This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: oUV7Q2IYDkfR6m6e/AhBsDu3e3t4rJkJ+OMZEJ43Yfk= Subject key identifier: 35:AC:6D:7A:BB:F1:A7:6D:0B:F2:04:E6:7D:EE:DB:87:88:B9:38:7B Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 3741EAF8CDBDC9A9BDBDC635C5C2667C398C3CC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 052D Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:55:40 +0000 Manifest next update: Tue 09 Dec 2025 12:05:40 +0000 Files and hashes: 1: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) 4: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: rWApX4YUVtyrLhEW1HrVvjDxTT26fxdu1kb+CRQtIDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 12:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:41:ea:f8:cd:bd:c9:a9:bd:bd:c6:35:c5:c2:66:7c:39:8c:3c:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Dec 6 07:55:40 2025 GMT Not After : Dec 9 12:05:40 2025 GMT Subject: CN=35AC6D7ABBF1A76D0BF204E67DEEDB8788B9387B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:30:e0:24:33:d3:4f:81:cb:b7:f2:db:a0:ca: 38:c0:7c:ac:fb:cf:c2:84:7c:61:b3:33:6b:2d:aa: a4:73:ab:da:44:49:cf:aa:c1:d3:2f:1e:0c:36:11: 76:23:84:4a:90:bb:31:d0:0b:90:6d:1d:1a:42:e1: 4c:21:49:29:56:0e:f9:c2:a9:94:3e:33:cf:fa:19: 1f:14:6a:12:5a:20:39:95:19:8f:12:ff:51:9b:6a: 8a:7e:07:6b:2c:f4:3d:96:1b:40:b7:af:fc:da:d0: 5b:28:36:32:f1:e4:3a:34:c2:ad:fc:3f:d1:72:38: 42:61:d7:3e:88:a1:e5:7c:f2:f4:79:a1:27:e2:24: c8:a5:e0:98:82:3a:a3:02:2c:a6:3c:52:68:d2:42: b8:90:14:1b:1e:16:8f:c3:4f:7d:f2:cd:b4:73:bc: bb:ed:7d:22:7e:ab:ed:b9:bb:11:0f:ce:2e:38:50: aa:0e:fd:f4:6f:2a:b3:66:5d:2c:c2:c9:71:d8:c8: bb:b3:fb:f5:21:a3:79:6a:22:9d:91:85:27:7e:14: 1f:10:9e:7e:02:0b:7d:ad:de:f8:27:f4:16:ce:e3: 1d:41:d4:70:c2:e5:9d:9a:b0:05:39:c9:85:0a:2d: 1c:36:4b:cb:dc:ab:17:26:92:b9:21:6e:37:65:42: 4f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AC:6D:7A:BB:F1:A7:6D:0B:F2:04:E6:7D:EE:DB:87:88:B9:38:7B X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d6:11:40:30:b1:1f:68:16:18:0c:30:4d:28:68:8f:04:cf: ff:7d:6b:de:22:25:a2:75:a1:94:fc:af:a0:84:29:ee:0b:38: 98:9f:e9:55:ad:a2:e8:6a:e4:69:05:fa:ba:00:61:ff:af:8b: 32:fe:f3:b7:bd:37:53:53:bf:88:b6:d8:4f:b2:33:c7:75:ce: 13:dd:e2:c1:11:d6:04:6c:23:e3:ee:31:25:71:ba:d7:c2:31: 24:cd:97:e3:f7:f1:53:25:4a:a0:c0:c6:dd:4b:5d:42:54:e4: 84:ee:96:43:9f:af:34:ac:7d:22:e2:4e:38:bd:f5:ee:c4:7a: 0e:21:d4:67:d7:cf:a6:c7:5e:c5:d3:06:f6:b3:18:d2:ae:b3: 2b:f5:b1:fd:74:0c:57:0a:52:25:e9:1c:b1:8b:60:c5:51:5e: 97:3b:a3:36:42:38:e3:57:a5:73:f7:a0:7a:82:90:35:4c:52: 8e:cd:da:94:d5:c7:d4:df:29:f7:3c:bc:97:77:7a:f9:fc:25: d1:64:2c:ae:0e:7f:63:6d:4e:d5:de:08:48:67:5a:57:e0:8d: d9:8b:2b:3e:ed:54:b8:11:dc:c5:b4:03:38:6b:d6:65:0c:bc: f4:14:38:36:ba:18:c0:7c:99:48:ea:e6:1a:a2:69:20:0a:11: 89:a2:6c:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN0Hq+M29yam9vcY1xcJmfDmMPMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTEyMDYwNzU1NDBaFw0yNTEyMDkxMjA1NDBaMDMxMTAvBgNV BAMTKDM1QUM2RDdBQkJGMUE3NkQwQkYyMDRFNjdERUVEQjg3ODhCOTM4N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMOAkM9NPgcu38tugyjjAfKz7 z8KEfGGzM2stqqRzq9pESc+qwdMvHgw2EXYjhEqQuzHQC5BtHRpC4UwhSSlWDvnC qZQ+M8/6GR8UahJaIDmVGY8S/1Gbaop+B2ss9D2WG0C3r/za0FsoNjLx5Do0wq38 P9FyOEJh1z6IoeV88vR5oSfiJMil4JiCOqMCLKY8UmjSQriQFBseFo/DT33yzbRz vLvtfSJ+q+25uxEPzi44UKoO/fRvKrNmXSzCyXHYyLuz+/Uho3lqIp2RhSd+FB8Q nn4CC32t3vgn9BbO4x1B1HDC5Z2asAU5yYUKLRw2S8vcqxcmkrkhbjdlQk/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNaxtervxp20L8gTmfe7bh4i5OHswHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDWEUAwsR9oFhgMME0oaI8Ez/99a94iJaJ1 oZT8r6CEKe4LOJif6VWtouhq5GkF+roAYf+vizL+87e9N1NTv4i22E+yM8d1zhPd 4sER1gRsI+PuMSVxutfCMSTNl+P38VMlSqDAxt1LXUJU5ITulkOfrzSsfSLiTji9 9e7Eeg4h1GfXz6bHXsXTBvazGNKusyv1sf10DFcKUiXpHLGLYMVRXpc7ozZCOONX pXP3oHqCkDVMUo7N2pTVx9TfKfc8vJd3evn8JdFkLK4Of2NtTtXeCEhnWlfgjdmL Kz7tVLgR3MW0Azhr1mUMvPQUODa6GMB8mUjq5hqiaSAKEYmibO0= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:01 2025 by rpki-client