This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft (raw, json) Hash identifier: E0xQPS4uTPRygLEmkCntH/QJ83BHB56RbnOIB5QoSg0= Subject key identifier: BA:43:D0:E7:7A:10:D3:2A:F1:AF:38:F9:34:D7:E4:86:62:FF:4C:F2 Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Certificate issuer: /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Certificate serial: 488A2DA37B84BD2A291A1EEAFBF1E43AE5781E05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft Manifest number: 0547 Signing time: Fri 19 Dec 2025 19:31:45 +0000 Manifest this update: Fri 19 Dec 2025 19:26:45 +0000 Manifest next update: Mon 22 Dec 2025 19:59:45 +0000 Files and hashes: 1: 3130332e3130322e31342e302f32342d3234203d3e20313336383635.roa (hash: xpIpnLctgV8IvR/95nZhbbNFRCrOenQ8KDE2o6OGJuo=) 2: 323430313a646234303a3a2f33322d3332203d3e20313336383635.roa (hash: KGUF32Kc9eR09Ep+PLSsXC9//4a1BdJ7Q2PE9xYrp/A=) 3: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl (hash: sX/7FowrrGdikhfGkPDBMXxdhbsGleeE44t8uUBrTYo=) 4: 3130332e3130322e31322e302f32332d3233203d3e20313336383635.roa (hash: 63Tfw81BZTddeb+f1H4wsRimzGD5u+l/4PZBmxazTmA=) 5: 3130332e3130322e31322e302f32342d3234203d3e20313336383635.roa (hash: 3P9Pl6Hs5uriFWxnAGmotMmA1+l8H3Rlr0SXz2N0yKQ=) 6: 3130332e3130322e31332e302f32342d3234203d3e20313336383635.roa (hash: U9D771UuAkGUw+fqOOekyqrm8y2+seArJf4nwvuYawE=) 7: 3130332e3130322e31352e302f32342d3234203d3e20313337333331.roa (hash: pfUFTVsuIPjmnx0LWYbFiwDyhGMbxuFA/hftBufAVsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 19:59:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8a:2d:a3:7b:84:bd:2a:29:1a:1e:ea:fb:f1:e4:3a:e5:78:1e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Validity Not Before: Dec 19 19:26:45 2025 GMT Not After : Dec 22 19:59:45 2025 GMT Subject: CN=BA43D0E77A10D32AF1AF38F934D7E48662FF4CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:82:e9:ed:d6:2b:6b:be:5d:ba:9b:c8:43: 77:75:98:4d:9c:2c:41:7c:92:f1:a0:c6:99:bd:23: 47:4f:00:26:ff:48:61:de:9b:de:f6:63:66:39:ac: 38:4b:e8:9f:e1:67:d6:df:6c:6c:1e:58:13:b3:e4: 87:f3:dd:f7:42:d8:ae:6f:fd:94:2d:60:20:00:dd: 12:08:98:ed:d8:da:ea:74:8a:d1:79:2e:d7:23:26: f5:e2:e2:7e:d8:ff:c7:b2:0a:d0:90:b4:0a:2e:a8: fa:9a:c7:05:b2:92:26:16:c2:e3:2e:3b:29:c4:4c: 15:ae:6c:60:9a:c4:22:57:7a:a2:f1:c1:35:1f:c4: a4:0e:14:a2:79:bc:a4:20:00:28:1a:b3:fa:77:51: a7:89:3f:eb:f9:ec:e0:4d:56:09:ce:0d:93:2a:fe: 45:33:6d:a3:c3:7b:de:f2:b2:92:32:41:84:1d:c6: 2f:aa:75:80:9a:90:c3:bb:63:96:ef:68:f3:06:34: 6d:32:ed:d1:f5:15:16:9c:49:f3:9e:6d:fe:6b:bf: b2:22:3b:4e:68:be:e9:16:30:26:93:38:ab:56:a3: 61:97:a2:8f:f5:78:26:54:15:c5:d9:0f:f0:da:26: 