This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: 7CwRpMVlJzkAVlMM9A125MgrkRydhfmoBKVLuvQn1nE= Subject key identifier: 19:31:5B:20:43:6E:A0:BB:00:44:F1:61:EE:4B:AD:F4:2D:43:DD:68 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 273C0F4CCE7373DE637A240542914116E2F57A37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: EE Signing time: Sat 06 Dec 2025 14:21:39 +0000 Manifest this update: Sat 06 Dec 2025 14:16:39 +0000 Manifest next update: Tue 09 Dec 2025 23:18:39 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) 2: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: vGJzAxp53OeXoAW5+Lou4++phbUlk5mvXZzMxNDpVkA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 06:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3c:0f:4c:ce:73:73:de:63:7a:24:05:42:91:41:16:e2:f5:7a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Dec 6 14:16:39 2025 GMT Not After : Dec 9 23:18:39 2025 GMT Subject: CN=19315B20436EA0BB0044F161EE4BADF42D43DD68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:b2:f8:f7:af:99:90:67:5a:af:87:67:fd: 25:81:08:2b:4c:be:e3:2c:bf:f0:90:54:ec:6e:1a: cd:82:8e:47:8a:09:51:5b:ba:14:cb:43:b3:c6:a9: 6b:a2:ca:77:bb:a4:ee:8a:ff:ba:58:1e:1a:f3:3f: 0c:96:69:98:97:fa:9b:b3:a0:27:d2:52:00:34:d1: bc:03:52:47:92:47:8f:95:c2:3d:22:14:c7:4c:6c: a4:c2:9b:d4:a5:35:bb:54:8b:94:b9:90:17:21:8f: a3:f5:2b:13:f5:f7:1a:98:d6:0b:52:1e:c2:39:21: 7d:52:c7:da:60:c2:35:37:c3:79:d3:5c:31:57:77: 81:38:a8:ae:aa:65:4f:23:9d:64:d2:95:95:0f:d8: 0d:f5:09:a6:27:90:ab:b1:8f:17:4d:3d:99:a9:7c: bc:2b:fc:3e:c7:5e:4c:71:5a:6c:2f:9e:1f:66:4e: a5:3c:e2:c0:b2:41:6b:be:a8:78:46:db:48:94:d8: e8:64:b9:e8:b5:41:b0:b5:65:e0:c5:50:79:7d:87: 48:28:f3:96:d9:2c:96:ec:0b:8a:c4:34:b6:42:2c: 9b:a6:42:3e:37:0c:59:cc:8a:0c:02:fb:ee:55:fa: c4:41:9b:eb:24:78:e4:be:72:15:20:75:35:97:66: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:31:5B:20:43:6E:A0:BB:00:44:F1:61:EE:4B:AD:F4:2D:43:DD:68 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2c:61:95:7f:14:e6:57:27:66:37:cb:4c:d9:60:67:d9:40: 1a:7e:df:6a:78:a0:73:58:2d:92:7d:c8:02:51:1a:3d:df:50: b3:72:59:1c:6c:fa:4a:e8:a2:ff:74:37:72:88:86:6c:8d:4c: c1:20:8b:9c:33:ea:ea:28:07:df:fd:95:0b:da:5e:7d:96:a3: 49:b9:41:ca:5a:4c:6f:9a:80:b6:46:49:28:0c:01:75:ba:c8: 74:cc:56:36:29:4b:ca:e4:5a:2a:de:3c:f3:b2:dd:a0:ad:a6: 4a:66:66:8e:64:d5:eb:8f:c4:59:cc:63:e1:15:34:b8:e8:9f: ed:2a:01:23:cf:1e:47:30:c6:e6:64:6d:b7:a7:0b:24:15:e2: 9e:e1:47:d5:44:b5:bb:94:7b:35:d9:09:c9:00:70:f0:28:9f: 45:e6:26:7a:3b:1a:f8:4b:55:23:a0:57:76:e0:f2:71:11:4a: 7b:46:f8:c5:eb:b5:9d:cb:87:f2:b4:c1:a6:48:d4:ff:64:01: 7a:5c:40:2e:4a:1f:99:5f:37:46:63:98:ff:4d:e4:61:c1:02: 01:7b:0a:70:62:c2:49:b2:bc:0c:f5:ac:de:ba:02:af:61:df: bb:36:89:87:8f:da:83:ab:1c:d8:b6:8e:fd:2f:c2:9b:96:ea: 5b:82:4d:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzwPTM5zc95jeiQFQpFBFuL1ejcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTEyMDYxNDE2MzlaFw0yNTEyMDkyMzE4MzlaMDMxMTAvBgNV BAMTKDE5MzE1QjIwNDM2RUEwQkIwMDQ0RjE2MUVFNEJBREY0MkQ0M0RENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFWLL496+ZkGdar4dn/SWBCCtM vuMsv/CQVOxuGs2CjkeKCVFbuhTLQ7PGqWuiyne7pO6K/7pYHhrzPwyWaZiX+puz oCfSUgA00bwDUkeSR4+Vwj0iFMdMbKTCm9SlNbtUi5S5kBchj6P1KxP19xqY1gtS HsI5IX1Sx9pgwjU3w3nTXDFXd4E4qK6qZU8jnWTSlZUP2A31CaYnkKuxjxdNPZmp fLwr/D7HXkxxWmwvnh9mTqU84sCyQWu+qHhG20iU2Ohkuei1QbC1ZeDFUHl9h0go 85bZLJbsC4rENLZCLJumQj43DFnMigwC++5V+sRBm+skeOS+chUgdTWXZo9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGTFbIENuoLsARPFh7kut9C1D3WgwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4sYZV/FOZXJ2Y3y0zZYGfZQBp+32p4oHNY LZJ9yAJRGj3fULNyWRxs+kroov90N3KIhmyNTMEgi5wz6uooB9/9lQvaXn2Wo0m5 QcpaTG+agLZGSSgMAXW6yHTMVjYpS8rkWirePPOy3aCtpkpmZo5k1euPxFnMY+EV NLjon+0qASPPHkcwxuZkbbenCyQV4p7hR9VEtbuUezXZCckAcPAon0XmJno7GvhL VSOgV3bg8nERSntG+MXrtZ3Lh/K0waZI1P9kAXpcQC5KH5lfN0ZjmP9N5GHBAgF7 CnBiwkmyvAz1rN66Aq9h37s2iYeP2oOrHNi2jv0vwpuW6luCTeE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:57 2025 by rpki-client