This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: c5CJwu1H0K4vR7ieKJPMVEbwfcv9MfdBwVdK6TWNDaA= Subject key identifier: 41:97:65:F3:28:41:CA:8A:1E:1A:15:A0:C3:C4:60:67:D3:A4:86:6F Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 1FBA3B04C6C3D19E41A534311601AB47B6A1BA0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 01B3 Signing time: Fri 05 Dec 2025 19:21:05 +0000 Manifest this update: Fri 05 Dec 2025 19:16:05 +0000 Manifest next update: Tue 09 Dec 2025 01:25:05 +0000 Files and hashes: 1: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: DOHflsbrQaOEO5QsCIK10Dw2KqiTHr+jge5i1Y/keVc=) 2: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: g1Ka7yfyJPbCamNmlkRkAf0k4fb7xbeQ8IZXUzIAW64=) 3: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: BDD90sSQsBf6TcZNY5H5fSy8FBCNfWqRzrbG2rv5UwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 01:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ba:3b:04:c6:c3:d1:9e:41:a5:34:31:16:01:ab:47:b6:a1:ba:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Dec 5 19:16:05 2025 GMT Not After : Dec 9 01:25:05 2025 GMT Subject: CN=419765F32841CA8A1E1A15A0C3C46067D3A4866F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:7b:ec:16:49:07:a9:5d:cc:1a:7c:5b:87: 06:53:92:5d:54:a4:4d:5d:0d:28:ed:0f:d9:55:b9: 7b:c7:44:22:3c:cb:c8:2f:d0:56:15:ce:f6:ac:52: 6d:79:e8:d7:6e:ec:a3:57:aa:74:30:cc:ec:a0:37: 87:6f:91:9c:b6:e9:ee:13:dc:f0:f2:35:f7:9c:2f: 64:0b:df:71:31:85:41:44:09:19:d9:9e:5a:88:e9: 82:84:d0:ec:70:b4:99:86:cc:3b:3f:b5:22:0f:bc: bc:f2:ff:a9:83:dd:fd:11:18:03:72:a0:ad:a1:30: bb:cf:79:52:3e:d5:4d:3e:f3:39:f3:83:5d:50:fd: 58:9b:63:6b:8d:d9:4c:f3:83:a4:38:56:6a:2d:d7: c8:7b:4f:51:de:eb:99:25:27:e5:65:13:2a:f3:b2: cf:21:ab:33:5b:2f:21:b1:02:bb:ea:78:2f:82:dc: 8d:c1:d5:5d:6e:c3:72:d0:32:00:2c:9f:02:11:50: f7:a8:c8:8c:3e:3a:db:83:92:f3:58:61:9f:ba:5d: 9d:37:da:81:46:e1:fb:b6:95:cc:7b:e1:ba:aa:58: b1:82:02:9a:ab:64:c9:be:8e:68:6e:0a:25:cf:e9: f8:a0:99:00:9f:82:d4:1c:a3:2a:dd:0f:a0:42:56: 35:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:65:F3:28:41:CA:8A:1E:1A:15:A0:C3:C4:60:67:D3:A4:86:6F X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:15:9b:fc:98:45:e3:00:ab:98:a7:2f:74:04:d3:e8:2b:a4: 12:ad:20:1f:a7:cd:a7:84:e5:8e:46:85:03:19:f2:a7:dc:22: 27:bd:02:55:5c:d6:f3:44:07:ab:57:e8:34:3d:49:7e:32:0e: dd:da:e9:0c:77:c7:4f:e4:59:0a:fd:8b:23:a7:f3:02:c1:16: 27:b8:f3:92:b8:ae:66:2b:9f:54:52:1a:8b:35:ab:52:43:f6: fa:0f:4c:fc:11:e9:bb:9b:8f:1e:ce:b5:a4:a2:07:d9:19:9e: e0:b1:8d:28:1a:8c:bd:ac:bf:cd:91:6b:c6:24:71:66:3b:1f: 2b:9c:bc:fd:7b:44:c6:cd:35:44:fa:94:ca:5c:92:7a:66:cd: aa:08:02:23:76:7a:0b:73:24:6b:9c:8f:3f:ab:4e:15:26:02: da:59:91:c6:c2:d7:33:e9:e4:a6:d8:0a:5b:2b:97:70:f1:07: 4c:a7:ed:bb:54:f5:13:fe:fe:87:44:e1:c7:0f:8c:e7:65:52: cd:41:59:e3:08:56:7b:32:c5:3e:fb:75:cf:62:7f:ea:e6:4c: 41:a6:5a:d6:ff:d1:f4:c4:88:7d:08:1c:18:42:63:d8:7c:c0: 07:69:76:53:b2:1f:a9:55:88:38:9f:de:f9:aa:c5:26:6a:3c: 4f:70:94:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7o7BMbD0Z5BpTQxFgGrR7ahug0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNTEyMDUxOTE2MDVaFw0yNTEyMDkwMTI1MDVaMDMxMTAvBgNV BAMTKDQxOTc2NUYzMjg0MUNBOEExRTFBMTVBMEMzQzQ2MDY3RDNBNDg2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbD3vsFkkHqV3MGnxbhwZTkl1U pE1dDSjtD9lVuXvHRCI8y8gv0FYVzvasUm156Ndu7KNXqnQwzOygN4dvkZy26e4T 3PDyNfecL2QL33ExhUFECRnZnlqI6YKE0OxwtJmGzDs/tSIPvLzy/6mD3f0RGANy oK2hMLvPeVI+1U0+8znzg11Q/VibY2uN2Uzzg6Q4Vmot18h7T1He65klJ+VlEyrz ss8hqzNbLyGxArvqeC+C3I3B1V1uw3LQMgAsnwIRUPeoyIw+OtuDkvNYYZ+6XZ03 2oFG4fu2lcx74bqqWLGCApqrZMm+jmhuCiXP6figmQCfgtQcoyrdD6BCVjUzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQZdl8yhByooeGhWgw8RgZ9Okhm8wHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcVm/yYReMAq5inL3QE0+grpBKtIB+nzaeE 5Y5GhQMZ8qfcIie9AlVc1vNEB6tX6DQ9SX4yDt3a6Qx3x0/kWQr9iyOn8wLBFie4 85K4rmYrn1RSGos1q1JD9voPTPwR6bubjx7OtaSiB9kZnuCxjSgajL2sv82Ra8Yk cWY7HyucvP17RMbNNUT6lMpcknpmzaoIAiN2egtzJGucjz+rThUmAtpZkcbC1zPp 5KbYClsrl3DxB0yn7btU9RP+/odE4ccPjOdlUs1BWeMIVnsyxT77dc9if+rmTEGm Wtb/0fTEiH0IHBhCY9h8wAdpdlOyH6lViDif3vmqxSZqPE9wlDQ= -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:27 2025 by rpki-client