This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: FqOBh4Gip2SjqTt0xn2yJ8AfQYrJDM9C98EjzfpN+7g= Subject key identifier: 5B:13:27:73:82:C5:A5:CB:3D:BE:87:0C:94:B0:C3:47:BA:73:DF:49 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 7B91B2A9FC8339C6A1A0A73541B981C99F21DB8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: F8 Signing time: Tue 16 Dec 2025 21:22:30 +0000 Manifest this update: Tue 16 Dec 2025 21:17:30 +0000 Manifest next update: Sat 20 Dec 2025 06:06:30 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: 6oR9peHtnM32Vw5b/viep+MTGHaUa83X0HIFkIeP3qI=) 2: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 3: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 06:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:91:b2:a9:fc:83:39:c6:a1:a0:a7:35:41:b9:81:c9:9f:21:db:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Dec 16 21:17:30 2025 GMT Not After : Dec 20 06:06:30 2025 GMT Subject: CN=5B13277382C5A5CB3DBE870C94B0C347BA73DF49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:1d:84:8b:a6:d7:9a:22:a4:3e:49:7d:13: 33:e8:83:2f:51:f7:5c:e5:2e:55:69:00:f7:e1:12: ed:79:b4:2b:26:4a:fa:97:50:a4:34:50:cd:5e:8e: 6d:e2:55:be:5b:15:0a:32:f4:0a:8a:e7:67:89:60: 4d:68:d8:65:8d:61:dc:4a:0e:99:de:2b:ff:dd:44: 72:4e:3d:ac:54:9f:f8:e3:5d:9c:3a:8e:74:6d:71: 1a:b6:24:9e:36:7a:88:de:35:d1:4a:99:ef:54:74: 73:0c:e0:4d:f4:e8:16:80:b0:63:c8:04:d4:dd:e0: c4:2f:ea:62:50:5a:b6:d6:20:9a:cd:87:fb:d8:14: e2:74:57:4e:62:68:45:80:20:1b:c8:ed:f8:a8:3f: 87:ed:51:21:7d:41:8b:2a:1c:06:19:be:2b:92:a1: 8a:07:16:53:0a:58:e3:ca:e8:ac:52:90:cf:66:c0: ec:63:b2:7f:47:94:fc:14:c7:10:1d:ab:d5:4e:8d: bc:d7:4f:b1:04:26:f6:6b:bf:2b:c0:dc:57:92:f6: 8c:b7:f6:d2:4e:29:11:b5:6b:9e:03:25:6c:84:e3: 7b:78:35:d5:d7:2b:7d:a9:f1:66:7d:d1:8f:20:4f: fd:ee:50:54:f9:38:bd:88:7a:5b:85:92:42:75:c5: 79:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:13:27:73:82:C5:A5:CB:3D:BE:87:0C:94:B0:C3:47:BA:73:DF:49 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:95:32:a7:34:87:cf:0c:3c:04:87:d8:09:53:79:f3:09:68: 7b:25:c6:42:48:a6:f6:c5:31:22:cb:a5:fb:32:14:eb:f3:24: 6c:a9:36:be:c8:bc:13:78:b7:03:1f:d0:c9:83:b0:fb:98:a6: d3:39:10:9f:e6:38:a4:5e:f5:28:1d:33:96:0e:b6:8c:c5:19: b2:db:a1:6f:03:11:f8:3e:63:70:13:61:16:48:26:ed:4e:fa: c7:58:65:f9:81:28:97:d9:d7:75:6c:53:66:02:12:c4:90:3a: 60:40:14:99:97:a0:cd:ae:a4:20:30:d9:3f:11:8f:7b:b0:49: 24:b2:9e:d1:22:13:d1:f5:60:73:4b:78:3b:d1:fc:3b:98:a0: e3:f3:fe:92:1f:18:33:25:2f:53:17:33:00:45:c9:4a:25:35: ff:c7:c8:cf:23:dc:9d:fa:30:77:79:86:11:64:a4:a6:04:a1: 8e:ac:e8:2a:66:35:0b:c1:38:12:e0:a9:6b:81:30:47:35:cc: a7:68:d5:ee:17:24:46:e2:e5:ed:00:bf:91:41:de:5b:c2:03: 76:2e:4c:0b:3b:67:27:3f:07:15:34:fb:26:46:7b:1d:61:ad: 46:2c:47:18:56:2b:f6:0c:3d:9f:7e:d2:e0:4a:ef:13:45:b0: 40:ff:df:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5GyqfyDOcahoKc1QbmByZ8h24swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTEyMTYyMTE3MzBaFw0yNTEyMjAwNjA2MzBaMDMxMTAvBgNV BAMTKDVCMTMyNzczODJDNUE1Q0IzREJFODcwQzk0QjBDMzQ3QkE3M0RGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiex2Ei6bXmiKkPkl9EzPogy9R 91zlLlVpAPfhEu15tCsmSvqXUKQ0UM1ejm3iVb5bFQoy9AqK52eJYE1o2GWNYdxK DpneK//dRHJOPaxUn/jjXZw6jnRtcRq2JJ42eojeNdFKme9UdHMM4E306BaAsGPI BNTd4MQv6mJQWrbWIJrNh/vYFOJ0V05iaEWAIBvI7fioP4ftUSF9QYsqHAYZviuS oYoHFlMKWOPK6KxSkM9mwOxjsn9HlPwUxxAdq9VOjbzXT7EEJvZrvyvA3FeS9oy3 9tJOKRG1a54DJWyE43t4NdXXK32p8WZ90Y8gT/3uUFT5OL2IeluFkkJ1xXkxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWxMnc4LFpcs9vocMlLDDR7pz30kwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmVMqc0h88MPASH2AlTefMJaHslxkJIpvbF MSLLpfsyFOvzJGypNr7IvBN4twMf0MmDsPuYptM5EJ/mOKRe9SgdM5YOtozFGbLb oW8DEfg+Y3ATYRZIJu1O+sdYZfmBKJfZ13VsU2YCEsSQOmBAFJmXoM2upCAw2T8R j3uwSSSyntEiE9H1YHNLeDvR/DuYoOPz/pIfGDMlL1MXMwBFyUolNf/HyM8j3J36 MHd5hhFkpKYEoY6s6CpmNQvBOBLgqWuBMEc1zKdo1e4XJEbi5e0Av5FB3lvCA3Yu TAs7Zyc/BxU0+yZGex1hrUYsRxhWK/YMPZ9+0uBK7xNFsED/32k= -----END CERTIFICATE-----Generated at Thu Dec 18 22:03:41 2025 by rpki-client