This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: X4SIDjcDGU0cIkdpSekUNAzYBe0eoER14uRld4OiRRI= Subject key identifier: FE:2F:B5:9D:40:EF:4E:1D:3F:32:B2:59:E9:ED:F0:8A:7B:CF:D6:6C Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 46D8BEBB0D00870FE2E3FED87971D0CA3B4AF96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 01BC Signing time: Sat 06 Dec 2025 23:31:14 +0000 Manifest this update: Sat 06 Dec 2025 23:26:14 +0000 Manifest next update: Tue 09 Dec 2025 23:43:14 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 2: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) 3: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: C+Sd1CSmQMhsLUjBMTikXRQMeBshb0K5i0yqm1d1XQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d8:be:bb:0d:00:87:0f:e2:e3:fe:d8:79:71:d0:ca:3b:4a:f9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Dec 6 23:26:14 2025 GMT Not After : Dec 9 23:43:14 2025 GMT Subject: CN=FE2FB59D40EF4E1D3F32B259E9EDF08A7BCFD66C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fd:c5:d2:1a:4e:98:09:81:8c:a6:33:15:1e: 6a:9a:f7:4a:10:0c:fb:1c:72:ab:f8:1d:8e:4c:a8: 7f:d4:0b:3a:b7:b6:94:6d:8c:13:2d:eb:20:3c:01: 12:23:02:c4:9b:c6:ac:4d:9c:5d:bf:be:f1:50:75: 65:48:83:fd:2c:c8:4e:71:b9:d4:fa:c3:06:b8:af: 2c:ed:e7:b7:7f:7e:56:69:ec:fa:1a:41:37:17:31: f2:42:74:ca:b1:59:77:cc:82:69:ba:a1:36:05:be: 63:63:4b:39:bf:6c:b9:44:67:14:7e:5d:2a:05:e3: ba:c7:bb:2c:44:47:bb:58:2e:2f:0f:97:52:4b:54: 8c:00:14:3f:5d:d7:77:54:a2:80:21:58:66:3c:18: 31:35:18:de:ab:88:b2:fc:e3:0e:23:2e:5f:9d:0e: c7:d8:3a:e4:73:c0:0f:12:28:43:93:0f:c6:bc:26: ad:f4:f0:4f:31:cc:ce:dd:e7:6b:08:47:ac:c9:70: dc:90:d5:b6:38:2a:b7:67:63:52:44:a5:e9:1d:fe: 80:81:3c:e5:5c:e0:b1:9c:61:58:66:13:65:b2:32: 03:9f:74:c5:b0:42:27:c9:c0:9b:0a:48:56:bf:26: 7b:ce:cf:d3:65:7e:80:8a:aa:18:48:e0:2b:5d:74: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2F:B5:9D:40:EF:4E:1D:3F:32:B2:59:E9:ED:F0:8A:7B:CF:D6:6C X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:8d:d2:0d:d8:9d:03:36:2f:80:81:d4:89:38:14:69:5f:1a: bb:ef:7b:ac:51:5a:19:71:d8:ca:4f:46:51:b7:7b:a6:a6:6f: 4d:c1:49:33:6b:98:8d:8f:cd:60:c4:53:bc:88:d6:e5:2a:b1: 1f:17:a3:90:42:b6:ec:14:a0:0b:ab:2d:a6:2d:59:7b:56:36: 8c:87:6d:6f:9c:26:d2:93:7a:02:26:38:9b:1b:76:5f:8d:d1: 17:10:90:93:cf:5b:72:55:01:0a:47:79:59:e9:63:fa:54:9f: 46:a8:bf:ab:0f:c5:d1:3d:95:94:bd:0f:4d:10:7b:64:4d:e3: 31:c1:b5:a2:fc:d4:9f:ac:56:80:ce:68:05:40:f9:0e:8c:0a: b1:0d:82:e7:a6:28:c5:c8:14:33:37:55:31:59:2a:df:8b:01: 49:e2:a0:2c:dc:60:f2:72:a6:be:f2:47:1d:0e:03:92:80:8c: 0f:8d:7d:49:2c:35:39:77:bc:5f:3f:15:6b:c8:8f:cb:30:43: 60:66:f7:0c:c5:e0:22:1c:62:57:06:6f:86:f2:e6:fa:88:b8: 87:ba:48:4e:9e:3c:02:14:58:0b:61:6a:bf:2f:8e:45:32:4f: 77:3d:81:bc:d8:8b:f6:ca:b1:62:a9:db:e3:0b:29:43:f5:68: 65:59:0f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURti+uw0Ahw/i4/7YeXHQyjtK+W4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTEyMDYyMzI2MTRaFw0yNTEyMDkyMzQzMTRaMDMxMTAvBgNV BAMTKEZFMkZCNTlENDBFRjRFMUQzRjMyQjI1OUU5RURGMDhBN0JDRkQ2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs/cXSGk6YCYGMpjMVHmqa90oQ DPsccqv4HY5MqH/UCzq3tpRtjBMt6yA8ARIjAsSbxqxNnF2/vvFQdWVIg/0syE5x udT6wwa4ryzt57d/flZp7PoaQTcXMfJCdMqxWXfMgmm6oTYFvmNjSzm/bLlEZxR+ XSoF47rHuyxER7tYLi8Pl1JLVIwAFD9d13dUooAhWGY8GDE1GN6riLL84w4jLl+d DsfYOuRzwA8SKEOTD8a8Jq308E8xzM7d52sIR6zJcNyQ1bY4KrdnY1JEpekd/oCB POVc4LGcYVhmE2WyMgOfdMWwQifJwJsKSFa/JnvOz9NlfoCKqhhI4CtddHE3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/i+1nUDvTh0/MrJZ6e3winvP1mwwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACmN0g3YnQM2L4CB1Ik4FGlfGrvve6xRWhlx 2MpPRlG3e6amb03BSTNrmI2PzWDEU7yI1uUqsR8Xo5BCtuwUoAurLaYtWXtWNoyH bW+cJtKTegImOJsbdl+N0RcQkJPPW3JVAQpHeVnpY/pUn0aov6sPxdE9lZS9D00Q e2RN4zHBtaL81J+sVoDOaAVA+Q6MCrENguemKMXIFDM3VTFZKt+LAUnioCzcYPJy pr7yRx0OA5KAjA+NfUksNTl3vF8/FWvIj8swQ2Bm9wzF4CIcYlcGb4by5vqIuIe6 SE6ePAIUWAthar8vjkUyT3c9gbzYi/bKsWKp2+MLKUP1aGVZD38= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:55 2025 by rpki-client