This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: 4PC0yiTLc/QjetYLtrSujqzADH5qBf26w/hb+62KtkE= Subject key identifier: 8C:C6:48:EA:62:1C:32:42:3C:B9:4D:4E:BB:80:83:54:29:79:EC:31 Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 5E588D76C7C41C8032A7AF1F9A338977221D381A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 0222 Signing time: Sun 14 Dec 2025 22:02:32 +0000 Manifest this update: Sun 14 Dec 2025 21:57:32 +0000 Manifest next update: Thu 18 Dec 2025 06:05:32 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 3: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 4: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: 1WteyzYkYYC9fzhQDUTNlmwjwJsVYXonQxljQnYHMQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 06:05:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:8d:76:c7:c4:1c:80:32:a7:af:1f:9a:33:89:77:22:1d:38:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Dec 14 21:57:32 2025 GMT Not After : Dec 18 06:05:32 2025 GMT Subject: CN=8CC648EA621C32423CB94D4EBB8083542979EC31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:c0:42:5a:b8:5c:46:cb:3d:f5:00:6e:78: 78:af:94:89:ec:02:5b:e0:ad:25:95:7a:2f:9f:5a: f2:44:56:cb:17:3f:0a:26:dc:31:ae:59:95:d8:81: 44:d2:56:c5:46:74:96:12:c9:98:50:5f:30:d9:45: 2f:32:0e:8c:8b:f1:38:0a:b6:b8:13:4e:ed:88:a6: c7:69:62:8a:9c:fd:11:a7:7c:89:a9:43:ee:50:4e: 6b:82:ad:81:5c:35:cd:8d:e2:fb:85:3c:db:14:e6: 24:5b:08:ca:cc:a1:f7:78:d8:01:5f:2a:3a:85:26: f3:c1:df:23:f0:7c:7c:b2:de:1a:04:bc:aa:b2:f9: 43:5c:5a:25:5f:18:f3:f9:55:29:8a:63:79:72:c0: 5f:aa:b1:ce:5f:a2:64:c1:b2:5d:51:6b:a4:93:2b: 85:d6:8d:e2:d3:90:00:f0:a2:ff:b2:85:e3:cb:8b: 9f:9d:e3:ce:71:64:0e:58:1c:6a:11:8b:06:80:1d: 4e:9c:42:30:4d:dc:0e:25:76:20:57:13:f9:21:ad: 79:6b:77:7b:b7:ca:4a:2b:28:b7:58:c6:1e:8b:3f: 75:c0:93:ef:aa:ef:a4:e3:d9:31:5d:4b:73:f3:6e: e9:dc:71:0c:cb:75:3d:d4:fb:ac:98:64:4e:7a:56: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C6:48:EA:62:1C:32:42:3C:B9:4D:4E:BB:80:83:54:29:79:EC:31 X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e7:d8:80:ad:fd:a2:c9:a9:de:6f:81:05:95:7a:02:18:f3: 0c:b2:ea:17:67:26:36:41:c8:a0:66:e5:38:62:1e:9b:cf:05: 34:8b:12:34:16:66:77:68:69:15:f2:c4:5b:9b:ce:e1:d5:65: ab:49:69:7f:97:3c:68:08:ce:00:0b:5a:d0:ba:31:12:37:71: 37:f5:43:2b:f0:71:d9:6a:a7:15:ab:a2:7a:46:d3:1f:23:fd: a6:86:6b:39:53:67:6e:6d:c9:b7:83:08:8b:10:d8:b9:c5:25: 3a:6f:cb:4b:b0:00:41:54:b1:58:46:91:a8:c3:7c:d5:1a:16: 1a:ae:ef:e0:c7:95:61:f8:d2:43:2b:1f:38:30:eb:a6:73:ad: f6:15:84:97:a6:ee:fe:ca:11:3a:38:bf:2b:11:b8:4e:66:45: 4d:91:30:3d:cf:f1:9f:61:20:e6:07:66:6f:e7:d2:30:bf:a2: 5d:6b:1c:6c:13:29:27:6c:97:7d:77:0e:cf:7c:9c:c2:9d:f1: 96:d6:90:4b:01:8a:c2:e4:d3:f0:a9:fd:20:a8:8b:10:b9:f9: 5f:ec:fe:d7:03:4d:75:a1:b5:c2:56:95:dd:a7:5f:35:b3:3b: 67:4c:26:ad:c8:6f:cc:af:9f:a5:4f:ee:45:f0:fb:1c:74:f2: 44:42:b1:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXliNdsfEHIAyp68fmjOJdyIdOBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTEyMTQyMTU3MzJaFw0yNTEyMTgwNjA1MzJaMDMxMTAvBgNV BAMTKDhDQzY0OEVBNjIxQzMyNDIzQ0I5NEQ0RUJCODA4MzU0Mjk3OUVDMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChAsBCWrhcRss99QBueHivlIns AlvgrSWVei+fWvJEVssXPwom3DGuWZXYgUTSVsVGdJYSyZhQXzDZRS8yDoyL8TgK trgTTu2IpsdpYoqc/RGnfImpQ+5QTmuCrYFcNc2N4vuFPNsU5iRbCMrMofd42AFf KjqFJvPB3yPwfHyy3hoEvKqy+UNcWiVfGPP5VSmKY3lywF+qsc5fomTBsl1Ra6ST K4XWjeLTkADwov+yhePLi5+d485xZA5YHGoRiwaAHU6cQjBN3A4ldiBXE/khrXlr d3u3ykorKLdYxh6LP3XAk++q76Tj2TFdS3PzbunccQzLdT3U+6yYZE56VswDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjMZI6mIcMkI8uU1Ou4CDVCl57DEwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXn2ICt/aLJqd5vgQWVegIY8wyy6hdnJjZB yKBm5ThiHpvPBTSLEjQWZndoaRXyxFubzuHVZatJaX+XPGgIzgALWtC6MRI3cTf1 QyvwcdlqpxWronpG0x8j/aaGazlTZ25tybeDCIsQ2LnFJTpvy0uwAEFUsVhGkajD fNUaFhqu7+DHlWH40kMrHzgw66ZzrfYVhJem7v7KETo4vysRuE5mRU2RMD3P8Z9h IOYHZm/n0jC/ol1rHGwTKSdsl313Ds98nMKd8ZbWkEsBisLk0/Cp/SCoixC5+V/s /tcDTXWhtcJWld2nXzWzO2dMJq3Ib8yvn6VP7kXw+xx08kRCsTU= -----END CERTIFICATE-----Generated at Tue Dec 16 10:51:32 2025 by rpki-client