This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: 9Xh08YHV2IKmYGHNy1di2mEfkXMkhhLmnBHEMsep41E= Subject key identifier: 57:38:F7:0D:C4:2E:93:9A:45:CD:73:8C:C9:10:78:4F:59:01:51:F9 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 1A9A9AA0913496A8F2D5FAEF432B5B2A34F9F5B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01EE Signing time: Fri 05 Dec 2025 15:31:34 +0000 Manifest this update: Fri 05 Dec 2025 15:26:34 +0000 Manifest next update: Mon 08 Dec 2025 17:39:34 +0000 Files and hashes: 1: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) 2: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: DQIsri264sH0ULNmd1hHB2LCsE3h9aArMJcZgvva8mo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9a:9a:a0:91:34:96:a8:f2:d5:fa:ef:43:2b:5b:2a:34:f9:f5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Dec 5 15:26:34 2025 GMT Not After : Dec 8 17:39:34 2025 GMT Subject: CN=5738F70DC42E939A45CD738CC910784F590151F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5b:ca:fe:e6:d7:cb:57:d9:34:0b:b7:9a:52: 32:88:0c:46:7e:05:29:12:a7:0d:09:83:61:f6:a6: f8:d8:01:0f:4b:de:f4:4e:5c:0e:7e:92:78:0f:b1: 9f:b6:20:3d:24:37:03:f5:ad:7b:3f:70:7f:13:20: 57:f8:11:b7:85:b2:d1:fa:6d:4a:15:83:fe:8a:4a: d1:20:b5:2c:51:4b:76:b3:48:0e:b8:2f:5f:2c:a6: 52:82:99:7a:c2:ff:9b:b8:12:2e:4a:78:0b:cc:70: 0e:46:b2:14:cb:08:d9:92:ff:e0:58:bc:9e:3d:40: 73:57:e1:94:80:93:48:9a:e7:63:e5:c3:e3:60:4a: 32:20:e3:62:89:55:6f:c2:55:6c:73:fd:a8:5d:25: 95:64:8c:09:d3:51:22:a7:49:81:04:14:9a:b2:57: 68:6d:54:f4:4d:f6:73:02:d5:a5:be:2c:a9:ea:4d: 58:c7:d2:6b:e1:48:c3:d3:45:73:03:d5:d9:8e:b7: 0d:a7:f6:39:8a:3b:53:b5:12:97:6a:8a:91:5e:dc: 9b:32:34:80:68:18:d8:0a:d5:6b:98:b1:61:6f:48: 4b:53:b4:11:ca:8b:f9:61:e1:f4:86:a7:79:38:18: 3b:e9:53:41:76:fe:2d:2a:36:63:c2:ff:1f:8b:07: 7e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:38:F7:0D:C4:2E:93:9A:45:CD:73:8C:C9:10:78:4F:59:01:51:F9 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b1:14:c5:c5:17:bb:22:aa:c5:5e:87:55:19:24:f6:9a:b7: be:de:fd:ab:2d:75:f7:7f:64:ec:45:ed:bf:ef:9d:99:6d:cb: 56:c5:78:0c:d4:c1:75:dd:6b:67:23:ef:c9:a4:56:c7:b3:ed: d7:eb:ff:3e:c6:5a:0c:19:76:f0:7c:4c:f9:bf:c0:a6:69:42: 2c:77:13:55:3b:76:81:57:4e:61:16:89:de:36:a1:bf:dc:93: fb:ad:7b:80:9f:da:e9:b5:1c:6e:37:64:95:a3:15:83:a1:11: ab:48:f3:fd:bf:93:c7:68:c4:31:ca:84:15:fb:a6:14:30:41: ff:b4:71:06:ad:6d:d1:ee:5d:98:2e:51:66:93:21:78:fa:65: 4d:68:6d:d1:42:48:40:37:01:3f:60:6f:f3:f2:ee:fc:6b:bf: b1:39:e5:79:f4:bc:85:11:5b:4e:93:b9:b1:e7:96:2d:37:29: 53:5e:11:41:09:5d:00:85:79:0b:c1:53:21:86:62:3b:a7:05: bc:84:18:21:c7:c1:0a:e1:f3:2b:75:f2:9a:94:d4:42:e7:bd: 6c:64:fb:46:3a:c4:f8:64:85:c2:1f:f4:6e:6c:f6:19:d8:c1: 31:c9:ea:71:29:11:93:1c:25:2b:1a:20:58:41:29:08:e7:1f: 82:ba:50:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpqaoJE0lqjy1frvQytbKjT59bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTEyMDUxNTI2MzRaFw0yNTEyMDgxNzM5MzRaMDMxMTAvBgNV BAMTKDU3MzhGNzBEQzQyRTkzOUE0NUNENzM4Q0M5MTA3ODRGNTkwMTUxRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAW8r+5tfLV9k0C7eaUjKIDEZ+ BSkSpw0Jg2H2pvjYAQ9L3vROXA5+kngPsZ+2ID0kNwP1rXs/cH8TIFf4EbeFstH6 bUoVg/6KStEgtSxRS3azSA64L18splKCmXrC/5u4Ei5KeAvMcA5GshTLCNmS/+BY vJ49QHNX4ZSAk0ia52Plw+NgSjIg42KJVW/CVWxz/ahdJZVkjAnTUSKnSYEEFJqy V2htVPRN9nMC1aW+LKnqTVjH0mvhSMPTRXMD1dmOtw2n9jmKO1O1EpdqipFe3Jsy NIBoGNgK1WuYsWFvSEtTtBHKi/lh4fSGp3k4GDvpU0F2/i0qNmPC/x+LB36RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVzj3DcQuk5pFzXOMyRB4T1kBUfkwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGxFMXFF7siqsVeh1UZJPaat77e/astdfd/ ZOxF7b/vnZlty1bFeAzUwXXda2cj78mkVsez7dfr/z7GWgwZdvB8TPm/wKZpQix3 E1U7doFXTmEWid42ob/ck/ute4Cf2um1HG43ZJWjFYOhEatI8/2/k8doxDHKhBX7 phQwQf+0cQatbdHuXZguUWaTIXj6ZU1obdFCSEA3AT9gb/Py7vxrv7E55Xn0vIUR W06TubHnli03KVNeEUEJXQCFeQvBUyGGYjunBbyEGCHHwQrh8yt18pqU1ELnvWxk +0Y6xPhkhcIf9G5s9hnYwTHJ6nEpEZMcJSsaIFhBKQjnH4K6UJQ= -----END CERTIFICATE-----Generated at Sun Dec 7 05:59:26 2025 by rpki-client