This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft File: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft (raw, json) Hash identifier: oFx6D4NreErIeosDFArkuxIAq7zXa2q4GBVg6bEBs34= Subject key identifier: DB:C4:F0:23:36:AB:D6:2C:C1:23:DE:A2:69:02:CB:4D:E1:8F:A6:FF Authority key identifier: 0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 Certificate issuer: /CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Certificate serial: 4FF12F946EA256818B1D9C355BFB18D690C23FE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft Manifest number: 020D Signing time: Wed 17 Dec 2025 11:21:38 +0000 Manifest this update: Wed 17 Dec 2025 11:16:38 +0000 Manifest next update: Sat 20 Dec 2025 22:29:38 +0000 Files and hashes: 1: 3130332e31332e3136342e302f32332d3234203d3e2034383030.roa (hash: OqpnIfufFkUk9uEkoqYiBI5WHl9fDVigbax5pOSdLxE=) 2: 0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl (hash: AMPAEU87nu7XLfHhGWI+CRtRIub/HS39kcScV8lrf1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f1:2f:94:6e:a2:56:81:8b:1d:9c:35:5b:fb:18:d6:90:c2:3f:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99 Validity Not Before: Dec 17 11:16:38 2025 GMT Not After : Dec 20 22:29:38 2025 GMT Subject: CN=DBC4F02336ABD62CC123DEA26902CB4DE18FA6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:db:c6:23:18:45:83:b4:93:18:46:ab:1f: 1f:dc:6d:bf:1b:c1:0c:61:32:c0:e1:26:11:37:2e: 3d:43:ef:ab:de:17:fc:7e:4d:7d:c8:59:bc:58:a6: a9:77:bf:8a:04:5f:4f:b4:a6:44:ba:99:d6:16:06: b2:c8:02:e4:a0:10:1c:1d:99:6c:63:77:23:01:86: 9b:c0:21:47:62:a1:e0:32:52:34:76:6a:f8:e1:e0: 5a:a1:7e:05:50:70:ea:c2:fd:bf:74:7c:57:21:e5: 8c:4a:c3:a1:a9:38:0c:0b:48:85:ef:ee:0d:15:b7: 1f:70:69:58:ce:73:ac:41:46:a2:21:3d:d1:e3:55: dc:46:05:2c:6c:6b:5c:c4:d0:25:4f:55:5e:2d:7f: 66:c7:71:40:d9:6f:55:d1:d1:27:38:42:a7:6a:77: ae:24:bf:25:23:df:94:97:f0:db:bb:e2:4c:8e:56: d5:68:1e:0c:28:f1:cb:d8:37:f2:1e:94:e0:93:2a: 38:3a:d5:af:b5:b2:af:b4:a6:ff:f4:2a:51:45:89: 86:5f:81:f1:8a:00:1c:5b:81:ae:cd:af:b1:96:43: da:1b:8c:84:0f:98:1c:4f:23:6f:fe:76:32:d1:fb: cf:68:f7:88:46:b7:b1:d7:82:18:e9:cf:5e:cd:3e: c9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C4:F0:23:36:AB:D6:2C:C1:23:DE:A2:69:02:CB:4D:E1:8F:A6:FF X509v3 Authority Key Identifier: keyid:0A:84:F9:18:C6:DC:C0:E4:A9:89:AE:30:55:3E:8D:7F:B1:3A:CC:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f8d1594-43e9-432d-be82-dc0b9767dcb6/0/0A84F918C6DCC0E4A989AE30553E8D7FB13ACC99.