This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: DKl9yNIck7BFV809t2eUF1KYkQRFPInd7h/lFNjd5Rw= Subject key identifier: 12:88:5F:71:25:49:F9:DB:03:95:4C:E1:FA:1E:E6:40:34:1F:03:CE Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 785A3544E2F44EEFE57EEB5725573EAA7AB18670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 052A Signing time: Fri 05 Dec 2025 18:41:21 +0000 Manifest this update: Fri 05 Dec 2025 18:36:21 +0000 Manifest next update: Mon 08 Dec 2025 22:38:21 +0000 Files and hashes: 1: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 2: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 3: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 4: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 5: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: 3M488Obq77X93bD39FNZD4blEl0DPpgKkm7Owjujev8=) 6: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 7: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:38:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5a:35:44:e2:f4:4e:ef:e5:7e:eb:57:25:57:3e:aa:7a:b1:86:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Dec 5 18:36:21 2025 GMT Not After : Dec 8 22:38:21 2025 GMT Subject: CN=12885F712549F9DB03954CE1FA1EE640341F03CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:85:8f:56:d9:ef:c7:b3:83:6c:cb:93:ad: c9:03:90:c2:c8:ef:38:60:f6:f7:36:ee:0b:86:5e: eb:c6:e9:b0:69:cf:f0:d0:06:ec:20:3c:9c:7c:11: e8:9a:84:07:d2:bd:9b:c8:56:09:9e:aa:fd:43:8e: f6:c6:ec:b2:e5:3f:ed:64:c1:b2:29:fc:fb:d3:c5: 49:94:7e:21:5e:e2:8e:c5:62:6f:47:d1:3d:e7:fc: 54:77:a0:d2:3f:d3:87:2d:6d:e3:8a:ad:ff:36:d9: 98:ab:d0:9b:3a:28:27:1b:4f:b1:38:66:0f:54:3c: 23:72:83:4a:4f:47:b4:b5:e5:9d:61:6f:11:6f:ee: 22:7b:59:97:8b:40:91:ca:88:a2:46:3b:5f:89:55: 91:d3:f8:cb:19:31:9e:35:88:3f:b1:f8:e0:ff:09: cd:86:76:74:5f:fd:02:dc:d0:ed:f7:b5:83:70:fa: a0:0c:04:e1:24:0d:40:61:f5:7c:6f:b1:7c:d5:c7: 0f:b7:97:74:b1:45:53:68:98:ba:2e:f5:63:39:7f: 17:22:c8:ce:a5:a1:87:2f:d6:97:11:fd:60:82:22: 75:30:27:e7:43:e7:1e:07:cd:bc:c9:f8:0a:69:ce: 77:cf:1f:b6:53:e4:dd:1d:ad:72:37:43:1d:c8:2c: 57:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:88:5F:71:25:49:F9:DB:03:95:4C:E1:FA:1E:E6:40:34:1F:03:CE X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:0b:e1:a0:de:5f:b6:27:a1:75:9b:65:64:5c:25:2d:22:f9: 5f:5c:cd:d5:b4:48:c8:bd:d0:2c:63:43:af:55:00:df:ed:e6: d7:60:12:19:b9:31:8a:9d:be:ba:53:3c:47:c9:9f:ea:cc:32: 02:a0:a3:d0:5d:4f:60:4d:69:ff:ca:16:56:e5:38:59:4c:99: df:ca:2a:a1:ce:4d:92:0d:4d:5f:e2:aa:55:f7:81:e5:35:dc: 85:fe:03:c9:e8:73:76:62:16:9c:45:32:d6:ed:04:28:46:b8: 46:35:45:e1:9d:b3:94:cf:5f:c6:99:3a:72:23:dd:d8:11:1c: fb:a0:54:cf:3f:41:09:cc:ff:c9:d5:59:50:21:49:ac:bd:2e: 2f:f5:36:cf:da:fd:89:cf:db:e7:76:b0:86:27:34:4e:e7:67: c6:23:78:82:f5:26:d6:b0:cf:de:8e:43:0c:98:f8:c1:ee:db: 6a:41:2e:b0:de:f5:72:f0:44:2d:0e:95:a4:38:5c:51:65:d6: e7:7f:01:4b:e0:cf:62:78:40:6a:b1:74:fe:44:0f:c1:3f:5b: 50:cb:d9:ca:e6:9e:ac:88:6e:6b:c5:2e:7e:b6:f1:9d:41:0c: b5:36:34:e7:35:47:ab:28:f1:25:ab:d1:78:21:83:3a:ab:65: 96:98:6e:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFo1ROL0Tu/lfutXJVc+qnqxhnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTEyMDUxODM2MjFaFw0yNTEyMDgyMjM4MjFaMDMxMTAvBgNV BAMTKDEyODg1RjcxMjU0OUY5REIwMzk1NENFMUZBMUVFNjQwMzQxRjAzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRoWPVtnvx7ODbMuTrckDkMLI 7zhg9vc27guGXuvG6bBpz/DQBuwgPJx8EeiahAfSvZvIVgmeqv1DjvbG7LLlP+1k wbIp/PvTxUmUfiFe4o7FYm9H0T3n/FR3oNI/04ctbeOKrf822Zir0Js6KCcbT7E4 Zg9UPCNyg0pPR7S15Z1hbxFv7iJ7WZeLQJHKiKJGO1+JVZHT+MsZMZ41iD+x+OD/ Cc2GdnRf/QLc0O33tYNw+qAMBOEkDUBh9XxvsXzVxw+3l3SxRVNomLou9WM5fxci yM6loYcv1pcR/WCCInUwJ+dD5x4HzbzJ+AppznfPH7ZT5N0drXI3Qx3ILFfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEohfcSVJ+dsDlUzh+h7mQDQfA84wHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEL4aDeX7YnoXWbZWRcJS0i+V9czdW0SMi9 0CxjQ69VAN/t5tdgEhm5MYqdvrpTPEfJn+rMMgKgo9BdT2BNaf/KFlblOFlMmd/K KqHOTZINTV/iqlX3geU13IX+A8noc3ZiFpxFMtbtBChGuEY1ReGds5TPX8aZOnIj 3dgRHPugVM8/QQnM/8nVWVAhSay9Li/1Ns/a/YnP2+d2sIYnNE7nZ8YjeIL1Jtaw z96OQwyY+MHu22pBLrDe9XLwRC0OlaQ4XFFl1ud/AUvgz2J4QGqxdP5ED8E/W1DL 2crmnqyIbmvFLn628Z1BDLU2NOc1R6so8SWr0XghgzqrZZaYbso= -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:24 2025 by rpki-client