This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: J7BHWrIJl8FaHv7g7WjFNqZ7g8172r9+a8GzsRG/Mew= Subject key identifier: 95:A4:E4:CD:BB:CE:10:78:3B:B7:15:49:76:E6:B9:03:F7:50:A7:4F Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 2638F5E6DF43CBEB0C8F2DE366C0D91859F13568 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 0224 Signing time: Sat 06 Dec 2025 12:31:22 +0000 Manifest this update: Sat 06 Dec 2025 12:26:22 +0000 Manifest next update: Tue 09 Dec 2025 18:08:22 +0000 Files and hashes: 1: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: ngev25KDqHY+U5+eEX1loQdpcSJMXfdLS2xEt0xjGyw=) 2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:38:f5:e6:df:43:cb:eb:0c:8f:2d:e3:66:c0:d9:18:59:f1:35:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Dec 6 12:26:22 2025 GMT Not After : Dec 9 18:08:22 2025 GMT Subject: CN=95A4E4CDBBCE10783BB7154976E6B903F750A74F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:be:ca:6e:86:dd:e1:e4:db:d2:3a:0d:4d:80: 12:69:58:70:1e:b3:10:e5:10:5c:ed:70:5b:8a:03: e5:37:48:1b:34:ea:c1:05:61:a2:e6:5a:3e:df:27: 30:c0:49:88:48:64:b1:52:b4:36:df:58:4c:bf:3e: 7a:06:5b:70:ec:82:e2:30:49:5d:50:b3:25:e6:9c: 5d:f4:d4:02:79:3f:63:cc:0e:db:f3:93:58:cf:a9: ec:50:5a:47:03:08:4f:ff:2e:e6:5a:46:e5:c6:f8: 06:56:65:73:b1:32:83:9a:73:4b:d1:47:fa:9a:28: 54:24:d0:75:f8:c1:8a:8f:4a:36:d6:07:09:ac:64: 15:76:d5:51:6a:b4:2b:43:ee:5b:a7:26:a7:c1:f5: 4a:d4:1d:07:33:65:05:1e:a1:ba:d0:07:b1:10:22: 5d:6c:e9:ee:96:c6:ea:17:ff:fe:65:eb:e3:5a:04: 24:f6:24:d4:dc:cc:65:0c:5a:ab:92:89:cb:97:b1: 3a:8d:55:36:26:b8:f3:23:55:e4:c4:d2:3f:2d:db: 43:54:a4:d9:17:40:25:0a:3a:e5:c0:7b:29:26:50: a5:a4:81:a5:3b:b6:ff:66:2d:1f:d9:c4:e3:53:c3: dd:35:6d:93:c0:6b:62:7f:5f:bd:d1:2a:0c:fd:f8: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A4:E4:CD:BB:CE:10:78:3B:B7:15:49:76:E6:B9:03:F7:50:A7:4F X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:0d:9d:54:af:4a:99:d7:79:10:56:68:17:25:5f:1f:34:cc: 41:02:70:23:b1:33:f7:79:f5:53:07:76:4b:1f:ad:43:f2:2e: 50:54:a6:af:17:80:5a:ae:05:4b:f3:ce:f8:82:06:cd:48:82: 77:36:15:be:05:51:36:d0:9a:73:02:94:1d:e2:bf:ed:61:7d: 14:40:14:b2:cc:12:79:c4:63:bf:12:4b:ec:d5:e8:4f:0d:fa: 92:f4:9e:89:32:42:a7:78:64:bb:20:95:f0:5e:d2:53:67:1f: 7e:1b:aa:b7:e4:c5:f3:f5:03:d2:02:c0:4c:f8:6f:fc:79:0a: 56:c1:3d:92:d3:b3:1b:61:7d:4a:73:c7:8d:c7:c9:4e:af:09: 02:27:cb:06:f9:ae:64:88:c0:50:85:c3:78:b2:5a:ab:f1:13: ba:80:4a:ff:25:02:d7:26:92:a4:07:cd:b6:b5:a3:51:e6:55: 81:a3:81:c6:3f:4a:eb:6a:17:43:ed:5f:3b:f3:b9:1a:fc:b2: 44:13:df:a7:a3:c4:f5:06:42:d9:3c:4b:f9:b7:1b:8c:a2:22: 36:ee:c4:d0:42:b0:54:5c:a6:39:1d:43:d6:82:ba:94:ce:25: 10:0b:51:8b:65:6e:2a:f1:d3:c0:cf:81:cf:80:a7:92:6f:2b: 3e:ec:44:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjj15t9Dy+sMjy3jZsDZGFnxNWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTEyMDYxMjI2MjJaFw0yNTEyMDkxODA4MjJaMDMxMTAvBgNV BAMTKDk1QTRFNENEQkJDRTEwNzgzQkI3MTU0OTc2RTZCOTAzRjc1MEE3NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+vspuht3h5NvSOg1NgBJpWHAe sxDlEFztcFuKA+U3SBs06sEFYaLmWj7fJzDASYhIZLFStDbfWEy/PnoGW3DsguIw SV1QsyXmnF301AJ5P2PMDtvzk1jPqexQWkcDCE//LuZaRuXG+AZWZXOxMoOac0vR R/qaKFQk0HX4wYqPSjbWBwmsZBV21VFqtCtD7lunJqfB9UrUHQczZQUeobrQB7EQ Il1s6e6WxuoX//5l6+NaBCT2JNTczGUMWquSicuXsTqNVTYmuPMjVeTE0j8t20NU pNkXQCUKOuXAeykmUKWkgaU7tv9mLR/ZxONTw901bZPAa2J/X73RKgz9+CnLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlaTkzbvOEHg7txVJdua5A/dQp08wHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkNnVSvSpnXeRBWaBclXx80zEECcCOxM/d5 9VMHdksfrUPyLlBUpq8XgFquBUvzzviCBs1Ignc2Fb4FUTbQmnMClB3iv+1hfRRA FLLMEnnEY78SS+zV6E8N+pL0nokyQqd4ZLsglfBe0lNnH34bqrfkxfP1A9ICwEz4 b/x5ClbBPZLTsxthfUpzx43HyU6vCQInywb5rmSIwFCFw3iyWqvxE7qASv8lAtcm kqQHzba1o1HmVYGjgcY/SutqF0PtXzvzuRr8skQT36ejxPUGQtk8S/m3G4yiIjbu xNBCsFRcpjkdQ9aCupTOJRALUYtlbirx08DPgc+Ap5JvKz7sRJU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:52 2025 by rpki-client