This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft (raw, json) Hash identifier: 6M64AXYqiaXYNftb/UXLS0gYH+o1lHdp4DVvNuQkcig= Subject key identifier: 18:5D:C5:8E:9E:3E:58:F8:72:62:DD:DE:DE:96:3B:39:38:78:10:2B Authority key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Certificate issuer: /CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Certificate serial: 43225B2FC085FD9FDA781E51F53AD9772D42A544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft Manifest number: 0218 Signing time: Sat 20 Dec 2025 04:13:36 +0000 Manifest this update: Sat 20 Dec 2025 04:08:36 +0000 Manifest next update: Tue 23 Dec 2025 14:39:36 +0000 Files and hashes: 1: 3130332e3232392e3138352e302f32342d3234203d3e2039333431.roa (hash: bYUXew86UoI4/31WSjYGIt5ZDZ5ojqbj3fo7ufpNm20=) 2: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl (hash: b6v1bemhogRJu3i5AI5JTv5fTagJWFlxcow4iv8bgpE=) 3: 3130332e3232392e3138342e302f32342d3234203d3e2039333431.roa (hash: wfRjzL8bQ7dLLloZedRWystpfn4vijpj4SNcPfcqhxI=) 4: 3130332e3232392e3138342e302f32332d3233203d3e2039333431.roa (hash: 7OzNX15Yuahy0/8eEN1/yzezZR+83/JHbFFyRpwzwPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 14:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:22:5b:2f:c0:85:fd:9f:da:78:1e:51:f5:3a:d9:77:2d:42:a5:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Validity Not Before: Dec 20 04:08:36 2025 GMT Not After : Dec 23 14:39:36 2025 GMT Subject: CN=185DC58E9E3E58F87262DDDEDE963B393878102B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9e:49:a0:00:fc:43:d5:d0:01:96:b0:df:f6: fe:b1:ad:03:ca:d8:41:bf:de:0f:d2:6b:52:43:a4: 9d:74:86:3c:09:20:b4:57:28:39:71:31:ed:40:b5: fd:d5:87:70:2f:7e:7c:75:94:b4:fd:ab:98:91:d4: b2:d7:8b:72:8a:e6:7c:76:e8:6b:0c:83:46:d6:89: 1e:35:6f:06:55:ee:35:94:b7:8c:0b:2b:8f:35:0a: 34:f5:eb:83:ba:03:36:84:97:b3:ea:ea:21:54:69: b7:c5:35:f1:df:ed:19:cb:5b:3c:5f:0c:83:84:6c: b3:0d:a2:d7:6c:65:86:38:c4:cb:1e:d3:75:c5:fb: 4f:61:8f:4a:71:f6:11:a5:21:47:5e:89:59:46:dc: c6:5c:4a:97:c8:42:bb:50:05:38:4f:c2:9a:41:30: 95:f9:36:2b:77:a8:76:d5:e1:40:64:df:8f:ac:af: bb:a3:ad:26:37:df:fc:28:e5:b8:58:20:6a:97:e9: 08:44:1f:76:24:9b:de:d1:16:72:bb:64:81:6f:60: 9a:2d:eb:9d:23:27:6e:81:0d:18:fb:6b:3c:28:d5: 08:54:c1:04:b8:06:89:00:26:85:d9:f6:82:8a:17: 71:1d:2f:b3:a3:d5:5c:95:13:97:ab:58:76:f0:6f: 4e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:C5:8E:9E:3E:58:F8:72:62:DD:DE:DE:96:3B:39:38:78:10:2B X509v3 Authority Key