This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft File: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft (raw, json) Hash identifier: YhxosNI7PChE655kXbww2RoUZgfQHP1dEdbLV5eOgZk= Subject key identifier: 6B:1D:09:84:F4:A3:19:DE:7A:A4:D7:58:4F:B2:3B:F6:57:D1:49:6A Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E Certificate issuer: /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Certificate serial: 28CD38BDAC19963FA0201B750E14835F447E0508 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft Manifest number: 029F Signing time: Wed 17 Dec 2025 23:11:33 +0000 Manifest this update: Wed 17 Dec 2025 23:06:33 +0000 Manifest next update: Sun 21 Dec 2025 05:17:33 +0000 Files and hashes: 1: 0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl (hash: zw8mr5rJdBuMz3/lI5Ja9uThA/nDr8DsK6pLjMkKC4U=) 2: 3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (hash: ew6FBh5cPjMaDtq6eoOfJ8yer7wJ+Y8LRfEbpfeqcdU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 05:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cd:38:bd:ac:19:96:3f:a0:20:1b:75:0e:14:83:5f:44:7e:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E Validity Not Before: Dec 17 23:06:33 2025 GMT Not After : Dec 21 05:17:33 2025 GMT Subject: CN=6B1D0984F4A319DE7AA4D7584FB23BF657D1496A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:5a:10:7c:a6:7a:21:ac:f1:ec:ff:87:cc: 8e:0d:8c:3d:0e:57:a8:2b:a5:ba:95:8f:66:f1:a9: 78:fc:26:91:83:70:c1:52:a2:23:d1:90:2c:34:28: f6:b5:15:ff:bb:21:90:c5:7d:1c:c5:2e:4e:68:4b: 2f:1e:27:79:43:cf:aa:f9:93:17:f4:c2:19:03:f1: f6:54:22:d7:eb:d0:0f:44:3d:4a:06:f3:1b:31:3b: 16:75:4b:af:4f:ce:4d:f2:05:45:da:56:fd:6b:f5: dc:81:09:09:ce:3a:49:5b:40:c0:db:9e:e9:30:83: 10:cc:06:ea:1e:15:54:bc:af:af:78:29:49:78:1a: cd:05:06:0d:8f:90:47:31:85:a3:c5:6d:6f:eb:fc: 4e:33:8c:ec:d9:76:18:31:17:01:2f:30:75:06:13: b0:00:fb:69:e1:44:e5:23:72:b9:d1:a0:5e:aa:bb: 7e:8e:7e:4d:18:e7:b1:08:74:bf:3a:90:25:95:17: 4e:42:bf:f3:91:fc:d2:49:2e:0a:34:04:8b:c4:a5: a8:c3:b1:d0:a6:c8:0e:23:63:c0:0f:c3:a4:19:a9: eb:61:9d:e2:69:ba:73:8a:ab:9a:ad:cf:55:fd:39: c5:aa:31:ee:41:d4:60:1a:32:4f:3c:67:07:4f:4d: f3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1D:09:84:F4:A3:19:DE:7A:A4:D7:58:4F:B2:3B:F6:57:D1:49:6A X509v3 Authority Key Identifier: keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:62:71:31:3c:b8:86:05:f6:6c:65:6e:54:19:06:40:b6:8b: 29:cd:c3:9b:c6:d7:fc:33:a8:f5:e9:1d:5e:2a:9d:2f:dc:ad: f5:96:63:1b:d3:5e:6c:64:60:ef:d3:d9:1e:e2:42:e7:ff:fb: 03:54:58:ac:c6:a9:cd:ed:d5:9b:01:a8:9f:1b:6d:bb:00:7e: 7f:3a:3c:a5:39:f8:90:15:03:de:c5:86:49:c1:0e:61:94:de: a9:04:d9:62:37:1b:19:36:4c:12:f1:b9:50:6d:a9:20:9c:d2: 2a:f4:6c:2b:02:71:63:03:94:84:65:86:26:40:d6:99:8b:be: 25:04:ec:21:1e:8c:4a:69:04:2a:dd:31:d1:af:12:10:84:49: 22:ab:21:81:fe:32:c1:e3:b2:9d:b3:cb:57:5b:a6:17:8d:55: 44:c7:6f:dd:f5:16:4e:46:0e:24:f8:b1:a7:ce:39:0c:4a:27: a3:c7:4b:2a:3b:e4:f3:da:9a:1d:bd:12:d8:50:7e:ee:5d:d9: 8e:ed:87:d9:4e:63:45:8f:2b:14:6a:c0:d9:c9:c2:de:4b:f1: c1:86:87:09:bf:14:50:6f:37:ce:89:e5:80:13:55:6a:5c:0b: b5:87:ec:24:3b:8c:82:16:23:ed:cd:27:a0:65:43:e0:09:7c: 24:f3:47:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKM04vawZlj+gIBt1DhSDX0R+BQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy ODAwRjkzRTAeFw0yNTEyMTcyMzA2MzNaFw0yNTEyMjEwNTE3MzNaMDMxMTAvBgNV BAMTKDZCMUQwOTg0RjRBMzE5REU3QUE0RDc1ODRGQjIzQkY2NTdEMTQ5NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1loQfKZ6Iazx7P+HzI4NjD0O V6grpbqVj2bxqXj8JpGDcMFSoiPRkCw0KPa1Ff+7IZDFfRzFLk5oSy8eJ3lDz6r5 kxf0whkD8fZUItfr0A9EPUoG8xsxOxZ1S69Pzk3yBUXaVv1r9dyBCQnOOklbQMDb nukwgxDMBuoeFVS8r694KUl4Gs0FBg2PkEcxhaPFbW/r/E4zjOzZdhgxFwEvMHUG E7AA+2nhROUjcrnRoF6qu36Ofk0Y57EIdL86kCWVF05Cv/OR/NJJLgo0BIvEpajD sdCmyA4jY8APw6QZqethneJpunOKq5qtz1X9OcWqMe5B1GAaMk88ZwdPTfOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUax0JhPSjGd56pNdYT7I79lfRSWowHwYDVR0j BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1 RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw RjkzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgwMzViMTItNmNhMy00ZmQyLWI5 YjMtMjYwZDU3M2U1N2MyLzAvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3 RjQyODAwRjkzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9icTE8uIYF9mxlblQZBkC2iynNw5vG1/wz qPXpHV4qnS/crfWWYxvTXmxkYO/T2R7iQuf/+wNUWKzGqc3t1ZsBqJ8bbbsAfn86 PKU5+JAVA97FhknBDmGU3qkE2WI3Gxk2TBLxuVBtqSCc0ir0bCsCcWMDlIRlhiZA 1pmLviUE7CEejEppBCrdMdGvEhCESSKrIYH+MsHjsp2zy1dbpheNVUTHb931Fk5G DiT4safOOQxKJ6PHSyo75PPamh29EthQfu5d2Y7th9lOY0WPKxRqwNnJwt5L8cGG hwm/FFBvN86J5YATVWpcC7WH7CQ7jIIWI+3NJ6BlQ+AJfCTzRws= -----END CERTIFICATE-----Generated at Fri Dec 19 21:14:04 2025 by rpki-client