This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: nhsFKcJJ5v3aKGWARNwRXyjrrZ1HOexgITA0PyuC4xs= Subject key identifier: 7B:92:08:DE:FE:FF:4D:F7:1F:EB:4F:23:E3:81:50:6E:EC:D8:DC:55 Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 701B129514400A84026A99D217D73ABEF1F19421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 04E1 Signing time: Thu 18 Dec 2025 04:50:40 +0000 Manifest this update: Thu 18 Dec 2025 04:45:40 +0000 Manifest next update: Sun 21 Dec 2025 08:19:40 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: YgQJfQLVc4Es9c3HpWcXuXS3MYT+vFURTDUg8lO8h4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1b:12:95:14:40:0a:84:02:6a:99:d2:17:d7:3a:be:f1:f1:94:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Dec 18 04:45:40 2025 GMT Not After : Dec 21 08:19:40 2025 GMT Subject: CN=7B9208DEFEFF4DF71FEB4F23E381506EECD8DC55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b3:1f:d2:4c:64:58:f6:a4:b7:65:27:5a:3d: 10:04:c7:d2:2f:c6:8d:8d:af:f0:d1:ce:18:f9:28: c4:04:a5:b8:c0:9f:a1:b8:ee:69:fc:cb:d8:74:42: bc:62:1d:b1:42:2a:e0:73:bf:99:50:36:e5:9f:99: 64:77:eb:5d:65:db:b8:a2:5e:92:ed:85:84:10:2f: 35:7f:d0:9d:81:c5:f9:9b:f5:dd:15:d5:3c:7c:67: 88:42:22:1b:a0:0c:e9:f5:e1:4b:f1:67:4b:55:57: ac:d2:8f:ef:ad:90:2f:b6:28:f5:1b:6b:15:71:e1: 0b:18:24:7b:63:9b:76:8b:ac:96:27:40:df:35:eb: 43:a0:7e:90:33:c6:37:8a:00:d3:fd:b1:78:61:0f: 5f:ec:8a:eb:fe:c1:64:54:f6:ee:9b:48:2a:f9:5b: 91:65:d1:1c:9b:1b:aa:4d:10:2d:80:0c:a0:d3:5b: 27:2c:d1:94:67:4a:8a:39:f6:40:58:d2:3a:3f:8f: 1e:05:55:75:91:3b:97:b6:26:03:9b:6c:9c:18:77: 10:ac:98:11:7e:b4:dd:cd:da:3e:3a:b9:65:75:43: 08:71:d0:b9:af:02:8f:d4:ae:da:c7:dd:c9:20:a6: fc:4c:57:0c:68:c1:c7:09:06:54:ed:0c:91:dd:d0: 08:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:92:08:DE:FE:FF:4D:F7:1F:EB:4F:23:E3:81:50:6E:EC:D8:DC:55 X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:47:74:67:26:af:22:23:cc:21:88:b6:23:b6:01:09:b9:9f: 4b:ec:e1:26:1a:d7:cf:0e:63:d0:cf:f2:6e:4e:c8:49:b1:b1: 1c:50:d9:fb:49:74:a3:40:34:bd:66:c0:6c:39:17:95:85:39: 1c:26:cb:22:5d:16:d6:6c:a8:de:2f:85:69:15:52:d2:1d:5e: 3f:18:aa:15:37:29:0e:a0:dc:af:83:e3:d8:cd:7f:2b:29:39: af:a4:29:f9:17:8f:aa:8e:cb:76:a8:76:9c:ae:87:48:5c:e0: b7:c4:66:56:e6:f2:f5:52:6a:4b:18:99:9f:a2:3b:cc:5d:f0: a6:86:0f:37:cf:b5:e0:18:95:5a:d0:68:20:52:05:1d:13:18: ba:77:f9:14:0a:57:bc:a1:62:47:19:f0:0e:a6:fd:3c:9d:78: 74:18:24:e1:d3:d2:72:88:53:0a:54:a4:2e:d2:4b:cd:77:c6: a5:e3:3c:33:3c:e6:86:46:75:d0:d7:c9:3b:de:93:0a:90:ed: 3f:03:97:00:e9:44:b4:53:64:ef:3d:40:ee:7a:35:f1:41:98: 40:64:95:14:9f:e4:9f:4e:e5:5e:0e:db:4a:ce:ca:9a:ab:8d: dd:1f:61:1e:8f:35:8e:f3:d9:44:14:78:f6:74:89:fa:01:2b: b0:12:57:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBsSlRRACoQCapnSF9c6vvHxlCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTEyMTgwNDQ1NDBaFw0yNTEyMjEwODE5NDBaMDMxMTAvBgNV BAMTKDdCOTIwOERFRkVGRjRERjcxRkVCNEYyM0UzODE1MDZFRUNEOERDNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLsx/STGRY9qS3ZSdaPRAEx9Iv xo2Nr/DRzhj5KMQEpbjAn6G47mn8y9h0QrxiHbFCKuBzv5lQNuWfmWR3611l27ii XpLthYQQLzV/0J2Bxfmb9d0V1Tx8Z4hCIhugDOn14UvxZ0tVV6zSj++tkC+2KPUb axVx4QsYJHtjm3aLrJYnQN8160OgfpAzxjeKANP9sXhhD1/siuv+wWRU9u6bSCr5 W5Fl0RybG6pNEC2ADKDTWycs0ZRnSoo59kBY0jo/jx4FVXWRO5e2JgObbJwYdxCs mBF+tN3N2j46uWV1Qwhx0LmvAo/UrtrH3ckgpvxMVwxowccJBlTtDJHd0AgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe5II3v7/Tfcf608j44FQbuzY3FUwHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJHdGcmryIjzCGItiO2AQm5n0vs4SYa188O Y9DP8m5OyEmxsRxQ2ftJdKNANL1mwGw5F5WFORwmyyJdFtZsqN4vhWkVUtIdXj8Y qhU3KQ6g3K+D49jNfyspOa+kKfkXj6qOy3aodpyuh0hc4LfEZlbm8vVSaksYmZ+i O8xd8KaGDzfPteAYlVrQaCBSBR0TGLp3+RQKV7yhYkcZ8A6m/TydeHQYJOHT0nKI UwpUpC7SS813xqXjPDM85oZGddDXyTvekwqQ7T8DlwDpRLRTZO89QO56NfFBmEBk lRSf5J9O5V4O20rOypqrjd0fYR6PNY7z2UQUePZ0ifoBK7ASV48= -----END CERTIFICATE-----Generated at Fri Dec 19 08:53:03 2025 by rpki-client