This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft File: 08A94FD7F0E8A287AD318D7A26254192431E175F.mft (raw, json) Hash identifier: GIGw/GN8OZc14JASaxkB5qE9kHIUc94vCuM7raeXoNw= Subject key identifier: BE:5D:FD:70:AB:F2:45:B1:17:09:F3:EE:03:E4:35:40:84:61:A8:5A Authority key identifier: 08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F Certificate issuer: /CN=08A94FD7F0E8A287AD318D7A26254192431E175F Certificate serial: 5EB8AF950BEED0AA88C12CF183B83256FAED849E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft Manifest number: 01F8 Signing time: Thu 18 Dec 2025 14:00:41 +0000 Manifest this update: Thu 18 Dec 2025 13:55:41 +0000 Manifest next update: Sun 21 Dec 2025 17:31:41 +0000 Files and hashes: 1: 08A94FD7F0E8A287AD318D7A26254192431E175F.crl (hash: 0iXrhYsA6xyXsNIkT6BLj4mDnsGOyvbk8KpeYY+wz3M=) 2: 3130332e34332e32342e302f32342d3234203d3e20313339343139.roa (hash: n37UknBhv1+9WuSxzltTO8fZT8WF7d4rSmL/iPmFdNo=) 3: 3130332e34332e32352e302f32342d3234203d3e20313339343139.roa (hash: VVwVAHNIOyaNlg3HmkibvzkBQxyuJMfLw9qgXP2WedI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b8:af:95:0b:ee:d0:aa:88:c1:2c:f1:83:b8:32:56:fa:ed:84:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08A94FD7F0E8A287AD318D7A26254192431E175F Validity Not Before: Dec 18 13:55:41 2025 GMT Not After : Dec 21 17:31:41 2025 GMT Subject: CN=BE5DFD70ABF245B11709F3EE03E435408461A85A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:0a:41:6f:16:4f:1e:21:d7:f8:76:35:14: 7f:d0:d5:7d:dc:27:e1:bf:53:c8:96:a5:8f:6d:16: 18:fd:12:99:63:80:27:1d:b8:cb:21:07:c3:06:fe: f6:39:8a:df:56:ff:bb:2b:58:c4:83:b8:30:0e:19: 31:46:e4:60:2c:13:a5:c0:2d:ad:ed:b1:a9:0d:4a: 35:d9:61:4b:3d:d5:19:9f:2a:f4:a5:c6:52:11:c6: 26:51:27:80:24:47:e9:7a:f2:6c:8e:a8:a4:01:cc: 4a:24:a6:5f:61:88:e5:fb:f9:af:17:ba:d5:1d:9b: 3b:55:dd:8c:b0:de:31:fd:1e:41:92:fa:80:5d:50: 08:8a:f4:90:90:f3:33:0e:bc:02:b9:8b:d2:65:1a: 5f:77:ad:45:58:a5:b8:7a:f1:f1:ce:bf:f8:a2:bb: 91:8f:f4:dc:a2:3f:ed:c4:ff:f2:4b:a9:1e:d9:1f: 3e:65:e1:62:b9:b9:28:51:11:ee:2a:e3:e4:7a:8d: 27:d3:a2:a6:ba:a5:e0:29:9a:96:e3:9b:6e:da:03: 9c:5c:66:cd:db:02:0b:55:83:50:0f:3c:48:e9:0c: 97:68:f6:e8:45:83:74:31:db:29:ed:a2:e1:08:ea: bb:2a:a2:b1:df:02:c2:22:85:47:80:59:db:ef:99: 50:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5D:FD:70:AB:F2:45:B1:17:09:F3:EE:03:E4:35:40:84:61:A8:5A X509v3 Authority Key Identifier: keyid:08:A9:4F:D7:F0:E8:A2:87:AD:31:8D:7A:26:25:41:92:43:1E:17:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08A94FD7F0E8A287AD318D7A26254192431E175F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42083d44-7835-443d-853a-0a79cf00e950/0/08A94FD7F0E8A287AD318D7A26254192431E175F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:9f:be:01:ca:d1:a8:39:fa:62:ee:33:bf:80:03:4d:1e:14: