This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: 0kyE9N65UjNYeWtYlS05T7YoBucC7uLJG80mtsZgI00= Subject key identifier: 64:98:90:2C:39:7F:7F:1A:BA:AC:B9:27:2C:BD:38:24:59:A9:0F:1A Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 05202B8B74463B990593C1410183078CC958E7AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 0134 Signing time: Fri 05 Dec 2025 12:41:03 +0000 Manifest this update: Fri 05 Dec 2025 12:36:03 +0000 Manifest next update: Mon 08 Dec 2025 15:20:03 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: ATxY5QO0P6+C2jmU6h1kxxXjCoegK8vw5SgT3Dzir4A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:20:2b:8b:74:46:3b:99:05:93:c1:41:01:83:07:8c:c9:58:e7:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Dec 5 12:36:03 2025 GMT Not After : Dec 8 15:20:03 2025 GMT Subject: CN=6498902C397F7F1ABAACB9272CBD382459A90F1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:56:71:22:95:fe:b3:68:44:4c:27:49:65: e9:f5:43:b5:22:86:a3:f2:a0:d0:4f:a3:45:dc:d1: d2:ea:ed:7c:2d:49:63:95:a7:23:bc:4f:27:22:2c: cc:a5:a7:16:24:e7:25:79:9d:33:16:60:72:45:fd: bf:1f:f6:83:a7:2e:2a:ec:44:b0:34:79:d5:56:24: b7:45:61:fe:64:26:68:aa:4b:66:40:fb:9b:a6:99: 28:af:14:61:86:3c:e7:dc:ef:31:2b:fa:84:88:51: 15:b7:aa:15:74:75:fa:d9:ca:53:62:8e:a2:32:71: e5:cb:49:6b:76:22:bd:5a:3b:3a:24:7d:fc:4e:b4: fc:54:cb:82:6e:ef:64:3f:f0:ec:0f:a2:5a:b5:ae: 81:e0:45:d0:84:6f:81:f1:dd:53:da:9a:aa:cd:7f: 7b:6b:ae:64:ad:b6:ea:da:8d:39:e5:be:54:9e:4b: 52:4f:0e:5c:ee:64:8c:e5:b2:f2:e4:4c:fb:6a:5c: 23:55:9e:34:d3:c2:cc:e6:4f:75:22:80:f2:54:4d: 92:4e:cb:67:fe:50:ec:0b:2b:5b:45:0e:94:ec:f7: cd:28:ca:b8:dd:8f:6b:8c:e5:14:9c:5b:41:4b:86: 7d:77:bc:b9:e0:08:90:48:37:b5:8c:ee:c6:4b:d0: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:98:90:2C:39:7F:7F:1A:BA:AC:B9:27:2C:BD:38:24:59:A9:0F:1A X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c9:3d:91:32:59:03:1b:8c:dd:7a:26:e3:df:cd:f0:fb:62: 5e:51:98:ac:a4:cf:fa:64:47:0a:2a:ab:48:37:16:6c:a7:7c: 81:c6:ca:b6:29:0d:00:4a:7b:b5:8a:39:5b:e5:01:f3:fa:be: af:6c:48:ba:f2:13:8f:ef:c2:65:b6:df:2a:e8:73:0c:d1:f3: 3d:05:2e:91:9e:f4:d9:a9:ea:ad:fe:53:c3:87:8b:d0:ab:b1: 70:bf:43:ae:a9:d4:89:49:17:bd:fd:8b:0e:db:bc:b0:2f:b1: b3:1c:e2:d2:ab:c0:22:9e:2f:53:af:64:d0:6e:9d:be:22:ee: 5c:9c:46:47:81:74:fb:e3:1b:ba:2a:bf:88:95:69:3f:0b:04: c8:6e:4d:73:66:0d:47:79:99:6d:d0:a1:8d:9f:5b:d3:71:d2: 2a:37:40:c9:34:9b:f9:5b:7f:24:47:a8:a8:59:fc:0e:04:a6: 4a:a7:85:15:86:e8:32:0c:0f:75:39:9a:30:ea:8d:d1:b8:08: b0:b8:9d:aa:63:c3:18:de:93:35:ca:5b:69:ad:dd:bc:80:42: 21:08:b2:da:d8:51:d7:86:7c:40:aa:83:36:8d:24:a7:cd:d7: fc:9e:80:0c:8c:9d:4e:1c:49:50:91:e1:c4:95:5a:62:86:07: f1:3c:06:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBSAri3RGO5kFk8FBAYMHjMlY56wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTEyMDUxMjM2MDNaFw0yNTEyMDgxNTIwMDNaMDMxMTAvBgNV BAMTKDY0OTg5MDJDMzk3RjdGMUFCQUFDQjkyNzJDQkQzODI0NTlBOTBGMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfFZxIpX+s2hETCdJZen1Q7Ui hqPyoNBPo0Xc0dLq7XwtSWOVpyO8TyciLMylpxYk5yV5nTMWYHJF/b8f9oOnLirs RLA0edVWJLdFYf5kJmiqS2ZA+5ummSivFGGGPOfc7zEr+oSIURW3qhV0dfrZylNi jqIyceXLSWt2Ir1aOzokffxOtPxUy4Ju72Q/8OwPolq1roHgRdCEb4Hx3VPamqrN f3trrmStturajTnlvlSeS1JPDlzuZIzlsvLkTPtqXCNVnjTTwszmT3UigPJUTZJO y2f+UOwLK1tFDpTs980oyrjdj2uM5RScW0FLhn13vLngCJBIN7WM7sZL0FHDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJiQLDl/fxq6rLknLL04JFmpDxowHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzJPZEyWQMbjN16JuPfzfD7Yl5RmKykz/pk Rwoqq0g3FmynfIHGyrYpDQBKe7WKOVvlAfP6vq9sSLryE4/vwmW23yrocwzR8z0F LpGe9Nmp6q3+U8OHi9CrsXC/Q66p1IlJF739iw7bvLAvsbMc4tKrwCKeL1OvZNBu nb4i7lycRkeBdPvjG7oqv4iVaT8LBMhuTXNmDUd5mW3QoY2fW9Nx0io3QMk0m/lb fyRHqKhZ/A4EpkqnhRWG6DIMD3U5mjDqjdG4CLC4napjwxjekzXKW2mt3byAQiEI strYUdeGfECqgzaNJKfN1/yegAyMnU4cSVCR4cSVWmKGB/E8BvU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:59 2025 by rpki-client