This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft File: 08632F1EBF41728D3E177234FCD8C0B9A988898B.mft (raw, json) Hash identifier: VpxxRHA/rURGxB5HPCeznJql07tpKZqLY04Co6emLfc= Subject key identifier: F2:72:17:0F:F7:07:41:8E:9F:98:36:F0:69:DE:20:69:43:CC:22:7B Authority key identifier: 08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B Certificate issuer: /CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Certificate serial: 2AD5E7708387A220866F14C994212923197E2472 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft Manifest number: 01A9 Signing time: Wed 17 Dec 2025 13:40:47 +0000 Manifest this update: Wed 17 Dec 2025 13:35:47 +0000 Manifest next update: Sat 20 Dec 2025 19:03:47 +0000 Files and hashes: 1: 08632F1EBF41728D3E177234FCD8C0B9A988898B.crl (hash: lIlbNn2q9yAag+qlbNggCY2kNepiT4Bn5Ss2Ww2lRmI=) 2: 3130332e3133332e33362e302f32342d3234203d3e20313338313333.roa (hash: nKmVU0aaMSmM7wKFukfzUIiKVfAI46n/zI3k22bxBr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 19:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d5:e7:70:83:87:a2:20:86:6f:14:c9:94:21:29:23:19:7e:24:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08632F1EBF41728D3E177234FCD8C0B9A988898B Validity Not Before: Dec 17 13:35:47 2025 GMT Not After : Dec 20 19:03:47 2025 GMT Subject: CN=F272170FF707418E9F9836F069DE206943CC227B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:dc:42:3b:01:3b:f6:d3:fc:11:bd:ae:24:56: 52:14:cb:d0:f5:8d:d0:56:83:71:16:e8:96:d6:4d: 83:b6:bb:4c:9b:8d:1d:56:2f:53:41:37:f5:45:99: e6:30:d6:a4:a6:e9:aa:72:43:6b:77:12:84:0c:ed: ff:0e:42:6d:78:5d:5a:15:d1:74:7d:fc:25:49:34: cc:16:4d:f8:e4:13:22:7c:c0:25:11:1e:60:2d:8d: 46:1f:da:3a:71:15:de:4b:f5:88:22:fa:4f:95:2e: 6f:65:60:2b:81:bc:4d:3e:6d:4e:42:e6:c9:da:d2: 99:28:d6:7b:ef:f3:c8:86:8b:a4:bc:bd:af:87:91: e7:ea:3d:71:95:66:60:9d:61:30:5c:f1:af:5c:58: c4:c9:41:0a:f2:02:23:e6:58:c0:69:ea:b3:00:c4: b1:5b:d3:29:52:72:2e:6c:b4:15:6b:06:3c:43:aa: 21:16:0b:9b:22:fa:7d:0f:84:0b:83:8a:06:0a:52: 9d:b3:9e:2a:f1:5f:6f:00:85:e6:5f:43:a8:c7:6a: 05:b4:59:0e:c2:87:e3:be:b5:bc:32:19:a3:49:d0: 98:9c:29:f9:8c:fb:6f:8b:24:f0:f2:d3:6b:6a:60: 67:ec:e5:7b:c8:34:cc:17:f3:be:93:8e:2e:d0:fe: 5d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:17:0F:F7:07:41:8E:9F:98:36:F0:69:DE:20:69:43:CC:22:7B X509v3 Authority Key Identifier: keyid:08:63:2F:1E:BF:41:72:8D:3E:17:72:34:FC:D8:C0:B9:A9:88:89:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08632F1EBF41728D3E177234FCD8C0B9A988898B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f6bf37c-d8ad-4e03-a06a-4408157cf57e/0/08632F1EBF41728D3E177234FCD8C0B9A988898B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:44:6f:f9:18:4a:8f:cb:1f:3f:e2:7f:f8:a2:ea:a1:e9:54: