This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft File: ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft (raw, json) Hash identifier: 6TDVXkPtFkoDf+wHCfK7WoIFY9HFMlrGoyATf/7fwYc= Subject key identifier: CE:1C:E9:39:5A:36:C9:87:AB:28:01:ED:F5:CC:2A:5D:81:CD:4A:B9 Authority key identifier: AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4 Certificate issuer: /CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4 Certificate serial: 5A7375B6A5A7528CE3EB1A5F757C20D593D2F735 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft Manifest number: 0258 Signing time: Fri 05 Dec 2025 21:30:48 +0000 Manifest this update: Fri 05 Dec 2025 21:25:48 +0000 Manifest next update: Mon 08 Dec 2025 22:51:48 +0000 Files and hashes: 1: 3130332e3137372e3231352e302f32342d3234203d3e20313437313633.roa (hash: dUSjnFJULsQt0ZMfSuCJpifmDF9rtnb0yNIzE9XIOWo=) 2: ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl (hash: DLLrWvnXnDFKqmnda7LT9xLuQkJ/HdAP93AcOdRd2jE=) 3: 3130332e3137372e3231342e302f32342d3234203d3e20313437313633.roa (hash: BQDZ7beKpSG5YJTRW/gbj7YmxhbuMugwzWVLa45Kdxg=) 4: 3130332e3137372e3231342e302f32332d3233203d3e20313437313633.roa (hash: TrjJa445+JUR+ayqk91EMJFWmXepW8pWumfROn/i7JY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 22:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:73:75:b6:a5:a7:52:8c:e3:eb:1a:5f:75:7c:20:d5:93:d2:f7:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADB9C197352F8128F6DAA47A227D3869A4C238F4 Validity Not Before: Dec 5 21:25:48 2025 GMT Not After : Dec 8 22:51:48 2025 GMT Subject: CN=CE1CE9395A36C987AB2801EDF5CC2A5D81CD4AB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:0d:30:4b:e4:be:db:35:89:e8:6a:78:5b:c1: f2:03:83:1c:fe:c4:94:65:d5:1d:0a:45:a0:24:36: 9c:4d:21:5d:b8:ca:e4:f4:f3:8d:ee:dc:71:cb:3b: e8:30:24:f0:a6:3d:1f:d7:ff:cd:52:c6:72:ce:29: 5e:95:6f:6a:5e:fa:49:13:1f:04:3e:ac:ba:b2:6e: 35:45:32:21:44:9d:90:4c:fd:3e:ee:51:f9:45:5e: 55:31:fb:a4:56:6d:78:4b:a2:c6:71:9e:bd:1f:74: f5:e8:ab:02:df:10:6e:a0:1c:32:ba:39:18:99:7d: fd:4f:f4:6c:ef:d6:ed:15:8f:eb:89:80:d9:46:98: a8:98:6b:8e:8d:46:d2:d1:14:fa:d5:b4:93:39:90: 10:06:eb:16:62:2c:7f:01:49:24:0e:bc:2f:47:70: c3:a7:6d:00:85:fd:5b:fc:bf:ce:14:22:e5:df:dc: 37:a6:88:d0:bb:8c:32:c4:23:98:91:ee:d1:07:91: 9f:cf:d0:16:f0:41:fa:44:7f:8a:d4:f5:03:eb:b0: 1d:7e:2e:01:cd:df:9c:eb:2b:6c:41:b9:e8:df:13: 7e:d1:58:1f:90:fd:ce:17:3d:32:af:42:00:b7:c1: 77:ff:67:4d:d1:fd:f1:76:5d:66:18:3e:bb:97:12: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:E9:39:5A:36:C9:87:AB:28:01:ED:F5:CC:2A:5D:81:CD:4A:B9 X509v3 Authority Key Identifier: