This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: M4/O/pDGKtKN7OT36R3HhmUWzG7ltbSd8uy4WU++wrc= Subject key identifier: 49:EA:09:29:9D:40:A0:B5:54:C9:F5:13:34:F4:01:AD:E3:92:31:90 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 3BE907E6BEA94A363BC9A6A6608A1B42705B22CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 027D Signing time: Thu 04 Dec 2025 16:41:25 +0000 Manifest this update: Thu 04 Dec 2025 16:36:25 +0000 Manifest next update: Mon 08 Dec 2025 02:51:25 +0000 Files and hashes: 1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) 2: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: mc/hrsf+NiyIilRLk2Mib6spnQd7lHLbepn7WfCs5Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 02:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e9:07:e6:be:a9:4a:36:3b:c9:a6:a6:60:8a:1b:42:70:5b:22:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Dec 4 16:36:25 2025 GMT Not After : Dec 8 02:51:25 2025 GMT Subject: CN=49EA09299D40A0B554C9F51334F401ADE3923190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:b1:ae:23:a4:f7:c1:95:0f:fc:c8:62:b8: ce:ae:15:40:07:4e:8a:ce:42:ad:fe:2c:49:f2:f1: 98:d5:60:1a:1d:bf:ef:7e:a4:27:bf:a8:94:02:1e: 85:47:12:18:91:27:a2:1e:14:d6:7c:ed:db:bf:9f: d7:61:f7:31:e6:70:c0:96:e1:17:3d:b4:02:a1:fd: 24:34:31:24:f8:c3:e0:3e:c4:ba:76:8f:74:27:cf: 3f:c4:31:54:dd:3c:8d:7e:ab:dd:74:78:b9:58:f9: 87:d1:98:c6:db:58:d8:93:eb:f5:bd:37:e1:96:c7: 48:6f:18:d1:8c:38:15:d0:69:27:78:12:f5:29:a6: 81:3d:5c:59:b3:2c:ec:5e:ef:20:a0:02:75:22:fe: 75:da:e9:80:b3:ac:bb:35:8b:69:eb:19:eb:53:e8: 71:ef:74:f3:51:1d:8f:8a:52:9d:32:8a:97:f5:a5: 4a:27:69:13:ed:41:0e:00:05:ce:3f:83:bd:60:62: 61:86:7f:1a:1c:f9:1e:10:69:7a:e9:51:d6:f3:d9: 04:ba:14:0c:67:a6:ff:d4:0f:d9:1a:41:2a:35:79: 32:cc:ee:89:96:8f:33:34:30:b7:f3:9d:e9:0d:28: a9:32:86:e4:cc:c5:45:2a:9b:10:78:b3:26:33:a5: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:EA:09:29:9D:40:A0:B5:54:C9:F5:13:34:F4:01:AD:E3:92:31:90 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ab:30:28:3c:c0:71:ee:0b:29:d2:3a:4e:e2:67:69:92:0d: af:a5:e4:62:34:dc:93:ef:69:04:3b:b5:82:b8:f6:56:e5:56: ee:aa:05:42:2b:cb:3f:95:b2:7a:a5:df:82:e6:dd:86:c5:3a: 20:b5:28:dc:03:af:e2:a6:71:e2:40:f5:2e:e9:92:d2:0e:60: 61:25:21:4b:78:7a:93:a8:23:11:31:0c:70:17:be:53:d5:44: dd:c2:84:7d:d5:f6:da:11:68:c0:e9:a3:19:73:40:55:99:67: bb:30:b1:fc:3f:91:b1:12:ec:5d:3f:63:64:0f:42:d3:15:06: f3:3d:92:35:4b:4f:81:1e:db:09:c1:1e:78:b5:12:20:f7:b0: c0:a6:d1:4b:6c:d6:25:08:65:73:c0:5b:a5:2d:3d:84:8b:7a: fa:0a:8b:00:6a:0a:a2:5b:da:5d:d1:b7:00:35:2f:63:7f:2a: bd:92:45:9f:12:07:bb:66:ed:dc:20:66:af:2b:78:4c:41:fc: cc:db:eb:37:21:4b:c3:a4:be:1d:2f:b3:7d:b6:8f:a3:9a:b4: 16:98:77:a6:9f:e6:82:b3:0a:2e:59:40:e4:61:0c:79:36:d4: 02:c5:49:9c:91:c4:dc:ee:44:5f:5a:77:cf:4e:5d:95:3e:5e: 20:4c:15:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO+kH5r6pSjY7yaamYIobQnBbIswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNTEyMDQxNjM2MjVaFw0yNTEyMDgwMjUxMjVaMDMxMTAvBgNV BAMTKDQ5RUEwOTI5OUQ0MEEwQjU1NEM5RjUxMzM0RjQwMUFERTM5MjMxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2rGuI6T3wZUP/MhiuM6uFUAH TorOQq3+LEny8ZjVYBodv+9+pCe/qJQCHoVHEhiRJ6IeFNZ87du/n9dh9zHmcMCW 4Rc9tAKh/SQ0MST4w+A+xLp2j3Qnzz/EMVTdPI1+q910eLlY+YfRmMbbWNiT6/W9 N+GWx0hvGNGMOBXQaSd4EvUppoE9XFmzLOxe7yCgAnUi/nXa6YCzrLs1i2nrGetT 6HHvdPNRHY+KUp0yipf1pUonaRPtQQ4ABc4/g71gYmGGfxoc+R4QaXrpUdbz2QS6 FAxnpv/UD9kaQSo1eTLM7omWjzM0MLfznekNKKkyhuTMxUUqmxB4syYzpfkvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSeoJKZ1AoLVUyfUTNPQBreOSMZAwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqrMCg8wHHuCynSOk7iZ2mSDa+l5GI03JPv aQQ7tYK49lblVu6qBUIryz+Vsnql34Lm3YbFOiC1KNwDr+KmceJA9S7pktIOYGEl IUt4epOoIxExDHAXvlPVRN3ChH3V9toRaMDpoxlzQFWZZ7swsfw/kbES7F0/Y2QP QtMVBvM9kjVLT4Ee2wnBHni1EiD3sMCm0Uts1iUIZXPAW6UtPYSLevoKiwBqCqJb 2l3RtwA1L2N/Kr2SRZ8SB7tm7dwgZq8reExB/Mzb6zchS8Okvh0vs322j6OatBaY d6af5oKzCi5ZQORhDHk21ALFSZyRxNzuRF9ad89OXZU+XiBMFdM= -----END CERTIFICATE-----Generated at Sun Dec 7 04:12:38 2025 by rpki-client