This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: ByWI8TTSPHYhwjq+Rj75cOeoz+C/8zxRqnblUxkYSE0= Subject key identifier: A8:16:0F:10:D2:24:22:E6:A7:88:FA:71:49:34:D9:2F:DA:93:52:38 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: ECC0588CAF317C24D6C00DEE9ABBBE48E4284A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01BD Signing time: Sat 06 Dec 2025 01:21:20 +0000 Manifest this update: Sat 06 Dec 2025 01:16:20 +0000 Manifest next update: Tue 09 Dec 2025 09:56:20 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: u95uFQpOpdRI1OEaGe3XB53frLYrvjsVxQPSDGmP1Ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ec:c0:58:8c:af:31:7c:24:d6:c0:0d:ee:9a:bb:be:48:e4:28:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Dec 6 01:16:20 2025 GMT Not After : Dec 9 09:56:20 2025 GMT Subject: CN=A8160F10D22422E6A788FA714934D92FDA935238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:79:db:36:18:cd:32:83:81:7a:e1:f9:9a: d3:55:38:5a:04:a3:47:ed:29:6c:98:4c:61:9d:c6: fc:ce:21:2e:af:ea:ea:a9:6f:51:e5:05:3e:14:d7: 5f:75:d8:fa:68:a6:1a:45:26:6e:43:69:8b:61:15: 51:34:97:e6:b5:4a:02:5e:29:a6:b0:b8:29:83:7e: bb:c8:49:09:30:62:f1:62:66:03:b0:52:ac:43:c6: fd:56:f7:3d:db:a4:f1:d3:46:7a:89:7f:e7:76:60: 2f:43:7b:23:46:0e:bd:14:0f:b5:7d:59:63:20:27: e6:96:74:0d:d2:b9:fc:20:51:6f:0d:60:fe:44:d0: 8e:7d:a0:c2:1b:9f:a7:b3:ed:26:8c:da:b7:0b:28: 58:c7:49:8c:8c:71:b0:81:29:be:6d:a0:e0:7f:39: fb:3b:8a:d8:9f:bd:ed:33:c0:15:97:93:fd:e2:71: af:2d:37:4f:bf:0d:0c:fd:d3:0e:62:0a:28:b1:1f: d0:88:4c:b6:65:20:c7:f1:f0:6b:f5:b3:0d:3d:bd: 88:0d:b0:a5:0a:25:bc:1e:95:0a:28:87:30:ac:c8: c6:8b:cf:fc:41:c7:23:c1:ea:12:95:9a:b5:f8:6a: a7:9c:da:92:d5:31:9a:31:51:21:9d:b6:a6:0f:9c: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:16:0F:10:D2:24:22:E6:A7:88:FA:71:49:34:D9:2F:DA:93:52:38 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:a7:80:28:cd:62:a9:33:6e:b9:a5:db:98:72:ba:12:6f:d2: 80:62:e5:27:b6:6d:f6:15:5c:af:33:2b:27:1c:b2:8a:2f:11: 01:60:f0:28:d6:d3:68:b3:fa:f3:3b:0b:0a:e8:29:5f:77:99: d5:a0:6f:b2:73:d4:fa:7f:9a:d5:e0:32:8f:93:2d:a1:3a:ce: 1d:82:55:1b:aa:0c:28:cf:f8:b5:a6:7f:b1:90:82:b2:72:92: 06:80:12:90:2b:66:4d:46:32:98:76:59:c4:6c:00:01:4d:2d: 16:63:9a:4c:28:81:a9:30:08:9b:b3:a4:4d:1e:b0:23:4f:8d: f8:5e:60:0e:58:cb:f4:3c:92:58:e3:ab:04:55:6a:71:0f:71: 65:01:92:f1:bb:86:5c:34:d3:b2:48:f0:6e:66:0d:70:de:37: 72:39:bd:0d:f3:c5:e7:7c:8c:fa:88:d8:6b:c4:97:26:d5:64: ce:c6:9d:3b:6e:c5:d8:11:5a:ef:33:21:60:ef:1b:bb:33:9a: b4:f9:a6:27:76:c9:4b:76:8d:99:a9:2f:97:10:72:53:82:80: 6a:70:f5:16:31:92:6f:12:74:f0:55:88:1d:80:a5:78:37:2e: 27:56:0d:06:4b:45:fd:17:e2:ab:5c:c3:df:7a:3b:9f:43:52: 26:25:fb:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOzAWIyvMXwk1sAN7pq7vkjkKEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTEyMDYwMTE2MjBaFw0yNTEyMDkwOTU2MjBaMDMxMTAvBgNV BAMTKEE4MTYwRjEwRDIyNDIyRTZBNzg4RkE3MTQ5MzREOTJGREE5MzUyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4T3nbNhjNMoOBeuH5mtNVOFoE o0ftKWyYTGGdxvzOIS6v6uqpb1HlBT4U11912PpophpFJm5DaYthFVE0l+a1SgJe KaawuCmDfrvISQkwYvFiZgOwUqxDxv1W9z3bpPHTRnqJf+d2YC9DeyNGDr0UD7V9 WWMgJ+aWdA3SufwgUW8NYP5E0I59oMIbn6ez7SaM2rcLKFjHSYyMcbCBKb5toOB/ Ofs7itifve0zwBWXk/3ica8tN0+/DQz90w5iCiixH9CITLZlIMfx8Gv1sw09vYgN sKUKJbwelQoohzCsyMaLz/xBxyPB6hKVmrX4aqec2pLVMZoxUSGdtqYPnFqnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqBYPENIkIuaniPpxSTTZL9qTUjgwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKngCjNYqkzbrml25hyuhJv0oBi5Se2bfYV XK8zKyccsoovEQFg8CjW02iz+vM7CwroKV93mdWgb7Jz1Pp/mtXgMo+TLaE6zh2C VRuqDCjP+LWmf7GQgrJykgaAEpArZk1GMph2WcRsAAFNLRZjmkwogakwCJuzpE0e sCNPjfheYA5Yy/Q8kljjqwRVanEPcWUBkvG7hlw007JI8G5mDXDeN3I5vQ3zxed8 jPqI2GvElybVZM7GnTtuxdgRWu8zIWDvG7szmrT5pid2yUt2jZmpL5cQclOCgGpw 9RYxkm8SdPBViB2ApXg3LidWDQZLRf0X4qtcw996O59DUiYl+64= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:38 2025 by rpki-client