This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft File: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft (raw, json) Hash identifier: ZKXZbccus46EuMhTl2vbupG1RgsxJQqfShwlrABBic0= Subject key identifier: 28:5E:D2:F1:D8:EA:5E:0B:4A:93:57:FA:A6:14:BE:57:F3:B3:76:70 Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E Certificate issuer: /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Certificate serial: 77842C6683CB31EFE56A95179BA39A8172EEE2A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft Manifest number: 02CE Signing time: Wed 17 Dec 2025 15:40:49 +0000 Manifest this update: Wed 17 Dec 2025 15:35:49 +0000 Manifest next update: Sat 20 Dec 2025 17:37:49 +0000 Files and hashes: 1: 0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl (hash: Q0YpR9lSWrO/mNGyoZhftA3afE175i6xVHNy5XZhi/8=) 2: 3130332e3137372e39322e302f32332d3233203d3e20313437313435.roa (hash: bmzsNhYujGH2LmgXskz/0GWC9scVu/AXTjmp6dOWN3g=) 3: 3130332e3137372e39332e302f32342d3234203d3e20313437313435.roa (hash: T+LxrVwwNKzJSOF5lHGAsP446A31BNGrPBlYYjdrOLQ=) 4: 3130332e3137372e39322e302f32342d3234203d3e20313437313435.roa (hash: TX3fUeZklwpUw9yIwRSZ7p2jM8uL0KvPpSOCdlPRBMk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 17:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:84:2c:66:83:cb:31:ef:e5:6a:95:17:9b:a3:9a:81:72:ee:e2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E Validity Not Before: Dec 17 15:35:49 2025 GMT Not After : Dec 20 17:37:49 2025 GMT Subject: CN=285ED2F1D8EA5E0B4A9357FAA614BE57F3B37670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:a7:1d:68:c9:4e:a6:5b:32:6c:33:1b:fb: 3a:70:7a:08:e8:9d:3c:ca:da:80:ce:7c:82:60:6b: 5c:ef:8c:8f:57:54:eb:22:9d:93:10:63:a0:77:54: 93:42:bb:ba:17:c6:b2:9a:aa:5c:29:36:77:26:9a: 52:ab:fc:95:f1:de:aa:b2:05:c9:3c:7e:91:25:35: e9:69:87:54:c2:b3:4c:6a:95:19:5f:79:6b:e2:45: 91:88:f7:19:b0:43:ce:74:51:91:47:38:f1:d2:64: f9:a7:b6:03:09:19:49:ee:2b:66:78:17:40:e1:bc: e6:32:d1:ff:0e:a3:b7:b7:68:64:45:0d:dd:99:a1: 2f:df:67:ae:50:3b:5f:5d:a1:46:49:cb:ca:47:4a: 99:43:37:df:2a:4d:d5:4a:e6:4c:02:77:86:75:a4: 93:01:35:e3:d5:ee:68:44:c8:26:6a:fe:0e:72:7b: a2:2f:75:3c:c3:31:ed:a5:d7:34:e1:be:8b:72:a3: 3d:48:40:5b:7e:47:3e:1e:0e:d1:62:d7:31:6b:54: a2:88:83:04:03:f0:cb:76:6d:94:17:c4:83:5b:c0: ed:80:62:19:b8:3d:82:a6:3b:41:15:b7:a2:ce:81: 0d:48:f0:96:68:9a:18:96:d0:8a:c0:36:e7:57:ab: e9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5E:D2:F1:D8:EA:5E:0B:4A:93:57:FA:A6:14:BE:57:F3:B3:76:70 X509v3 Authority