This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: 5pqtzJpIzci+LpyVPVf8kpD1Lq96B/emxTz+19T1pGU= Subject key identifier: 06:7A:5C:B4:87:90:A1:00:20:23:22:D8:C7:6A:3B:17:0E:30:00:39 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 27E124DF7D7A8D7F322CE45725F095B4749DEE44 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 025C Signing time: Thu 18 Dec 2025 05:41:22 +0000 Manifest this update: Thu 18 Dec 2025 05:36:22 +0000 Manifest next update: Sun 21 Dec 2025 14:40:22 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: YEE6z4DlU76gRVkNSMfPZoO41pCS7NKH08l7fRiMSE4=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: qAILqHxIh//KPfkbqwXoLWKwUymM3YkGbuohytyxcQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 13:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e1:24:df:7d:7a:8d:7f:32:2c:e4:57:25:f0:95:b4:74:9d:ee:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Dec 18 05:36:22 2025 GMT Not After : Dec 21 14:40:22 2025 GMT Subject: CN=067A5CB48790A100202322D8C76A3B170E300039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:aa:12:92:55:91:a4:ef:90:f6:4b:4c:d5: c9:63:af:7b:c3:48:66:50:5a:54:bb:b8:45:32:66: 5d:21:83:73:f0:2a:1d:4d:5d:13:50:d1:b6:62:34: 30:4e:7b:d6:f7:81:bc:56:b5:f8:1e:77:f6:c5:0b: fe:97:59:b4:72:a8:2e:8f:a1:d9:36:b7:19:92:57: 8b:66:e9:9b:94:4f:1e:14:e9:e5:0e:ae:29:7d:de: 2a:83:e1:e7:2b:7c:03:01:a8:c9:03:b4:13:d8:4a: 94:15:77:a0:86:44:22:95:0e:1c:0b:aa:94:47:7a: df:b8:11:a6:35:76:de:af:f1:3b:4a:68:3c:8d:04: e8:cd:bf:d1:3e:d6:6e:8d:ca:6b:b0:50:55:8a:34: 62:e9:0d:c1:ed:a3:1a:23:d1:74:99:ff:17:94:3c: b8:7f:49:22:a9:55:16:da:8a:7d:20:da:74:af:db: 38:7b:d0:a9:a8:86:4a:58:2d:ee:7a:9d:92:d0:a7: 78:7e:c5:62:29:f7:83:7c:83:0e:7b:0d:04:86:ff: 90:dd:26:f7:f9:33:2b:0f:2a:13:14:2e:5e:38:51: 47:e8:7f:af:d7:ba:f9:ae:51:ed:e1:9d:d4:0d:50: ff:64:8b:03:de:12:3b:14:1a:21:ff:22:a4:0e:e7: dc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7A:5C:B4:87:90:A1:00:20:23:22:D8:C7:6A:3B:17:0E:30:00:39 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:aa:48:9a:96:7f:78:50:8a:e8:55:69:26:39:ff:c6:dc:d9: 7b:89:1a:54:39:19:8e:b3:b5:b9:c4:82:9e:d8:22:b1:60:5f: 97:ce:8f:4b:1b:1e:36:65:06:59:0d:2b:64:26:0c:bc:fd:33: 47:80:02:44:5e:2e:ab:7b:ae:0f:2d:6a:71:ff:0b:20:37:fc: 6e:3c:5a:8d:86:d5:a8:8a:fe:6f:c7:46:c2:5f:0c:02:e7:0f: 8d:2e:5f:7b:52:a5:cb:6b:3c:9b:36:01:1c:6e:e5:8d:a2:73: 50:b0:7c:ab:b0:b3:88:a4:ed:e4:fb:dc:f3:1a:10:5e:21:c6: 5d:bf:c9:7a:ef:2a:36:9f:50:54:63:39:47:2e:10:c7:c9:75: 4c:bb:d3:06:c6:67:05:1d:c8:dd:42:79:6f:98:bb:43:1d:6e: fa:cb:a7:c3:e9:b0:7e:38:b7:ea:92:88:7c:3e:24:55:1f:9a: 6f:28:2a:5a:2a:a7:cf:33:9d:48:d3:44:f6:d6:58:ad:9d:a1: 9f:b0:71:3c:37:61:97:86:40:44:15:d3:a4:f8:bb:65:c7:0a: d5:19:0b:dc:d6:5e:7f:80:0f:38:c7:76:6a:aa:e9:2d:de:0b: 78:b6:4a:4b:70:12:56:31:e4:fe:ae:9a:cf:f9:88:e7:dd:42: 9b:32:36:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+Ek3316jX8yLORXJfCVtHSd7kQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTEyMTgwNTM2MjJaFw0yNTEyMjExNDQwMjJaMDMxMTAvBgNV BAMTKDA2N0E1Q0I0ODc5MEExMDAyMDIzMjJEOEM3NkEzQjE3MEUzMDAwMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHl6oSklWRpO+Q9ktM1cljr3vD SGZQWlS7uEUyZl0hg3PwKh1NXRNQ0bZiNDBOe9b3gbxWtfged/bFC/6XWbRyqC6P odk2txmSV4tm6ZuUTx4U6eUOril93iqD4ecrfAMBqMkDtBPYSpQVd6CGRCKVDhwL qpRHet+4EaY1dt6v8TtKaDyNBOjNv9E+1m6NymuwUFWKNGLpDcHtoxoj0XSZ/xeU PLh/SSKpVRbain0g2nSv2zh70KmohkpYLe56nZLQp3h+xWIp94N8gw57DQSG/5Dd Jvf5MysPKhMULl44UUfof6/XuvmuUe3hndQNUP9kiwPeEjsUGiH/IqQO59w9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBnpctIeQoQAgIyLYx2o7Fw4wADkwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWqSJqWf3hQiuhVaSY5/8bc2XuJGlQ5GY6z tbnEgp7YIrFgX5fOj0sbHjZlBlkNK2QmDLz9M0eAAkReLqt7rg8tanH/CyA3/G48 Wo2G1aiK/m/HRsJfDALnD40uX3tSpctrPJs2ARxu5Y2ic1CwfKuws4ik7eT73PMa EF4hxl2/yXrvKjafUFRjOUcuEMfJdUy70wbGZwUdyN1CeW+Yu0MdbvrLp8PpsH44 t+qSiHw+JFUfmm8oKloqp88znUjTRPbWWK2doZ+wcTw3YZeGQEQV06T4u2XHCtUZ C9zWXn+ADzjHdmqq6S3eC3i2SktwElYx5P6ums/5iOfdQpsyNiU= -----END CERTIFICATE-----Generated at Thu Dec 18 11:17:29 2025 by rpki-client