This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: 3LhitFktAj0+V526ub8jbaJ+/G8WbKRQIFFsGumPDrA= Subject key identifier: EF:95:2B:AF:76:BF:07:F7:5D:A2:05:F9:7F:73:D4:0B:24:6C:29:8D Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 12050A2C30CB3C7948B886B39DD9DFC319BF8C1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 021E Signing time: Fri 05 Dec 2025 20:52:29 +0000 Manifest this update: Fri 05 Dec 2025 20:47:29 +0000 Manifest next update: Tue 09 Dec 2025 06:14:29 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 2: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 3: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: kqnUkRrFCoMhnk+r6oZULa+pDxK1EY6BJOniLe0FRU0=) 4: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:14:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:05:0a:2c:30:cb:3c:79:48:b8:86:b3:9d:d9:df:c3:19:bf:8c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Dec 5 20:47:29 2025 GMT Not After : Dec 9 06:14:29 2025 GMT Subject: CN=EF952BAF76BF07F75DA205F97F73D40B246C298D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:42:86:d0:30:28:82:15:b9:7b:22:dc:63:90: b5:a6:2a:82:45:31:86:90:fa:0c:10:d2:ca:61:94: a2:6d:3f:0f:3d:0d:14:0b:7c:a9:53:25:61:12:c9: 77:f5:94:ae:21:a4:6e:4b:66:9f:8f:0b:42:91:d8: 77:e9:76:5e:d3:50:fe:62:f6:39:f1:ce:1f:d3:11: 6a:4b:25:12:01:5d:1f:83:60:a5:d4:8d:6f:68:d7: c6:34:c9:94:1e:7f:98:08:24:b9:d8:09:24:ff:b3: dc:f7:ca:a8:1f:77:64:be:de:cf:71:bd:ac:94:34: d9:90:d3:0a:f8:4b:70:7a:a6:b3:fc:b4:58:17:ca: 7f:ab:e4:e0:db:a0:d5:87:94:20:06:56:07:ad:a3: 1a:8d:6b:80:c5:8b:4b:c8:bd:f9:81:7b:79:c0:a8: d6:86:b5:5c:df:a4:03:38:02:ec:25:c9:77:1b:23: 24:5c:cc:11:87:5a:de:ea:d6:28:e6:eb:07:7f:a6: 40:6d:ae:64:95:5c:e4:c7:a7:9a:b9:1d:9e:c8:04: d0:8d:c7:88:7f:c1:cd:06:56:50:40:e3:35:9a:7e: 4b:a4:a6:74:fd:da:64:b8:60:4f:51:16:17:d9:cd: 33:fa:0f:a8:d1:4e:8f:89:98:79:28:18:ed:e9:3f: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:95:2B:AF:76:BF:07:F7:5D:A2:05:F9:7F:73:D4:0B:24:6C:29:8D X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:56:cf:a9:e6:bc:3b:d9:7a:f2:a3:d6:9e:25:8d:aa:6e:64: 5c:37:ba:fd:b1:ed:a1:7c:86:94:f9:42:a7:bb:6c:0e:91:4a: 40:3c:04:5d:d7:47:c1:73:31:7a:cf:de:e4:de:68:d8:61:eb: 2b:ec:b9:61:49:43:39:98:dd:fc:ac:2b:0f:ff:f2:87:94:a8: e7:74:b4:74:22:16:8d:2e:7d:df:b0:ba:32:24:fa:e1:62:73: 87:09:18:d9:fb:11:c8:db:9d:a3:8d:41:6a:49:17:8c:25:5b: 03:36:8e:f5:c1:4f:c4:46:42:75:dd:d7:7c:9f:c1:0b:bf:7a: 3e:f4:69:83:82:1e:1f:53:77:d2:5a:6d:58:48:ea:40:18:f0: 7c:bc:ab:77:6b:a3:5c:9e:38:ee:14:02:d1:0d:29:50:7d:7e: 25:6e:e8:ae:aa:e7:4f:b0:ef:dd:78:93:eb:1d:47:b1:ea:25: 82:c6:04:51:df:38:e6:71:77:65:e0:5e:5d:32:f9:10:ae:77: 6a:d4:c7:7e:f8:86:78:0d:49:c1:d8:86:d1:75:37:6f:21:24: b8:da:c0:dc:72:b8:63:2e:1e:44:48:66:cc:e9:77:31:a8:35: fa:38:64:bf:8b:b0:8f:14:73:78:44:b9:08:f9:5a:f0:3d:f2: 1b:aa:52:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgUKLDDLPHlIuIazndnfwxm/jB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTEyMDUyMDQ3MjlaFw0yNTEyMDkwNjE0MjlaMDMxMTAvBgNV BAMTKEVGOTUyQkFGNzZCRjA3Rjc1REEyMDVGOTdGNzNENDBCMjQ2QzI5OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQobQMCiCFbl7ItxjkLWmKoJF MYaQ+gwQ0sphlKJtPw89DRQLfKlTJWESyXf1lK4hpG5LZp+PC0KR2Hfpdl7TUP5i 9jnxzh/TEWpLJRIBXR+DYKXUjW9o18Y0yZQef5gIJLnYCST/s9z3yqgfd2S+3s9x vayUNNmQ0wr4S3B6prP8tFgXyn+r5ODboNWHlCAGVgetoxqNa4DFi0vIvfmBe3nA qNaGtVzfpAM4AuwlyXcbIyRczBGHWt7q1ijm6wd/pkBtrmSVXOTHp5q5HZ7IBNCN x4h/wc0GVlBA4zWafkukpnT92mS4YE9RFhfZzTP6D6jRTo+JmHkoGO3pP5gdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU75Urr3a/B/ddogX5f3PUCyRsKY0wHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFWz6nmvDvZevKj1p4ljapuZFw3uv2x7aF8 hpT5Qqe7bA6RSkA8BF3XR8FzMXrP3uTeaNhh6yvsuWFJQzmY3fysKw//8oeUqOd0 tHQiFo0ufd+wujIk+uFic4cJGNn7EcjbnaONQWpJF4wlWwM2jvXBT8RGQnXd13yf wQu/ej70aYOCHh9Td9JabVhI6kAY8Hy8q3dro1yeOO4UAtENKVB9fiVu6K6q50+w 7914k+sdR7HqJYLGBFHfOOZxd2XgXl0y+RCud2rUx374hngNScHYhtF1N28hJLja wNxyuGMuHkRIZszpdzGoNfo4ZL+LsI8Uc3hEuQj5WvA98huqUsk= -----END CERTIFICATE-----Generated at Sat Dec 6 22:51:13 2025 by rpki-client