This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft File: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft (raw, json) Hash identifier: W0iviMrWJNACAtTGQu0Lqg8NoXmdI6BqrKnkJihc6mI= Subject key identifier: E7:D1:3A:CE:89:53:5E:09:95:17:A6:BB:3E:D2:4C:BC:E1:3F:B6:72 Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Certificate serial: 5EFE29157A17295573FBDE05D46F36A04B2CBA82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft Manifest number: 0568 Signing time: Mon 22 Dec 2025 20:30:57 +0000 Manifest this update: Mon 22 Dec 2025 20:25:57 +0000 Manifest next update: Thu 25 Dec 2025 23:00:57 +0000 Files and hashes: 1: 3131302e37362e3134342e302f32332d3234203d3e20313430343831.roa (hash: 6L28DKU2IWYtA3lRV3VTpPyJ/UkW+g97L32zaXfZ124=) 2: 3131302e37362e3134342e302f32342d3234203d3e20313430343831.roa (hash: l79vjEoCDRYp7Imq4o09nFUUOawBLUlHdvJpjB5kQuE=) 3: 3131302e37362e3134352e302f32342d3234203d3e20313430343831.roa (hash: QhseuehbmAg1CgvzVHn3OnXvEwbOGfNyxdByQxi2PSM=) 4: 3131302e37362e3135302e302f32342d3234203d3e20313331373036.roa (hash: JNQ343i5OALYy6+PPMTF9ZMCDVDR/l5G+uGpk10x6iY=) 5: 3131302e37362e3134362e302f32342d3234203d3e20313430343831.roa (hash: eUGLFIbBQXUlbrF2iA2Xszdo9Zh7AGLGsZzJrRkvT6k=) 6: 323430363a393330303a3a2f33322d3438203d3e203338353036.roa (hash: wSzeEeUlQ9dVeDBBx0XlYcJDAiPM7sQsbdx5J/YQ+rE=) 7: 3131302e37362e3134382e302f32332d3234203d3e20313430343831.roa (hash: Mo+ywRg/G9o+M5ufzONjfakS+qPVaicNW0HrvAATwhk=) 8: 0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl (hash: 22yZD7tPyBlu9XJZhKpvj4q2JqUEX39E5JfKEu9ui64=) 9: 3131302e37362e3135312e302f32342d3234203d3e20313333383330.roa (hash: 8rPJ4nXTJ70Up3y89jTvrnK5p5EQ4mjAGK2p65JUucA=) 10: 3131302e37362e3134372e302f32342d3234203d3e20313430343831.roa (hash: /Pgqw6Rs+ajT828waAS0R/dEt8fu2pWuzGj9i8zT3Rk=) 11: 3131302e37362e3134362e302f32332d3233203d3e20313430343831.roa (hash: nj7nwkg4jEji5skSyGq127SyeIEToj2AxAchD/5z7y0=) 12: 3131372e3130332e3136382e302f32312d3234203d3e203338353036.roa (hash: zHFuXcJsHRS8oU5g73vyR9ezkdJAc6jv+r1NZhBGTU4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:fe:29:15:7a:17:29:55:73:fb:de:05:d4:6f:36:a0:4b:2c:ba:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2 Validity Not Before: Dec 22 20:25:57 2025 GMT Not After : Dec 25 23:00:57 2025 GMT Subject: CN=E7D13ACE89535E099517A6BB3ED24CBCE13FB672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:24:cd:e2:99:b2:ec:f1:a7:b2:c2:47:7e: d4:38:84:f6:89:2a:12:1f:38:5c:19:80:49:b6:f2: d6:e1:a5:b5:1f:02:ff:7c:84:12:47:0d:69:e2:11: ae:58:21:70:ed:70:9f:71:ba:97:06:6c:83:74:93: 73:bf:43:a4:a7:c0:91:f9:51:60:c3:d0:7e:16:75: a2:93:29:69:fb:9a:f9:9f:d3:f6:58:03:51:62:4d: 0c:db:98:90:53:f0:59:dd:4f:fc:41:e9:d1:73:33: 28:44:36:ff:bf:c6:89:c8:b2:71:b8:09:d0:10:ce: 9d:4d:2e:57:24:33:64:b2:94:db:85:35:63:ba:88: