This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft File: 0A8E8E063785238467D4AD1F507CC97B30DBB959.mft (raw, json) Hash identifier: KBUOYEFJCRYsIo8o8R0hgCe2J/H3NgyLWMTyIUnkwmY= Subject key identifier: 05:0C:2D:DD:AD:26:5A:6A:21:07:FF:CF:78:FE:68:49:4B:73:6C:F3 Authority key identifier: 0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 Certificate issuer: /CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Certificate serial: 61CB2B672D72FD2EE509DB183479B5C6EB78B579 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft Manifest number: 019C Signing time: Sat 20 Dec 2025 17:31:39 +0000 Manifest this update: Sat 20 Dec 2025 17:26:39 +0000 Manifest next update: Tue 23 Dec 2025 20:30:39 +0000 Files and hashes: 1: 3130332e3135342e3137382e302f32332d3234203d3e20313331373035.roa (hash: z6Vlo67b6HowiJ4eNQMIImpcN0YW2LjWV36x2SeZA5M=) 2: 323430363a356334303a313030303a3a2f33362d3438203d3e20313331373035.roa (hash: Mk93/Py1aNdqibCxnW5rDhu68jIUBJ5f2wQcM99902Q=) 3: 0A8E8E063785238467D4AD1F507CC97B30DBB959.crl (hash: IPgFFg4jwkEZJHSWgezL+818czLMQm8GcaFmm75OZUY=) 4: 3130332e3135342e3137392e302f32342d3234203d3e20313331373035.roa (hash: fuYAXhPxVSs3uQDGyVoloAUdGAB1vPzhCZLoObuSwWo=) 5: 323430363a356334303a323030303a3a2f33362d3438203d3e20313331373035.roa (hash: 34w8SIWSSd8kqURH0Jn+B/R9XKBmDHxtyVWAlqGJxJo=) 6: 323430363a356334303a373737373a3a2f34382d3438203d3e20313331373035.roa (hash: uxf3gr1qNXj16NXsE/3S99HOdYs6kHV+q6L/TWnS+ag=) 7: 323430363a356334303a3a2f33362d3438203d3e20313331373035.roa (hash: vVX9J+iIt5S0zLOqjzNP9A3DgvrDc3RqZLM36XJo31Q=) 8: 3130332e3135342e3137382e302f32342d3234203d3e20313331373035.roa (hash: dY5S+6E2tTu7kTt3kud9rHyNZ8ICT/4MYY6A5gKdkm0=) 9: 323430363a356334303a383838383a3a2f34382d3438203d3e20313331373035.roa (hash: xhrHJkeZ6ORZKPQ3ePW270bQNoXqgZH/hWdzMzXe/Ng=) 10: 323430363a356334303a3a2f33322d3438203d3e20313331373035.roa (hash: ZrrNvfIdpKFxME3MijZJjel9mkVCFWr1LKlyTLKuOmk=) 11: 323430363a356334303a393939393a3a2f34382d3438203d3e20313331373035.roa (hash: cSd8oWkoy/PciTBhaM2sT+kEpSFLFHXqmquC1grDeYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 20:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:cb:2b:67:2d:72:fd:2e:e5:09:db:18:34:79:b5:c6:eb:78:b5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8E8E063785238467D4AD1F507CC97B30DBB959 Validity Not Before: Dec 20 17:26:39 2025 GMT Not After : Dec 23 20:30:39 2025 GMT Subject: CN=050C2DDDAD265A6A2107FFCF78FE68494B736CF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4f:63:bf:37:cb:eb:e9:65:2d:e1:60:a1:36: d4:f1:b0:e7:37:7c:0f:b3:52:78:72:d5:47:a2:1a: 86:c3:9d:ba:a6:89:db:7b:cd:f4:49:75:65:93:cd: 18:aa:bb:a8:af:d3:b4:69:ba:64:d0:86:a8:c1:83: 52:09:27:bb:ee:21:3b:72:a6:d2:c3:10:10:75:58: 3e:60:bf:33:36:64:45:ed:1f:9a:6b:2b:49:14:55: f7:3d:c4:1c:f7:47:f6:e0:52:f2:92:42:de:db:11: fd:21:17:43:05:4d:39:b7:fd:dd:e0:a7:1f:c1:14: df:aa:f7:dd:7d:c4:47:18:50:d2:ee:bf:99:4d:2f: aa:fb:b9:b7:78:45:e1:01:38:90:32:c9:dd:50:d0: d6:14:9a:1b:85:7c:33:8b:fb:6f:23:22:ec:d1:1d: bb:ef:3f:6b:bb:51:1e:5b:13:90:39:40:01:ea:3f: 43:18:b7:48:73:02:26:6b:be:a7:eb:95:44:d3:b8: