This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft File: D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft (raw, json) Hash identifier: uwuq/pNb48GpHaWgOB+OliZOqyG/6CHpvFwEmPxvuK0= Subject key identifier: 47:AC:C1:F9:58:33:F1:F0:E4:11:46:55:6C:71:80:A7:AF:46:3A:89 Authority key identifier: D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 Certificate issuer: /CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Certificate serial: 61A9CECA7CEB53B35EA9C3D058CC7AE8B347A982 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft Manifest number: 01F6 Signing time: Fri 05 Dec 2025 01:21:12 +0000 Manifest this update: Fri 05 Dec 2025 01:16:12 +0000 Manifest next update: Mon 08 Dec 2025 11:51:12 +0000 Files and hashes: 1: 32372e3131322e37302e302f32342d3234203d3e203436303633.roa (hash: q2HyhqMcqNKr/1kOvWeC7Bv0LZJy34QkHpHUyM3pSpc=) 2: 32372e3131322e36342e302f32342d3234203d3e203436303633.roa (hash: o9JWChuMppyDlwbbP2wl7a1BlqxO7U1pMNyySwQnepQ=) 3: 32372e3131322e37312e302f32342d3234203d3e203436303633.roa (hash: CFppjbu+j9vN8xa/dDTxQelhICtYUCoA83bushfIr2o=) 4: 32372e3131322e36382e302f32342d3234203d3e203436303633.roa (hash: 6MS+hpY8AAAW2vT3UGxha7ncda+Mv46TSI1kZZNVt4E=) 5: D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl (hash: LYNAheYClUNBIUN9gynRu8bdnuzh82LIafgTYAko7kc=) 6: 32372e3131322e36392e302f32342d3234203d3e203436303633.roa (hash: 2I1hpf1XM01hpFE4apAQaCDZ2SJv/6pMmkxZHdmPTWg=) 7: 32372e3131322e36372e302f32342d3234203d3e203436303633.roa (hash: YgxXSgVa+uYH+lGkHHbZfilfnfqWJl6PwLSpZ8P3sTU=) 8: 32372e3131322e36352e302f32342d3234203d3e203436303633.roa (hash: Pkdf7SsfkpbiJuE6kdJ40FkL/ss5mA3yBuB75QVgOO8=) 9: 32372e3131322e36362e302f32342d3234203d3e203436303633.roa (hash: aYHcfPnNR/c6q1Gn6jLMY340l5EssmEBF13l3KbonYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 11:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a9:ce:ca:7c:eb:53:b3:5e:a9:c3:d0:58:cc:7a:e8:b3:47:a9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2A6ABCA1EF89725109CBEA5D42E683C95925312 Validity Not Before: Dec 5 01:16:12 2025 GMT Not After : Dec 8 11:51:12 2025 GMT Subject: CN=47ACC1F95833F1F0E41146556C7180A7AF463A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:a9:8a:91:98:b8:6a:27:94:34:c6:4c:a2: 32:b2:c1:1d:d5:2a:fe:9c:f4:c8:7f:90:38:2b:0f: 24:33:68:11:61:3d:77:e6:79:80:78:37:b8:e5:d0: 76:44:71:9c:24:38:f4:a1:7a:12:83:b6:cc:e1:25: c1:dc:43:63:60:d6:88:42:66:ae:8b:7d:f7:aa:16: df:84:c3:f4:10:91:54:6e:1b:f1:d1:40:88:d6:5b: f8:92:95:cd:a1:58:11:a8:cb:b7:30:05:01:eb:1c: 35:3b:93:87:d4:c6:df:f1:aa:69:78:26:ba:54:7c: 81:dc:8f:82:77:43:2f:1b:30:77:26:a6:da:37:c7: 4a:69:2d:a8:59:a1:17:60:7d:ed:e8:2a:2d:a2:72: 0f:c7:93:98:31:b0:68:cc:9f:43:51:f6:33:19:23: 27:a2:b5:3a:7f:94:7e:ca:76:27:56:c3:55:85:47: cf:1d:02:f9:91:3a:c2:9a:32:4e:12:71:98:4d:7e: 8b:9a:1f:be:a6:50:49:ed:4b:dc:bc:fb:ea:f9:9f: 74:d4:f5:89:8d:1e:7e:88:b6:48:08:18:65:d6:39: 85:f9:7c:73:6b:39:57:da:7c:5e:d2:66:82:5b:b5: a1:72:22:24:06:b9:a7:e0:26:cf:10:b5:ab:54:a4: 93:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AC:C1:F9:58:33:F1:F0:E4:11:46:55:6C:71:80:A7:AF:46:3A:89 X509v3 Authority Key Identifier: keyid:D2:A6:AB:CA:1E:F8:97:25:10:9C:BE:A5:D4:2E:68:3C:95:92:53:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2A6ABCA1EF89725109CBEA5D42E683C95925312.