c7:23:e0:57:22:62:37:41:f4:bf:eb:ab:6b:0c:c2:2b:7e:a1: 7b:93:16:ca:74:e8:7c:a4:49:46:ef:27:ed:9a:5c:33:33:72: ad:86:34:a3:5c:97:a5:eb:95:89:41:2a:f9:d9:dc:91:33:5b: 50:25:e8:f3:29:ba:af:3d:c5:78:c4:bb:c9:f1:63:ce:1a:75: f1:41:6a:33:eb:6a:40:2e:fd:2f:92:8e:0b:06:00:86:03:51: b0:d3:16:52:79:e8:79:a9:60:60:27:70:e3:2a:47:67:f2:79: 4d:b6:26:00:69:01:57:d4:80:75:5c:49:b8:e8:56:09:11:9e: 38:05:b5:07:a2:52:ff:df:7e:e6:7d:17:a0:9a:fc:37:c9:49: 00:4a:9a:4c:5f:25:e1:45:81:45:0a:ca:af:64:b8:7e:47:80: 31:ad:6d:51:97:2f:47:69:b4:5b:cd:79:76:64:86:97:1f:81: ef:03:fb:45:85:3d:64:09:62:25:0d:69:db:aa:ba:98:8a:9d: e1:d8:99:89:d0:1a:f7:c2:9f:f8:c1:31:66:bc:80:32:5f:b8: aa:b0:f6:15:a6:ff:06:70:78:42:40:34:11:d3:8a:2f:d9:fb: be:c9:29:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrivlQvu0KqIwSzxg7gyVvrthJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0 MzFFMTc1RjAeFw0yNTEyMTgxMzU1NDFaFw0yNTEyMjExNzMxNDFaMDMxMTAvBgNV BAMTKEJFNURGRDcwQUJGMjQ1QjExNzA5RjNFRTAzRTQzNTQwODQ2MUE4NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSzwpBbxZPHiHX+HY1FH/Q1X3c J+G/U8iWpY9tFhj9EpljgCcduMshB8MG/vY5it9W/7srWMSDuDAOGTFG5GAsE6XA La3tsakNSjXZYUs91RmfKvSlxlIRxiZRJ4AkR+l68myOqKQBzEokpl9hiOX7+a8X utUdmztV3Yyw3jH9HkGS+oBdUAiK9JCQ8zMOvAK5i9JlGl93rUVYpbh68fHOv/ii u5GP9NyiP+3E//JLqR7ZHz5l4WK5uShREe4q4+R6jSfToqa6peApmpbjm27aA5xc Zs3bAgtVg1APPEjpDJdo9uhFg3Qx2yntouEI6rsqorHfAsIihUeAWdvvmVCnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvl39cKvyRbEXCfPuA+Q1QIRhqFowHwYDVR0j BBgwFoAUCKlP1/DoooetMY16JiVBkkMeF18wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjA4M2Q0NC03ODM1LTQ0M2QtODUzYS0wYTc5Y2YwMGU5NTAvMC8wOEE5NEZEN0Yw RThBMjg3QUQzMThEN0EyNjI1NDE5MjQzMUUxNzVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQxOTI0MzFF MTc1Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIwODNkNDQtNzgzNS00NDNkLTg1 M2EtMGE3OWNmMDBlOTUwLzAvMDhBOTRGRDdGMEU4QTI4N0FEMzE4RDdBMjYyNTQx OTI0MzFFMTc1Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKfvgHK0ag5+mLuM7+AA00eFMcj4FciYjdB 9L/rq2sMwit+oXuTFsp06HykSUbvJ+2aXDMzcq2GNKNcl6XrlYlBKvnZ3JEzW1Al 6PMpuq89xXjEu8nxY84adfFBajPrakAu/S+SjgsGAIYDUbDTFlJ56HmpYGAncOMq R2fyeU22JgBpAVfUgHVcSbjoVgkRnjgFtQeiUv/ffuZ9F6Ca/DfJSQBKmkxfJeFF gUUKyq9kuH5HgDGtbVGXL0dptFvNeXZkhpcfge8D+0WFPWQJYiUNaduqupiKneHY mYnQGvfCn/jBMWa8gDJfuKqw9hWm/wZweEJANBHTii/Z+77JKVI= -----END CERTIFICATE-----Generated at Sun Dec 21 01:37:11 2025 by rpki-client