This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: AZFsbiXgmF3NTAp3pAsHHyUpfBSROP08I296i/+LUaY= Subject key identifier: 70:A4:53:8B:D2:C2:4A:28:E4:9B:BE:F2:66:A9:EE:E0:F0:44:EE:0D Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 646C9A24E67883AEBAC0FDCB80BE7D9166DCE89B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: EF Signing time: Fri 05 Dec 2025 20:02:33 +0000 Manifest this update: Fri 05 Dec 2025 19:57:33 +0000 Manifest next update: Tue 09 Dec 2025 04:41:33 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: GbMwFlh5qHktpYRSdsZOK8kOjhYy7XEZa1TG3oo73T0=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 3: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:41:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6c:9a:24:e6:78:83:ae:ba:c0:fd:cb:80:be:7d:91:66:dc:e8:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Dec 5 19:57:33 2025 GMT Not After : Dec 9 04:41:33 2025 GMT Subject: CN=70A4538BD2C24A28E49BBEF266A9EEE0F044EE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:c5:86:72:08:b8:bb:5b:5e:2f:49:38:33: 73:be:3b:3d:1e:f5:67:52:92:e5:42:e7:f5:e4:46: 1a:7a:ec:96:01:fc:c5:2f:7b:90:e4:3c:aa:0d:d5: 03:5a:1c:ee:c8:c4:4d:a5:15:f9:9c:01:e6:9c:a8: 7c:4e:32:82:f7:fe:1a:4e:21:78:0d:44:22:14:9c: 42:d7:40:1d:96:0d:3c:a7:0b:89:1c:b3:83:c2:d3: 01:c8:dc:5a:78:49:dd:91:51:b6:1f:6b:84:16:19: f8:cc:37:e5:29:81:f0:a0:70:67:89:1a:56:b9:93: 1c:d1:73:f6:a4:5e:8e:aa:0c:cf:50:30:b1:f4:30: d4:a7:78:09:b4:fa:3b:fd:c9:0b:09:7d:95:2e:e7: f3:8c:3f:58:17:fd:6e:bc:f7:5e:9a:64:c7:e0:90: 6d:60:97:24:88:fa:75:02:28:6f:06:1d:b0:ca:4c: 76:50:d0:c6:c2:a1:87:3f:da:4c:0d:0b:0e:cc:10: 40:a8:c1:54:16:c1:85:e9:38:7c:f5:27:5c:57:9e: 94:66:64:ea:ec:17:63:4d:f2:2d:b2:8c:8e:a1:b2: 82:8c:26:71:73:a4:7a:88:75:07:f0:1d:88:67:fd: 44:34:b5:70:f1:1a:95:d4:d4:2a:0a:8c:c6:5f:0c: 93:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A4:53:8B:D2:C2:4A:28:E4:9B:BE:F2:66:A9:EE:E0:F0:44:EE:0D X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:37:bc:fa:a8:e9:e8:36:6f:8c:82:38:23:54:6d:f2:ed:39: 7f:b2:c5:1d:55:4f:a7:35:ec:b4:3c:de:ec:77:0f:2a:54:65: d7:d1:da:6d:5b:8a:da:56:64:8a:26:5e:28:7b:04:5c:26:a4: e6:51:b5:48:c0:8b:30:c6:16:23:dd:e6:2e:a0:73:25:50:50: f4:16:7a:c1:c6:5c:d8:d5:2f:b2:f2:0f:63:00:1d:0b:90:ff: 15:77:2f:f6:e8:54:5a:0c:d8:46:f9:0f:b1:0a:0d:fd:5a:a7: 59:84:38:92:b5:f7:6b:81:2f:f3:2c:38:7a:be:4a:2c:27:34: 8d:d6:67:85:db:c6:16:ed:4c:3a:70:fe:9b:8f:71:81:99:d8: af:21:93:17:70:12:78:d5:bf:23:e4:6c:94:f9:72:be:ab:4e: fe:8a:73:b5:69:dd:ae:4b:d7:d2:55:fd:5d:d5:3b:ba:1e:5a: 44:a2:51:f7:d7:b7:a8:3a:4a:7c:18:a8:71:ad:b4:d0:46:06: 53:8e:50:56:ee:19:cb:69:71:a4:31:15:0d:e4:75:86:10:6c: c6:c5:c2:12:0f:a2:ab:41:64:91:3c:fe:73:78:de:7e:66:43: 21:63:d8:e5:e0:be:c9:d7:02:96:72:1c:3a:44:94:56:59:d2: c0:2e:f5:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZGyaJOZ4g666wP3LgL59kWbc6JswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTEyMDUxOTU3MzNaFw0yNTEyMDkwNDQxMzNaMDMxMTAvBgNV BAMTKDcwQTQ1MzhCRDJDMjRBMjhFNDlCQkVGMjY2QTlFRUUwRjA0NEVFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HcWGcgi4u1teL0k4M3O+Oz0e 9WdSkuVC5/XkRhp67JYB/MUve5DkPKoN1QNaHO7IxE2lFfmcAeacqHxOMoL3/hpO IXgNRCIUnELXQB2WDTynC4kcs4PC0wHI3Fp4Sd2RUbYfa4QWGfjMN+UpgfCgcGeJ Gla5kxzRc/akXo6qDM9QMLH0MNSneAm0+jv9yQsJfZUu5/OMP1gX/W68916aZMfg kG1glySI+nUCKG8GHbDKTHZQ0MbCoYc/2kwNCw7MEECowVQWwYXpOHz1J1xXnpRm ZOrsF2NN8i2yjI6hsoKMJnFzpHqIdQfwHYhn/UQ0tXDxGpXU1CoKjMZfDJM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKRTi9LCSijkm77yZqnu4PBE7g0wHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJw3vPqo6eg2b4yCOCNUbfLtOX+yxR1VT6c1 7LQ83ux3DypUZdfR2m1bitpWZIomXih7BFwmpOZRtUjAizDGFiPd5i6gcyVQUPQW esHGXNjVL7LyD2MAHQuQ/xV3L/boVFoM2Eb5D7EKDf1ap1mEOJK192uBL/MsOHq+ SiwnNI3WZ4XbxhbtTDpw/puPcYGZ2K8hkxdwEnjVvyPkbJT5cr6rTv6Kc7Vp3a5L 19JV/V3VO7oeWkSiUffXt6g6SnwYqHGttNBGBlOOUFbuGctpcaQxFQ3kdYYQbMbF whIPoqtBZJE8/nN43n5mQyFj2OXgvsnXApZyHDpElFZZ0sAu9ZA= -----END CERTIFICATE-----Generated at Sat Dec 6 17:34:50 2025 by rpki-client