28:38:59:90:00:be:ec:8d:2d:ff:2b:5d:5d:3d:6f: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:43:D0:E7:7A:10:D3:2A:F1:AF:38:F9:34:D7:E4:86:62:FF:4C:F2 X509v3 Authority Key Identifier: keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:27:84:1f:92:ef:46:8b:bb:f2:5b:81:67:85:25:be:2a:49: 7b:e0:bc:67:42:f8:52:75:30:88:f5:b9:8b:6a:6d:46:7c:7c: e7:3a:1a:37:66:92:6c:6c:c5:74:6e:f1:f5:01:ff:9e:c2:ed: 60:2c:5a:85:97:ef:d8:53:0c:9d:a5:d0:b0:c2:cd:81:18:e9: 79:13:47:20:28:ba:c4:ee:ae:ad:22:63:8c:12:c4:6c:83:ea: 3d:9f:99:c4:31:89:86:98:0e:9c:51:b9:cd:ad:b1:ce:db:04: 44:b4:65:4a:fe:74:cb:ce:8c:bb:29:80:15:b0:ca:d5:af:0e: 80:19:64:02:c5:43:09:e5:e2:7f:55:40:ca:09:53:83:f1:01: fb:c8:f4:d9:64:95:86:8b:1d:8d:7a:77:3d:98:6e:f9:9b:d0: be:24:e8:1f:4c:1e:87:9c:16:f9:4a:0a:c8:68:79:de:30:de: 92:de:96:a9:e1:11:d3:ca:bc:6c:1b:78:0a:06:46:a5:66:77: 28:a3:ea:9c:64:c6:19:5d:1c:0c:c2:59:33:32:52:5a:98:d9: 51:9a:01:eb:a2:9f:a2:f4:58:2d:b1:62:d3:c6:6d:c9:86:a2: fc:7f:bb:26:f7:7d:a8:18:1d:f5:8e:38:8c:d8:da:03:f0:fe: f4:52:2b:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIoto3uEvSopGh7q+/HkOuV4HgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4 N0Y2M0MyNTAeFw0yNTEyMTkxOTI2NDVaFw0yNTEyMjIxOTU5NDVaMDMxMTAvBgNV BAMTKEJBNDNEMEU3N0ExMEQzMkFGMUFGMzhGOTM0RDdFNDg2NjJGRjRDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8kYLp7dYra75dupvIQ3d1mE2c LEF8kvGgxpm9I0dPACb/SGHem972Y2Y5rDhL6J/hZ9bfbGweWBOz5Ifz3fdC2K5v /ZQtYCAA3RIImO3Y2up0itF5LtcjJvXi4n7Y/8eyCtCQtAouqPqaxwWykiYWwuMu OynETBWubGCaxCJXeqLxwTUfxKQOFKJ5vKQgACgas/p3UaeJP+v57OBNVgnODZMq /kUzbaPDe97yspIyQYQdxi+qdYCakMO7Y5bvaPMGNG0y7dH1FRacSfOebf5rv7Ii O05ovukWMCaTOKtWo2GXoo/1eCZUFcXZD/DaJig4WZAAvuyNLf8rXV09b3uHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukPQ53oQ0yrxrzj5NNfkhmL/TPIwHwYDVR0j BBgwFoAUCHcxkfv8IaPIYVo+NqKssYf2PCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMC8wODc3MzE5MUZC RkMyMUEzQzg2MTVBM0UzNkEyQUNCMTg3RjYzQzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFDQjE4N0Y2 M0MyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWY4NmIxMmUtZTU3NC00MjZiLWFh NmItNDkzOWUzYjAzMGJhLzAvMDg3NzMxOTFGQkZDMjFBM0M4NjE1QTNFMzZBMkFD QjE4N0Y2M0MyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0nhB+S70aLu/JbgWeFJb4qSXvgvGdC+FJ1 MIj1uYtqbUZ8fOc6GjdmkmxsxXRu8fUB/57C7WAsWoWX79hTDJ2l0LDCzYEY6XkT RyAousTurq0iY4wSxGyD6j2fmcQxiYaYDpxRuc2tsc7bBES0ZUr+dMvOjLspgBWw ytWvDoAZZALFQwnl4n9VQMoJU4PxAfvI9NlklYaLHY16dz2Ybvmb0L4k6B9MHoec FvlKCshoed4w3pLelqnhEdPKvGwbeAoGRqVmdyij6pxkxhldHAzCWTMyUlqY2VGa Aeuin6L0WC2xYtPGbcmGovx/uyb3fagYHfWOOIzY2gPw/vRSK0k= -----END CERTIFICATE-----Generated at Sat Dec 20 15:59:52 2025 by rpki-client