This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: tVzr3mffmxd4ag2jp3YiMLnIgBhuC4OiZ/Ly/b0rm+M= Subject key identifier: A0:6A:94:FB:72:7E:C5:A1:02:0C:69:18:94:A2:40:BE:D6:E3:FC:CD Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 5904355524C03691EBCFB02E59CF85D721AB1A98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 01C2 Signing time: Sat 06 Dec 2025 20:11:12 +0000 Manifest this update: Sat 06 Dec 2025 20:06:12 +0000 Manifest next update: Wed 10 Dec 2025 07:01:12 +0000 Files and hashes: 1: 3130332e3135332e38332e302f32342d3234203d3e20313339393637.roa (hash: OdcW1lviWmv8m1d1fUcPQdDa+Z1BWLWFlqGEUdQSYDU=) 2: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: u8dN2STN9Eo34weryq61IjbVfzO4tqD0ELoMMyOofDw=) 3: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: WIWr0cwH7QhkTpNLIiEs2aPSMVA6P1W6AWTBZtE9A08=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:04:35:55:24:c0:36:91:eb:cf:b0:2e:59:cf:85:d7:21:ab:1a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Dec 6 20:06:12 2025 GMT Not After : Dec 10 07:01:12 2025 GMT Subject: CN=A06A94FB727EC5A1020C691894A240BED6E3FCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:92:c9:e7:5b:a8:e8:2e:ca:e9:49:e9:49: 42:ac:25:56:29:41:79:b1:ae:cf:14:e0:0c:26:a5: 80:dd:d1:52:ad:dc:1b:eb:fe:ec:71:c6:04:fd:db: 86:66:36:8d:1e:23:d4:e2:8e:de:8b:b9:d2:96:49: d4:ef:bc:11:17:e8:af:4b:9e:71:2b:d3:cb:04:7e: 0c:41:ec:9f:6b:1c:08:5a:01:d7:3a:a8:fa:cf:7d: 4a:70:c9:2c:f5:8e:63:b6:0f:3a:86:ea:e9:97:25: 5f:84:7e:60:55:3f:2d:6a:0d:07:fe:f6:f4:19:fa: b4:48:b4:1b:ee:c2:15:90:de:d0:38:39:03:96:ad: 61:9b:95:3e:69:bf:3c:69:15:d1:95:62:76:7f:83: de:0f:ce:b4:2a:31:f3:ce:53:92:dc:0c:51:fb:c0: ce:26:7e:6f:e9:5a:e6:6a:2c:61:de:d5:7a:2d:3d: b7:91:b0:f8:e5:67:35:22:a7:ce:6c:e7:aa:5b:1b: 80:46:7c:50:03:0e:53:56:3e:35:5c:c0:86:76:69: 25:47:63:17:0a:34:47:31:d3:84:e2:e1:70:2c:76: 31:91:86:e8:41:c8:77:5b:b5:82:8d:a3:7a:64:2d: c7:48:f5:70:26:1f:ad:ac:7e:04:39:57:86:cc:98: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6A:94:FB:72:7E:C5:A1:02:0C:69:18:94:A2:40:BE:D6:E3:FC:CD X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:06:c1:34:43:eb:7e:a5:58:eb:d2:1c:84:b1:9a:6d:e6:34: a1:a5:c5:32:fb:9b:e4:49:0b:fe:78:0e:c2:76:ff:c1:fc:58: 85:fe:e7:bd:10:b6:b0:87:d6:3f:95:74:d7:ea:a2:23:7e:4b: f1:d3:f0:7a:d2:b7:86:af:cb:2c:c4:aa:81:1b:f8:c8:85:4c: 01:69:f4:5c:e2:7a:3c:da:69:f7:a0:22:f0:de:09:fd:8a:a8: ad:f8:09:4c:d5:c3:24:bc:1c:53:fa:02:53:cd:da:58:f2:6f: c4:44:8c:d2:65:82:d4:7d:3e:5e:cd:f3:63:44:cb:8e:0b:e2: d6:a4:fe:b5:b8:c8:7c:a9:96:62:bd:8c:a5:72:24:cb:93:e0: ad:36:f5:4b:06:29:ab:88:e5:d2:28:45:13:77:51:2c:3f:7e: 7f:87:52:b1:dd:35:53:28:04:1d:6d:e8:89:bd:47:3f:d3:66: 5a:57:de:32:59:a6:4c:28:fa:78:74:75:49:d7:26:2c:8f:bf: e0:e8:28:72:40:2d:df:8e:9b:42:a0:19:8d:e4:f8:2c:aa:b3: d8:89:9a:99:af:7c:17:34:b9:41:a3:7d:f9:7e:05:3a:55:4b: 79:d3:61:80:99:86:d6:6e:d7:2b:a9:24:c1:48:f3:3d:76:26: 10:e0:05:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQQ1VSTANpHrz7AuWc+F1yGrGpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNTEyMDYyMDA2MTJaFw0yNTEyMTAwNzAxMTJaMDMxMTAvBgNV BAMTKEEwNkE5NEZCNzI3RUM1QTEwMjBDNjkxODk0QTI0MEJFRDZFM0ZDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC605LJ51uo6C7K6UnpSUKsJVYp QXmxrs8U4AwmpYDd0VKt3Bvr/uxxxgT924ZmNo0eI9Tijt6LudKWSdTvvBEX6K9L nnEr08sEfgxB7J9rHAhaAdc6qPrPfUpwySz1jmO2DzqG6umXJV+EfmBVPy1qDQf+ 9vQZ+rRItBvuwhWQ3tA4OQOWrWGblT5pvzxpFdGVYnZ/g94PzrQqMfPOU5LcDFH7 wM4mfm/pWuZqLGHe1XotPbeRsPjlZzUip85s56pbG4BGfFADDlNWPjVcwIZ2aSVH YxcKNEcx04Ti4XAsdjGRhuhByHdbtYKNo3pkLcdI9XAmH62sfgQ5V4bMmA4BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGqU+3J+xaECDGkYlKJAvtbj/M0wHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMIGwTRD636lWOvSHISxmm3mNKGlxTL7m+RJ C/54DsJ2/8H8WIX+570QtrCH1j+VdNfqoiN+S/HT8HrSt4avyyzEqoEb+MiFTAFp 9FziejzaafegIvDeCf2KqK34CUzVwyS8HFP6AlPN2ljyb8REjNJlgtR9Pl7N82NE y44L4tak/rW4yHyplmK9jKVyJMuT4K029UsGKauI5dIoRRN3USw/fn+HUrHdNVMo BB1t6Im9Rz/TZlpX3jJZpkwo+nh0dUnXJiyPv+DoKHJALd+Om0KgGY3k+Cyqs9iJ mpmvfBc0uUGjffl+BTpVS3nTYYCZhtZu1yupJMFI8z12JhDgBdk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:15 2025 by rpki-client