This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft File: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft (raw, json) Hash identifier: Tunz5X0kIup9Q9CUkf7vAWYMbFhxiiK5kD6JYB9jISE= Subject key identifier: B8:94:7D:16:16:BE:D4:A9:FD:C0:EE:D1:17:33:B4:5D:ED:45:4C:67 Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E Certificate issuer: /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Certificate serial: 3C6435835D983C789C5431EAAFAE056307B786D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft Manifest number: 0532 Signing time: Thu 18 Dec 2025 07:30:50 +0000 Manifest this update: Thu 18 Dec 2025 07:25:50 +0000 Manifest next update: Sun 21 Dec 2025 08:58:50 +0000 Files and hashes: 1: 323030313a6466303a3232393a3a2f34382d3438203d3e20313331373738.roa (hash: Kw/2sJDovbqcLamhNn36qpz8RozjhJRdtUEEKJ4rTNg=) 2: 3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (hash: /0ivdWgJqnJaSVnUB+9OuvpQlcxcSIK1E90K9ZECaAA=) 3: 0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl (hash: h6bOzToCTHCmLTiwqKN4TbEwIgh31Pm0IjyEn961fao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:64:35:83:5d:98:3c:78:9c:54:31:ea:af:ae:05:63:07:b7:86:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E Validity Not Before: Dec 18 07:25:50 2025 GMT Not After : Dec 21 08:58:50 2025 GMT Subject: CN=B8947D1616BED4A9FDC0EED11733B45DED454C67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:3d:7f:1e:48:f1:d2:3b:97:6b:c4:02:3c: 3e:3e:24:f9:9a:ff:e7:e3:23:95:db:a4:a3:54:3c: f6:0a:24:c5:65:ae:50:0c:85:a9:e4:46:00:ec:71: e5:88:72:ae:47:2e:de:1e:ce:7b:f0:c3:e7:f9:c0: c1:d7:a6:95:90:03:b2:fc:2e:51:99:ad:0b:09:f8: 2c:28:d6:6d:dc:45:25:62:ba:6d:29:f6:47:bd:6c: 99:8f:d6:20:2c:54:e4:5c:cf:21:b9:e5:8f:07:cb: b9:3a:a0:ff:f6:0c:ad:1c:11:dd:35:76:7f:60:ff: 42:31:13:5e:c7:96:4e:45:d0:37:19:fc:fd:6b:75: 4d:59:e4:12:27:6a:c9:42:25:32:93:48:9a:6e:81: 3b:ff:9f:94:ae:5a:a6:f2:4f:3a:c9:d4:b5:6f:bf: 18:f4:d5:6d:e7:80:01:ed:72:22:de:9e:45:c8:19: 74:9e:4c:e6:39:a1:1e:77:a7:af:7f:67:4e:84:c4: ad:a4:c8:32:13:95:c8:00:61:5d:2f:d9:e8:50:53: 8c:50:c2:67:36:27:3d:dc:f0:49:31:af:35:8e:c3: 9c:6b:f0:3a:1e:13:bc:48:cf:26:ad:a9:31:6f:5b: ba:d2:b6:18:b1:87:6a:e6:5a:ca:39:8e:35:76:81: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:7D:16:16:BE:D4:A9:FD:C0:EE:D1:17:33:B4:5D:ED:45:4C:67 X509v3 Authority Key Identifier: keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c8:38:b6:63:b1:4f:ee:d7:1a:39:f6:d7:d0:46:0b:79:65: 07:fb:aa:8e:37:2d:86:e0:24:94:d8:14:a2:32:53:ce:06:6a: e1:aa:ca:da:96:21:52:98:4e:66:86:47:98:61:a0:29:6c:15: 06:5f:67:43:ca:e6:26:61:21:73:f8:fd:fb:4d:69:78:0d:4a: 7d:ea:8d:46:bc:ec:33:38:cb:bd:72:e2:71:99:94:f6:2d:ae: 6b:c5:b6:9c:19:1b:92:91:46:aa:6b:44:00:ce:80:12:12:0a: e2:64:17:61:19:17:68:9c:bd:9c:32:5d:6b:81:68:1d:bb:af: 02:a1:db:9d:7b:75:dc:39:74:0f:49:d3:bb:3b:01:e9:3c:0f: e7:b0:2f:7a:1e:b9:73:8d:d4:49:9f:f3:78:f3:15:71:e1:7f: 4f:b8:26:f6:60:2b:40:8d:0c:22:4a:75:5e:5e:26:48:11:5a: eb:56:b0:af:ae:a5:82:8b:72:9d:24:ba:46:3b:e2:18:db:2b: 34:2f:94:5e:45:b8:27:4d:97:d0:77:1d:1e:cd:0b:a7:12:87: cf:d0:a1:7d:51:16:1f:99:3e:c7:85:53:4b:29:21:2c:72:2a: a3:53:b8:c5:3a:41:69:87:fa:1f:0e:22:04:ae:28:99:53:59: ee:9e:fb:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGQ1g12YPHicVDHqr64FYwe3htgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2 QUI1Njk1RTAeFw0yNTEyMTgwNzI1NTBaFw0yNTEyMjEwODU4NTBaMDMxMTAvBgNV BAMTKEI4OTQ3RDE2MTZCRUQ0QTlGREMwRUVEMTE3MzNCNDVERUQ0NTRDNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WD1/Hkjx0juXa8QCPD4+JPma /+fjI5XbpKNUPPYKJMVlrlAMhankRgDsceWIcq5HLt4eznvww+f5wMHXppWQA7L8 LlGZrQsJ+Cwo1m3cRSVium0p9ke9bJmP1iAsVORczyG55Y8Hy7k6oP/2DK0cEd01 dn9g/0IxE17Hlk5F0DcZ/P1rdU1Z5BInaslCJTKTSJpugTv/n5SuWqbyTzrJ1LVv vxj01W3ngAHtciLenkXIGXSeTOY5oR53p69/Z06ExK2kyDITlcgAYV0v2ehQU4xQ wmc2Jz3c8EkxrzWOw5xr8DoeE7xIzyatqTFvW7rSthixh2rmWso5jjV2geuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJR9Fha+1Kn9wO7RFzO0Xe1FTGcwHwYDVR0j BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1 Njk1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJhZTU4YWMtNTkxNy00MDY5LTlh NmMtODNkYzFiYTMyMTI2LzAvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBB MEM2QUI1Njk1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7IOLZjsU/u1xo59tfQRgt5ZQf7qo43LYbg JJTYFKIyU84GauGqytqWIVKYTmaGR5hhoClsFQZfZ0PK5iZhIXP4/ftNaXgNSn3q jUa87DM4y71y4nGZlPYtrmvFtpwZG5KRRqprRADOgBISCuJkF2EZF2icvZwyXWuB aB27rwKh2517ddw5dA9J07s7Aek8D+ewL3oeuXON1Emf83jzFXHhf0+4JvZgK0CN DCJKdV5eJkgRWutWsK+upYKLcp0kukY74hjbKzQvlF5FuCdNl9B3HR7NC6cSh8/Q oX1RFh+ZPseFU0spISxyKqNTuMU6QWmH+h8OIgSuKJlTWe6e+00= -----END CERTIFICATE-----Generated at Fri Dec 19 03:05:41 2025 by rpki-client