This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: OG21P/JWrqEiRkQxM2QjOvsAa4IMOZG6DZHqg3ZFvrw= Subject key identifier: 6C:37:FE:83:3C:EF:4B:6C:AA:3A:36:4A:F8:DA:1B:59:F1:53:B9:C4 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 7E3282C1B134BBAE6BB9964AF77657CE5EB1B7BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 0143 Signing time: Fri 05 Dec 2025 06:30:00 +0000 Manifest this update: Fri 05 Dec 2025 06:25:00 +0000 Manifest next update: Mon 08 Dec 2025 13:12:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: R83GGf95MT71oJUZ5j65OQjdcjNT0XtCajE9xYZk3i4=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:32:82:c1:b1:34:bb:ae:6b:b9:96:4a:f7:76:57:ce:5e:b1:b7:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Dec 5 06:25:00 2025 GMT Not After : Dec 8 13:12:00 2025 GMT Subject: CN=6C37FE833CEF4B6CAA3A364AF8DA1B59F153B9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4c:cc:17:3d:36:9c:c0:7b:52:fa:40:31:d8: 81:89:0a:97:4d:e0:9a:63:d9:92:49:7c:f3:d1:e5: 15:b9:c7:58:98:cc:57:5c:e2:ef:a8:c8:13:81:41: 85:0b:b7:c6:4e:96:ca:16:d2:82:36:f3:bd:37:50: 8e:ab:cc:a8:e8:3d:3c:e7:2d:36:55:7b:d2:c9:0f: eb:b0:c9:2a:29:52:9d:07:c8:3b:74:21:95:46:92: 9a:14:12:cd:34:74:d7:65:09:94:ed:86:d4:a1:39: 37:66:b5:c0:44:4f:3b:82:bf:78:50:43:02:73:9a: 6b:b9:de:1c:0a:06:5e:42:7f:8e:e5:38:2d:37:36: 79:d7:2c:14:f9:6e:07:b9:a1:d7:d6:d5:38:24:68: 31:7c:d5:4c:e4:13:45:45:49:26:4a:6e:64:d6:67: de:90:5a:3a:f4:c9:42:15:4b:7c:47:ab:3a:75:c0: bf:6d:f0:3a:7d:8b:ad:0f:5f:d3:c4:cd:09:35:e2: 8b:c2:f7:59:6c:93:b0:fa:a0:8a:a3:f2:eb:90:c5: b0:80:8f:d6:9c:cd:ed:9c:0c:96:d8:70:c3:e4:41: 8e:63:1c:68:80:f7:cf:2f:0f:9d:46:4d:a2:ca:2e: 17:db:0d:38:93:01:86:f2:16:d1:9e:97:84:91:09: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:FE:83:3C:EF:4B:6C:AA:3A:36:4A:F8:DA:1B:59:F1:53:B9:C4 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c6:69:b9:a4:c5:c1:14:7e:b0:bf:dc:59:29:95:12:45:18: f8:00:fe:cb:62:a6:93:ab:5d:04:c9:ce:73:a7:66:85:c6:da: ae:ba:8d:ff:6b:7e:c8:f9:3e:39:80:60:db:cc:03:b5:97:04: 97:9b:56:3b:b1:77:fd:59:b4:f3:38:85:37:aa:5b:2d:0e:07: 27:db:d2:5d:37:b5:7d:6e:06:1a:0f:c7:d3:2c:91:a6:5f:15: e9:09:b9:2d:46:2a:b0:66:b4:9c:bb:00:f7:3d:8f:5b:7b:87: d9:33:b0:3d:91:4a:b7:14:30:78:b4:67:89:98:10:62:51:80: c8:5b:d6:fe:4c:b2:35:7c:ea:4e:19:72:c1:e6:77:67:c0:68: 21:31:c7:72:68:f3:9b:c0:62:ad:55:e4:9e:30:85:89:f3:c1: 13:f7:77:7b:87:68:52:26:9c:2f:a5:28:c1:30:4e:8b:db:fe: 3e:62:94:3f:56:b6:d6:9a:2d:2d:b7:e2:24:52:ac:9c:c6:e4: f8:60:31:03:4b:d1:73:0f:a8:0a:3c:97:8f:ea:53:d0:a7:02: 82:e6:fb:03:84:96:7e:a8:57:48:86:6d:94:8f:54:11:87:ee: 67:de:08:b9:92:03:a6:7f:36:2f:e3:62:4f:10:d0:ab:de:38: 69:72:7a:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfjKCwbE0u65ruZZK93ZXzl6xt78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTEyMDUwNjI1MDBaFw0yNTEyMDgxMzEyMDBaMDMxMTAvBgNV BAMTKDZDMzdGRTgzM0NFRjRCNkNBQTNBMzY0QUY4REExQjU5RjE1M0I5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TMwXPTacwHtS+kAx2IGJCpdN 4Jpj2ZJJfPPR5RW5x1iYzFdc4u+oyBOBQYULt8ZOlsoW0oI28703UI6rzKjoPTzn LTZVe9LJD+uwySopUp0HyDt0IZVGkpoUEs00dNdlCZTthtShOTdmtcBETzuCv3hQ QwJzmmu53hwKBl5Cf47lOC03NnnXLBT5bge5odfW1TgkaDF81UzkE0VFSSZKbmTW Z96QWjr0yUIVS3xHqzp1wL9t8Dp9i60PX9PEzQk14ovC91lsk7D6oIqj8uuQxbCA j9acze2cDJbYcMPkQY5jHGiA988vD51GTaLKLhfbDTiTAYbyFtGel4SRCcorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbDf+gzzvS2yqOjZK+NobWfFTucQwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7GabmkxcEUfrC/3FkplRJFGPgA/stippOr XQTJznOnZoXG2q66jf9rfsj5PjmAYNvMA7WXBJebVjuxd/1ZtPM4hTeqWy0OByfb 0l03tX1uBhoPx9MskaZfFekJuS1GKrBmtJy7APc9j1t7h9kzsD2RSrcUMHi0Z4mY EGJRgMhb1v5MsjV86k4ZcsHmd2fAaCExx3Jo85vAYq1V5J4whYnzwRP3d3uHaFIm nC+lKMEwTovb/j5ilD9WttaaLS234iRSrJzG5PhgMQNL0XMPqAo8l4/qU9CnAoLm +wOEln6oV0iGbZSPVBGH7mfeCLmSA6Z/Ni/jYk8Q0KveOGlyek8= -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:18 2025 by rpki-client