This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft (raw, json) Hash identifier: QXtZkEGHfSzmPFzmMjE8WTbmSNFHZh7HmpPqTeJ0kXE= Subject key identifier: 82:BD:25:A5:19:AF:C5:E0:5D:61:08:A3:0B:70:5D:C6:16:46:A5:2C Authority key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Certificate issuer: /CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Certificate serial: 2242A6DF165B1FBE38E1A83B419990E84E235FC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft Manifest number: 0531 Signing time: Thu 18 Dec 2025 01:31:36 +0000 Manifest this update: Thu 18 Dec 2025 01:26:36 +0000 Manifest next update: Sun 21 Dec 2025 12:54:36 +0000 Files and hashes: 1: 323030313a6466353a393630303a3a2f34382d3438203d3e20313335343830.roa (hash: ZCfIqpH3uC9vaXsU0X4IOAqNNWCL/kt97zzI3ZypMPI=) 2: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl (hash: YbMVVlDW5DS3ZeIme47Q4AaunEPpUg7Y7UKBf40q32w=) 3: 3130332e37362e3230302e302f32322d3234203d3e20313335343830.roa (hash: MtpuQgaD3AVd7DaurQu06bLnX7K9XIzGJP+djliDNAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:42:a6:df:16:5b:1f:be:38:e1:a8:3b:41:99:90:e8:4e:23:5f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Validity Not Before: Dec 18 01:26:36 2025 GMT Not After : Dec 21 12:54:36 2025 GMT Subject: CN=82BD25A519AFC5E05D6108A30B705DC61646A52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2b:9c:dc:f7:14:14:57:1b:89:6f:5c:ae:5c: 48:6d:d7:97:93:13:1e:46:0c:dd:f7:6e:80:6c:8d: 23:cd:a6:a1:56:b7:19:db:bb:03:70:f9:f9:54:42: a1:b8:6a:64:0a:b5:58:e3:6d:71:32:be:e1:41:6b: ea:54:85:95:6b:91:2d:13:21:8d:68:28:b4:bb:0b: e7:c0:62:18:26:fc:7b:2c:54:6c:c9:81:0f:3a:37: ca:de:0b:72:ed:71:72:de:64:63:91:e7:51:9d:80: 08:db:37:d6:de:be:01:80:a7:6f:98:2b:1b:d2:df: f6:a8:0e:fd:ba:ce:0c:23:78:40:9b:48:a5:46:a8: fa:fd:01:81:de:e8:63:77:b1:25:11:49:71:0f:5d: 89:b3:f6:65:7f:8b:47:d5:28:28:b0:05:ca:11:8a: ae:e9:48:b4:92:83:bd:0d:a8:b2:5e:25:d7:f6:27: 12:9c:50:89:8a:4b:42:0c:b7:59:d5:68:0f:06:c1: 75:fc:97:a3:75:7f:fe:e4:06:47:9c:1e:50:a8:00: 42:92:00:07:3d:78:ec:5b:33:bf:9a:65:eb:db:0e: ed:ee:20:e5:c8:60:a5:7d:8a:8f:bf:5e:d9:48:07: cd:98:91:83:7e:67:23:15:37:42:43:c1:58:42:4c: 18:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:25:A5:19:AF:C5:E0:5D:61:08:A3:0B:70:5D:C6:16:46:A5:2C X509v3 Authority Key Identifier: keyid:0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0a:6a:79:cd:12:69:73:71:48:47:9d:33:33:6e:f3:0f:11: 48:f2:2a:6d:51:15:4f:00:e1:ec:4b:df:1f:7f:f1:67:e6:1b: 05:e1:c6:1e:2f:43:88:53:2d:9b:13:e1:9d:af:50:3e:d7:b0: a2:ac:d1:f0:c6:40:4d:d8:53:1f:08:f5:60:25:84:e2:fc:7c: 09:4c:f0:44:93:03:cb:ee:c7:c3:2c:12:c8:0c:26:6e:4c:45: 44:aa:c3:7a:ee:d3:76:f1:58:57:e9:06:4c:c0:3c:3c:70:46: ce:6c:3c:cd:2d:c1:c3:37:4f:6c:07:4c:fb:2a:05:4d:c8:1e: e9:6d:33:76:4b:47:a5:3e:0a:ca:63:fb:3e:53:bb:75:25:d4: b1:19:ec:88:0b:c9:18:51:47:b6:3d:e1:96:80:a5:dd:cb:2a: 7e:01:ae:85:9a:ae:81:1a:9e:7a:ec:06:18:75:ce:81:1c:d3: c0:27:ca:4b:c6:3d:3f:47:0a:1f:b9:2b:d7:29:e8:29:68:cf: b6:ad:63:b7:64:d0:da:57:ca:a9:6b:4d:d1:ce:6a:e4:19:ff: df:82:90:d8:b4:e6:68:34:7a:77:f3:d2:d2:fb:20:bd:e7:4f: ce:df:35:cf:88:be:0c:cc:63:93:40:ea:46:91:68:09:70:52: 1c:58:8f:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkKm3xZbH7444ag7QZmQ6E4jX8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2 MUExNjE1QzAeFw0yNTEyMTgwMTI2MzZaFw0yNTEyMjExMjU0MzZaMDMxMTAvBgNV BAMTKDgyQkQyNUE1MTlBRkM1RTA1RDYxMDhBMzBCNzA1REM2MTY0NkE1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSK5zc9xQUVxuJb1yuXEht15eT Ex5GDN33boBsjSPNpqFWtxnbuwNw+flUQqG4amQKtVjjbXEyvuFBa+pUhZVrkS0T IY1oKLS7C+fAYhgm/HssVGzJgQ86N8reC3LtcXLeZGOR51GdgAjbN9bevgGAp2+Y KxvS3/aoDv26zgwjeECbSKVGqPr9AYHe6GN3sSURSXEPXYmz9mV/i0fVKCiwBcoR iq7pSLSSg70NqLJeJdf2JxKcUImKS0IMt1nVaA8GwXX8l6N1f/7kBkecHlCoAEKS AAc9eOxbM7+aZevbDu3uIOXIYKV9io+/XtlIB82YkYN+ZyMVN0JDwVhCTBgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgr0lpRmvxeBdYQijC3BdxhZGpSwwHwYDVR0j BBgwFoAUD+2iiPcnXepGmu9MI43KmmGhYVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMC8wRkVEQTI4OEY3 Mjc1REVBNDY5QUVGNEMyMzhEQ0E5QTYxQTE2MTVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENBOUE2MUEx NjE1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMzNzBlNmYtZjBjNy00ZjQwLThi YTQtYTAxZTVkMGM3NGU0LzAvMEZFREEyODhGNzI3NURFQTQ2OUFFRjRDMjM4RENB OUE2MUExNjE1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0KannNEmlzcUhHnTMzbvMPEUjyKm1RFU8A 4exL3x9/8WfmGwXhxh4vQ4hTLZsT4Z2vUD7XsKKs0fDGQE3YUx8I9WAlhOL8fAlM 8ESTA8vux8MsEsgMJm5MRUSqw3ru03bxWFfpBkzAPDxwRs5sPM0twcM3T2wHTPsq BU3IHultM3ZLR6U+Cspj+z5Tu3Ul1LEZ7IgLyRhRR7Y94ZaApd3LKn4BroWaroEa nnrsBhh1zoEc08AnykvGPT9HCh+5K9cp6Cloz7atY7dk0NpXyqlrTdHOauQZ/9+C kNi05mg0enfz0tL7IL3nT87fNc+IvgzMY5NA6kaRaAlwUhxYjwg= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:58 2025 by rpki-client