Identifier: keyid:08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a3:e4:68:d1:93:4b:00:ef:32:09:88:0f:3d:29:23:a9:81: 47:2c:39:c5:0a:93:38:7d:9a:9c:97:33:0c:15:7d:f7:3c:f4: e8:06:33:0a:76:e2:68:63:10:e7:39:a1:6a:bd:a7:e6:f0:f1: a0:3f:e5:62:47:1b:e2:99:3e:c9:20:c3:da:e8:f2:fd:dc:a6: eb:fa:37:ae:50:8d:61:31:87:d7:99:32:fe:e3:f3:59:f1:ff: e4:24:0e:cc:1e:3b:af:11:18:08:89:cd:0d:6a:7c:1d:e2:19: 4f:24:5b:2a:48:f8:f4:63:a5:40:c0:10:ab:1d:49:cb:d4:d7: 46:93:9c:7e:66:05:61:ea:55:0e:5b:1c:05:fe:f8:44:5f:80: 00:7a:f9:18:7c:e6:50:00:b1:79:a5:ab:67:3b:b1:62:da:ca: bf:89:f7:6d:01:d0:b3:19:8e:bd:b2:49:1c:9e:2e:5d:a3:c5: 6c:e6:f1:1b:91:f1:c6:1b:65:17:19:2d:b6:92:aa:6a:95:f3: f7:9e:2e:e0:8d:0c:1e:5b:ce:4c:a4:e5:ff:7b:74:10:e3:bc: 3c:3a:36:e2:d6:68:97:58:4a:8f:bd:55:d3:f0:93:c3:15:b5: 51:d5:94:c6:6f:20:7d:9c:42:33:de:27:e2:80:21:9c:94:31: 8f:c2:e0:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyJbL8CF/Z/aeB5R9TrZdy1CpUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0 QkNGMENDQjAeFw0yNTEyMjAwNDA4MzZaFw0yNTEyMjMxNDM5MzZaMDMxMTAvBgNV BAMTKDE4NURDNThFOUUzRTU4Rjg3MjYyRERERURFOTYzQjM5Mzg3ODEwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDonkmgAPxD1dABlrDf9v6xrQPK 2EG/3g/Sa1JDpJ10hjwJILRXKDlxMe1Atf3Vh3Avfnx1lLT9q5iR1LLXi3KK5nx2 6GsMg0bWiR41bwZV7jWUt4wLK481CjT164O6AzaEl7Pq6iFUabfFNfHf7RnLWzxf DIOEbLMNotdsZYY4xMse03XF+09hj0px9hGlIUdeiVlG3MZcSpfIQrtQBThPwppB MJX5Nit3qHbV4UBk34+sr7ujrSY33/wo5bhYIGqX6QhEH3Ykm97RFnK7ZIFvYJot 650jJ26BDRj7azwo1QhUwQS4BokAJoXZ9oKKF3EdL7Oj1VyVE5erWHbwb06/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGF3Fjp4+WPhyYt3e3pY7OTh4ECswHwYDVR0j BBgwFoAUCOVVdZqgwYV2NkyDJhts6kvPDMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMC8wOEU1NTU3NTlB QTBDMTg1NzYzNjRDODMyNjFCNkNFQTRCQ0YwQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZDRUE0QkNG MENDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlZTgyYjctYzE4Mi00ZTgzLTg5 N2MtZTAwZjNjZTFiMGQyLzAvMDhFNTU1NzU5QUEwQzE4NTc2MzY0QzgzMjYxQjZD RUE0QkNGMENDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGj5GjRk0sA7zIJiA89KSOpgUcsOcUKkzh9 mpyXMwwVffc89OgGMwp24mhjEOc5oWq9p+bw8aA/5WJHG+KZPskgw9ro8v3cpuv6 N65QjWExh9eZMv7j81nx/+QkDsweO68RGAiJzQ1qfB3iGU8kWypI+PRjpUDAEKsd ScvU10aTnH5mBWHqVQ5bHAX++ERfgAB6+Rh85lAAsXmlq2c7sWLayr+J920B0LMZ jr2ySRyeLl2jxWzm8RuR8cYbZRcZLbaSqmqV8/eeLuCNDB5bzkyk5f97dBDjvDw6 NuLWaJdYSo+9VdPwk8MVtVHVlMZvIH2cQjPeJ+KAIZyUMY/C4Is= -----END CERTIFICATE-----Generated at Sun Dec 21 12:11:11 2025 by rpki-client