keyid:AD:B9:C1:97:35:2F:81:28:F6:DA:A4:7A:22:7D:38:69:A4:C2:38:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADB9C197352F8128F6DAA47A227D3869A4C238F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/773d2b60-12c8-413e-b941-393e00fdd653/0/ADB9C197352F8128F6DAA47A227D3869A4C238F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8a:0d:c2:3d:90:1b:1e:62:f3:3c:db:e1:b3:e2:84:73:20: 98:8e:38:99:30:bf:38:4f:bd:6a:01:78:d2:19:d4:77:b6:11: d0:2f:76:e2:70:56:f5:79:db:15:dc:9a:5c:cf:be:71:af:79: 9d:aa:6a:8c:37:0f:89:dc:e9:ee:16:7a:3f:4b:56:89:ab:29: a5:e8:23:6e:e2:5a:61:c7:49:b4:a9:da:ed:0d:e0:ba:98:b7: 86:7c:f0:db:f2:d2:f1:ad:1f:f3:59:da:f7:54:ab:f5:6c:a1: 01:44:15:6b:f6:5f:ad:20:c8:f7:bd:8e:49:ff:7a:de:8c:3b: 6a:15:77:58:e1:d9:0d:80:52:97:68:25:c0:f7:8c:3b:c3:75: bd:86:44:8d:53:4f:5a:25:37:ab:33:26:e2:b8:90:d4:a2:ec: 1c:d1:56:78:d2:0a:ae:d2:ca:31:01:ab:cf:0d:fd:aa:3f:24: 49:bc:cb:4f:0d:71:97:71:15:9d:d7:e8:36:7d:70:c1:67:82: 99:2b:26:83:8a:33:3c:48:29:21:25:ff:a8:6c:18:7c:0f:84: 5b:f7:82:2c:0f:ff:f9:22:08:ac:30:ed:d7:35:dc:79:08:11: 2a:b9:0d:50:b4:b8:d0:79:53:81:ba:65:74:e0:0d:61:d5:4c: 35:c7:55:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnN1tqWnUozj6xpfdXwg1ZPS9zUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlB NEMyMzhGNDAeFw0yNTEyMDUyMTI1NDhaFw0yNTEyMDgyMjUxNDhaMDMxMTAvBgNV BAMTKENFMUNFOTM5NUEzNkM5ODdBQjI4MDFFREY1Q0MyQTVEODFDRDRBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtDTBL5L7bNYnoanhbwfIDgxz+ xJRl1R0KRaAkNpxNIV24yuT0843u3HHLO+gwJPCmPR/X/81SxnLOKV6Vb2pe+kkT HwQ+rLqybjVFMiFEnZBM/T7uUflFXlUx+6RWbXhLosZxnr0fdPXoqwLfEG6gHDK6 ORiZff1P9Gzv1u0Vj+uJgNlGmKiYa46NRtLRFPrVtJM5kBAG6xZiLH8BSSQOvC9H cMOnbQCF/Vv8v84UIuXf3DemiNC7jDLEI5iR7tEHkZ/P0BbwQfpEf4rU9QPrsB1+ LgHN35zrK2xBuejfE37RWB+Q/c4XPTKvQgC3wXf/Z03R/fF2XWYYPruXEq7RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzhzpOVo2yYerKAHt9cwqXYHNSrkwHwYDVR0j BBgwFoAUrbnBlzUvgSj22qR6In04aaTCOPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NzNkMmI2MC0xMmM4LTQxM2UtYjk0MS0zOTNlMDBmZGQ2NTMvMC9BREI5QzE5NzM1 MkY4MTI4RjZEQUE0N0EyMjdEMzg2OUE0QzIzOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4NjlBNEMy MzhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzczZDJiNjAtMTJjOC00MTNlLWI5 NDEtMzkzZTAwZmRkNjUzLzAvQURCOUMxOTczNTJGODEyOEY2REFBNDdBMjI3RDM4 NjlBNEMyMzhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKKDcI9kBseYvM82+Gz4oRzIJiOOJkwvzhP vWoBeNIZ1He2EdAvduJwVvV52xXcmlzPvnGveZ2qaow3D4nc6e4Wej9LVomrKaXo I27iWmHHSbSp2u0N4LqYt4Z88Nvy0vGtH/NZ2vdUq/VsoQFEFWv2X60gyPe9jkn/ et6MO2oVd1jh2Q2AUpdoJcD3jDvDdb2GRI1TT1olN6szJuK4kNSi7BzRVnjSCq7S yjEBq88N/ao/JEm8y08NcZdxFZ3X6DZ9cMFngpkrJoOKMzxIKSEl/6hsGHwPhFv3 giwP//kiCKww7dc13HkIESq5DVC0uNB5U4G6ZXTgDWHVTDXHVRU= -----END CERTIFICATE-----Generated at Sun Dec 7 03:56:07 2025 by rpki-client