This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: abZe+VQWjsp2VwAb04jYx8/9G6BV7rV7MWjiSQ523y8= Subject key identifier: 6D:B1:67:75:54:C5:CE:B0:14:6F:B8:72:E9:C2:E9:9B:AD:18:B1:25 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 4BE976E612DE11D1D7E156CD1CB94053185BBD06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04CA Signing time: Sat 06 Dec 2025 22:11:05 +0000 Manifest this update: Sat 06 Dec 2025 22:06:05 +0000 Manifest next update: Wed 10 Dec 2025 02:42:05 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 2: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 3: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 4: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: tDgdNsdrRt1gS4xgTg/PUD4CvSfKwqXtAWZN2e622nc=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e9:76:e6:12:de:11:d1:d7:e1:56:cd:1c:b9:40:53:18:5b:bd:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Dec 6 22:06:05 2025 GMT Not After : Dec 10 02:42:05 2025 GMT Subject: CN=6DB1677554C5CEB0146FB872E9C2E99BAD18B125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:2c:40:96:6b:26:8d:00:e1:5b:1d:da:38: 00:29:ae:39:87:3c:6c:be:2f:ef:64:9d:e9:a2:cd: c8:b5:4e:cb:9c:fa:b7:fb:cc:c3:a9:95:64:5a:b0: 13:06:fe:26:21:df:3a:03:2e:8e:26:b2:e9:62:da: 56:b7:a8:5e:31:54:03:5b:6e:fe:63:91:9c:69:cb: 4f:21:e0:bd:6a:e6:b2:ba:d9:dc:87:45:c0:6a:9c: d6:ee:a2:68:de:f9:12:15:a1:36:03:a1:71:44:48: 71:0f:b3:8f:45:8f:93:d6:fa:8e:a6:04:e0:1a:cc: ab:a5:6b:07:60:5b:8f:a8:b6:f1:19:e6:50:a8:4d: a8:75:f4:39:c2:37:bf:79:d8:e6:a7:e1:e8:35:03: 6f:9a:ed:93:2a:7d:8c:68:21:2f:7e:4e:d1:2d:06: 68:9c:8c:0c:b4:bc:c5:a8:9d:39:13:d7:6d:4c:af: 3e:0f:d6:0e:3a:dd:57:30:40:62:b1:d3:03:5b:d2: cf:a8:d7:c2:b7:be:ad:5e:20:f0:fa:f3:ab:50:ed: b4:9d:0a:a4:99:5f:70:17:49:78:b6:9d:03:84:d2: 90:24:84:95:98:39:d9:8a:1d:fe:38:56:b0:45:8a: e0:e7:dc:d8:1d:fd:b4:ef:d3:d0:4c:12:9e:32:22: 05:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:67:75:54:C5:CE:B0:14:6F:B8:72:E9:C2:E9:9B:AD:18:B1:25 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:7d:89:b5:80:da:41:50:ad:c3:16:4c:79:e1:28:ad:9a:85: 9b:e7:cb:42:f6:23:29:37:96:99:27:53:61:a3:f0:88:17:ed: c0:f0:59:9b:31:01:0d:4a:12:10:6a:4b:16:e2:ce:14:5f:67: 26:81:39:b9:5a:b4:84:7f:d7:01:3f:2e:ac:55:05:4c:6d:21: 4b:9c:09:c9:7d:11:a4:2d:18:5a:25:ac:37:c6:26:be:ba:2c: 90:b3:e4:f6:99:80:50:25:da:7d:66:e7:f3:a1:c1:e7:ad:80: 9a:4f:f7:a4:06:9e:6d:15:75:a4:fd:06:7f:62:2c:f8:a6:54: 73:30:a3:89:02:f5:b4:e8:a5:af:af:25:ce:ea:52:f9:db:c4: cb:76:da:11:df:43:a2:d3:e7:c3:55:8b:b1:7a:61:d6:57:c6: fd:8b:9b:a2:62:c0:fa:27:70:77:96:3a:48:00:6c:87:2f:6f: b8:ad:15:c9:18:fc:86:af:84:e8:1c:5c:2d:a2:34:2e:b4:e1: d3:15:9e:cc:38:37:53:61:e1:54:fa:c5:b3:fa:2b:41:ee:a5: 5b:f3:14:a9:dd:b7:44:d8:ac:3a:8a:e2:97:25:8e:71:7d:65: 5d:37:4f:4c:06:34:c9:fc:e5:9b:f2:02:e9:58:b8:57:8d:f4: d4:f9:69:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS+l25hLeEdHX4VbNHLlAUxhbvQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTEyMDYyMjA2MDVaFw0yNTEyMTAwMjQyMDVaMDMxMTAvBgNV BAMTKDZEQjE2Nzc1NTRDNUNFQjAxNDZGQjg3MkU5QzJFOTlCQUQxOEIxMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fyxAlmsmjQDhWx3aOAAprjmH PGy+L+9knemizci1Tsuc+rf7zMOplWRasBMG/iYh3zoDLo4msuli2la3qF4xVANb bv5jkZxpy08h4L1q5rK62dyHRcBqnNbuomje+RIVoTYDoXFESHEPs49Fj5PW+o6m BOAazKulawdgW4+otvEZ5lCoTah19DnCN7952Oan4eg1A2+a7ZMqfYxoIS9+TtEt BmicjAy0vMWonTkT121Mrz4P1g463VcwQGKx0wNb0s+o18K3vq1eIPD686tQ7bSd CqSZX3AXSXi2nQOE0pAkhJWYOdmKHf44VrBFiuDn3Ngd/bTv09BMEp4yIgXbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbbFndVTFzrAUb7hy6cLpm60YsSUwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK99ibWA2kFQrcMWTHnhKK2ahZvny0L2Iyk3 lpknU2Gj8IgX7cDwWZsxAQ1KEhBqSxbizhRfZyaBOblatIR/1wE/LqxVBUxtIUuc Ccl9EaQtGFolrDfGJr66LJCz5PaZgFAl2n1m5/OhweetgJpP96QGnm0VdaT9Bn9i LPimVHMwo4kC9bTopa+vJc7qUvnbxMt22hHfQ6LT58NVi7F6YdZXxv2Lm6JiwPon cHeWOkgAbIcvb7itFckY/IavhOgcXC2iNC604dMVnsw4N1Nh4VT6xbP6K0HupVvz FKndt0TYrDqK4pcljnF9ZV03T0wGNMn85ZvyAulYuFeN9NT5aUQ= -----END CERTIFICATE-----Generated at Sun Dec 7 06:41:28 2025 by rpki-client