f4:6e:be:bd:b2:42:9e:f9:8d:28:fe:e7:a5:62:29:00:14:48: 29:2e:9a:41:3d:c8:d0:36:4c:0a:ac:bd:0c:b5:ee:f5:74:c6: cc:95:1b:8d:3b:28:f7:07:67:0f:a0:21:58:cb:e1:68:61:3e: 74:da:82:02:d1:97:06:11:c0:01:f2:45:50:24:37:ac:8e:63: 6e:54:dc:10:44:44:5d:2a:a1:b1:96:6f:32:e4:77:fb:5b:81: 8a:bc:27:ac:38:fa:57:3a:e2:dd:df:91:92:f9:23:df:fa:f7: 8d:19:3e:d6:3e:8c:b2:0d:bb:87:8e:12:a4:c2:17:fa:5c:a9: fc:87:14:ea:81:46:13:4a:15:6b:4a:df:22:65:b0:9b:70:30: 66:4c:9c:ad:29:4f:a9:28:42:6b:2e:a3:d6:c1:17:1a:a7:14: 57:94:79:d5:29:b4:8e:14:59:d6:da:cb:a0:ad:29:ff:51:94: d5:74:a2:e4:47:89:59:8b:9b:9f:81:5a:1d:6f:1d:61:1e:69: 2a:d8:3c:f5:ff:da:ae:f1:19:37:0f:20:0a:ba:ef:dc:12:30: 53:36:e9:d9:81:2e:a3:e2:53:f6:46:48:1c:55:f0:35:f4:9a: e5:0a:5a:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtXncIOHoiCGbxTJlCEpIxl+JHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlB OTg4ODk4QjAeFw0yNTEyMTcxMzM1NDdaFw0yNTEyMjAxOTAzNDdaMDMxMTAvBgNV BAMTKEYyNzIxNzBGRjcwNzQxOEU5Rjk4MzZGMDY5REUyMDY5NDNDQzIyN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/3EI7ATv20/wRva4kVlIUy9D1 jdBWg3EW6JbWTYO2u0ybjR1WL1NBN/VFmeYw1qSm6apyQ2t3EoQM7f8OQm14XVoV 0XR9/CVJNMwWTfjkEyJ8wCURHmAtjUYf2jpxFd5L9Ygi+k+VLm9lYCuBvE0+bU5C 5sna0pko1nvv88iGi6S8va+HkefqPXGVZmCdYTBc8a9cWMTJQQryAiPmWMBp6rMA xLFb0ylSci5stBVrBjxDqiEWC5si+n0PhAuDigYKUp2znirxX28AheZfQ6jHagW0 WQ7Ch+O+tbwyGaNJ0JicKfmM+2+LJPDy02tqYGfs5XvINMwX876Tji7Q/l3hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nIXD/cHQY6fmDbwad4gaUPMInswHwYDVR0j BBgwFoAUCGMvHr9Bco0+F3I0/NjAuamIiYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjZiZjM3Yy1kOGFkLTRlMDMtYTA2YS00NDA4MTU3Y2Y1N2UvMC8wODYzMkYxRUJG NDE3MjhEM0UxNzcyMzRGQ0Q4QzBCOUE5ODg4OThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMwQjlBOTg4 ODk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY2YmYzN2MtZDhhZC00ZTAzLWEw NmEtNDQwODE1N2NmNTdlLzAvMDg2MzJGMUVCRjQxNzI4RDNFMTc3MjM0RkNEOEMw QjlBOTg4ODk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9Eb/kYSo/LHz/if/ii6qHpVPRuvr2yQp75 jSj+56ViKQAUSCkumkE9yNA2TAqsvQy17vV0xsyVG407KPcHZw+gIVjL4WhhPnTa ggLRlwYRwAHyRVAkN6yOY25U3BBERF0qobGWbzLkd/tbgYq8J6w4+lc64t3fkZL5 I9/6940ZPtY+jLINu4eOEqTCF/pcqfyHFOqBRhNKFWtK3yJlsJtwMGZMnK0pT6ko Qmsuo9bBFxqnFFeUedUptI4UWdbay6CtKf9RlNV0ouRHiVmLm5+BWh1vHWEeaSrY PPX/2q7xGTcPIAq679wSMFM26dmBLqPiU/ZGSBxV8DX0muUKWvw= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:55 2025 by rpki-client