This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: fA7aOutBz42J1gnAqUMU0wmkot9LL5/onk4V73/IA6c= Subject key identifier: FA:36:89:F1:65:22:30:A0:23:2C:2D:FF:2A:A8:5E:B7:F3:9C:49:5E Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 5B5BA37599C04711EBAC13EC8A9E08F02E336140 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: 0114 Signing time: Fri 05 Dec 2025 23:32:26 +0000 Manifest this update: Fri 05 Dec 2025 23:27:26 +0000 Manifest next update: Tue 09 Dec 2025 07:32:26 +0000 Files and hashes: 1: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: /VKdsaTHmCyGCE586MO51z4LSl8AS7ykHk2hmgDFEO4=) 2: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: DJP3ZLG/Mole0DoEhlmRNzkQfoVtcIuCLGqy8EIwOFA=) 3: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: sEObMlhse4CyL4oCmxoxoPLEseBLcDvbzgfCGrhTjW0=) 4: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: +WwlmKdoXMg38Ivud82/QXjyd3ODqNLzlXpK9Yw3uY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:5b:a3:75:99:c0:47:11:eb:ac:13:ec:8a:9e:08:f0:2e:33:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Dec 5 23:27:26 2025 GMT Not After : Dec 9 07:32:26 2025 GMT Subject: CN=FA3689F1652230A0232C2DFF2AA85EB7F39C495E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:cd:cf:39:fb:e9:0c:bd:3e:32:92:5d:69: 18:29:af:12:87:db:0c:07:99:41:a2:2f:d9:f7:aa: e4:84:de:a5:be:b5:e0:84:dd:d1:f1:fc:17:ef:ca: eb:fa:fc:2a:63:13:3b:98:68:32:aa:2f:1f:f4:7c: 4f:d1:10:72:ea:c2:38:7a:73:b1:a0:40:dd:d5:bf: 18:f6:4b:47:81:b0:14:3c:eb:e1:37:b5:8a:9e:56: e3:34:e6:f0:cc:d8:ee:3c:11:31:10:84:2d:59:58: 50:0b:5e:50:d1:aa:71:4f:4d:c9:0a:d7:1c:9d:0f: b7:13:14:ee:55:de:d9:fe:ab:e4:7e:fa:54:62:13: ea:48:a5:c7:a0:ca:87:84:59:6b:eb:6f:6e:db:37: 9d:3f:a6:3a:6a:30:d3:84:34:88:d6:f0:a6:e7:68: 6c:9e:ae:80:ba:32:0e:06:77:e3:b9:ce:a2:e4:63: f4:3d:cd:72:82:a9:3a:1c:80:2c:ca:ef:cf:fb:1b: bc:65:96:d6:85:27:18:94:9e:6a:65:5e:bb:73:f1: 6f:0b:49:a9:d8:45:5a:03:b1:72:c6:0d:6c:e1:6b: 6b:90:d8:41:dd:10:57:69:c1:eb:4b:0e:fc:cc:ce: 0a:41:72:74:b7:df:91:fb:1f:d2:90:27:91:60:4f: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:36:89:F1:65:22:30:A0:23:2C:2D:FF:2A:A8:5E:B7:F3:9C:49:5E X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:91:16:86:bf:39:55:94:ea:2b:55:96:9a:6d:73:f5:17:73: 1a:cf:4a:1b:49:c8:70:96:11:5f:0c:e9:b6:de:60:34:20:8a: e3:a4:84:72:54:5d:00:72:57:17:24:5f:c6:1d:a0:a7:8d:0a: d5:df:35:97:11:ff:4f:5a:38:2b:b6:bc:04:fa:8f:11:87:86: 18:b6:9b:74:91:52:fa:56:1f:88:39:97:21:3e:80:15:a2:20: 87:cc:85:f0:66:bb:e0:ce:10:74:dc:df:92:be:e6:3a:95:a6: ab:88:10:bf:62:88:02:85:b8:10:01:ac:2c:f3:07:90:61:e9: 0b:4f:dc:ff:38:ab:c3:5c:8d:18:39:a1:8d:7c:6c:a5:43:33: f7:ff:23:f9:26:77:0f:f8:05:17:c7:5e:ee:20:b1:65:b2:50: 6a:92:67:a1:ab:37:4c:a8:7f:6b:46:6f:3d:d6:e2:57:22:49: 3c:03:bf:50:0a:6b:c3:a6:69:85:1c:14:31:d1:53:f6:ff:8f: a4:66:7d:a6:aa:5b:ed:98:50:ec:88:cd:45:a2:29:13:81:04: d1:43:62:ac:40:c0:59:25:ed:af:90:18:86:2f:2e:fc:0d:d1: 50:be:9f:f8:fe:ab:7c:fc:5b:b6:47:b4:58:f2:ef:71:e9:45: 36:ff:6f:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW1ujdZnARxHrrBPsip4I8C4zYUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNTEyMDUyMzI3MjZaFw0yNTEyMDkwNzMyMjZaMDMxMTAvBgNV BAMTKEZBMzY4OUYxNjUyMjMwQTAyMzJDMkRGRjJBQTg1RUI3RjM5QzQ5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2s3POfvpDL0+MpJdaRgprxKH 2wwHmUGiL9n3quSE3qW+teCE3dHx/Bfvyuv6/CpjEzuYaDKqLx/0fE/REHLqwjh6 c7GgQN3Vvxj2S0eBsBQ86+E3tYqeVuM05vDM2O48ETEQhC1ZWFALXlDRqnFPTckK 1xydD7cTFO5V3tn+q+R++lRiE+pIpcegyoeEWWvrb27bN50/pjpqMNOENIjW8Kbn aGyeroC6Mg4Gd+O5zqLkY/Q9zXKCqTocgCzK78/7G7xlltaFJxiUnmplXrtz8W8L SanYRVoDsXLGDWzha2uQ2EHdEFdpwetLDvzMzgpBcnS335H7H9KQJ5FgT8tjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+jaJ8WUiMKAjLC3/Kqhet/OcSV4wHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGRFoa/OVWU6itVlpptc/UXcxrPShtJyHCW EV8M6bbeYDQgiuOkhHJUXQByVxckX8YdoKeNCtXfNZcR/09aOCu2vAT6jxGHhhi2 m3SRUvpWH4g5lyE+gBWiIIfMhfBmu+DOEHTc35K+5jqVpquIEL9iiAKFuBABrCzz B5Bh6QtP3P84q8NcjRg5oY18bKVDM/f/I/kmdw/4BRfHXu4gsWWyUGqSZ6GrN0yo f2tGbz3W4lciSTwDv1AKa8OmaYUcFDHRU/b/j6RmfaaqW+2YUOyIzUWiKROBBNFD YqxAwFkl7a+QGIYvLvwN0VC+n/j+q3z8W7ZHtFjy73HpRTb/bxc= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:34 2025 by rpki-client