This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft File: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft (raw, json) Hash identifier: 2YcSflCiPq6BknGCjP6csyo7DZ1AZ8Akj2MfaVCfkE4= Subject key identifier: 93:E9:C4:96:94:FE:79:A9:72:7C:57:8A:A1:39:8E:A7:20:0B:61:3B Authority key identifier: 0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C Certificate issuer: /CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Certificate serial: 41074F1A18DFCBF8EAAFF0EFB761C0AD63EDAEB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft Manifest number: 0539 Signing time: Thu 18 Dec 2025 12:21:22 +0000 Manifest this update: Thu 18 Dec 2025 12:16:22 +0000 Manifest next update: Sun 21 Dec 2025 12:46:22 +0000 Files and hashes: 1: 3130332e37372e3135362e302f32342d3234203d3e20313530393432.roa (hash: mutFIy9cyMdV34tHn/8oq/u/DLJVfOqwJjG4+C2iVbI=) 2: 3130332e37372e3135362e302f32322d3234203d3e20313530393432.roa (hash: xsKvhGKuMBIEnxPyQJ6c1MbwsbCuaDw/dOSB6iinnF8=) 3: 3130332e37372e3135372e302f32342d3234203d3e20313530393432.roa (hash: 3IbW6k7SAGrr4pbFBGvz2rrnQK3BJBcsh2+owUjptuk=) 4: 3130332e37372e3135392e302f32342d3234203d3e20313437313435.roa (hash: mGAHC8BdMgBmjZL5jFtAJNkqoin6EENRYsub4ulTi+U=) 5: 0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl (hash: qmpLUFHqhAqF+QLuANOuv9ikSV5Rk2CJ4/QfD/TsMFw=) 6: 323430373a396338303a3a2f33322d3438203d3e20313335343834.roa (hash: PjdoU1IlaOBuAqcQYAfTUBsBWxQvsuLv55cXKjpLDcw=) 7: 3130332e37372e3135382e302f32342d3234203d3e20313530393432.roa (hash: t8s5ystlDMfZCpSFPrSjj+O0ZGC5ZqPSgcrBHxoO7nw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:07:4f:1a:18:df:cb:f8:ea:af:f0:ef:b7:61:c0:ad:63:ed:ae:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E8637C23FD7FD1ABF91B025E48040909797EA6C Validity Not Before: Dec 18 12:16:22 2025 GMT Not After : Dec 21 12:46:22 2025 GMT Subject: CN=93E9C49694FE79A9727C578AA1398EA7200B613B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:f1:f0:c0:87:c7:a1:30:06:34:62:60:eb: af:cf:9f:12:56:ce:50:d2:9f:5e:4f:a8:aa:55:01: 4a:a1:5c:53:cd:7f:1d:83:40:03:61:88:fa:1d:3f: 2f:02:97:fe:31:94:7b:67:10:44:3c:b0:a4:50:87: 09:a7:a6:1a:d8:bb:5f:0d:23:fd:ec:ac:44:00:91: d6:e3:91:6f:13:d2:a2:ae:0c:90:48:4a:0f:4c:3c: 5f:d0:a2:98:b1:2d:52:cd:8c:8f:12:b2:60:33:12: ac:7c:6b:3e:73:7a:d9:fa:7a:af:41:2a:24:79:ec: 58:00:ba:f9:36:12:c4:6a:e4:79:83:91:5c:6d:bd: 35:fc:95:b0:80:b6:c9:06:41:45:38:19:c2:84:1f: 58:cb:2a:f9:8f:a4:ea:54:2b:03:fe:75:da:a6:28: a9:50:20:20:a1:87:4f:6c:0b:b5:3d:7a:74:06:a6: 65:a8:2b:98:b5:22:d6:30:3e:8a:dc:56:c6:37:2c: 48:38:f7:ca:e4:28:ba:c2:8d:45:d1:0a:4e:11:40: 12:00:84:8f:b3:af:8f:d3:64:73:29:c5:f8:50:c2: e6:58:29:8f:3e:5e:bb:26:1d:d4:1a:d6:a1:7e:b4: aa:16:61:16:83:c1:2a:7c:49:bd:b2:e2:5c:7a:99: 10:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E9:C4:96:94:FE:79:A9:72:7C:57:8A:A1:39:8E:A7:20:0B:61:3B