This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: dyXcsMe2LyQhm/rOC44hYk4E+Cl1aqH0x3Ux8YuthmI= Subject key identifier: AF:C6:9D:40:83:3C:72:D1:BC:BA:0A:34:79:E3:22:33:6C:B7:F8:2F Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 23498286806055B771BF47FCF152FEAEA9C08D2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 052F Signing time: Sat 06 Dec 2025 16:12:14 +0000 Manifest this update: Sat 06 Dec 2025 16:07:14 +0000 Manifest next update: Tue 09 Dec 2025 23:48:14 +0000 Files and hashes: 1: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 2: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: iK9IBqq68J5G5bjuOFHNhis+wS0gvVKpx1knImEIF1s=) 3: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:49:82:86:80:60:55:b7:71:bf:47:fc:f1:52:fe:ae:a9:c0:8d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Dec 6 16:07:14 2025 GMT Not After : Dec 9 23:48:14 2025 GMT Subject: CN=AFC69D40833C72D1BCBA0A3479E322336CB7F82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:2b:20:95:e6:21:e5:93:a8:41:7a:b8:c8:1c: 17:9c:80:b6:d5:a8:e3:5b:9c:ff:71:c4:01:05:93: 5a:c1:58:99:97:79:3d:fe:cb:ae:ce:bd:0d:35:42: ad:b4:fe:63:47:a9:f9:5e:4d:12:e3:11:5c:ed:19: 97:b8:43:c8:5e:45:66:6a:1a:6a:8a:8e:09:28:75: d9:b3:95:fb:2b:fe:48:9d:54:2b:92:5d:2b:d1:c6: 9f:14:8a:df:77:d2:2c:78:a6:bb:a3:d9:56:22:92: 1d:52:0b:4a:51:a9:60:34:67:26:eb:ec:80:43:62: 38:ea:28:ae:7a:40:9f:96:9b:ca:1f:21:ec:19:90: 61:63:50:12:2c:f8:e7:1e:06:33:9d:18:ce:d4:17: 94:f6:39:83:43:dc:b8:fc:7e:aa:4c:e3:6d:ca:0e: 5c:bf:1d:1f:5a:d1:14:9a:87:6b:61:47:cb:10:5c: bc:1f:ad:2c:88:3f:67:ed:4b:ac:60:fd:73:55:84: ba:65:25:fb:29:28:0c:90:19:bc:58:52:f3:e5:d3: f9:4c:31:2d:48:b3:20:ae:bf:ae:88:b2:1a:f2:07: 5b:21:16:4d:b8:d0:00:57:17:99:db:28:b5:66:12: 35:7e:2c:9d:7b:9f:b2:25:59:6c:2b:d9:f9:86:0d: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C6:9D:40:83:3C:72:D1:BC:BA:0A:34:79:E3:22:33:6C:B7:F8:2F X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:64:1d:c2:ad:5f:f0:2a:8b:1f:5d:92:67:fb:10:16:26:6e: 00:58:13:d4:59:5c:1a:4c:51:2a:d6:bc:0c:bd:12:3d:d0:ea: 48:06:5b:9a:a8:21:01:c4:6d:ee:4e:c5:79:5c:2e:1d:d6:3b: 6b:8c:6f:be:65:7d:56:f0:13:5f:58:37:cf:ae:f9:05:ba:61: e3:b3:1b:2a:e0:5f:a1:2d:b2:36:a0:6b:1b:18:0a:ec:68:7d: 36:bc:7d:c4:a6:43:9e:9d:39:af:f0:cf:a3:fb:91:97:c9:92: 7e:78:39:2a:82:ce:50:12:41:79:21:9a:1b:48:02:ab:e6:db: 3c:e3:dc:da:e9:33:7b:dd:e4:a5:af:43:50:5d:1a:60:21:c9: 50:c3:e0:23:dc:66:1b:27:4f:c2:c4:5b:bf:aa:d0:ac:b2:a6: 9b:14:86:8b:aa:30:f0:ae:f7:7f:bf:8a:51:f0:0e:74:44:cb: 5c:8f:a6:dd:c0:e8:fd:4f:eb:e1:0d:d6:ab:98:1a:c1:a0:9a: 84:83:80:5e:69:42:06:52:e1:72:bf:e6:f5:bd:51:a0:be:ce: 4d:fa:1b:64:1f:8e:dc:1a:b0:44:90:28:c8:23:4f:99:84:a6: c8:d3:90:1b:51:e7:e7:7f:70:73:f0:22:8e:93:07:b0:28:5f: 0b:3d:fb:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0mChoBgVbdxv0f88VL+rqnAjS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTEyMDYxNjA3MTRaFw0yNTEyMDkyMzQ4MTRaMDMxMTAvBgNV BAMTKEFGQzY5RDQwODMzQzcyRDFCQ0JBMEEzNDc5RTMyMjMzNkNCN0Y4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKyCV5iHlk6hBerjIHBecgLbV qONbnP9xxAEFk1rBWJmXeT3+y67OvQ01Qq20/mNHqfleTRLjEVztGZe4Q8heRWZq GmqKjgkoddmzlfsr/kidVCuSXSvRxp8Uit930ix4pruj2VYikh1SC0pRqWA0Zybr 7IBDYjjqKK56QJ+Wm8ofIewZkGFjUBIs+OceBjOdGM7UF5T2OYND3Lj8fqpM423K Dly/HR9a0RSah2thR8sQXLwfrSyIP2ftS6xg/XNVhLplJfspKAyQGbxYUvPl0/lM MS1IsyCuv66IshryB1shFk240ABXF5nbKLVmEjV+LJ17n7IlWWwr2fmGDQKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr8adQIM8ctG8ugo0eeMiM2y3+C8wHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhkHcKtX/Aqix9dkmf7EBYmbgBYE9RZXBpM USrWvAy9Ej3Q6kgGW5qoIQHEbe5OxXlcLh3WO2uMb75lfVbwE19YN8+u+QW6YeOz GyrgX6EtsjagaxsYCuxofTa8fcSmQ56dOa/wz6P7kZfJkn54OSqCzlASQXkhmhtI Aqvm2zzj3NrpM3vd5KWvQ1BdGmAhyVDD4CPcZhsnT8LEW7+q0KyyppsUhouqMPCu 93+/ilHwDnREy1yPpt3A6P1P6+EN1quYGsGgmoSDgF5pQgZS4XK/5vW9UaC+zk36 G2QfjtwasESQKMgjT5mEpsjTkBtR5+d/cHPwIo6TB7AoXws9+6A= -----END CERTIFICATE-----Generated at Sun Dec 7 01:09:50 2025 by rpki-client