This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: 2+LT8Aw2Az7OwnLIBs0E+K94M3wmHoqpbKK5AFlK57A= Subject key identifier: 32:18:A8:24:7A:98:64:1E:2D:39:0B:E4:69:E9:89:DD:B1:D5:2F:84 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 3FD8FB561DD632B99D05B89DB683024A7ACE9613 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 020D Signing time: Wed 17 Dec 2025 17:30:44 +0000 Manifest this update: Wed 17 Dec 2025 17:25:44 +0000 Manifest next update: Sat 20 Dec 2025 22:33:44 +0000 Files and hashes: 1: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 2: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: 4VfEznzqt+C7oRzHN8fB03YyoVbAzv96prR9r0yEGUY=) 3: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) 4: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 5: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 22:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d8:fb:56:1d:d6:32:b9:9d:05:b8:9d:b6:83:02:4a:7a:ce:96:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Dec 17 17:25:44 2025 GMT Not After : Dec 20 22:33:44 2025 GMT Subject: CN=3218A8247A98641E2D390BE469E989DDB1D52F84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7c:f0:97:c2:45:cf:d8:a0:55:df:6c:5d:b2: 26:6d:2f:a5:6a:19:b5:30:8d:10:96:ed:fb:81:6f: d8:be:81:97:56:0b:c2:0f:cb:99:03:55:3d:bc:20: e3:a4:7a:89:b9:ee:d3:fe:f8:52:df:31:9e:0b:0e: ba:25:1a:48:dd:b5:af:dd:43:e4:d6:84:f6:1f:93: b8:02:3e:79:d4:af:cb:43:d3:4c:dd:43:a6:7b:ce: ed:d0:81:dc:04:4d:70:60:36:f3:b4:b6:ea:f5:ea: 69:ef:87:60:f6:f3:e0:90:63:15:b1:2a:21:f5:1c: 8b:f0:c4:57:8f:12:54:21:04:3a:ad:70:82:9a:c6: c3:66:db:3b:b4:d9:0a:19:3e:36:f2:56:17:38:bb: 8e:69:9e:2b:75:c3:5d:e6:c4:a7:e3:60:2c:28:e3: e5:50:ae:71:be:6b:1d:75:db:3f:86:6c:b1:81:06: be:76:e3:7d:b1:b7:ad:b2:20:d0:04:f7:50:af:e9: 09:75:d7:35:8f:fe:a7:4e:95:a1:0a:86:c2:f0:6d: d5:16:77:09:dc:01:de:9f:4b:14:15:38:1c:01:ed: 32:85:4e:9d:88:de:3b:7a:88:f5:56:72:63:9a:67: 82:e6:ef:92:10:43:b7:c1:f7:67:32:78:53:a8:dc: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:18:A8:24:7A:98:64:1E:2D:39:0B:E4:69:E9:89:DD:B1:D5:2F:84 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5d:c4:1b:9f:a2:f9:be:d2:9b:c4:e9:fc:e2:32:66:e9:df: ae:85:bd:f7:b4:11:48:ab:42:a7:68:f1:8c:90:03:1d:62:5b: da:d2:68:8f:3a:f6:20:38:09:f7:84:49:64:7c:71:97:45:33: 55:29:85:5d:08:4b:c4:25:9e:33:69:17:99:9d:09:b0:89:da: 2d:27:a6:b7:ba:67:4e:f0:45:99:6c:45:88:ef:77:a1:8d:1c: 34:7f:13:3e:36:65:60:c3:ba:0a:77:dc:01:46:7d:9d:55:fb: 16:da:87:24:88:02:f7:d0:66:94:2f:f3:92:3e:ea:00:59:d5: d6:98:32:bd:25:42:10:a8:83:95:b2:28:be:0e:14:4b:83:4d: 9d:a8:f9:05:2b:2d:2a:9d:64:c1:11:39:4e:a6:18:0a:42:7c: a3:76:d8:96:f3:2b:ea:d7:9b:e0:3b:3d:04:e2:d4:aa:cd:a1: 9e:b4:1e:26:2d:5e:1f:d9:c7:c9:ca:6c:76:a8:d9:be:75:01: 58:0f:c4:3a:46:f4:30:74:8a:5c:75:39:3f:8a:13:45:39:1b: 8e:30:96:10:ad:d0:73:23:b3:2e:7c:e5:b8:36:01:84:16:1f: da:51:e1:09:e4:13:de:c0:8b:1b:bf:d4:bb:fb:d4:4b:cf:56: e6:8d:52:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP9j7Vh3WMrmdBbidtoMCSnrOlhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTEyMTcxNzI1NDRaFw0yNTEyMjAyMjMzNDRaMDMxMTAvBgNV BAMTKDMyMThBODI0N0E5ODY0MUUyRDM5MEJFNDY5RTk4OUREQjFENTJGODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfPCXwkXP2KBV32xdsiZtL6Vq GbUwjRCW7fuBb9i+gZdWC8IPy5kDVT28IOOkeom57tP++FLfMZ4LDrolGkjdta/d Q+TWhPYfk7gCPnnUr8tD00zdQ6Z7zu3QgdwETXBgNvO0tur16mnvh2D28+CQYxWx KiH1HIvwxFePElQhBDqtcIKaxsNm2zu02QoZPjbyVhc4u45pnit1w13mxKfjYCwo 4+VQrnG+ax112z+GbLGBBr52432xt62yINAE91Cv6Ql11zWP/qdOlaEKhsLwbdUW dwncAd6fSxQVOBwB7TKFTp2I3jt6iPVWcmOaZ4Lm75IQQ7fB92cyeFOo3L33AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhioJHqYZB4tOQvkaemJ3bHVL4QwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNdxBufovm+0pvE6fziMmbp366Fvfe0EUir Qqdo8YyQAx1iW9rSaI869iA4CfeESWR8cZdFM1UphV0IS8QlnjNpF5mdCbCJ2i0n pre6Z07wRZlsRYjvd6GNHDR/Ez42ZWDDugp33AFGfZ1V+xbahySIAvfQZpQv85I+ 6gBZ1daYMr0lQhCog5WyKL4OFEuDTZ2o+QUrLSqdZMEROU6mGApCfKN22JbzK+rX m+A7PQTi1KrNoZ60HiYtXh/Zx8nKbHao2b51AVgPxDpG9DB0ilx1OT+KE0U5G44w lhCt0HMjsy585bg2AYQWH9pR4QnkE97Aixu/1Lv71EvPVuaNUmg= -----END CERTIFICATE-----Generated at Thu Dec 18 19:09:35 2025 by rpki-client