a2:21:39:e9:7d:6d:ac:8c:7d:65:fe:c3:f9:c2:b5: 5d:ef:da:f3:55:22:2b:2f:8a:c7:ba:bc:12:21:cc: 6c:b4:f8:d1:da:1c:5e:d2:9a:a3:ca:aa:a4:84:7d: 60:3a:4f:fd:88:d0:2a:18:89:42:e7:8a:e7:a5:d6: 4b:aa:93:11:3c:03:9a:3d:a9:00:64:5b:b2:bd:b2: 12:5d:8d:64:05:38:66:a0:47:82:f8:3b:9e:eb:14: db:06:37:c5:ef:de:ff:c0:c6:2b:38:04:f7:b8:26: 5e:e5:ad:aa:74:b4:24:e8:16:71:9b:df:1b:7b:d6: 20:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D1:3A:CE:89:53:5E:09:95:17:A6:BB:3E:D2:4C:BC:E1:3F:B6:72 X509v3 Authority Key Identifier: keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:08:6d:dc:1c:1f:aa:9e:ea:16:8d:de:11:85:40:d4:1e:c3: 30:f2:10:fe:c1:96:02:9a:3f:d6:d5:66:3c:d1:b9:75:e9:76: 93:21:4f:bb:78:d9:ee:59:da:5b:63:12:56:84:e3:5d:03:03: 9b:79:28:61:12:eb:b3:ae:66:6d:79:79:de:6a:ad:6b:49:68: 6e:4a:8b:ad:d9:b1:e8:c0:30:d9:6c:3f:d5:df:55:10:96:34: 19:3a:1d:75:a2:32:95:7a:81:5a:70:95:c6:df:56:e0:db:5f: fa:c2:b6:7b:d2:67:d7:02:b6:5a:e4:b1:fb:8c:3e:09:73:a4: f6:ab:66:27:a0:76:31:bc:7e:e5:32:89:d5:6f:9c:6a:ff:5d: 23:6b:64:0c:95:04:c3:95:7f:e2:40:96:cc:c0:1d:cb:cc:d0: dc:64:b0:58:48:23:92:d1:49:a4:86:2a:08:74:be:1b:75:d8: 85:42:15:dd:66:86:93:dc:78:03:72:a7:66:73:96:cd:02:45: 63:15:0f:40:98:f4:50:2c:b3:c8:58:29:79:e6:ae:13:35:95: 64:91:8a:c7:3e:c2:92:93:76:5e:81:b4:e7:a4:91:2b:ce:63: 2d:dd:63:0f:0c:a5:f2:1e:b7:f4:67:e6:aa:c7:6d:99:a1:f8: 02:91:66:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXv4pFXoXKVVz+94F1G82oEssuoIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1 MUJDMTdBMjAeFw0yNTEyMjIyMDI1NTdaFw0yNTEyMjUyMzAwNTdaMDMxMTAvBgNV BAMTKEU3RDEzQUNFODk1MzVFMDk5NTE3QTZCQjNFRDI0Q0JDRTEzRkI2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6CTN4pmy7PGnssJHftQ4hPaJ KhIfOFwZgEm28tbhpbUfAv98hBJHDWniEa5YIXDtcJ9xupcGbIN0k3O/Q6SnwJH5 UWDD0H4WdaKTKWn7mvmf0/ZYA1FiTQzbmJBT8FndT/xB6dFzMyhENv+/xonIsnG4 CdAQzp1NLlckM2SylNuFNWO6iKIhOel9bayMfWX+w/nCtV3v2vNVIisvise6vBIh zGy0+NHaHF7SmqPKqqSEfWA6T/2I0CoYiULniuel1kuqkxE8A5o9qQBkW7K9shJd jWQFOGagR4L4O57rFNsGN8Xv3v/Axis4BPe4Jl7lrap0tCToFnGb3xt71iBPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU59E6zolTXgmVF6a7PtJMvOE/tnIwHwYDVR0j BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD MTdBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGI1NDhiYWQtN2ZlZC00MWZkLWI0 MmUtNzgwMzcyYzQ1MjU1LzAvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZC QzQ1MUJDMTdBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHEIbdwcH6qe6haN3hGFQNQewzDyEP7BlgKa P9bVZjzRuXXpdpMhT7t42e5Z2ltjElaE410DA5t5KGES67OuZm15ed5qrWtJaG5K i63ZsejAMNlsP9XfVRCWNBk6HXWiMpV6gVpwlcbfVuDbX/rCtnvSZ9cCtlrksfuM PglzpParZiegdjG8fuUyidVvnGr/XSNrZAyVBMOVf+JAlszAHcvM0NxksFhII5LR SaSGKgh0vht12IVCFd1mhpPceANyp2Zzls0CRWMVD0CY9FAss8hYKXnmrhM1lWSR isc+wpKTdl6BtOekkSvOYy3dYw8MpfIet/Rn5qrHbZmh+AKRZmQ= -----END CERTIFICATE-----Generated at Tue Dec 23 15:23:12 2025 by rpki-client