed:3d:ae:aa:8b:78:f5:68:ef: e9:cc:fc:07:8e:3e:a6:ea:0d:2a:a4:b9:ff:b7:80: 29:00:51:a9:a6:bb:0d:43:5c:79:90:45:44:db:d7: 07:1f:55:23:e7:f1:1d:ce:51:bc:02:ae:78:84:e0: ff:c3:fc:a0:be:ce:1a:ca:f5:e0:49:55:06:4c:65: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:33:66:41:FE:75:09:79:36:25:7D:6F:C1:9B:C0:6F:C7:25:F3:74 X509v3 Authority Key Identifier: keyid:8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c9:af:31:f2:f8:16:69:78:1a:6e:b5:09:cb:4f:c1:41:99: cd:c2:ce:aa:cb:5d:19:60:fe:cf:0d:be:04:04:61:f7:f1:e8: 2f:a9:4f:58:86:f5:49:b7:7c:ea:ad:a4:d0:79:b3:c3:a7:bb: 1c:50:58:ef:45:fb:df:cc:0e:ab:2a:94:53:ca:27:9e:75:6a: 02:a6:59:99:43:52:e1:a7:7a:61:25:dd:fb:09:0b:da:90:38: e8:87:cf:e4:39:00:6a:4b:0a:ad:5d:69:8d:d4:3c:eb:24:dc: 94:a1:9f:b6:e8:73:49:46:21:ad:50:a6:f7:4d:97:0b:ac:3c: 50:43:76:90:e7:8c:43:4b:31:79:fa:03:4a:47:29:25:f8:b8: 9d:bb:26:4a:55:bb:3d:19:02:c3:f3:0c:02:f3:5d:95:fd:1c: 01:c1:6a:6f:e1:b5:e2:60:91:c3:f1:04:25:44:24:21:7c:63: ed:63:93:22:f6:c7:01:12:70:56:82:96:da:5a:88:6f:39:09: ad:f2:80:c8:72:b1:7f:72:b3:99:f5:14:5f:dd:3e:d6:ca:65: 3f:b1:38:71:7a:6a:65:a0:a1:65:58:5c:70:ab:74:6c:e6:cf: bc:a7:c2:d5:7d:bd:8d:0f:d7:ca:ea:e5:26:fe:b7:da:c6:60: 35:2b:d8:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKdAWzPpFXY9jRr0c9ZPpc28Zw28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFB MEE3Mjc5OTAeFw0yNTEyMTkxMTI3MDNaFw0yNTEyMjIxMzQ4MDNaMDMxMTAvBgNV BAMTKDlEMzM2NjQxRkU3NTA5NzkzNjI1N0Q2RkMxOUJDMDZGQzcyNUYzNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDACJHSgAbtpSS8lxNHJYYtPxdJ ef8BgfW6AiwX8ZTqC3pHDmZ0X7dwrGHd+FBQIdfxVC0jQviDoX6ripvDvSg+/7ee OWGxHpvNZZFMLTPOA4atQhvEW8BzzRz9x4ybTBM3meg0jHeAD65RRMpA5Os3hvIk OQFs3GQyTP777hCYHeKdtcQw3ZMhRGWl44vM2lZJZBVhCEpvrlI8g+JOSAe8rQ7Y fpzQnRiLwSSpaU/zAqCBfuJP6VlyaO09rqqLePVo7+nM/AeOPqbqDSqkuf+3gCkA Uammuw1DXHmQRUTb1wcfVSPn8R3OUbwCrniE4P/D/KC+zhrK9eBJVQZMZT7VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnTNmQf51CXk2JX1vwZvAb8cl83QwHwYDVR0j BBgwFoAUigXr9YvsltlG7oXw8PhXAaCnJ5kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMC84QTA1RUJGNThC RUM5NkQ5NDZFRTg1RjBGMEY4NTcwMUEwQTcyNzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3MDFBMEE3 Mjc5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTIzMDczOTAtNmVmMy00NDc2LWE2 YWEtZDBjNTc4M2UxZjM3LzAvOEEwNUVCRjU4QkVDOTZEOTQ2RUU4NUYwRjBGODU3 MDFBMEE3Mjc5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbJrzHy+BZpeBputQnLT8FBmc3CzqrLXRlg /s8NvgQEYffx6C+pT1iG9Um3fOqtpNB5s8OnuxxQWO9F+9/MDqsqlFPKJ551agKm WZlDUuGnemEl3fsJC9qQOOiHz+Q5AGpLCq1daY3UPOsk3JShn7boc0lGIa1QpvdN lwusPFBDdpDnjENLMXn6A0pHKSX4uJ27JkpVuz0ZAsPzDALzXZX9HAHBam/hteJg kcPxBCVEJCF8Y+1jkyL2xwEScFaCltpaiG85Ca3ygMhysX9ys5n1FF/dPtbKZT+x OHF6amWgoWVYXHCrdGzmz7ynwtV9vY0P18rq5Sb+t9rGYDUr2KQ= -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:36 2025 by rpki-client