This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: lTz1Gwd0ctWx3wVf2wHmazcFjVoTL220nTyWdwlYpWg= Subject key identifier: AB:7F:06:11:43:EE:89:51:61:F4:EF:AF:BA:20:74:2E:98:34:2C:E1 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 5EE1E6ABA59E8A5154412ADEC7CE7546B9D1FA37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 01F1 Signing time: Thu 18 Dec 2025 00:51:12 +0000 Manifest this update: Thu 18 Dec 2025 00:46:12 +0000 Manifest next update: Sun 21 Dec 2025 02:56:12 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: xVPzWw49u77A9U3iAw+6yeN6mjqQRWwwzxFFQo0y4Iw=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: PrW1B+JOk51E9zyJqPaIkQOhvDojGNHgAHNsvo2TOSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 02:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e1:e6:ab:a5:9e:8a:51:54:41:2a:de:c7:ce:75:46:b9:d1:fa:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Dec 18 00:46:12 2025 GMT Not After : Dec 21 02:56:12 2025 GMT Subject: CN=AB7F061143EE895161F4EFAFBA20742E98342CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cb:45:c1:26:70:b5:34:e0:88:ed:8b:06:17: bf:40:79:93:1f:5b:57:15:c6:25:38:78:2d:93:fa: fa:33:9c:04:00:62:ed:8b:45:40:79:c8:c8:ff:7c: d5:ec:1a:de:03:b1:a0:d0:88:dd:71:eb:15:9a:93: 87:03:9b:ee:49:59:c7:bc:79:92:46:58:31:83:89: f4:fd:ef:80:56:ec:e0:13:64:7c:a9:29:e7:f5:d7: 2d:0f:03:b2:72:64:6d:2e:0e:01:6c:84:e7:37:b1: 25:16:3a:c9:98:12:5b:4d:ba:09:36:63:73:a5:cd: 72:2d:01:68:9d:dd:d3:7c:fe:2c:d6:9d:65:a0:10: 83:57:99:82:88:b6:a8:d7:df:32:c4:cb:be:88:b5: 6f:c8:c1:b7:14:69:30:91:7f:4c:58:fa:16:86:83: d7:9b:25:fc:c2:0e:72:9c:00:0e:f8:3d:35:a4:bc: 44:64:84:31:d8:3e:53:05:1c:5d:a9:dd:06:af:f7: 9c:40:57:a3:97:36:38:83:25:77:7d:10:ef:ea:c7: 14:bf:7b:64:64:45:b5:46:e8:22:64:f9:9f:00:c1: fe:9a:8c:f3:e3:2a:4a:5e:f8:9d:1f:f7:34:a2:11: b0:b9:62:1c:00:8e:e0:95:78:94:c7:7d:53:67:63: da:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7F:06:11:43:EE:89:51:61:F4:EF:AF:BA:20:74:2E:98:34:2C:E1 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:3a:bf:62:bd:bd:a2:8c:8f:c4:27:dc:ac:84:bf:6c:4d:2e: e3:0c:66:1e:8b:a2:4f:4c:91:94:ff:1f:2e:ca:b1:82:6b:9e: b4:af:94:6a:6e:6c:31:80:93:69:c8:31:da:b9:1e:c3:9b:dd: 27:0f:66:7a:45:05:3a:d3:c8:a2:ab:93:cd:08:aa:15:d0:08: 6a:f5:75:b6:eb:64:ce:f9:24:3f:92:54:57:c5:9e:73:3b:63: 15:dd:a3:04:47:0e:25:8d:55:0b:a7:c4:9b:e5:e7:57:35:f2: 21:2c:a3:56:f3:9b:9a:0f:b1:5b:67:4e:d0:3a:86:04:be:1f: 80:88:1d:06:e9:6b:a8:6b:e5:36:0d:69:ef:d5:b2:90:75:8e: 4a:5d:f3:79:9a:92:ae:02:e4:a1:23:f9:c3:46:2f:7f:3c:45: 53:7e:31:74:3a:1f:0e:2c:f7:85:81:fe:d0:b6:af:f3:87:0b: e5:f0:39:5d:38:dc:ec:0b:7f:e5:8e:2c:07:44:77:b9:a0:62: 5d:34:23:e5:0c:0d:32:92:cd:ff:63:78:e6:5f:c6:38:0b:ed: e1:56:30:c3:c6:52:b5:0c:d7:5f:6d:4e:29:e7:22:4d:4a:01: ea:47:62:61:07:bb:63:a6:eb:35:31:90:2d:70:20:61:25:a2: 88:c2:bf:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXuHmq6WeilFUQSrex851RrnR+jcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNTEyMTgwMDQ2MTJaFw0yNTEyMjEwMjU2MTJaMDMxMTAvBgNV BAMTKEFCN0YwNjExNDNFRTg5NTE2MUY0RUZBRkJBMjA3NDJFOTgzNDJDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKy0XBJnC1NOCI7YsGF79AeZMf W1cVxiU4eC2T+voznAQAYu2LRUB5yMj/fNXsGt4DsaDQiN1x6xWak4cDm+5JWce8 eZJGWDGDifT974BW7OATZHypKef11y0PA7JyZG0uDgFshOc3sSUWOsmYEltNugk2 Y3OlzXItAWid3dN8/izWnWWgEINXmYKItqjX3zLEy76ItW/IwbcUaTCRf0xY+haG g9ebJfzCDnKcAA74PTWkvERkhDHYPlMFHF2p3Qav95xAV6OXNjiDJXd9EO/qxxS/ e2RkRbVG6CJk+Z8Awf6ajPPjKkpe+J0f9zSiEbC5YhwAjuCVeJTHfVNnY9pLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq38GEUPuiVFh9O+vuiB0Lpg0LOEwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD46v2K9vaKMj8Qn3KyEv2xNLuMMZh6Lok9M kZT/Hy7KsYJrnrSvlGpubDGAk2nIMdq5HsOb3ScPZnpFBTrTyKKrk80IqhXQCGr1 dbbrZM75JD+SVFfFnnM7YxXdowRHDiWNVQunxJvl51c18iEso1bzm5oPsVtnTtA6 hgS+H4CIHQbpa6hr5TYNae/VspB1jkpd83makq4C5KEj+cNGL388RVN+MXQ6Hw4s 94WB/tC2r/OHC+XwOV043OwLf+WOLAdEd7mgYl00I+UMDTKSzf9jeOZfxjgL7eFW MMPGUrUM119tTinnIk1KAepHYmEHu2Om6zUxkC1wIGEloojCv4o= -----END CERTIFICATE-----Generated at Thu Dec 18 05:40:28 2025 by rpki-client