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ead1e16a-0a4d-44b1-9845-9c0cd7a6f38f/0/D2A6ABCA1EF89725109CBEA5D42E683C95925312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:95:8e:a0:5b:8b:f7:41:d1:2b:00:84:f4:72:0c:64:f9:e7: cb:3b:13:83:5a:58:ac:6c:8c:80:8f:1a:28:34:af:80:fd:24: 60:b6:38:24:8d:32:af:d7:5d:77:c2:d0:13:f5:43:78:98:3d: d1:f8:c3:8e:b2:64:2e:07:a7:09:2e:90:6e:ce:e6:08:bf:1a: d9:9e:21:8b:7f:d6:f4:1a:82:a0:d9:5c:2a:4b:e9:dd:2c:1e: e5:13:d3:65:cd:dd:67:55:b0:1e:fe:2a:b7:e4:f4:be:93:5c: 56:41:40:cb:ee:91:ed:14:0d:cd:77:a3:11:10:a3:e7:7f:02: 32:70:57:85:d1:a2:c7:7c:66:6f:11:26:85:ee:e7:21:91:28: 84:4a:16:34:b3:c9:80:0f:e0:68:7e:f0:11:b5:57:47:4d:78: 47:ee:b2:10:71:83:85:f4:af:4b:54:40:70:aa:25:27:d2:46: a7:25:18:6d:12:a0:5d:15:31:da:0f:81:2f:6f:43:0b:03:18: ba:4f:53:25:b5:7b:6b:3c:49:c1:5d:ff:f7:6d:63:86:fb:a2: 94:7a:59:ea:2e:83:96:43:03:b3:7c:e9:be:b4:c6:6c:7a:8b: 76:a6:10:7a:f9:89:a1:ee:8d:04:bb:a2:b5:2d:28:d2:96:ff: 38:66:e9:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYanOynzrU7NeqcPQWMx66LNHqYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5 NTkyNTMxMjAeFw0yNTEyMDUwMTE2MTJaFw0yNTEyMDgxMTUxMTJaMDMxMTAvBgNV BAMTKDQ3QUNDMUY5NTgzM0YxRjBFNDExNDY1NTZDNzE4MEE3QUY0NjNBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVamKkZi4aieUNMZMojKywR3V Kv6c9Mh/kDgrDyQzaBFhPXfmeYB4N7jl0HZEcZwkOPShehKDtszhJcHcQ2Ng1ohC Zq6LffeqFt+Ew/QQkVRuG/HRQIjWW/iSlc2hWBGoy7cwBQHrHDU7k4fUxt/xqml4 JrpUfIHcj4J3Qy8bMHcmpto3x0ppLahZoRdgfe3oKi2icg/Hk5gxsGjMn0NR9jMZ IyeitTp/lH7KdidWw1WFR88dAvmROsKaMk4ScZhNfouaH76mUEntS9y8++r5n3TU 9YmNHn6ItkgIGGXWOYX5fHNrOVfafF7SZoJbtaFyIiQGuafgJs8QtatUpJNHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR6zB+Vgz8fDkEUZVbHGAp69GOokwHwYDVR0j BBgwFoAU0qaryh74lyUQnL6l1C5oPJWSUxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YWQxZTE2YS0wYTRkLTQ0YjEtOTg0NS05YzBjZDdhNmYzOGYvMC9EMkE2QUJDQTFF Rjg5NzI1MTA5Q0JFQTVENDJFNjgzQzk1OTI1MzEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4M0M5NTky NTMxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWFkMWUxNmEtMGE0ZC00NGIxLTk4 NDUtOWMwY2Q3YTZmMzhmLzAvRDJBNkFCQ0ExRUY4OTcyNTEwOUNCRUE1RDQyRTY4 M0M5NTkyNTMxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCVjqBbi/dB0SsAhPRyDGT558s7E4NaWKxs jICPGig0r4D9JGC2OCSNMq/XXXfC0BP1Q3iYPdH4w46yZC4HpwkukG7O5gi/Gtme IYt/1vQagqDZXCpL6d0sHuUT02XN3WdVsB7+Krfk9L6TXFZBQMvuke0UDc13oxEQ o+d/AjJwV4XRosd8Zm8RJoXu5yGRKIRKFjSzyYAP4Gh+8BG1V0dNeEfushBxg4X0 r0tUQHCqJSfSRqclGG0SoF0VMdoPgS9vQwsDGLpPUyW1e2s8ScFd//dtY4b7opR6 Weoug5ZDA7N86b60xmx6i3amEHr5iaHujQS7orUtKNKW/zhm6fQ= -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:32 2025 by rpki-client