This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: XpJFcdZqKqwzv0CpFV4j0tbj13NReBv87wh058bTeK4= Subject key identifier: B3:72:8D:F8:5A:D1:0D:7E:08:18:57:46:DB:3D:53:DD:A0:A5:4D:18 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 6BFD969CAB4FA5072942279E77402E1520620CA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 03AF Signing time: Sat 06 Dec 2025 22:12:30 +0000 Manifest this update: Sat 06 Dec 2025 22:07:30 +0000 Manifest next update: Wed 10 Dec 2025 10:03:30 +0000 Files and hashes: 1: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: zgH6LCJ4WIFDALOAWmtILf/zzTLIkJzSYpie2iLKRnM=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:fd:96:9c:ab:4f:a5:07:29:42:27:9e:77:40:2e:15:20:62:0c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Dec 6 22:07:30 2025 GMT Not After : Dec 10 10:03:30 2025 GMT Subject: CN=B3728DF85AD10D7E08185746DB3D53DDA0A54D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8a:d1:ac:8e:80:2e:5b:02:30:b5:7b:c6:87: d1:c6:22:e1:d5:9f:a4:52:b0:d2:d6:10:9c:8c:21: 13:8d:e0:18:99:37:e9:c3:b6:f9:f6:8e:91:0e:eb: 1c:08:6d:cc:b2:89:d7:db:35:2b:4c:9f:d1:ea:da: f8:19:22:7f:5a:06:83:81:47:a2:40:84:71:c4:03: a7:b8:93:04:5f:b7:91:7b:a9:37:0a:63:d9:cb:d5: 77:c4:06:31:51:c3:89:96:da:cb:74:6d:14:2d:07: 30:c2:d1:0d:82:3e:4c:c6:b6:73:df:7b:5e:f8:3e: 39:73:f2:40:52:95:1e:5c:41:cd:01:8a:d7:be:e8: 23:86:d7:1e:0c:c8:90:bc:98:b8:cd:b4:8d:36:73: d1:5a:06:11:e2:82:ee:98:23:0f:0b:e5:22:df:30: 5f:d0:1e:90:f2:86:ab:85:4a:43:b1:59:60:e0:69: a9:8e:a7:9b:f5:43:42:e2:5f:2e:df:a0:11:1e:62: c5:68:d5:0f:8e:04:93:3c:a5:fb:93:fa:1c:94:44: 15:b5:5f:eb:e4:3e:61:2f:16:bf:91:c9:8b:6d:98: c3:48:a0:88:94:85:1d:1b:06:37:5e:4c:48:58:5b: d2:cc:a7:83:82:72:82:42:95:a7:4e:19:e3:1f:c5: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:72:8D:F8:5A:D1:0D:7E:08:18:57:46:DB:3D:53:DD:A0:A5:4D:18 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ff:b8:f2:f2:a8:70:74:d4:c6:d3:72:cf:81:30:a2:32:2f: 2a:81:06:63:4e:32:69:df:e5:7e:65:44:4f:f1:66:ee:d0:c8: 6e:53:e1:a6:a3:a2:9d:f4:6c:33:c1:e7:84:81:28:1c:1d:fa: 0c:6e:4a:a3:08:14:3a:b5:39:34:ac:15:d1:a0:6b:81:a1:77: c9:9c:15:66:57:98:f8:51:8b:7c:07:62:95:dc:1c:ca:10:55: df:da:8a:d0:27:79:6e:65:97:8a:45:b4:bf:17:0e:55:1f:04: 08:6e:cc:21:65:82:ae:b0:ff:15:00:40:18:07:78:d0:a6:d1: a9:f7:6f:4a:eb:97:d7:bf:94:46:9d:56:2d:a2:bd:af:e3:25: 68:27:93:66:7a:ff:a0:66:95:84:8e:26:8a:1b:b9:89:24:6e: 58:e6:08:6d:5f:ec:22:80:38:2c:c9:cd:3a:fa:97:ac:be:64: 3b:90:85:48:3f:03:33:8b:9b:31:35:a1:31:7a:06:3b:d0:a6: 77:b8:c7:40:29:78:6a:60:73:49:0d:58:b7:41:b6:2a:8d:c7: ff:bb:4d:c2:d1:bc:55:c9:40:b7:7d:f6:24:c4:c9:ba:3e:20: ad:b2:f7:42:d0:e7:62:1b:1a:66:30:aa:1f:03:6c:a7:ce:2e: 78:35:4e:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa/2WnKtPpQcpQieed0AuFSBiDKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTEyMDYyMjA3MzBaFw0yNTEyMTAxMDAzMzBaMDMxMTAvBgNV BAMTKEIzNzI4REY4NUFEMTBEN0UwODE4NTc0NkRCM0Q1M0REQTBBNTREMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcitGsjoAuWwIwtXvGh9HGIuHV n6RSsNLWEJyMIRON4BiZN+nDtvn2jpEO6xwIbcyyidfbNStMn9Hq2vgZIn9aBoOB R6JAhHHEA6e4kwRft5F7qTcKY9nL1XfEBjFRw4mW2st0bRQtBzDC0Q2CPkzGtnPf e174Pjlz8kBSlR5cQc0Bite+6COG1x4MyJC8mLjNtI02c9FaBhHigu6YIw8L5SLf MF/QHpDyhquFSkOxWWDgaamOp5v1Q0LiXy7foBEeYsVo1Q+OBJM8pfuT+hyURBW1 X+vkPmEvFr+RyYttmMNIoIiUhR0bBjdeTEhYW9LMp4OCcoJCladOGeMfxUA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3KN+FrRDX4IGFdG2z1T3aClTRgwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3/uPLyqHB01MbTcs+BMKIyLyqBBmNOMmnf 5X5lRE/xZu7QyG5T4aajop30bDPB54SBKBwd+gxuSqMIFDq1OTSsFdGga4Ghd8mc FWZXmPhRi3wHYpXcHMoQVd/aitAneW5ll4pFtL8XDlUfBAhuzCFlgq6w/xUAQBgH eNCm0an3b0rrl9e/lEadVi2iva/jJWgnk2Z6/6BmlYSOJoobuYkkbljmCG1f7CKA OCzJzTr6l6y+ZDuQhUg/AzOLmzE1oTF6BjvQpne4x0ApeGpgc0kNWLdBtiqNx/+7 TcLRvFXJQLd99iTEybo+IK2y90LQ52IbGmYwqh8DbKfOLng1Tn0= -----END CERTIFICATE-----Generated at Sun Dec 7 06:20:55 2025 by rpki-client