This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: u1m7TgEED/L9T6mEQpm/l3gwVizM1A9kZ/tEkMZcsSY= Subject key identifier: DB:B0:D9:DF:A0:4B:E0:D3:19:43:40:11:5E:0D:31:D8:72:9F:20:64 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 200C189FB508E645D5A8E337E147D2D75DE18528 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 0255 Signing time: Fri 05 Dec 2025 20:20:53 +0000 Manifest this update: Fri 05 Dec 2025 20:15:53 +0000 Manifest next update: Mon 08 Dec 2025 23:14:53 +0000 Files and hashes: 1: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: W5zfYY+tSNBrKCC0lmbgPFvevFQsCXOIr7QiYpZelRo=) 2: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) 3: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) 4: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 23:14:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0c:18:9f:b5:08:e6:45:d5:a8:e3:37:e1:47:d2:d7:5d:e1:85:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Dec 5 20:15:53 2025 GMT Not After : Dec 8 23:14:53 2025 GMT Subject: CN=DBB0D9DFA04BE0D3194340115E0D31D8729F2064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:02:fc:2e:da:6c:83:ba:72:ef:dc:5d:65:f7: 2e:8b:40:4a:31:89:d9:e1:35:ba:a4:47:36:94:f4: c8:e5:f1:5e:64:0d:1d:4b:0d:51:50:2d:9b:ec:04: 43:d2:28:01:71:7a:80:25:5b:54:bb:45:5b:68:10: 46:1a:ba:62:e4:2b:ca:51:4f:48:bc:e7:cc:92:61: f7:19:5e:15:45:42:f1:4b:61:f8:4a:15:e9:2d:7f: 90:a8:fb:0f:2a:5c:21:ed:14:5e:35:d4:a6:76:48: 29:b7:0d:b6:b7:fb:58:b2:e7:12:cf:92:d8:d0:f3: 34:19:00:40:04:2e:dd:45:cc:80:97:9a:f9:2b:16: be:80:07:4d:13:70:3d:c5:68:e3:48:8e:1c:dc:4e: db:33:81:04:95:47:e9:7e:16:1f:04:ec:34:b4:43: 12:ac:9f:72:e8:d1:6e:13:a8:34:8d:ba:f9:71:f5: e8:2a:be:18:16:ef:b4:6c:98:f4:27:88:7e:2a:41: ad:ca:2a:5b:a4:7c:e0:1b:3e:e5:8a:ca:db:f3:68: 9e:e5:e8:02:75:e4:c0:88:30:4e:23:22:9d:e0:09: af:3e:8b:95:f6:9a:d6:eb:37:75:01:39:82:d7:93: 13:0e:f2:f2:d6:13:85:59:e4:a4:01:99:c2:2a:d2: 8f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B0:D9:DF:A0:4B:E0:D3:19:43:40:11:5E:0D:31:D8:72:9F:20:64 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:1f:68:5d:8b:66:cd:5d:40:b6:f1:5c:1f:f1:04:14:0e:95: 37:63:ef:2c:ac:97:a3:0f:42:a5:d2:bb:ed:4d:09:f4:a0:f3: 21:cb:c7:84:04:0d:be:26:01:95:ae:47:06:80:1c:3a:b7:62: c9:38:99:ff:0a:38:c3:94:39:de:3d:20:bd:fe:4a:21:8a:9e: d5:37:0c:4f:73:33:00:03:a8:a1:35:19:04:9b:8e:e4:c7:b7: 5c:35:00:41:2a:74:7f:54:02:bb:06:a2:9b:ba:98:03:11:20: 9c:d3:6b:91:cc:54:ad:b6:16:19:c8:43:ae:9d:ff:d6:45:5c: 23:c9:35:84:05:3a:f7:c0:0b:fc:27:49:08:f7:ce:4c:32:4e: 97:70:42:3b:66:6c:21:57:83:30:27:78:65:d2:62:4e:73:f1: 0c:69:71:90:57:8b:c5:a4:4d:0e:c9:af:4a:89:2c:c7:b6:3c: 86:4c:c8:8a:76:c7:52:3b:83:ba:5c:99:b7:09:89:68:9f:75: 76:d8:1f:35:3a:8b:ef:90:28:6f:fb:e6:49:ae:4a:a2:bc:ad: 47:9e:0a:6a:d5:7c:c1:01:95:dd:24:c8:55:09:0e:cf:a8:bd: 1e:5b:99:4e:fd:40:b6:63:bc:21:e5:05:49:ec:9d:c3:e2:46: 49:15:de:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAwYn7UI5kXVqOM34UfS113hhSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTEyMDUyMDE1NTNaFw0yNTEyMDgyMzE0NTNaMDMxMTAvBgNV BAMTKERCQjBEOURGQTA0QkUwRDMxOTQzNDAxMTVFMEQzMUQ4NzI5RjIwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVAvwu2myDunLv3F1l9y6LQEox idnhNbqkRzaU9Mjl8V5kDR1LDVFQLZvsBEPSKAFxeoAlW1S7RVtoEEYaumLkK8pR T0i858ySYfcZXhVFQvFLYfhKFektf5Co+w8qXCHtFF411KZ2SCm3Dba3+1iy5xLP ktjQ8zQZAEAELt1FzICXmvkrFr6AB00TcD3FaONIjhzcTtszgQSVR+l+Fh8E7DS0 QxKsn3Lo0W4TqDSNuvlx9egqvhgW77RsmPQniH4qQa3KKlukfOAbPuWKytvzaJ7l 6AJ15MCIME4jIp3gCa8+i5X2mtbrN3UBOYLXkxMO8vLWE4VZ5KQBmcIq0o8jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27DZ36BL4NMZQ0ARXg0x2HKfIGQwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkfaF2LZs1dQLbxXB/xBBQOlTdj7yysl6MP QqXSu+1NCfSg8yHLx4QEDb4mAZWuRwaAHDq3Ysk4mf8KOMOUOd49IL3+SiGKntU3 DE9zMwADqKE1GQSbjuTHt1w1AEEqdH9UArsGopu6mAMRIJzTa5HMVK22FhnIQ66d /9ZFXCPJNYQFOvfAC/wnSQj3zkwyTpdwQjtmbCFXgzAneGXSYk5z8QxpcZBXi8Wk TQ7Jr0qJLMe2PIZMyIp2x1I7g7pcmbcJiWifdXbYHzU6i++QKG/75kmuSqK8rUee CmrVfMEBld0kyFUJDs+ovR5bmU79QLZjvCHlBUnsncPiRkkV3tc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:22 2025 by rpki-client