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:e1:8d:9b:f6:3b:aa:d2:14:80:6a:28:63:8c:1d:6e:eb: 31:cc:71:b8:d1:04:70:a5:a8:63:2a:9a:c8:e0:b9:16:8b:6a: a5:85:a1:bf:4c:94:ec:be:20:d3:8c:da:8d:d7:fe:1b:3f:8c: fe:1a:16:67:e9:20:12:d0:5e:38:14:cd:3c:c7:24:98:84:00: af:b3:5c:f4:f8:66:e7:f3:c2:ac:35:bc:d4:28:50:49:88:21: 03:43:66:f2:67:83:42:99:2b:20:28:cd:76:8e:ec:5a:f4:fe: ea:7f:bc:95:70:93:6d:eb:b0:9b:7d:b8:6a:f3:ca:27:65:d8: d6:29:ad:68:ae:f0:da:92:07:ef:bb:36:00:a6:44:6e:ad:5f: a0:e8:54:1e:3c:02:3b:22:43:ba:4a:2a:ca:1a:07:f7:1c:35: 9b:f3:d6:f8:79:e2:51:6c:a6:30:a5:ff:4b:1e:36:43:71:12: da:bd:f3:4c:36:ae:a0:46:07:ec:cb:b0:20:98:78:b2:37:b8: fe:0c:c9:a0:a8:3e:8d:29:d6:34:a4:8a:17:18:b9:cf:47:31: 8d:f2:4c:4a:99:9b:c8:60:35:d2:c7:04:0a:02:61:5d:85:8a: 3d:06:31:56:a9:1b:e4:86:3a:c0:42:b7:7e:47:cd:01:f2:8d: 55:92:b8:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/EvlG6iVoGLHZw1W/sY1pDCP+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZC MTNBQ0M5OTAeFw0yNTEyMTcxMTE2MzhaFw0yNTEyMjAyMjI5MzhaMDMxMTAvBgNV BAMTKERCQzRGMDIzMzZBQkQ2MkNDMTIzREVBMjY5MDJDQjRERTE4RkE2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIztvGIxhFg7STGEarHx/cbb8b wQxhMsDhJhE3Lj1D76veF/x+TX3IWbxYpql3v4oEX0+0pkS6mdYWBrLIAuSgEBwd mWxjdyMBhpvAIUdioeAyUjR2avjh4FqhfgVQcOrC/b90fFch5YxKw6GpOAwLSIXv 7g0Vtx9waVjOc6xBRqIhPdHjVdxGBSxsa1zE0CVPVV4tf2bHcUDZb1XR0Sc4Qqdq d64kvyUj35SX8Nu74kyOVtVoHgwo8cvYN/IelOCTKjg61a+1sq+0pv/0KlFFiYZf gfGKABxbga7Nr7GWQ9objIQPmBxPI2/+djLR+89o94hGt7HXghjpz17NPsnnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU28TwIzar1izBI96iaQLLTeGPpv8wHwYDVR0j BBgwFoAUCoT5GMbcwOSpia4wVT6Nf7E6zJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjhkMTU5NC00M2U5LTQzMmQtYmU4Mi1kYzBiOTc2N2RjYjYvMC8wQTg0RjkxOEM2 RENDMEU0QTk4OUFFMzA1NTNFOEQ3RkIxM0FDQzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThEN0ZCMTNB Q0M5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmY4ZDE1OTQtNDNlOS00MzJkLWJl ODItZGMwYjk3NjdkY2I2LzAvMEE4NEY5MThDNkRDQzBFNEE5ODlBRTMwNTUzRThE N0ZCMTNBQ0M5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2u4Y2b9juq0hSAaihjjB1u6zHMcbjRBHCl qGMqmsjguRaLaqWFob9MlOy+INOM2o3X/hs/jP4aFmfpIBLQXjgUzTzHJJiEAK+z XPT4Zufzwqw1vNQoUEmIIQNDZvJng0KZKyAozXaO7Fr0/up/vJVwk23rsJt9uGrz yidl2NYprWiu8NqSB++7NgCmRG6tX6DoVB48AjsiQ7pKKsoaB/ccNZvz1vh54lFs pjCl/0seNkNxEtq980w2rqBGB+zLsCCYeLI3uP4MyaCoPo0p1jSkihcYuc9HMY3y TEqZm8hgNdLHBAoCYV2Fij0GMVapG+SGOsBCt35HzQHyjVWSuHU= -----END CERTIFICATE-----Generated at Thu Dec 18 17:15:44 2025 by rpki-client