This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: 5+2y75h4KoXe1tCYed2F0yiaaHix6TkqqGC2Xcus4JQ= Subject key identifier: B4:D8:42:AD:DB:6F:1B:81:19:8A:54:54:38:41:DB:7F:64:6A:31:71 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 082DDB9C6C94A25645A5EE5E3A0A96F5D09280D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 0317 Signing time: Thu 04 Dec 2025 17:41:16 +0000 Manifest this update: Thu 04 Dec 2025 17:36:16 +0000 Manifest next update: Mon 08 Dec 2025 01:21:16 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: ySaW+lRFlL06IomW7z8dlRGDPomF5HDqvzJVroQXwHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 01:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2d:db:9c:6c:94:a2:56:45:a5:ee:5e:3a:0a:96:f5:d0:92:80:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Dec 4 17:36:16 2025 GMT Not After : Dec 8 01:21:16 2025 GMT Subject: CN=B4D842ADDB6F1B81198A54543841DB7F646A3171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:9a:9b:bf:5f:1f:f8:54:58:f0:28:c1:94:c6: df:ff:69:1e:ad:2c:5c:0c:ef:04:b0:00:ca:53:91: 4d:59:fb:31:23:8a:b2:87:48:81:01:f6:15:59:6d: 16:b1:fb:46:a8:73:b2:ed:05:0b:b5:ae:1c:e4:60: 28:87:d4:f6:d7:fe:6b:62:80:a2:a5:36:aa:c6:03: 85:a9:d0:ef:aa:42:58:07:32:6b:a4:b3:63:1e:f9: 6d:e3:bd:e9:f7:94:2f:de:31:72:71:e7:c8:89:22: 66:49:e1:3a:b3:54:0b:a3:6c:6f:a0:79:43:be:82: f8:f2:b9:b8:50:da:17:19:31:6b:3c:4a:19:c0:38: bf:20:0d:5e:c8:46:a3:5e:e7:92:d2:83:d3:88:5e: 85:f5:53:a7:b3:0e:9b:96:c0:49:a4:bb:06:5d:45: 22:71:16:f0:37:a0:be:76:b3:db:c7:ac:22:d0:22: aa:43:12:7f:4f:88:97:21:cf:ac:96:b9:d7:e0:84: 13:d0:38:86:9e:05:a6:00:74:a6:6f:d2:f0:10:97: 87:31:d3:61:b8:d4:13:99:23:7f:0a:a0:78:0b:9d: 07:37:3a:90:d6:17:ad:39:50:e4:c8:a6:76:72:f9: e8:f6:08:48:33:6e:1a:e5:f2:da:83:0d:a5:83:79: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D8:42:AD:DB:6F:1B:81:19:8A:54:54:38:41:DB:7F:64:6A:31:71 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5e:12:da:ef:76:0e:a5:b8:70:6d:7b:ba:fd:00:7c:8c:1e: 42:5a:31:2c:26:55:90:b3:70:df:df:10:b4:3d:ca:da:e9:d8: 4b:90:6c:40:e5:2e:28:cb:70:ca:d4:02:09:75:d1:e9:6e:a9: 64:9d:6c:04:7d:b1:8b:3c:10:ea:87:b0:ca:54:d9:a6:93:03: e9:0d:a9:3e:75:a5:f9:b2:1d:4d:c0:98:a9:af:19:60:bb:a1: 0f:6a:2f:ae:55:42:77:21:91:5b:b7:50:c5:3a:90:48:50:e5: 15:6b:89:a5:a9:2f:12:be:5c:45:f8:e1:46:f0:04:35:2e:64: ae:fc:9a:3a:2b:c0:6c:e2:86:eb:71:e5:c2:42:e5:dd:7b:bb: a6:2b:2d:01:ef:84:5a:51:f3:d0:bd:09:13:52:0a:6a:7a:5f: 7e:de:ab:31:fb:da:ae:d6:10:48:28:61:a6:b9:9b:53:e3:d0: 97:88:42:28:eb:2d:e9:cb:3f:f8:a0:cc:01:09:a3:87:ec:b5: bd:9b:34:a3:30:4e:2d:9e:60:ea:9c:8e:0b:aa:6c:4e:09:2e: ce:d1:c0:1f:fc:5f:3c:bb:c3:39:22:a7:b1:af:7a:b7:aa:88: 8c:41:b3:90:90:d3:ae:16:50:97:e5:12:6f:64:de:ed:e4:aa: 3a:3d:d5:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCC3bnGyUolZFpe5eOgqW9dCSgNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTEyMDQxNzM2MTZaFw0yNTEyMDgwMTIxMTZaMDMxMTAvBgNV BAMTKEI0RDg0MkFEREI2RjFCODExOThBNTQ1NDM4NDFEQjdGNjQ2QTMxNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDumpu/Xx/4VFjwKMGUxt//aR6t LFwM7wSwAMpTkU1Z+zEjirKHSIEB9hVZbRax+0aoc7LtBQu1rhzkYCiH1PbX/mti gKKlNqrGA4Wp0O+qQlgHMmuks2Me+W3jven3lC/eMXJx58iJImZJ4TqzVAujbG+g eUO+gvjyubhQ2hcZMWs8ShnAOL8gDV7IRqNe55LSg9OIXoX1U6ezDpuWwEmkuwZd RSJxFvA3oL52s9vHrCLQIqpDEn9PiJchz6yWudfghBPQOIaeBaYAdKZv0vAQl4cx 02G41BOZI38KoHgLnQc3OpDWF605UOTIpnZy+ej2CEgzbhrl8tqDDaWDeeg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtNhCrdtvG4EZilRUOEHbf2RqMXEwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH9eEtrvdg6luHBte7r9AHyMHkJaMSwmVZCz cN/fELQ9ytrp2EuQbEDlLijLcMrUAgl10eluqWSdbAR9sYs8EOqHsMpU2aaTA+kN qT51pfmyHU3AmKmvGWC7oQ9qL65VQnchkVu3UMU6kEhQ5RVriaWpLxK+XEX44Ubw BDUuZK78mjorwGzihutx5cJC5d17u6YrLQHvhFpR89C9CRNSCmp6X37eqzH72q7W EEgoYaa5m1Pj0JeIQijrLenLP/igzAEJo4fstb2bNKMwTi2eYOqcjguqbE4JLs7R wB/8Xzy7wzkip7GvereqiIxBs5CQ064WUJflEm9k3u3kqjo91fw= -----END CERTIFICATE-----Generated at Sun Dec 7 01:10:03 2025 by rpki-client