This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: 3lsGFMq/7q94h8ynOBrIj27DnyiMDvklxMAipqCtOMY= Subject key identifier: 8F:2B:4B:B9:7F:85:A9:91:0C:79:0E:FF:14:3E:14:5F:D0:34:C6:67 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 7DEDC1618980DB368B8D3395A8575DF62F157A24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 014D Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:56:26 +0000 Manifest next update: Tue 09 Dec 2025 09:44:26 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 2: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: 3qxPr/Dwbj03W0bTn53mmIfksBMwS32hb1pZR7zHiRM=) 3: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 4: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 5: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 09:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ed:c1:61:89:80:db:36:8b:8d:33:95:a8:57:5d:f6:2f:15:7a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Dec 6 01:56:26 2025 GMT Not After : Dec 9 09:44:26 2025 GMT Subject: CN=8F2B4BB97F85A9910C790EFF143E145FD034C667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:00:2f:4e:8a:33:7e:dd:ab:a5:87:b8:ff:9b: 4f:50:42:36:c6:6b:dd:52:11:b1:ee:27:43:ec:31: fd:61:2e:3a:55:2b:7d:df:96:94:9e:fe:7b:d0:e1: 9d:e4:e2:83:9e:04:ab:19:65:3d:ee:22:2d:a3:98: ff:c2:bb:61:3f:f1:86:c7:3f:fd:db:e7:b6:a5:90: 0e:08:c1:86:c7:4a:e7:6e:3d:40:df:e2:33:f3:fc: 05:44:a7:22:19:de:03:83:81:a9:30:0c:27:08:e3: 5e:8a:73:52:90:d5:97:71:35:e8:ca:e3:11:b9:68: 6a:f0:20:de:b2:94:46:a5:2b:a9:41:e7:6c:e8:a6: 7e:ee:ae:7e:08:4c:e5:43:34:bf:d2:7a:4a:4b:a4: ac:0c:80:02:d4:04:86:e5:ad:89:b9:ac:a3:a0:16: 1d:d0:d4:4f:59:0c:4e:94:29:27:67:9f:98:ab:34: e3:89:d8:05:9c:1e:38:b1:91:8a:ff:79:a2:ca:30: 54:f3:f7:11:84:e0:2b:35:5a:f4:d9:dc:29:9e:2e: 5e:31:c0:80:0d:8e:2c:63:95:27:83:c0:f9:5a:e7: 62:1f:93:dc:21:dc:ec:6b:e7:58:33:1f:f4:3c:cd: 1a:f3:47:b5:58:80:4d:8d:d1:4b:60:d8:46:b3:11: 70:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2B:4B:B9:7F:85:A9:91:0C:79:0E:FF:14:3E:14:5F:D0:34:C6:67 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6e:75:4f:07:ba:3e:e7:ad:eb:56:73:a0:c7:cf:7a:2a:0c: d9:f6:b8:eb:61:00:66:47:ab:f4:57:b3:8b:22:ef:8f:30:c9: 3a:06:d2:9c:da:23:f0:9b:df:96:7e:3e:5d:37:a6:11:79:50: 94:8c:af:1f:f5:67:6c:d9:2e:28:24:aa:9c:7f:22:e9:d9:eb: 08:dc:b6:5d:22:bd:5f:6d:8d:ac:83:bb:25:fb:56:09:c7:19: 8a:61:de:4a:cf:7d:3c:62:88:9c:07:97:f9:77:5d:6a:0e:e0: 4d:5f:d3:f6:74:3b:a9:5f:9e:54:8c:ff:07:fc:61:4c:bd:85: 9e:e2:33:0a:e2:e4:04:0f:6f:6d:af:70:33:bf:22:c8:8c:76: c0:d6:d9:36:f9:12:5f:ab:f4:c3:0a:08:17:c8:b6:fe:3a:7e: 29:34:31:08:b8:18:cb:37:a6:97:2e:15:43:bf:1b:88:54:df: 53:a6:6c:ee:27:56:9c:9e:07:a6:78:3c:91:81:4a:8b:50:cc: f4:0b:ff:01:02:c7:8d:88:5c:6c:b9:33:4d:e1:c3:57:d1:fe: 21:d9:bf:b8:48:06:b2:7f:d5:12:e7:2a:63:3d:60:33:c4:2a: ad:86:ad:99:0f:ac:18:3a:e3:79:d4:38:12:b2:ea:10:97:2c: 7c:0c:49:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfe3BYYmA2zaLjTOVqFdd9i8VeiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTEyMDYwMTU2MjZaFw0yNTEyMDkwOTQ0MjZaMDMxMTAvBgNV BAMTKDhGMkI0QkI5N0Y4NUE5OTEwQzc5MEVGRjE0M0UxNDVGRDAzNEM2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAC9OijN+3aulh7j/m09QQjbG a91SEbHuJ0PsMf1hLjpVK33flpSe/nvQ4Z3k4oOeBKsZZT3uIi2jmP/Cu2E/8YbH P/3b57alkA4IwYbHSuduPUDf4jPz/AVEpyIZ3gODgakwDCcI416Kc1KQ1ZdxNejK 4xG5aGrwIN6ylEalK6lB52zopn7urn4ITOVDNL/SekpLpKwMgALUBIblrYm5rKOg Fh3Q1E9ZDE6UKSdnn5irNOOJ2AWcHjixkYr/eaLKMFTz9xGE4Cs1WvTZ3CmeLl4x wIANjixjlSeDwPla52Ifk9wh3Oxr51gzH/Q8zRrzR7VYgE2N0Utg2EazEXBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjytLuX+FqZEMeQ7/FD4UX9A0xmcwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFudU8Huj7nretWc6DHz3oqDNn2uOthAGZH q/RXs4si748wyToG0pzaI/Cb35Z+Pl03phF5UJSMrx/1Z2zZLigkqpx/IunZ6wjc tl0ivV9tjayDuyX7VgnHGYph3krPfTxiiJwHl/l3XWoO4E1f0/Z0O6lfnlSM/wf8 YUy9hZ7iMwri5AQPb22vcDO/IsiMdsDW2Tb5El+r9MMKCBfItv46fik0MQi4GMs3 ppcuFUO/G4hU31OmbO4nVpyeB6Z4PJGBSotQzPQL/wECx42IXGy5M03hw1fR/iHZ v7hIBrJ/1RLnKmM9YDPEKq2GrZkPrBg643nUOBKy6hCXLHwMSb8= -----END CERTIFICATE-----Generated at Sat Dec 6 19:28:28 2025 by rpki-client