X509v3 Authority Key Identifier: keyid:0E:86:37:C2:3F:D7:FD:1A:BF:91:B0:25:E4:80:40:90:97:97:EA:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0E8637C23FD7FD1ABF91B025E48040909797EA6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac3f2288-88cf-4d2b-bba6-a03dd5f83761/0/0E8637C23FD7FD1ABF91B025E48040909797EA6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:f8:fa:65:1f:3f:c2:49:4e:04:46:be:cf:5a:e5:17:73:4c: 9d:6c:3e:9a:ae:26:33:a5:b8:1c:90:fc:0b:10:ba:e1:57:69: 84:93:65:c7:9e:63:20:70:82:59:5b:19:22:54:6e:b5:bc:62: 22:4a:f2:05:bc:e0:d2:9f:77:04:61:9e:c7:ed:0e:05:40:c0: 75:c6:38:73:30:51:ec:f7:cf:62:51:6a:6c:43:f7:cf:8b:23: 7c:dd:ec:a1:80:0d:a4:7e:5c:62:0c:7e:a6:81:6b:15:78:55: 9f:8e:bd:fd:87:6c:42:a5:93:e4:63:c9:5d:e4:86:15:ac:ea: 59:b6:02:7e:a4:72:54:14:6e:81:bb:2e:52:c0:72:ed:5b:c4: 11:c3:1c:a1:fc:57:e0:32:6c:d3:3d:ac:5b:d8:f8:34:41:91: 4f:bc:6d:3e:a1:58:6d:66:e4:3c:e6:4c:88:45:11:9f:7f:5b: a0:31:74:9b:b1:a8:be:5c:e1:0d:69:e3:93:37:6a:df:40:45: c4:fc:84:13:46:1f:91:93:2c:62:4e:26:00:26:a8:0b:6a:bf: 1f:f5:ca:61:a2:d4:71:a3:0d:f7:22:0f:59:84:a0:83:36:66: 15:c0:f3:4a:3e:55:75:f8:b5:61:1b:55:cd:e0:fe:6f:05:f4: bd:95:9e:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQdPGhjfy/jqr/Dvt2HArWPtrrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5 Nzk3RUE2QzAeFw0yNTEyMTgxMjE2MjJaFw0yNTEyMjExMjQ2MjJaMDMxMTAvBgNV BAMTKDkzRTlDNDk2OTRGRTc5QTk3MjdDNTc4QUExMzk4RUE3MjAwQjYxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hPHwwIfHoTAGNGJg66/PnxJW zlDSn15PqKpVAUqhXFPNfx2DQANhiPodPy8Cl/4xlHtnEEQ8sKRQhwmnphrYu18N I/3srEQAkdbjkW8T0qKuDJBISg9MPF/QopixLVLNjI8SsmAzEqx8az5zetn6eq9B KiR57FgAuvk2EsRq5HmDkVxtvTX8lbCAtskGQUU4GcKEH1jLKvmPpOpUKwP+ddqm KKlQICChh09sC7U9enQGpmWoK5i1ItYwPorcVsY3LEg498rkKLrCjUXRCk4RQBIA hI+zr4/TZHMpxfhQwuZYKY8+XrsmHdQa1qF+tKoWYRaDwSp8Sb2y4lx6mRB5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+nElpT+ealyfFeKoTmOpyALYTswHwYDVR0j BBgwFoAUDoY3wj/X/Rq/kbAl5IBAkJeX6mwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzNmMjI4OC04OGNmLTRkMmItYmJhNi1hMDNkZDVmODM3NjEvMC8wRTg2MzdDMjNG RDdGRDFBQkY5MUIwMjVFNDgwNDA5MDk3OTdFQTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQwOTA5Nzk3 RUE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzZjIyODgtODhjZi00ZDJiLWJi YTYtYTAzZGQ1ZjgzNzYxLzAvMEU4NjM3QzIzRkQ3RkQxQUJGOTFCMDI1RTQ4MDQw OTA5Nzk3RUE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr4+mUfP8JJTgRGvs9a5RdzTJ1sPpquJjOl uByQ/AsQuuFXaYSTZceeYyBwgllbGSJUbrW8YiJK8gW84NKfdwRhnsftDgVAwHXG OHMwUez3z2JRamxD98+LI3zd7KGADaR+XGIMfqaBaxV4VZ+Ovf2HbEKlk+RjyV3k hhWs6lm2An6kclQUboG7LlLAcu1bxBHDHKH8V+AybNM9rFvY+DRBkU+8bT6hWG1m 5DzmTIhFEZ9/W6AxdJuxqL5c4Q1p45M3at9ARcT8hBNGH5GTLGJOJgAmqAtqvx/1 ymGi1HGjDfciD1mEoIM2ZhXA80o+VXX4tWEbVc3g/m8F9L2Vnt8= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:46 2025 by rpki-client