This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json) Hash identifier: E3sZTuDDITv8YhGpsrS5m+ClvtiexGmMQCdXyN1TFeY= Subject key identifier: EC:F1:F8:BD:7D:F9:33:7D:C6:EB:CE:5B:D0:88:61:5E:90:1F:90:7E Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Certificate serial: 7D576EE8AD836E02B3D5236E8A4BA2EFD32ECC70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft Manifest number: 0118 Signing time: Fri 19 Dec 2025 10:22:08 +0000 Manifest this update: Fri 19 Dec 2025 10:17:08 +0000 Manifest next update: Mon 22 Dec 2025 20:41:08 +0000 Files and hashes: 1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=) 2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: Li+VkOFSfTcx1q/X1xc9tD1d/zlIoAEenmqWJNFP0Wk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 20:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:57:6e:e8:ad:83:6e:02:b3:d5:23:6e:8a:4b:a2:ef:d3:2e:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Validity Not Before: Dec 19 10:17:08 2025 GMT Not After : Dec 22 20:41:08 2025 GMT Subject: CN=ECF1F8BD7DF9337DC6EBCE5BD088615E901F907E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:b3:e9:5e:79:d8:36:d5:35:61:5e:e5:8e: 16:e5:61:0a:46:bf:ec:5e:fe:d7:3a:f1:d0:5f:8b: 45:dc:57:a9:64:76:3b:28:94:c3:d9:8b:f3:52:8c: 21:2e:74:d7:5c:d4:11:8c:02:c2:d8:50:be:9b:5a: ae:f2:b0:45:5c:95:e7:a7:2b:17:f6:13:c4:cf:7b: ea:89:02:ed:30:6f:c6:c6:35:3f:c2:5b:3f:31:63: c0:c6:59:52:66:ed:8b:46:17:8b:4c:1f:4a:3d:1c: 91:2e:f6:f5:af:2b:e0:40:0a:f7:7e:62:a2:a0:ff: e9:c5:ed:9d:6f:bf:9c:68:c5:9c:4f:07:95:88:45: d6:32:99:14:b1:ad:06:5b:82:a6:18:3d:0a:c7:b7: cd:2e:ad:bf:87:e8:c9:67:7f:b4:43:7e:bd:e5:ca: 8b:9c:24:fe:aa:c9:4f:20:b7:00:46:63:43:57:14: 7a:f8:cf:3a:d8:b6:ee:15:67:f4:f8:d9:10:18:3a: 71:75:6f:c8:d6:c5:e8:b1:94:01:46:a9:c6:6b:71: 3b:d8:2a:57:7f:50:12:3e:be:8a:f1:61:76:15:c8: 35:f8:a0:e2:76:be:e5:47:23:17:63:96:f7:69:87: f5:2a:82:5d:20:9a:c7:63:71:62:09:f9:93:c4:72: e9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F1:F8:BD:7D:F9:33:7D:C6:EB:CE:5B:D0:88:61:5E:90:1F:90:7E X509v3 Authority Key Identifier: keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b1:f2:f1:5c:2f:69:86:7c:1f:42:7a:8a:c7:a5:72:59:3e: ab:59:0d:c4:93:51:67:a1:68:8a:0f:d6:a9:4f:fd:6f:e7:9b: 38:de:75:af:eb:65:d7:6a:5d:ff:d4:86:ea:e5:93:21:fe:03: e0:25:35:4e:18:8e:b9:36:51:a2:e1:4b:fc:16:89:5e:af:32: c1:ec:af:12:66:18:a0:5a:54:c1:06:75:12:fb:3f:78:a3:35: 1e:ff:07:57:cc:44:d7:96:9a:18:e2:c5:b4:50:89:83:2b:1d: 94:1e:0a:09:ca:36:8c:73:be:eb:b4:18:38:1c:eb:39:94:28: 07:99:0a:0f:08:ff:b4:01:55:64:e0:bd:06:a4:ea:d5:51:82: f7:90:fe:e3:73:e8:7f:3d:c9:ae:f1:b7:60:7e:db:0d:e6:92: 6d:b9:09:0d:98:08:24:b1:5b:41:b1:c1:18:91:f8:31:5a:07: 3c:aa:d3:86:89:5e:2c:14:85:08:4f:91:10:27:c4:e3:5b:60: 39:0e:da:f0:81:4d:b0:81:8f:58:e1:32:9c:6a:e5:81:1d:57: 9f:b4:89:41:9f:f9:60:06:f1:d5:55:c5:69:9e:1e:d1:b1:39: 74:88:91:51:40:ec:62:3f:12:5d:fc:8d:51:26:85:f7:ca:61: c5:f4:f1:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVdu6K2DbgKz1SNuikui79MuzHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy NTY2NTRDNjAeFw0yNTEyMTkxMDE3MDhaFw0yNTEyMjIyMDQxMDhaMDMxMTAvBgNV BAMTKEVDRjFGOEJEN0RGOTMzN0RDNkVCQ0U1QkQwODg2MTVFOTAxRjkwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQtrPpXnnYNtU1YV7ljhblYQpG v+xe/tc68dBfi0XcV6lkdjsolMPZi/NSjCEudNdc1BGMAsLYUL6bWq7ysEVcleen Kxf2E8TPe+qJAu0wb8bGNT/CWz8xY8DGWVJm7YtGF4tMH0o9HJEu9vWvK+BACvd+ YqKg/+nF7Z1vv5xoxZxPB5WIRdYymRSxrQZbgqYYPQrHt80urb+H6Mlnf7RDfr3l youcJP6qyU8gtwBGY0NXFHr4zzrYtu4VZ/T42RAYOnF1b8jWxeixlAFGqcZrcTvY Kld/UBI+vorxYXYVyDX4oOJ2vuVHIxdjlvdph/Uqgl0gmsdjcWIJ+ZPEcukPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7PH4vX35M33G685b0IhhXpAfkH4wHwYDVR0j BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2 NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABux8vFcL2mGfB9CeorHpXJZPqtZDcSTUWeh aIoP1qlP/W/nmzjeda/rZddqXf/UhurlkyH+A+AlNU4Yjrk2UaLhS/wWiV6vMsHs rxJmGKBaVMEGdRL7P3ijNR7/B1fMRNeWmhjixbRQiYMrHZQeCgnKNoxzvuu0GDgc 6zmUKAeZCg8I/7QBVWTgvQak6tVRgveQ/uNz6H89ya7xt2B+2w3mkm25CQ2YCCSx W0GxwRiR+DFaBzyq04aJXiwUhQhPkRAnxONbYDkO2vCBTbCBj1jhMpxq5YEdV5+0 iUGf+WAG8dVVxWmeHtGxOXSIkVFA7GI/El38jVEmhffKYcX08UQ= -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:02 2025 by rpki-client