This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: hcr4yWoJeuh+w1R43K/8ynPzLWwbFRvggQb0czXHCkI= Subject key identifier: 0B:F1:FD:89:49:46:A9:7E:B9:03:A0:DA:6B:99:D9:EC:10:E8:97:5F Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 58596A0D1003F32D1DCBEEB2D06FA1EF8D929021 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 054A Signing time: Sat 20 Dec 2025 01:21:52 +0000 Manifest this update: Sat 20 Dec 2025 01:16:52 +0000 Manifest next update: Tue 23 Dec 2025 08:01:52 +0000 Files and hashes: 1: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=) 2: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=) 3: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=) 4: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=) 5: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=) 6: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=) 7: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=) 8: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=) 9: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=) 10: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=) 11: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: M3nv0mC0g0dVK72c2OJ01BOoKTGk3r0NAIb60MF1lcw=) 12: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=) 13: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=) 14: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: ZmKPRv+xpVjvrB47L0NnXBQtW7zrsD0NklSpzuY8N2o=) 15: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=) 16: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=) 17: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=) 18: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=) 19: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 08:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:59:6a:0d:10:03:f3:2d:1d:cb:ee:b2:d0:6f:a1:ef:8d:92:90:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Dec 20 01:16:52 2025 GMT Not After : Dec 23 08:01:52 2025 GMT Subject: CN=0BF1FD894946A97EB903A0DA6B99D9EC10E8975F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:78:31:e7:66:88:a0:18:f1:af:89:76:eb:07: 64:e5:c7:79:2e:99:00:c6:17:06:34:58:92:41:53: c4:eb:9c:23:23:0a:e9:18:82:7a:14:ec:5a:d3:0b: a3:da:c0:51:e4:7a:8a:5d:39:90:86:c4:56:b0:3a: b3:bb:ab:31:a5:64:b6:13:47:7e:94:38:2e:e6:50: ec:97:be:4c:3c:83:56:7d:9c:03:77:e3:f6:92:a8: cc:5b:46:75:f5:1a:d1:c8:85:1e:ac:aa:61:ab:8d: 45:8a:49:27:01:5f:68:4f:75:0d:d5:5f:80:f8:a7: 41:99:0b:37:ef:5c:41:70:e2:90:46:16:08:c7:ef: 16:71:8d:1d:79:ab:ac:71:ed:89:67:8d:8e:93:ee: 56:88:d0:8c:84:02:6d:1f:c3:d2:e2:0e:92:fb:bc: d7:e7:ae:09:27:ec:44:5a:50:ec:9b:a2:95:e6:43: 55:93:a4:c3:16:8f:c7:3a:b0:02:87:8a:c1:3d:c3: ad:fe:00:8e:30:0c:23:c2:64:33:06:8a:93:0b:2a: 8f:39:b7:3b:64:6a:5a:76:bc:2c:02:67:95:6c:e0: 85:c3:fe:21:42:8c:ff:f2:dc:8d:32:02:3b:55:7d: 18:da:b7:ae:97:0a:6f:ee:7a:6f:a9:b8:bd:78:1a: 3b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F1:FD:89:49:46:A9:7E:B9:03:A0:DA:6B:99:D9:EC:10:E8:97:5F X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:87:38:58:35:1f:e1:5a:29:8f:e2:1f:29:17:66:63:2c:16: 96:cd:10:3c:42:7d:91:fe:d9:7a:3b:36:d7:cb:9d:3d:0a:15: e6:e3:1c:76:ee:e1:9a:6d:77:b9:ba:bf:67:da:a0:dd:dd:dc: 16:87:7e:bd:e1:2f:04:c1:00:14:a0:33:68:c7:08:c5:c8:85: 1f:ff:2c:42:ab:de:c6:0a:a2:42:d9:10:dd:ef:43:28:1c:26: 0a:8b:91:6c:de:23:ca:6e:33:8f:e7:dc:8a:98:a0:83:fd:65: 97:48:da:6a:2c:49:c2:44:cf:cd:b1:94:58:4a:76:c5:2f:1d: a6:11:fa:cc:4d:35:cb:79:9e:38:ae:6d:59:b2:f5:57:58:b8: fe:cd:ab:44:b1:54:73:1d:8d:32:04:02:f0:99:f3:63:2d:86: 50:35:68:35:47:73:27:48:b0:8d:1a:ea:b1:11:bf:80:f1:9b: b8:18:94:5f:36:94:a5:2a:b7:92:1e:97:18:40:f0:f1:cb:44: a9:82:01:b3:a5:05:99:3a:de:4b:90:f3:bc:f0:c5:7a:15:0c: 2f:21:c5:35:d5:f6:0c:64:1c:bb:15:60:fc:91:e8:b5:9d:b0: ef:ee:bf:39:54:4d:e9:cc:44:a8:b4:5f:b6:6a:70:a2:c5:b1: f5:41:fa:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWFlqDRAD8y0dy+6y0G+h742SkCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTEyMjAwMTE2NTJaFw0yNTEyMjMwODAxNTJaMDMxMTAvBgNV BAMTKDBCRjFGRDg5NDk0NkE5N0VCOTAzQTBEQTZCOTlEOUVDMTBFODk3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVeDHnZoigGPGviXbrB2Tlx3ku mQDGFwY0WJJBU8TrnCMjCukYgnoU7FrTC6PawFHkeopdOZCGxFawOrO7qzGlZLYT R36UOC7mUOyXvkw8g1Z9nAN34/aSqMxbRnX1GtHIhR6sqmGrjUWKSScBX2hPdQ3V X4D4p0GZCzfvXEFw4pBGFgjH7xZxjR15q6xx7YlnjY6T7laI0IyEAm0fw9LiDpL7 vNfnrgkn7ERaUOybopXmQ1WTpMMWj8c6sAKHisE9w63+AI4wDCPCZDMGipMLKo85 tztkalp2vCwCZ5Vs4IXD/iFCjP/y3I0yAjtVfRjat66XCm/uem+puL14GjvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/H9iUlGqX65A6Daa5nZ7BDol18wHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGHOFg1H+FaKY/iHykXZmMsFpbNEDxCfZH+ 2Xo7NtfLnT0KFebjHHbu4Zptd7m6v2faoN3d3BaHfr3hLwTBABSgM2jHCMXIhR// LEKr3sYKokLZEN3vQygcJgqLkWzeI8puM4/n3IqYoIP9ZZdI2mosScJEz82xlFhK dsUvHaYR+sxNNct5njiubVmy9VdYuP7Nq0SxVHMdjTIEAvCZ82MthlA1aDVHcydI sI0a6rERv4Dxm7gYlF82lKUqt5IelxhA8PHLRKmCAbOlBZk63kuQ87zwxXoVDC8h xTXV9gxkHLsVYPyR6LWdsO/uvzlUTenMRKi0X7ZqcKLFsfVB+rw= -----END CERTIFICATE-----Generated at Mon Dec 22 11:35:14 2025 by rpki-client