This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: Asn+stmMIl5/k3wf9C2vIKzruwIiPLikXq/EX8DSjBw= Subject key identifier: 5E:7A:3C:BA:DC:2A:1F:ED:7A:05:0D:2C:56:5F:8A:00:D0:A4:96:85 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 26B4A5BB33A02A2CC6E7C1B9C1E3A15F31138F4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01C2 Signing time: Wed 17 Dec 2025 09:40:49 +0000 Manifest this update: Wed 17 Dec 2025 09:35:49 +0000 Manifest next update: Sat 20 Dec 2025 18:17:49 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: +gcCBrWHK2Fu/5DOISYe3rFMW2GkDFhLhmjiGJL2UY0=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 18:17:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b4:a5:bb:33:a0:2a:2c:c6:e7:c1:b9:c1:e3:a1:5f:31:13:8f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Dec 17 09:35:49 2025 GMT Not After : Dec 20 18:17:49 2025 GMT Subject: CN=5E7A3CBADC2A1FED7A050D2C565F8A00D0A49685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:f4:fc:a9:82:a4:2e:64:83:df:98:4d:b8: ac:98:52:64:4b:be:a9:ed:26:ec:83:22:8b:5b:38: de:73:d1:2d:aa:a9:9e:96:75:2f:79:f9:a1:e1:b9: 1c:44:73:01:d7:f8:90:86:c6:c7:3e:b8:cf:7a:ae: 00:b1:f7:6e:4c:1f:c4:8e:a6:9b:df:5b:14:a1:30: 4b:13:1f:de:f9:13:87:fc:6b:90:5c:b8:f0:97:b2: ba:12:30:fa:32:5a:dc:49:bb:a8:19:f2:23:d0:96: d1:e2:83:97:19:b1:f5:a8:a0:54:07:34:32:6e:e8: f5:16:48:66:30:aa:89:3d:89:56:18:f6:eb:58:34: fc:fe:20:d4:a8:7b:79:3d:29:02:07:37:45:29:db: 03:c6:1e:d3:dc:73:b1:e6:c8:70:21:b4:be:78:19: d2:a2:82:e2:b4:01:33:01:a1:bc:82:88:79:26:c1: 09:68:e5:5b:bc:7c:ca:7f:2b:0e:2c:6c:6e:33:f0: 7f:de:21:36:8b:08:2f:c8:a6:04:4e:c0:7f:30:5c: e0:57:6b:bb:6a:db:c3:94:08:e7:fb:48:26:79:21: 02:24:ef:33:2d:70:fc:85:d2:91:bb:66:34:a0:c4: 47:a1:bb:96:cb:c7:da:ec:75:45:ef:54:e4:6b:0d: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:7A:3C:BA:DC:2A:1F:ED:7A:05:0D:2C:56:5F:8A:00:D0:A4:96:85 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:da:20:a5:86:f3:cf:53:64:d8:13:22:d1:f1:79:e3:82:f9: 20:17:ab:d3:82:07:c4:44:49:cf:62:50:96:67:ea:c8:52:b2: ec:f7:1e:93:4d:81:4f:62:d3:22:d3:01:ad:9b:40:09:2a:f1: 09:51:43:88:b3:44:05:95:f2:b8:ff:ad:3c:d1:6f:aa:0c:06: e6:bd:41:a6:bc:83:e9:6e:ac:cd:3f:90:e2:d8:e8:5f:17:cc: 4a:41:3e:a2:9f:01:95:27:26:d7:38:d2:92:49:1c:b6:9c:f3: 80:9d:bc:30:2f:2a:cb:9b:47:ab:d7:d5:e8:7e:5b:7c:f6:03: 33:5a:47:97:89:c6:1c:02:dd:07:13:1a:d8:b2:be:ac:c9:c6: d7:4d:8f:86:49:b5:d9:21:f1:7b:31:64:99:ca:a9:b5:5a:f3: 95:be:11:16:bd:4a:5b:fa:2c:0b:24:28:b2:71:a8:bf:cc:b3: 29:1b:fd:4e:87:38:cf:13:89:aa:85:39:11:37:7c:6f:52:63: b1:0c:31:6e:be:53:6e:94:fc:a6:d7:36:38:94:12:ae:55:e3: 61:45:60:97:f3:a1:6b:80:59:ec:74:ff:4a:d9:92:4b:c0:f0: 00:59:98:8b:d5:51:4d:5d:28:00:68:90:55:de:31:2d:58:ab: de:d9:c4:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJrSluzOgKizG58G5weOhXzETj04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTEyMTcwOTM1NDlaFw0yNTEyMjAxODE3NDlaMDMxMTAvBgNV BAMTKDVFN0EzQ0JBREMyQTFGRUQ3QTA1MEQyQzU2NUY4QTAwRDBBNDk2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ivT8qYKkLmSD35hNuKyYUmRL vqntJuyDIotbON5z0S2qqZ6WdS95+aHhuRxEcwHX+JCGxsc+uM96rgCx925MH8SO ppvfWxShMEsTH975E4f8a5BcuPCXsroSMPoyWtxJu6gZ8iPQltHig5cZsfWooFQH NDJu6PUWSGYwqok9iVYY9utYNPz+INSoe3k9KQIHN0Up2wPGHtPcc7HmyHAhtL54 GdKiguK0ATMBobyCiHkmwQlo5Vu8fMp/Kw4sbG4z8H/eITaLCC/IpgROwH8wXOBX a7tq28OUCOf7SCZ5IQIk7zMtcPyF0pG7ZjSgxEehu5bLx9rsdUXvVORrDYpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXno8utwqH+16BQ0sVl+KANCkloUwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfaIKWG889TZNgTItHxeeOC+SAXq9OCB8RE Sc9iUJZn6shSsuz3HpNNgU9i0yLTAa2bQAkq8QlRQ4izRAWV8rj/rTzRb6oMBua9 Qaa8g+lurM0/kOLY6F8XzEpBPqKfAZUnJtc40pJJHLac84CdvDAvKsubR6vX1eh+ W3z2AzNaR5eJxhwC3QcTGtiyvqzJxtdNj4ZJtdkh8XsxZJnKqbVa85W+ERa9Slv6 LAskKLJxqL/Msykb/U6HOM8TiaqFORE3fG9SY7EMMW6+U26U/KbXNjiUEq5V42FF YJfzoWuAWex0/0rZkkvA8ABZmIvVUU1dKABokFXeMS1Yq97ZxF8= -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:48 2025 by rpki-client