This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json)
Hash identifier: e5DwlNIzrKf/kHicLXKHbx9rhzaK5dvNUbHhb+vHGrg=
Subject key identifier: 1A:8C:F3:D5:F8:C2:5F:AF:20:9B:84:B9:83:26:9E:FC:7F:85:B2:38
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial: 6C5B1882DB8FB40FFBC7D64F71CC6717634EFF17
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
Manifest number: 053C
Signing time: Sun 21 Dec 2025 01:42:07 +0000
Manifest this update: Sun 21 Dec 2025 01:37:07 +0000
Manifest next update: Wed 24 Dec 2025 11:48:07 +0000
Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=)
2: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=)
3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=)
4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=)
5: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: QvUeewrctq/Hji7hoSUzOoaQPNQ6IUDUT47Bs4Ezx4o=)
6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=)
7: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=)
8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=)
9: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 07:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5b:18:82:db:8f:b4:0f:fb:c7:d6:4f:71:cc:67:17:63:4e:ff:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Validity
Not Before: Dec 21 01:37:07 2025 GMT
Not After : Dec 24 11:48:07 2025 GMT
Subject: CN=1A8CF3D5F8C25FAF209B84B983269EFC7F85B238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d1:67:e4:2e:d0:1b:e9:40:d0:1a:f5:97:48:
88:13:a2:8f:36:6e:32:0b:a1:3b:fe:43:06:02:b2:
64:04:8c:8a:84:9d:c9:d0:be:ec:fd:88:23:0d:ea:
ff:0c:3e:4a:c0:78:cc:e7:57:11:4d:68:a5:c0:d1:
5a:e5:03:7e:7a:2d:51:78:80:17:73:4e:cb:33:03:
e5:d1:63:42:1d:e2:29:cb:13:82:7f:fe:26:6b:a6:
05:bf:ab:bb:c0:a7:87:01:0e:07:6c:3f:d7:e3:9f:
70:95:db:75:0b:ea:29:e9:32:5e:9b:47:61:bb:8b:
fc:33:fc:83:94:dd:38:16:6d:63:7b:79:0a:9e:9f:
44:b0:3f:c9:af:7a:f5:61:77:af:71:32:9d:3e:b4:
1b:60:97:32:c9:26:03:b3:53:f3:e9:36:1f:26:ba:
26:4b:a5:31:54:de:10:de:41:2d:7c:48:d7:72:84:
6a:c5:5d:1a:7d:ca:9d:60:5f:15:e6:40:13:fa:d8:
b3:73:11:54:f2:89:2f:ed:e7:35:68:8e:51:84:81:
0a:9b:9a:d2:20:2c:ab:54:33:51:87:f8:a4:46:e9:
69:fd:3b:e5:92:58:b0:f6:46:72:2f:58:e1:d3:2d:
5a:8e:80:1c:1d:2b:bb:1b:20:66:3f:4c:f5:46:ce:
96:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8C:F3:D5:F8:C2:5F:AF:20:9B:84:B9:83:26:9E:FC:7F:85:B2:38
X509v3 Authority Key Identifier:
keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:80:fe:89:ab:31:45:23:ea:0f:ef:da:e7:3a:fe:f4:96:2c:
6a:cc:0a:c9:36:bb:fb:6f:d8:a5:bc:17:02:5e:68:6a:94:28:
09:9a:fc:53:8e:bd:af:91:38:cd:49:76:f6:fe:25:ff:9c:1e:
6c:c9:17:9e:9c:b2:6b:e6:20:97:61:1e:4d:87:a1:9d:42:b4:
f4:20:46:5e:6c:b2:c8:d3:ba:69:c0:d2:92:11:cb:c4:ad:20:
d2:bf:cf:ce:19:5a:03:c2:3f:a1:f0:8a:d6:6d:f0:7f:04:de:
71:49:78:63:73:6f:b2:9f:6a:19:7c:04:ab:e4:28:2f:05:76:
05:93:22:14:9b:a5:72:d0:ab:fa:a1:de:9d:7e:7e:7c:0f:74:
b3:7e:9c:c9:99:fe:a8:c0:e9:27:03:1e:eb:f4:2b:a4:ea:52:
aa:ee:ad:68:cc:15:45:5e:6b:72:07:5c:9b:4d:7a:dd:03:55:
25:1b:cd:30:c8:0b:17:47:fb:2a:3c:dd:f1:78:99:6e:f8:0a:
37:1b:2c:2c:5e:bf:7d:fc:de:55:02:77:ab:28:04:f2:76:58:
7c:74:84:7d:62:8f:49:cb:5d:6d:7e:ab:9a:eb:98:a3:2e:b0:
89:ab:13:9d:67:e9:ee:ca:42:0f:1c:db:ff:8e:8c:aa:f2:42:
a1:1d:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:03:51 2025 by rpki-client