This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: HtScacGU1gVwfWnfpvxyPNHF6/l7XCafCutuG6LDrIs= Subject key identifier: A6:89:49:8B:15:5C:09:AD:53:B1:2C:6D:95:72:89:43:16:D9:AB:FE Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 2F22AD6D64BBCB72382A78EC5E1458F24679ACA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 014F Signing time: Sat 06 Dec 2025 19:02:19 +0000 Manifest this update: Sat 06 Dec 2025 18:57:19 +0000 Manifest next update: Wed 10 Dec 2025 02:53:19 +0000 Files and hashes: 1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: xZRYEfp70yK0ySZBN1COPmPpPRhR64k2dxCJ9p4d/zw=) 2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: SrZZMNyD+weFJ6GOZ0htogUZ6HrLc/IW65Udx/Gnnmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:22:ad:6d:64:bb:cb:72:38:2a:78:ec:5e:14:58:f2:46:79:ac:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Dec 6 18:57:19 2025 GMT Not After : Dec 10 02:53:19 2025 GMT Subject: CN=A689498B155C09AD53B12C6D9572894316D9ABFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:aa:9b:37:df:b8:ba:59:7d:df:18:18:7f: a2:50:83:da:3c:15:25:b1:7f:fe:2c:c2:cd:98:e6: f8:7c:5e:f2:2a:ae:9d:9f:ee:88:8a:53:14:ff:53: 6a:e6:c2:ec:97:5d:f2:f7:5b:47:62:02:58:46:fd: ac:7c:62:65:19:fc:fa:28:46:6d:bb:f1:b2:a1:61: e9:35:86:7f:6a:a7:bc:26:9f:42:4b:db:de:75:03: 25:69:2a:6a:ae:69:19:35:af:44:48:ee:45:31:34: 54:7c:e6:e0:e2:9e:5f:fc:f7:5b:e7:95:56:1b:51: 8c:f0:b7:bf:02:7c:ab:19:8a:fa:96:57:a3:50:31: 56:48:d9:e0:bd:5a:1a:d6:ea:c6:19:ba:a4:1f:b3: 87:e6:fd:fa:9a:db:61:9d:cf:92:83:6a:e3:fa:85: c3:3d:55:10:c4:10:3a:96:37:a2:90:6c:ab:7e:0c: 61:61:fc:f1:d9:5d:af:7f:ab:8e:1c:49:b3:4e:6d: b4:44:5e:64:b3:b7:d1:48:b0:dc:97:c0:c7:59:41: 03:e5:77:9e:69:62:8c:aa:a0:5a:28:34:bf:dc:5d: 8c:6e:b0:41:26:c0:9e:ad:c2:33:07:77:01:a7:37: 61:25:c4:8b:11:dd:fd:84:c8:ed:df:af:e4:63:fd: aa:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:89:49:8B:15:5C:09:AD:53:B1:2C:6D:95:72:89:43:16:D9:AB:FE X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:81:3c:16:b4:d9:4b:35:5c:31:96:de:18:c8:e3:4f:80:33: 21:21:93:ed:83:1f:6d:ff:7c:41:57:4b:d2:79:00:b6:27:ac: 5d:96:af:43:fa:28:09:2b:9f:28:f3:7e:a6:7d:87:df:fa:2c: 7c:8e:bd:5f:20:79:bb:35:7d:83:4b:36:85:76:3f:66:d1:18: cb:2a:30:c8:f0:26:9f:13:6c:a2:c0:3c:4f:a7:1d:98:d2:84: ea:2e:74:04:a0:d9:75:17:91:8a:c8:d2:99:e9:8a:95:09:ba: 68:e7:b7:0e:cb:72:b5:6d:31:ec:ae:84:93:28:2f:95:2a:ca: 93:cb:1f:42:e2:ce:ef:19:e5:dc:1c:e8:d1:13:ea:67:cc:c9: 3a:3b:2f:d0:c8:79:4e:c6:59:73:71:19:8c:84:48:33:11:63: 7b:52:6f:53:ab:f7:8c:86:8b:44:11:01:d8:f6:07:eb:0b:2d: 54:41:2d:df:98:a0:12:5a:dd:66:10:26:f6:77:de:2b:ca:bf: 6e:98:54:b3:11:1b:16:f6:6e:6d:30:66:2d:89:21:12:84:c1: 2c:b8:d0:0f:17:18:46:24:4d:62:be:c5:e9:67:31:93:ef:c3: 89:ac:a8:24:83:93:d9:03:4e:6f:8f:45:72:34:08:5e:ae:2c: 02:bc:7d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyKtbWS7y3I4KnjsXhRY8kZ5rKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNTEyMDYxODU3MTlaFw0yNTEyMTAwMjUzMTlaMDMxMTAvBgNV BAMTKEE2ODk0OThCMTU1QzA5QUQ1M0IxMkM2RDk1NzI4OTQzMTZEOUFCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjqqbN9+4ull93xgYf6JQg9o8 FSWxf/4sws2Y5vh8XvIqrp2f7oiKUxT/U2rmwuyXXfL3W0diAlhG/ax8YmUZ/Poo Rm278bKhYek1hn9qp7wmn0JL2951AyVpKmquaRk1r0RI7kUxNFR85uDinl/891vn lVYbUYzwt78CfKsZivqWV6NQMVZI2eC9WhrW6sYZuqQfs4fm/fqa22Gdz5KDauP6 hcM9VRDEEDqWN6KQbKt+DGFh/PHZXa9/q44cSbNObbREXmSzt9FIsNyXwMdZQQPl d55pYoyqoFooNL/cXYxusEEmwJ6twjMHdwGnN2ElxIsR3f2EyO3fr+Rj/ar7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpolJixVcCa1TsSxtlXKJQxbZq/4wHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANqBPBa02Us1XDGW3hjI40+AMyEhk+2DH23/ fEFXS9J5ALYnrF2Wr0P6KAkrnyjzfqZ9h9/6LHyOvV8gebs1fYNLNoV2P2bRGMsq MMjwJp8TbKLAPE+nHZjShOoudASg2XUXkYrI0pnpipUJumjntw7LcrVtMeyuhJMo L5UqypPLH0Lizu8Z5dwc6NET6mfMyTo7L9DIeU7GWXNxGYyESDMRY3tSb1Or94yG i0QRAdj2B+sLLVRBLd+YoBJa3WYQJvZ33ivKv26YVLMRGxb2bm0wZi2JIRKEwSy4 0A8XGEYkTWK+xelnMZPvw4msqCSDk9kDTm+PRXI0CF6uLAK8fcg= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:59 2025 by rpki-client