This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: AwqOhcWn+duTQuDDD7SDhskjWO7PkE1gMAyc8KF7yCw= Subject key identifier: 4D:3C:5A:B0:39:3E:28:3D:64:BF:A9:67:CF:2F:5E:1E:CE:CB:15:0D Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 48E30AE0829CC787A6D5E5B17838EB5491C7CBD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0240 Signing time: Fri 05 Dec 2025 14:52:27 +0000 Manifest this update: Fri 05 Dec 2025 14:47:27 +0000 Manifest next update: Mon 08 Dec 2025 18:57:27 +0000 Files and hashes: 1: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) 3: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 4: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: 6CWjpqxZtl8wz4aPLdGZdEiDjVgnFxoa4CrW4ZBw1EQ=) 5: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 18:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e3:0a:e0:82:9c:c7:87:a6:d5:e5:b1:78:38:eb:54:91:c7:cb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Dec 5 14:47:27 2025 GMT Not After : Dec 8 18:57:27 2025 GMT Subject: CN=4D3C5AB0393E283D64BFA967CF2F5E1ECECB150D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:4e:5b:87:db:d8:d9:58:a0:2f:93:3d:f9: b5:cb:a0:7b:74:5d:8f:5f:5d:84:0f:a0:20:32:a1: f2:cb:e4:7e:a6:43:c5:aa:9d:4c:13:cd:32:7b:eb: 42:46:48:ff:c7:f6:c6:ff:c5:18:6b:16:58:c6:2e: 37:3d:cb:c4:53:77:c4:d2:1c:54:57:84:6d:46:b3: 67:88:6e:ec:73:c7:c0:59:e5:de:89:45:b3:00:f1: dd:ff:bb:6c:ce:77:25:73:65:41:df:7d:21:11:0a: c6:1d:ac:ab:c7:ff:e2:cc:2c:68:79:e3:84:66:e5: eb:0b:9f:ed:0c:61:bb:b5:b9:d3:be:ad:a6:f2:4d: ab:50:a7:74:ef:21:32:e9:a0:8a:1f:df:bd:f4:2a: 16:8b:45:0a:98:92:26:f2:30:fe:41:02:bb:1e:57: 76:6a:f7:2a:bb:1f:4b:1b:ed:60:86:2c:c3:12:10: 5d:01:53:8b:cd:62:27:b7:a5:60:0c:82:40:42:4a: 5e:dc:04:25:f0:3c:1f:dc:d6:1b:1a:e8:4b:bd:f4: d8:a1:6e:63:cc:e2:45:04:70:34:17:bf:c3:bb:86: 9c:55:30:be:ff:bf:4d:24:ed:d7:c6:66:73:25:86: cb:01:52:8c:cf:44:9d:d4:96:c2:fd:2e:69:c3:8f: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3C:5A:B0:39:3E:28:3D:64:BF:A9:67:CF:2F:5E:1E:CE:CB:15:0D X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:e9:43:53:59:46:b9:ab:5e:e3:7a:05:8f:31:14:46:14:db: 83:ec:72:c7:90:93:97:20:bf:d0:b2:92:ce:32:45:dc:88:be: a6:2f:67:60:0c:06:1e:ad:a2:43:5d:f5:90:bf:b8:42:38:26: 1f:f1:2e:6f:a8:81:5e:66:9a:71:8f:c1:46:12:bc:a5:60:c6: 9f:e3:31:05:08:10:83:f1:1e:69:11:4c:14:e7:43:7e:9c:b0: 77:da:6f:43:02:7c:e0:08:43:75:61:3f:07:73:93:ba:ce:3d: df:43:f1:06:3e:bc:ec:31:78:bf:3c:4e:92:52:a1:3a:d5:8a: ab:58:a4:7d:c8:29:67:62:e2:f1:10:a6:b2:24:e9:a3:48:bd: dd:96:9e:6a:b3:e6:0d:36:de:d7:7b:32:88:a8:e9:3d:b8:70: a1:11:e8:7a:47:df:5a:23:44:07:78:25:26:6f:3f:bc:4d:7b: a0:d6:cc:4c:9f:f7:d3:00:c5:11:b2:1c:d2:ee:c3:2f:92:c7: ca:47:81:43:4d:e9:ec:70:13:f5:cb:22:b7:75:4b:3b:3a:1d: 47:79:c7:21:2f:de:13:f4:5f:d9:69:85:46:95:a7:3a:2e:f8: c6:01:5d:be:2d:31:e0:8b:82:1f:32:7e:7d:20:0b:46:49:41: de:e8:9c:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOMK4IKcx4em1eWxeDjrVJHHy9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTEyMDUxNDQ3MjdaFw0yNTEyMDgxODU3MjdaMDMxMTAvBgNV BAMTKDREM0M1QUIwMzkzRTI4M0Q2NEJGQTk2N0NGMkY1RTFFQ0VDQjE1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo905bh9vY2VigL5M9+bXLoHt0 XY9fXYQPoCAyofLL5H6mQ8WqnUwTzTJ760JGSP/H9sb/xRhrFljGLjc9y8RTd8TS HFRXhG1Gs2eIbuxzx8BZ5d6JRbMA8d3/u2zOdyVzZUHffSERCsYdrKvH/+LMLGh5 44Rm5esLn+0MYbu1udO+rabyTatQp3TvITLpoIof3730KhaLRQqYkibyMP5BArse V3Zq9yq7H0sb7WCGLMMSEF0BU4vNYie3pWAMgkBCSl7cBCXwPB/c1hsa6Eu99Nih bmPM4kUEcDQXv8O7hpxVML7/v00k7dfGZnMlhssBUozPRJ3UlsL9LmnDj735AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTTxasDk+KD1kv6lnzy9eHs7LFQ0wHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXpQ1NZRrmrXuN6BY8xFEYU24PscseQk5cg v9Cyks4yRdyIvqYvZ2AMBh6tokNd9ZC/uEI4Jh/xLm+ogV5mmnGPwUYSvKVgxp/j MQUIEIPxHmkRTBTnQ36csHfab0MCfOAIQ3VhPwdzk7rOPd9D8QY+vOwxeL88TpJS oTrViqtYpH3IKWdi4vEQprIk6aNIvd2Wnmqz5g023td7Moio6T24cKER6HpH31oj RAd4JSZvP7xNe6DWzEyf99MAxRGyHNLuwy+Sx8pHgUNN6exwE/XLIrd1Szs6HUd5 xyEv3hP0X9lphUaVpzou+MYBXb4tMeCLgh8yfn0gC0ZJQd7onAM= -----END CERTIFICATE-----Generated at Sun Dec 7 08:11:20 2025 by rpki-client