This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: lEW8Bfuro5TvDm3FZCU0+M4TdVnPX+odXDeUHJDI4D8= Subject key identifier: 16:86:34:D1:F9:97:13:9D:69:7B:04:28:3A:F8:28:2F:07:94:F0:AD Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 1157D98D51D58B803AED10AC6233D6713114BA79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: EC Signing time: Fri 05 Dec 2025 17:51:09 +0000 Manifest this update: Fri 05 Dec 2025 17:46:09 +0000 Manifest next update: Tue 09 Dec 2025 05:20:09 +0000 Files and hashes: 1: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) 2: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) 3: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) 4: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: K8icBQW8UxP/skKlpkH3Zz8uVpRYDBtJonru13sVaTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:57:d9:8d:51:d5:8b:80:3a:ed:10:ac:62:33:d6:71:31:14:ba:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Dec 5 17:46:09 2025 GMT Not After : Dec 9 05:20:09 2025 GMT Subject: CN=168634D1F997139D697B04283AF8282F0794F0AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:22:90:4f:4a:15:97:f2:2a:65:49:4a:3c:4c: 26:e5:7c:f1:90:fa:f9:86:77:64:62:c6:16:95:66: 6d:b0:b9:9f:d1:45:da:7e:c5:d3:fa:9a:5e:96:60: b8:e8:d6:05:30:fd:ec:f8:22:8d:c4:a0:9e:10:d1: 57:95:d9:35:e9:82:10:6f:89:fa:ee:27:9f:6e:79: b7:6c:74:60:2a:8b:a5:15:77:3b:87:79:a9:3b:22: 80:22:58:3e:84:8b:1a:87:9c:0c:14:d6:3a:3b:c5: 19:2a:3d:24:54:c9:47:ec:95:ca:49:4c:c3:a5:30: d2:91:71:7b:d4:a7:4e:61:d9:4b:0c:bc:1b:61:25: a8:70:d2:bd:de:26:7c:43:f4:c9:1d:31:0e:05:07: 99:55:9a:a6:7e:84:cd:6f:28:bb:5f:63:35:ed:72: 42:a2:a7:50:ae:67:3f:b9:82:5f:34:7d:58:1d:c5: 25:ef:8e:30:73:16:05:17:61:fe:e6:87:ce:21:ca: ae:d6:af:4e:47:4f:3b:85:7a:c7:13:7f:ce:7f:18: 99:56:ec:0d:43:d0:94:61:c3:d3:b1:78:5f:7c:93: 82:4f:7a:39:f5:a4:e0:5b:e0:d8:ce:28:16:89:fe: 61:01:58:0f:8f:8f:ca:9b:f1:81:84:ae:ee:f1:64: 84:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:34:D1:F9:97:13:9D:69:7B:04:28:3A:F8:28:2F:07:94:F0:AD X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ad:23:8e:e0:85:77:a8:e1:fe:04:c3:b7:fd:dc:18:d4:17: da:16:51:29:97:d3:64:57:4c:ad:d3:e2:69:db:8f:f8:bb:de: 44:50:45:42:0a:20:85:5a:ce:28:f1:b3:bb:38:0e:5e:0a:09: 88:91:73:62:37:59:d1:18:41:a7:bb:0f:51:5d:39:d4:6d:28: 71:24:cf:f3:89:7a:5d:01:de:5a:aa:c6:6d:44:57:ad:73:95: e5:bd:b3:21:bc:fc:a7:55:40:18:5a:b4:90:14:e0:c3:71:e5: cd:c3:61:81:45:57:82:fd:71:88:50:22:a5:95:7f:a6:8d:db: 81:8b:51:12:c9:18:82:84:0c:27:0c:6a:2b:ae:40:b7:03:05: 7d:d1:3c:0c:88:70:cf:bd:1f:67:e0:20:37:7c:d0:23:e5:96: d2:7f:af:f2:08:2c:ee:eb:cb:8f:cc:30:6a:4a:f1:c2:63:7e: 53:9f:c7:0c:f6:93:cf:9a:55:fc:71:26:d9:44:20:97:74:22: b7:2d:3c:d7:9c:2d:72:ce:a6:24:25:a6:aa:a6:38:c2:d1:8c: d0:64:2d:4e:03:14:3a:bd:e0:e7:53:7e:f1:60:ce:61:7b:87: f5:0e:bd:31:1d:9d:df:b9:ac:ee:f7:75:bf:b1:22:a5:e8:e4: 21:f4:32:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVfZjVHVi4A67RCsYjPWcTEUunkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTEyMDUxNzQ2MDlaFw0yNTEyMDkwNTIwMDlaMDMxMTAvBgNV BAMTKDE2ODYzNEQxRjk5NzEzOUQ2OTdCMDQyODNBRjgyODJGMDc5NEYwQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdIpBPShWX8iplSUo8TCblfPGQ +vmGd2RixhaVZm2wuZ/RRdp+xdP6ml6WYLjo1gUw/ez4Io3EoJ4Q0VeV2TXpghBv ifruJ59uebdsdGAqi6UVdzuHeak7IoAiWD6EixqHnAwU1jo7xRkqPSRUyUfslcpJ TMOlMNKRcXvUp05h2UsMvBthJahw0r3eJnxD9MkdMQ4FB5lVmqZ+hM1vKLtfYzXt ckKip1CuZz+5gl80fVgdxSXvjjBzFgUXYf7mh84hyq7Wr05HTzuFescTf85/GJlW 7A1D0JRhw9OxeF98k4JPejn1pOBb4NjOKBaJ/mEBWA+Pj8qb8YGEru7xZITdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFoY00fmXE51pewQoOvgoLweU8K0wHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACutI47ghXeo4f4Ew7f93BjUF9oWUSmX02RX TK3T4mnbj/i73kRQRUIKIIVazijxs7s4Dl4KCYiRc2I3WdEYQae7D1FdOdRtKHEk z/OJel0B3lqqxm1EV61zleW9syG8/KdVQBhatJAU4MNx5c3DYYFFV4L9cYhQIqWV f6aN24GLURLJGIKEDCcMaiuuQLcDBX3RPAyIcM+9H2fgIDd80CPlltJ/r/IILO7r y4/MMGpK8cJjflOfxwz2k8+aVfxxJtlEIJd0IrctPNecLXLOpiQlpqqmOMLRjNBk LU4DFDq94OdTfvFgzmF7h/UOvTEdnd+5rO73db+xIqXo5CH0MtU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:54 2025 by rpki-client