This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: cnq7snejS9ewe0geyGlsGNF12kyCu2tVulZ1Vh7t4oQ= Subject key identifier: 89:2D:7D:8F:8F:DA:62:8F:42:0D:91:31:33:09:A6:D3:A5:00:B2:A2 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 5366A22432B8665FD788D66366E7497AD7824B48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 022C Signing time: Fri 05 Dec 2025 08:11:47 +0000 Manifest this update: Fri 05 Dec 2025 08:06:47 +0000 Manifest next update: Mon 08 Dec 2025 15:00:47 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: 92sB1DC9fMjilxmwOTZEv7gI05tAwtApEmuDI1+En9A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:66:a2:24:32:b8:66:5f:d7:88:d6:63:66:e7:49:7a:d7:82:4b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Dec 5 08:06:47 2025 GMT Not After : Dec 8 15:00:47 2025 GMT Subject: CN=892D7D8F8FDA628F420D91313309A6D3A500B2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bb:de:6b:61:15:44:83:5a:b2:35:d7:e6:02: b6:c9:18:12:e9:b5:c7:a0:e5:b7:7b:24:62:64:48: a6:58:d6:a5:ef:af:ce:a2:c1:cf:fc:15:29:65:e2: 13:dd:ff:15:9b:78:c4:ce:a8:92:48:ca:8f:46:38: 35:0b:a1:3e:11:fe:d5:b0:04:4c:15:b2:b8:35:84: 26:d5:6b:0b:58:d4:55:52:6f:de:13:a0:1b:1b:5c: 97:6d:bc:04:09:b4:f8:31:41:4a:10:4c:87:43:7e: 2d:fb:b4:ed:ce:bb:17:c7:62:16:bd:09:d9:45:a4: e2:30:b5:91:7e:55:b2:a7:41:e9:80:d8:0d:d8:92: 6c:6d:59:a6:91:e2:e1:60:aa:a5:36:74:3b:69:c7: c7:ce:a2:f8:a0:ef:d8:0b:60:6e:1e:e2:ec:32:1d: d9:40:79:e2:1a:b6:3b:fc:a9:03:6b:b4:92:69:48: 97:ee:ee:fa:ac:d3:6f:41:87:b4:88:5b:15:ec:a9: 47:6c:ab:e1:ef:ce:10:d5:d3:42:a6:c9:99:89:65: 16:b0:4a:5d:22:9f:9a:d5:bf:53:89:23:c0:42:4b: b7:c5:d6:b3:e0:d5:c7:99:38:27:12:8d:ba:b4:89: 77:d4:59:74:21:50:08:2a:5b:3e:fc:53:b7:ed:d9: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2D:7D:8F:8F:DA:62:8F:42:0D:91:31:33:09:A6:D3:A5:00:B2:A2 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cd:8a:ee:8d:8b:8d:a8:2c:81:65:eb:13:e8:84:61:66:ef: 13:a6:89:54:8e:9c:26:6e:af:86:17:fa:8a:ce:24:dc:9a:93: 81:00:83:ce:c5:ea:94:16:5f:d5:ee:4d:c2:ee:47:c2:af:83: f8:7f:c1:1c:6f:21:70:38:24:50:0b:aa:e1:d8:9b:82:ad:4a: ba:85:89:29:59:2a:47:6b:3d:ab:2f:7c:39:b8:12:4e:ef:cc: 88:59:c0:72:27:3e:f1:85:1f:b2:c7:e3:c8:0c:49:76:1b:6f: d7:d0:a9:13:98:f1:98:a0:ff:08:d9:6d:01:2e:bc:3e:71:8e: b0:8d:64:c6:bf:21:4f:31:4a:61:db:aa:07:85:c9:1b:1f:26: a3:41:57:74:2f:86:a4:1f:c7:3d:83:57:5b:95:00:cf:2d:df: 16:b6:fc:d0:2d:72:61:40:5b:85:8f:58:f0:5e:39:c9:97:96: b0:52:f6:99:d1:c4:a3:ce:c5:ca:c8:d2:d9:f8:52:2c:e4:9d: 91:98:c7:59:f9:c5:a2:97:43:24:6c:df:41:c9:52:a0:47:a9: 0d:a7:79:10:79:02:d0:c6:4b:c1:8f:d6:36:a7:fb:c3:56:bd: be:fa:a5:c8:86:68:dc:af:02:6c:7b:c0:23:bb:e2:8b:6f:66: 3c:77:4f:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU2aiJDK4Zl/XiNZjZudJeteCS0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTEyMDUwODA2NDdaFw0yNTEyMDgxNTAwNDdaMDMxMTAvBgNV BAMTKDg5MkQ3RDhGOEZEQTYyOEY0MjBEOTEzMTMzMDlBNkQzQTUwMEIyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMu95rYRVEg1qyNdfmArbJGBLp tceg5bd7JGJkSKZY1qXvr86iwc/8FSll4hPd/xWbeMTOqJJIyo9GODULoT4R/tWw BEwVsrg1hCbVawtY1FVSb94ToBsbXJdtvAQJtPgxQUoQTIdDfi37tO3OuxfHYha9 CdlFpOIwtZF+VbKnQemA2A3YkmxtWaaR4uFgqqU2dDtpx8fOovig79gLYG4e4uwy HdlAeeIatjv8qQNrtJJpSJfu7vqs029Bh7SIWxXsqUdsq+HvzhDV00KmyZmJZRaw Sl0in5rVv1OJI8BCS7fF1rPg1ceZOCcSjbq0iXfUWXQhUAgqWz78U7ft2THLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiS19j4/aYo9CDZExMwmm06UAsqIwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3Niu6Ni42oLIFl6xPohGFm7xOmiVSOnCZu r4YX+orOJNyak4EAg87F6pQWX9XuTcLuR8Kvg/h/wRxvIXA4JFALquHYm4KtSrqF iSlZKkdrPasvfDm4Ek7vzIhZwHInPvGFH7LH48gMSXYbb9fQqROY8Zig/wjZbQEu vD5xjrCNZMa/IU8xSmHbqgeFyRsfJqNBV3QvhqQfxz2DV1uVAM8t3xa2/NAtcmFA W4WPWPBeOcmXlrBS9pnRxKPOxcrI0tn4UizknZGYx1n5xaKXQyRs30HJUqBHqQ2n eRB5AtDGS8GP1jan+8NWvb76pciGaNyvAmx7wCO74otvZjx3Tx8= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:43 2025 by rpki-client