This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: eGeb8jdyZKDBqJP7Zm7SAEqCL+3C1i68JKuPONePS7g= Subject key identifier: 2B:A7:5F:D0:35:D8:B3:C7:2A:7A:27:39:9F:12:B1:A7:DA:E9:DF:61 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 6A280D1050B3F3407B71556B05548A4103C0B4E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 0505 Signing time: Fri 05 Dec 2025 12:31:45 +0000 Manifest this update: Fri 05 Dec 2025 12:26:45 +0000 Manifest next update: Mon 08 Dec 2025 15:43:45 +0000 Files and hashes: 1: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: 2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=) 2: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=) 3: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: ZcBmYc9fZSD+3daoL5LQyfYrM60uHubQH51giOYLHDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:43:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:28:0d:10:50:b3:f3:40:7b:71:55:6b:05:54:8a:41:03:c0:b4:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Dec 5 12:26:45 2025 GMT Not After : Dec 8 15:43:45 2025 GMT Subject: CN=2BA75FD035D8B3C72A7A27399F12B1A7DAE9DF61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:55:52:60:f8:b5:b8:7b:d0:d5:f9:54:78: a0:ee:10:dd:68:46:59:8b:1a:22:f5:e2:42:de:84: 3a:a0:17:12:54:b8:ab:d5:d5:80:c1:36:2a:63:42: 80:5e:8d:e4:f2:cb:f3:c3:7f:c4:a1:12:8c:65:90: 5f:56:08:2e:92:bd:7d:e3:b1:99:bf:96:30:eb:d2: d6:20:aa:2c:ee:0a:7b:7c:f0:5e:bf:52:08:66:b1: 88:df:f5:9f:6d:69:24:a8:82:10:0c:e8:bf:a5:cf: 83:b0:c0:d6:4b:48:10:07:f1:bf:cf:d1:09:07:12: e5:4e:c3:68:ec:45:4b:49:29:c7:d4:6c:67:51:32: ff:08:a6:e5:c1:6c:67:eb:7b:a7:80:1b:2b:2c:b4: bc:01:7d:15:82:79:24:26:01:3d:9e:43:69:16:fb: b0:a3:9c:db:36:73:c6:f2:45:aa:ef:9b:01:23:2c: 3a:32:30:a4:a9:4b:47:c1:92:2f:24:75:7c:df:32: 78:e6:fc:07:89:25:0c:09:ec:e9:2a:45:0c:15:84: 4b:a3:ab:73:ac:8a:9b:f8:27:54:fd:4d:21:b7:06: dc:7b:87:59:61:a0:40:9c:fd:c4:d9:15:e8:93:ea: d8:c4:75:1a:ab:36:14:22:58:5b:76:c7:67:6c:1e: 19:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:5F:D0:35:D8:B3:C7:2A:7A:27:39:9F:12:B1:A7:DA:E9:DF:61 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:58:bb:b3:b3:1a:38:fc:93:49:d9:f3:ae:48:ce:7e:d7:b0: ef:cf:8c:2b:04:5b:a1:40:26:8b:73:b7:4a:a6:e8:2f:fe:71: 3f:a6:1e:47:1e:2f:74:80:0c:d7:22:9c:d0:14:9b:31:4d:1f: 74:e5:0b:ed:86:b8:d4:cd:b5:9c:bf:3c:b1:c5:da:83:04:aa: 7b:31:24:f8:70:33:4a:ed:ab:3e:cb:21:53:a9:dc:38:d5:11: a2:79:b8:f8:2c:27:df:8e:99:a5:4b:e6:fe:5e:93:8f:29:d1: f1:36:01:29:3c:0e:7c:f8:87:96:f3:b8:e9:4b:c1:2c:bb:d0: 6d:2d:1b:12:b2:2c:84:0e:fb:24:09:c0:74:70:b0:af:ff:d0: cd:5f:22:05:65:04:00:d9:1f:77:30:a9:10:28:57:af:b0:d5: 53:8a:dd:dc:9b:a0:5d:e0:37:5c:15:6f:55:ae:6c:84:dd:dd: dd:67:40:a8:2f:dc:24:24:0b:26:e3:e1:66:2b:9f:bf:6b:c2: 03:bd:63:c1:69:e1:d4:a4:d1:64:ad:bd:61:74:77:02:ec:3c: 42:22:3f:24:25:93:20:54:a5:3e:5d:ef:d7:3e:9c:13:37:a0: 6a:c2:1e:93:9f:57:25:86:45:95:30:2d:33:ea:f3:0e:17:b1: 50:39:a0:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaigNEFCz80B7cVVrBVSKQQPAtOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNTEyMDUxMjI2NDVaFw0yNTEyMDgxNTQzNDVaMDMxMTAvBgNV BAMTKDJCQTc1RkQwMzVEOEIzQzcyQTdBMjczOTlGMTJCMUE3REFFOURGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFVVSYPi1uHvQ1flUeKDuEN1o RlmLGiL14kLehDqgFxJUuKvV1YDBNipjQoBejeTyy/PDf8ShEoxlkF9WCC6SvX3j sZm/ljDr0tYgqizuCnt88F6/UghmsYjf9Z9taSSoghAM6L+lz4OwwNZLSBAH8b/P 0QkHEuVOw2jsRUtJKcfUbGdRMv8IpuXBbGfre6eAGysstLwBfRWCeSQmAT2eQ2kW +7CjnNs2c8byRarvmwEjLDoyMKSpS0fBki8kdXzfMnjm/AeJJQwJ7OkqRQwVhEuj q3Osipv4J1T9TSG3Btx7h1lhoECc/cTZFeiT6tjEdRqrNhQiWFt2x2dsHhmhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK6df0DXYs8cqeic5nxKxp9rp32EwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJYu7OzGjj8k0nZ865Izn7XsO/PjCsEW6FA Jotzt0qm6C/+cT+mHkceL3SADNcinNAUmzFNH3TlC+2GuNTNtZy/PLHF2oMEqnsx JPhwM0rtqz7LIVOp3DjVEaJ5uPgsJ9+OmaVL5v5ek48p0fE2ASk8Dnz4h5bzuOlL wSy70G0tGxKyLIQO+yQJwHRwsK//0M1fIgVlBADZH3cwqRAoV6+w1VOK3dyboF3g N1wVb1WubITd3d1nQKgv3CQkCybj4WYrn79rwgO9Y8Fp4dSk0WStvWF0dwLsPEIi PyQlkyBUpT5d79c+nBM3oGrCHpOfVyWGRZUwLTPq8w4XsVA5oCk= -----END CERTIFICATE-----Generated at Sun Dec 7 07:10:52 2025 by rpki-client