This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: yi/A+lG1smmPlVY3W2bTT73qMR9tNd0Fs4cVQUG3fB8= Subject key identifier: E8:F8:E4:CE:91:9E:1A:5E:75:33:2A:54:AE:03:92:83:73:C1:47:3C Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 7B9CC3D0352D65A8EB6A79888063A772F5A82163 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 052A Signing time: Fri 05 Dec 2025 10:32:28 +0000 Manifest this update: Fri 05 Dec 2025 10:27:28 +0000 Manifest next update: Mon 08 Dec 2025 17:55:28 +0000 Files and hashes: 1: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 2: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) 3: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: GyJJCtzaAooqLG5G0j+Af95dEZ7Zlrz9nMlneTZT6SQ=) 4: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9c:c3:d0:35:2d:65:a8:eb:6a:79:88:80:63:a7:72:f5:a8:21:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Dec 5 10:27:28 2025 GMT Not After : Dec 8 17:55:28 2025 GMT Subject: CN=E8F8E4CE919E1A5E75332A54AE03928373C1473C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:80:21:b3:c5:c8:45:35:6d:a1:18:26:64:88: be:f3:7d:92:49:a5:b3:ca:1c:b4:1c:ca:c5:e5:72: 3e:32:81:c5:78:2c:10:89:2a:5d:9c:04:6f:8e:5b: 5c:57:d8:0e:db:1f:4c:72:ed:14:35:a0:33:b6:58: be:aa:32:64:de:a1:46:b3:31:15:5a:dc:7e:52:5d: 92:04:56:80:10:71:d8:a0:09:da:8a:cc:2f:f6:d0: c3:f2:ae:c8:fb:63:5e:e9:15:bf:b5:2a:55:39:a7: b1:a3:ef:14:82:d2:75:0b:3b:27:fa:d9:ed:3a:ef: 71:0d:3b:53:a4:2f:53:2a:f0:be:58:cc:3f:0f:14: b7:53:79:b2:5a:e1:ba:b2:19:5c:50:b1:f5:0c:e7: 02:e6:f0:05:e5:99:88:7c:f0:6c:18:5d:34:87:ae: 33:d9:62:b5:54:05:e5:b4:94:1e:fa:1f:cf:97:cd: 90:e4:d1:b6:b1:eb:91:17:5e:56:0d:54:1d:47:8d: d4:c5:23:9a:0d:04:e6:f3:4f:3d:f8:2c:09:a9:92: 12:3e:62:4a:66:bc:16:65:6e:07:26:a4:33:90:23: 5e:99:e2:d8:73:ed:63:bf:57:80:dd:8a:c7:ca:d1: 15:ec:91:fe:78:2d:13:d2:28:29:29:11:a6:16:56: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F8:E4:CE:91:9E:1A:5E:75:33:2A:54:AE:03:92:83:73:C1:47:3C X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:14:b8:af:09:94:78:43:ad:5f:96:1d:ea:8b:6a:aa:e8:6c: bb:4d:c6:71:d5:24:31:1d:34:de:b0:18:64:41:b6:3f:ae:e3: f0:4d:2e:34:8c:4d:15:88:5a:be:ff:05:48:66:ff:f2:59:64: 61:5a:8b:f7:ba:dd:41:c2:71:c1:f1:94:03:87:a2:2c:4c:d0: e3:a1:6f:72:dd:3a:88:b2:65:39:00:e2:41:c2:25:fa:db:9d: c0:ad:97:81:cf:7d:0f:e0:40:63:fd:9b:7e:95:c2:57:67:2a: 46:31:f6:a4:bc:ee:e0:ed:34:f1:54:8b:a1:49:fd:b7:64:0d: 42:02:59:72:7d:9c:ef:29:a0:74:be:9a:41:6b:9a:74:f7:e1: 1c:ec:f5:48:71:23:4f:48:0a:26:7a:26:43:dd:88:c9:8a:8a: 2f:e1:47:9d:e6:71:47:ec:04:80:65:e3:95:72:f5:e3:54:02: 4a:74:f4:e2:51:53:e3:31:05:47:e7:73:bf:bf:69:b8:92:f9: 1b:1c:2b:b4:64:ef:c2:a0:9c:e6:04:3f:81:47:b4:7a:6a:27: 67:d5:62:e1:47:fd:c9:c0:30:33:ff:73:48:c2:78:93:cb:90: 31:55:48:98:80:90:57:5e:03:67:1f:0c:a1:1c:b5:81:d9:8c: e7:dc:37:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5zD0DUtZajranmIgGOncvWoIWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTEyMDUxMDI3MjhaFw0yNTEyMDgxNzU1MjhaMDMxMTAvBgNV BAMTKEU4RjhFNENFOTE5RTFBNUU3NTMzMkE1NEFFMDM5MjgzNzNDMTQ3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3gCGzxchFNW2hGCZkiL7zfZJJ pbPKHLQcysXlcj4ygcV4LBCJKl2cBG+OW1xX2A7bH0xy7RQ1oDO2WL6qMmTeoUaz MRVa3H5SXZIEVoAQcdigCdqKzC/20MPyrsj7Y17pFb+1KlU5p7Gj7xSC0nULOyf6 2e0673ENO1OkL1Mq8L5YzD8PFLdTebJa4bqyGVxQsfUM5wLm8AXlmYh88GwYXTSH rjPZYrVUBeW0lB76H8+XzZDk0bax65EXXlYNVB1HjdTFI5oNBObzTz34LAmpkhI+ YkpmvBZlbgcmpDOQI16Z4thz7WO/V4DdisfK0RXskf54LRPSKCkpEaYWVn8fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6PjkzpGeGl51MypUrgOSg3PBRzwwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMUuK8JlHhDrV+WHeqLaqrobLtNxnHVJDEd NN6wGGRBtj+u4/BNLjSMTRWIWr7/BUhm//JZZGFai/e63UHCccHxlAOHoixM0OOh b3LdOoiyZTkA4kHCJfrbncCtl4HPfQ/gQGP9m36VwldnKkYx9qS87uDtNPFUi6FJ /bdkDUICWXJ9nO8poHS+mkFrmnT34Rzs9UhxI09ICiZ6JkPdiMmKii/hR53mcUfs BIBl45Vy9eNUAkp09OJRU+MxBUfnc7+/abiS+RscK7Rk78KgnOYEP4FHtHpqJ2fV YuFH/cnAMDP/c0jCeJPLkDFVSJiAkFdeA2cfDKEctYHZjOfcNzo= -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:42 2025 by rpki-client