ce:48:36:87:18:40:b3:46:cc:04:30:51:02:69:99: d7:c7:75:5d:6f:71:61:b9:7f:a0:dd:74:42:82:62: ce:bf:e7:ba:c2:2e:f3:b2:df:a1:90:8b:e0:26:69: a5:f7:3e:70:5c:38:22:2f:fb:03:e1:dc:58:a6:00: 63:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0C:2D:DD:AD:26:5A:6A:21:07:FF:CF:78:FE:68:49:4B:73:6C:F3 X509v3 Authority Key Identifier: keyid:0A:8E:8E:06:37:85:23:84:67:D4:AD:1F:50:7C:C9:7B:30:DB:B9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A8E8E063785238467D4AD1F507CC97B30DBB959.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9d6acc6-0af3-4b97-99a4-0f45e8ecf576/0/0A8E8E063785238467D4AD1F507CC97B30DBB959.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c3:89:4a:ee:63:08:d6:2f:70:a4:86:8c:68:20:ec:38:cb: 71:f2:44:b7:60:e0:0a:4b:20:cf:36:0a:73:64:da:b7:91:b9: 93:5c:03:35:c3:db:73:8b:be:77:84:f1:27:88:3e:8e:1b:31: 1f:67:f3:e4:d0:4f:51:13:68:ba:27:b8:4a:fe:90:3e:4d:2e: 33:36:37:88:e6:32:bd:76:f4:cb:6e:34:f0:52:14:62:a3:ea: ee:77:0c:05:10:f5:e3:38:3d:88:59:8a:91:d5:5f:f6:a3:ff: 82:28:7f:21:8a:2e:d8:9e:5b:38:b3:6a:33:1a:0b:63:f6:9d: e1:f4:c5:40:37:ca:7a:ae:c7:34:d1:ee:f4:b6:58:aa:76:dd: e2:76:d1:3f:4d:98:af:72:86:5e:d8:b7:6b:86:fc:b9:57:ea: 44:86:72:83:55:f9:90:fc:ba:ae:06:01:2f:1d:37:91:f2:4c: 08:37:b5:23:98:84:e7:67:5a:b9:d6:60:01:90:a9:8d:87:b0: bb:a1:0f:c8:ba:9f:40:5c:dc:4a:09:5c:8b:32:7e:28:31:84: 31:21:66:02:28:69:e2:3c:e0:df:75:a0:b3:40:a1:79:01:59: c5:89:0a:80:47:0d:04:b7:e9:97:9f:3e:35:85:3b:82:05:40: e4:1c:16:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYcsrZy1y/S7lCdsYNHm1xut4tXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0Iz MERCQjk1OTAeFw0yNTEyMjAxNzI2MzlaFw0yNTEyMjMyMDMwMzlaMDMxMTAvBgNV BAMTKDA1MEMyREREQUQyNjVBNkEyMTA3RkZDRjc4RkU2ODQ5NEI3MzZDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcT2O/N8vr6WUt4WChNtTxsOc3 fA+zUnhy1UeiGobDnbqmidt7zfRJdWWTzRiqu6iv07RpumTQhqjBg1IJJ7vuITty ptLDEBB1WD5gvzM2ZEXtH5prK0kUVfc9xBz3R/bgUvKSQt7bEf0hF0MFTTm3/d3g px/BFN+q9919xEcYUNLuv5lNL6r7ubd4ReEBOJAyyd1Q0NYUmhuFfDOL+28jIuzR HbvvP2u7UR5bE5A5QAHqP0MYt0hzAiZrvqfrlUTTuM5INocYQLNGzAQwUQJpmdfH dV1vcWG5f6DddEKCYs6/57rCLvOy36GQi+AmaaX3PnBcOCIv+wPh3FimAGOHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBQwt3a0mWmohB//PeP5oSUtzbPMwHwYDVR0j BBgwFoAUCo6OBjeFI4Rn1K0fUHzJezDbuVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWQ2YWNjNi0wYWYzLTRiOTctOTlhNC0wZjQ1ZThlY2Y1NzYvMC8wQThFOEUwNjM3 ODUyMzg0NjdENEFEMUY1MDdDQzk3QjMwREJCOTU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5N0IzMERC Qjk1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjlkNmFjYzYtMGFmMy00Yjk3LTk5 YTQtMGY0NWU4ZWNmNTc2LzAvMEE4RThFMDYzNzg1MjM4NDY3RDRBRDFGNTA3Q0M5 N0IzMERCQjk1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjDiUruYwjWL3CkhoxoIOw4y3HyRLdg4ApL IM82CnNk2reRuZNcAzXD23OLvneE8SeIPo4bMR9n8+TQT1ETaLonuEr+kD5NLjM2 N4jmMr129MtuNPBSFGKj6u53DAUQ9eM4PYhZipHVX/aj/4IofyGKLtieWzizajMa C2P2neH0xUA3ynquxzTR7vS2WKp23eJ20T9NmK9yhl7Yt2uG/LlX6kSGcoNV+ZD8 uq4GAS8dN5HyTAg3tSOYhOdnWrnWYAGQqY2HsLuhD8i6n0Bc3EoJXIsyfigxhDEh ZgIoaeI84N91oLNAoXkBWcWJCoBHDQS36ZefPjWFO4IFQOQcFsU= -----END CERTIFICATE-----Generated at Sun Dec 21 02:43:57 2025 by rpki-client