Key Identifier: keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ed:14:e2:82:ce:96:3d:e7:12:e0:a4:98:ac:c0:58:3a:15: 7a:77:28:da:7d:0b:8e:a9:b8:b1:76:74:8c:a3:c5:b8:6d:45: df:de:76:88:2e:85:d7:06:c7:63:33:6d:48:aa:bd:36:40:48: 08:2a:0d:1f:17:60:68:2f:0f:45:24:ae:8c:d4:47:d7:ed:2b: 50:30:ef:cb:d2:b9:d3:98:07:d8:68:fe:7b:ff:d9:3d:de:72: 7d:91:a0:98:1b:e8:ab:2e:79:4a:8a:30:fe:71:bf:40:ee:40: 3a:f4:28:9a:f6:d9:79:de:73:15:75:ca:41:30:d3:89:e5:cd: a6:ff:2b:98:96:69:35:ce:1e:27:2b:b3:7c:48:bc:5c:f1:1d: 71:c0:43:bc:d9:7a:72:9c:20:85:ab:49:c2:4b:71:c3:c7:a4: d7:bd:5d:d3:d1:33:7b:71:c6:17:e3:3d:b3:f3:d7:8d:97:b7: f3:b5:77:00:c4:91:16:1c:0b:05:2e:8b:87:61:78:1d:aa:37: 35:dc:bf:c1:36:0c:a3:08:59:5f:20:7a:b5:11:d8:18:d7:9f: b5:59:a1:2f:86:95:9a:87:ca:75:73:4b:a4:51:2d:ce:de:53: 0b:4e:f3:42:f5:82:48:f8:ed:32:e1:16:c5:27:e7:08:e6:a4: 87:4d:cc:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4QsZoPLMe/lapUXm6OagXLu4qkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENE Mjg1MDI5RTAeFw0yNTEyMTcxNTM1NDlaFw0yNTEyMjAxNzM3NDlaMDMxMTAvBgNV BAMTKDI4NUVEMkYxRDhFQTVFMEI0QTkzNTdGQUE2MTRCRTU3RjNCMzc2NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+B6cdaMlOplsybDMb+zpwegjo nTzK2oDOfIJga1zvjI9XVOsinZMQY6B3VJNCu7oXxrKaqlwpNncmmlKr/JXx3qqy Bck8fpElNelph1TCs0xqlRlfeWviRZGI9xmwQ850UZFHOPHSZPmntgMJGUnuK2Z4 F0DhvOYy0f8Oo7e3aGRFDd2ZoS/fZ65QO19doUZJy8pHSplDN98qTdVK5kwCd4Z1 pJMBNePV7mhEyCZq/g5ye6IvdTzDMe2l1zThvotyoz1IQFt+Rz4eDtFi1zFrVKKI gwQD8Mt2bZQXxINbwO2AYhm4PYKmO0EVt6LOgQ1I8JZomhiW0IrANudXq+nlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKF7S8djqXgtKk1f6phS+V/OzdnAwHwYDVR0j BBgwFoAUDQXve6cdZAt4T3LH2PD03NKFAp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWI4NjA0Zi0zOTVhLTQyYmUtYjk5Ny1lODBmYzFkZjkwZjkvMC8wRDA1RUY3QkE3 MUQ2NDBCNzg0RjcyQzdEOEYwRjREQ0QyODUwMjlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0RENEMjg1 MDI5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODliODYwNGYtMzk1YS00MmJlLWI5 OTctZTgwZmMxZGY5MGY5LzAvMEQwNUVGN0JBNzFENjQwQjc4NEY3MkM3RDhGMEY0 RENEMjg1MDI5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjtFOKCzpY95xLgpJiswFg6FXp3KNp9C46p uLF2dIyjxbhtRd/edoguhdcGx2MzbUiqvTZASAgqDR8XYGgvD0UkrozUR9ftK1Aw 78vSudOYB9ho/nv/2T3ecn2RoJgb6KsueUqKMP5xv0DuQDr0KJr22XnecxV1ykEw 04nlzab/K5iWaTXOHicrs3xIvFzxHXHAQ7zZenKcIIWrScJLccPHpNe9XdPRM3tx xhfjPbPz142Xt/O1dwDEkRYcCwUui4dheB2qNzXcv8E2DKMIWV8gerUR2BjXn7VZ oS+GlZqHynVzS6RRLc7eUwtO80L1gkj47TLhFsUn5wjmpIdNzJw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:36:20 2025 by rpki-client