This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: QRM0fKecPQr29p54soBMkbtWranot218geTo3CZ+Xas= Subject key identifier: 41:64:95:3E:FC:AC:95:B4:D9:CE:12:5E:6C:8D:45:D3:5D:30:0D:19 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 519CE8A763483621BD88FA267C79B9D45E29BC81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0256 Signing time: Fri 05 Dec 2025 16:01:28 +0000 Manifest this update: Fri 05 Dec 2025 15:56:28 +0000 Manifest next update: Tue 09 Dec 2025 02:58:28 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: rqkGiY0FFw/o5pQbvH8GIWX+uGqBPJhTbLmoIQcDa50=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 02:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9c:e8:a7:63:48:36:21:bd:88:fa:26:7c:79:b9:d4:5e:29:bc:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Dec 5 15:56:28 2025 GMT Not After : Dec 9 02:58:28 2025 GMT Subject: CN=4164953EFCAC95B4D9CE125E6C8D45D35D300D19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:9a:a5:e1:75:d5:f6:7a:34:b7:ab:6a:17: 87:ce:e5:28:00:4c:7a:f5:3b:20:d4:02:27:17:ca: 21:83:1c:95:ae:ff:32:43:92:d2:39:cf:05:98:27: 56:06:49:5b:3d:e1:80:98:61:8d:70:7c:90:13:15: e0:ec:65:c8:4e:57:e7:a6:83:4b:35:6f:40:0e:10: 66:0a:fa:60:6b:34:98:54:b9:46:ab:f2:04:eb:f0: a9:21:53:f3:95:9a:4f:57:62:b1:e8:8d:92:8c:63: 10:27:ca:a7:c0:31:73:c5:64:71:4e:d4:f4:a8:85: 6a:44:14:29:cf:0d:a9:4f:76:02:b4:80:bf:ae:6f: 7a:fb:9a:66:6c:93:d7:40:6b:69:e2:d5:7a:4b:84: 26:29:61:0a:92:06:0b:33:ad:5e:5a:d3:0f:13:f5: a2:e0:cd:75:dd:13:78:ca:91:41:42:f9:93:e5:58: 0c:17:81:e8:5b:65:07:80:40:68:46:0d:56:ed:1f: 0c:f9:e8:2a:8c:70:e8:76:98:dc:f7:e9:0c:f4:64: 44:ed:2e:6e:10:83:04:56:a3:ee:83:38:77:c9:64: 0a:fd:60:97:0d:d7:c7:a1:18:ec:2b:ae:cf:16:79: fa:f5:bc:14:73:b0:80:0f:47:02:f3:61:6e:f3:40: 26:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:64:95:3E:FC:AC:95:B4:D9:CE:12:5E:6C:8D:45:D3:5D:30:0D:19 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d7:36:02:60:16:c0:b1:03:dd:85:9f:95:c7:1d:2a:4d:63: bf:a7:b5:d4:42:52:b8:b6:74:75:82:0e:b2:f4:4a:68:c6:81: 6a:bc:2b:01:d6:55:2b:dd:7a:d2:21:29:9a:e8:ba:e9:60:85: 1d:d8:be:bf:ba:81:80:16:e7:0d:33:57:08:41:f4:64:ed:cc: 7a:da:20:85:e3:58:84:2d:c4:5a:36:c2:6e:9a:10:d8:38:d3: 33:b7:8e:ec:7a:35:64:6f:19:59:7d:93:5f:7d:f5:05:2c:4c: fe:a3:1d:23:87:03:a1:e8:2d:39:1d:de:10:27:35:60:e9:7d: cb:6c:91:12:11:ec:d5:62:98:0c:44:de:48:6f:20:80:cb:f4: 16:46:28:bd:22:3c:16:55:94:c5:98:e0:64:7a:6c:91:03:f7: b0:46:57:1f:d8:ee:19:75:6b:b6:32:9c:bf:7c:8d:17:da:9a: b3:53:a1:69:46:90:3e:1d:53:e0:77:0a:65:71:3c:28:76:3f: 00:4c:83:11:c1:9a:77:a5:89:3f:a1:e1:7c:7f:55:0f:79:95: 47:43:78:d3:19:5f:11:54:95:0e:0d:6f:93:05:61:aa:61:ce: 51:0f:e3:9f:14:da:d4:ad:ce:40:3b:bd:dd:c9:bb:d8:29:49: 81:65:c5:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZzop2NINiG9iPomfHm51F4pvIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTEyMDUxNTU2MjhaFw0yNTEyMDkwMjU4MjhaMDMxMTAvBgNV BAMTKDQxNjQ5NTNFRkNBQzk1QjREOUNFMTI1RTZDOEQ0NUQzNUQzMDBEMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5Jql4XXV9no0t6tqF4fO5SgA THr1OyDUAicXyiGDHJWu/zJDktI5zwWYJ1YGSVs94YCYYY1wfJATFeDsZchOV+em g0s1b0AOEGYK+mBrNJhUuUar8gTr8KkhU/OVmk9XYrHojZKMYxAnyqfAMXPFZHFO 1PSohWpEFCnPDalPdgK0gL+ub3r7mmZsk9dAa2ni1XpLhCYpYQqSBgszrV5a0w8T 9aLgzXXdE3jKkUFC+ZPlWAwXgehbZQeAQGhGDVbtHwz56CqMcOh2mNz36Qz0ZETt Lm4QgwRWo+6DOHfJZAr9YJcN18ehGOwrrs8Wefr1vBRzsIAPRwLzYW7zQCbHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQWSVPvyslbTZzhJebI1F010wDRkwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXXNgJgFsCxA92Fn5XHHSpNY7+ntdRCUri2 dHWCDrL0SmjGgWq8KwHWVSvdetIhKZrouulghR3Yvr+6gYAW5w0zVwhB9GTtzHra IIXjWIQtxFo2wm6aENg40zO3jux6NWRvGVl9k1999QUsTP6jHSOHA6HoLTkd3hAn NWDpfctskRIR7NVimAxE3khvIIDL9BZGKL0iPBZVlMWY4GR6bJED97BGVx/Y7hl1 a7YynL98jRfamrNToWlGkD4dU+B3CmVxPCh2PwBMgxHBmneliT+h4Xx/VQ95lUdD eNMZXxFUlQ4Nb5MFYaphzlEP458U2tStzkA7vd3Ju9gpSYFlxXo= -----END CERTIFICATE-----Generated at Sun Dec 7 04:51:42 2025 by rpki-client