This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft File: A715B65580762207B94EC6527AFBEDD69970A868.mft (raw, json) Hash identifier: CaEdGAHdpNzS9sGOAOtC1qSAH+QP2TmoZ+AJydGwAyU= Subject key identifier: 2A:3C:3F:7E:E1:44:56:73:29:BF:53:38:B5:6C:B5:E1:72:83:A4:91 Authority key identifier: A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 Certificate issuer: /CN=A715B65580762207B94EC6527AFBEDD69970A868 Certificate serial: 010DFD4D2AEF51E461D4080DDA255818E29A287D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft Manifest number: 052D Signing time: Fri 05 Dec 2025 23:32:23 +0000 Manifest this update: Fri 05 Dec 2025 23:27:23 +0000 Manifest next update: Tue 09 Dec 2025 04:01:23 +0000 Files and hashes: 1: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (hash: 6s+35i1PbBgpAAj3R2PbueLOCnOhVKs2T7rEnDWSY6U=) 2: A715B65580762207B94EC6527AFBEDD69970A868.crl (hash: FerLbib097m8IZ9xw8hbwy4j+hIR0xf1BhJ+e/auUeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:fd:4d:2a:ef:51:e4:61:d4:08:0d:da:25:58:18:e2:9a:28:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A715B65580762207B94EC6527AFBEDD69970A868 Validity Not Before: Dec 5 23:27:23 2025 GMT Not After : Dec 9 04:01:23 2025 GMT Subject: CN=2A3C3F7EE144567329BF5338B56CB5E17283A491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:0a:ae:5e:07:bd:4c:fd:68:98:2f:33:ae: 09:02:0e:55:15:07:4a:ee:3e:51:77:7b:48:2d:3f: c5:e6:70:51:62:55:17:6f:81:71:08:d4:52:0b:69: 49:05:4a:dc:2d:49:a5:89:98:a5:ae:3e:83:34:d2: 65:cb:12:82:b7:0a:8f:bc:f2:aa:94:3e:0e:47:3b: c8:a0:7f:33:28:a9:7a:e1:12:6a:8f:03:2a:c9:b3: 49:8e:36:be:17:22:a4:04:85:a0:d7:73:9a:43:ca: 12:8e:7b:82:2c:9b:41:3e:9b:4a:19:f7:88:3f:e4: 61:76:d7:88:fb:ff:95:bf:78:31:69:a9:d7:e3:9f: 62:71:5f:20:e0:72:df:c1:5a:b6:1a:1c:48:e2:f1: 87:12:a1:b1:27:35:d0:e4:b4:9d:9b:b4:9c:c9:1f: 46:b2:da:0f:2f:a2:4d:26:e0:0d:57:93:10:ef:18: e7:a3:fb:c9:f0:13:7c:f1:ee:c3:3d:4a:2b:fc:dd: 51:44:3f:56:f5:17:b0:e7:99:28:76:0b:57:a2:eb: d0:62:88:87:de:d1:86:1f:10:08:1b:b3:28:71:f0: d1:af:1b:7a:e9:16:21:1b:ba:10:2c:d0:0a:2b:26: 24:ac:d7:2b:0a:dc:6d:7f:cb:a0:f6:91:46:e4:b7: 2a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:3F:7E:E1:44:56:73:29:BF:53:38:B5:6C:B5:E1:72:83:A4:91 X509v3 Authority Key Identifier: keyid:A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:18:33:24:52:70:4c:ee:d5:fb:db:24:6f:19:41:05:62:19: ca:f3:cd:a4:10:c2:8f:60:d1:cf:d5:08:26:d6:db:d5:46:44: e4:de:54:24:ce:74:49:ca:f5:1d:d4:29:55:b6:26:2c:c6:92: 3a:ae:9b:2c:5a:92:a6:35:2e:a6:4b:a1:2f:c0:6f:1b:4a:1c: 92:b2:31:fd:19:90:22:d8:c4:26:3a:4a:2d:7e:99:52:8c:47: c0:13:88:a8:7b:af:55:18:cd:4f:62:b5:d5:56:9d:8f:fd:fa: 52:88:eb:57:7b:de:a8:4b:23:f3:a7:c0:cb:5e:35:8b:01:24: 1e:4e:ec:4f:9d:a7:3c:43:41:ff:ca:cb:b5:6f:9a:ea:6a:d5: 5b:1a:83:e9:57:83:50:eb:96:0d:bd:0a:78:67:53:c1:c5:46: f0:f3:65:10:63:84:67:3c:a3:59:42:19:55:ac:92:9c:72:60: f4:ac:18:7e:a4:5c:c8:0c:4a:3e:ca:41:5f:87:9c:7b:f0:57: f5:97:8c:d2:44:a8:0d:31:32:57:bb:d7:8e:c6:61:01:69:0d: 1e:71:14:b1:f0:76:4a:98:30:7e:1f:25:31:50:57:68:e1:c0: dd:66:88:7b:b0:0f:55:34:26:58:b9:bc:70:a6:80:52:6c:6b: 2c:b8:33:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQ39TSrvUeRh1AgN2iVYGOKaKH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5 OTcwQTg2ODAeFw0yNTEyMDUyMzI3MjNaFw0yNTEyMDkwNDAxMjNaMDMxMTAvBgNV BAMTKDJBM0MzRjdFRTE0NDU2NzMyOUJGNTMzOEI1NkNCNUUxNzI4M0E0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEQquXge9TP1omC8zrgkCDlUV B0ruPlF3e0gtP8XmcFFiVRdvgXEI1FILaUkFStwtSaWJmKWuPoM00mXLEoK3Co+8 8qqUPg5HO8igfzMoqXrhEmqPAyrJs0mONr4XIqQEhaDXc5pDyhKOe4Ism0E+m0oZ 94g/5GF214j7/5W/eDFpqdfjn2JxXyDgct/BWrYaHEji8YcSobEnNdDktJ2btJzJ H0ay2g8vok0m4A1XkxDvGOej+8nwE3zx7sM9Siv83VFEP1b1F7DnmSh2C1ei69Bi iIfe0YYfEAgbsyhx8NGvG3rpFiEbuhAs0AorJiSs1ysK3G1/y6D2kUbktyqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjw/fuFEVnMpv1M4tWy14XKDpJEwHwYDVR0j BBgwFoAUpxW2VYB2Ige5TsZSevvt1plwqGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzRiY2NkNS0yNTJjLTQ5NDctODcxYi0xNTZkZmZmZTc3MTcvMC9BNzE1QjY1NTgw NzYyMjA3Qjk0RUM2NTI3QUZCRURENjk5NzBBODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5OTcw QTg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc0YmNjZDUtMjUyYy00OTQ3LTg3 MWItMTU2ZGZmZmU3NzE3LzAvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVE RDY5OTcwQTg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYYMyRScEzu1fvbJG8ZQQViGcrzzaQQwo9g 0c/VCCbW29VGROTeVCTOdEnK9R3UKVW2JizGkjqumyxakqY1LqZLoS/AbxtKHJKy Mf0ZkCLYxCY6Si1+mVKMR8ATiKh7r1UYzU9itdVWnY/9+lKI61d73qhLI/OnwMte NYsBJB5O7E+dpzxDQf/Ky7Vvmupq1Vsag+lXg1Drlg29CnhnU8HFRvDzZRBjhGc8 o1lCGVWskpxyYPSsGH6kXMgMSj7KQV+HnHvwV/WXjNJEqA0xMle7147GYQFpDR5x FLHwdkqYMH4fJTFQV2jhwN1miHuwD1U0Jli5vHCmgFJsayy4Mwk= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:16 2025 by rpki-client