This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: WE+9afa9Up5aMUyBeke5bwFk2eKCC2rwvEyYjTdkCI0= Subject key identifier: 2E:E6:88:61:DC:2A:22:28:A9:58:28:CB:A0:0C:DC:5C:2E:A2:9C:9B Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 3F6409884B8276B6F33DF3872DAE941C1283D006 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 0487 Signing time: Sat 06 Dec 2025 06:00:00 +0000 Manifest this update: Sat 06 Dec 2025 05:55:00 +0000 Manifest next update: Tue 09 Dec 2025 16:59:00 +0000 Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: +qoibygGTVRH2r0zMDl6e4Yn53EmYqxGJbZ9fVHTUFg=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:64:09:88:4b:82:76:b6:f3:3d:f3:87:2d:ae:94:1c:12:83:d0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Dec 6 05:55:00 2025 GMT Not After : Dec 9 16:59:00 2025 GMT Subject: CN=2EE68861DC2A2228A95828CBA00CDC5C2EA29C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:8a:8d:2e:b0:3c:9f:f6:4b:e1:d7:96:20: e1:68:e2:a6:f2:85:2c:a4:b5:e7:8b:18:32:65:8e: 44:26:22:a9:16:9e:67:26:73:a0:43:f0:62:a3:ac: 41:aa:be:a1:9a:59:da:20:01:1d:8e:29:97:a0:95: 58:55:cb:26:91:20:f0:37:9b:7d:dd:63:96:f8:c2: 54:f7:38:b4:b5:b6:d5:95:81:48:ee:12:d8:40:68: 5f:5c:5e:d6:db:44:96:b0:a5:fe:c4:5e:f9:cc:1e: 02:43:b9:4c:48:92:d3:d4:ea:4c:46:2d:5e:c9:fe: f4:79:34:0a:11:a6:4a:9c:3a:1b:75:50:cf:d1:5e: 45:41:e9:a7:2c:f5:df:69:f0:36:41:83:f9:c8:5b: 47:37:d7:d8:bd:ab:19:88:1b:8a:dd:dc:69:55:d5: 35:88:64:b4:1f:3d:9c:52:40:50:ea:60:5f:18:5f: 5a:76:41:9e:5f:23:b2:d8:e9:8d:ac:03:c0:62:51: 32:03:eb:08:44:e0:34:5c:5e:e5:97:80:4a:9e:9f: 1a:28:03:74:7f:29:45:50:4f:08:e0:49:0f:fe:2c: 9e:01:67:eb:8d:83:a0:e1:49:bf:97:3b:58:87:f7: d1:86:74:e1:a6:09:2b:ae:3c:99:94:06:52:bb:52: 76:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E6:88:61:DC:2A:22:28:A9:58:28:CB:A0:0C:DC:5C:2E:A2:9C:9B X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9c:58:e9:86:55:29:f4:84:59:a2:83:ed:03:4f:10:1e:18: 74:ff:cd:ab:25:13:84:98:cb:2e:8f:76:53:3a:7a:ff:55:d7: ce:76:ed:8c:f2:fd:b5:c2:4c:c7:cd:43:70:cb:33:07:ba:29: e4:99:e3:6c:03:4f:03:ff:01:7a:d0:74:35:f2:4f:4b:1f:70: b2:f1:2e:0f:92:f1:9c:c2:7c:db:37:39:74:9c:02:33:d9:f3: 8d:89:4e:b2:0c:74:83:01:e0:86:2c:c9:e0:2e:db:fa:bc:66: 3b:37:cf:10:43:7c:68:a3:67:64:48:8b:94:aa:3b:cd:ba:18: 43:4d:05:98:55:73:c7:c8:63:bf:23:ea:f0:15:08:71:e1:c5: f5:1f:d2:c7:d7:85:e3:1d:85:2b:4c:ea:dd:9c:5e:79:9c:f2: 52:db:69:72:ad:11:14:c8:d7:bb:67:48:cf:43:1f:f0:cd:b4: 71:18:54:15:52:a5:b5:6a:c8:4f:ec:07:84:8a:6c:20:59:91: 9a:8c:9c:e4:e4:1c:53:1a:c9:58:80:85:5a:fd:fd:e1:4f:80: 49:ec:90:27:ff:c1:65:f1:17:65:13:cb:de:c3:7a:97:83:32: 4d:c2:61:09:ae:c9:43:12:e6:fd:53:ad:9e:13:49:56:44:d1: 85:57:2d:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP2QJiEuCdrbzPfOHLa6UHBKD0AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTEyMDYwNTU1MDBaFw0yNTEyMDkxNjU5MDBaMDMxMTAvBgNV BAMTKDJFRTY4ODYxREMyQTIyMjhBOTU4MjhDQkEwMENEQzVDMkVBMjlDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRx4qNLrA8n/ZL4deWIOFo4qby hSykteeLGDJljkQmIqkWnmcmc6BD8GKjrEGqvqGaWdogAR2OKZeglVhVyyaRIPA3 m33dY5b4wlT3OLS1ttWVgUjuEthAaF9cXtbbRJawpf7EXvnMHgJDuUxIktPU6kxG LV7J/vR5NAoRpkqcOht1UM/RXkVB6acs9d9p8DZBg/nIW0c319i9qxmIG4rd3GlV 1TWIZLQfPZxSQFDqYF8YX1p2QZ5fI7LY6Y2sA8BiUTID6whE4DRcXuWXgEqenxoo A3R/KUVQTwjgSQ/+LJ4BZ+uNg6DhSb+XO1iH99GGdOGmCSuuPJmUBlK7UnbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULuaIYdwqIiipWCjLoAzcXC6inJswHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKcWOmGVSn0hFmig+0DTxAeGHT/zaslE4SY yy6PdlM6ev9V18527Yzy/bXCTMfNQ3DLMwe6KeSZ42wDTwP/AXrQdDXyT0sfcLLx Lg+S8ZzCfNs3OXScAjPZ842JTrIMdIMB4IYsyeAu2/q8Zjs3zxBDfGijZ2RIi5Sq O826GENNBZhVc8fIY78j6vAVCHHhxfUf0sfXheMdhStM6t2cXnmc8lLbaXKtERTI 17tnSM9DH/DNtHEYVBVSpbVqyE/sB4SKbCBZkZqMnOTkHFMayViAhVr9/eFPgEns kCf/wWXxF2UTy97DepeDMk3CYQmuyUMS5v1TrZ4TSVZE0YVXLes= -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:39 2025 by rpki-client