This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: QCB213LxeX0+Szu5ZngkCPTHNNeI++fMZniosdaD9Rk= Subject key identifier: D8:FF:28:EF:32:DF:C0:FD:BC:15:CE:1A:CC:1B:BD:0F:F9:33:A2:A2 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 7C9C3173ABE6EBE954CF28A132594D1DD4B0295A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04CE Signing time: Tue 16 Dec 2025 00:21:08 +0000 Manifest this update: Tue 16 Dec 2025 00:16:08 +0000 Manifest next update: Fri 19 Dec 2025 07:00:08 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 2: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 3: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: yy6kwjmtp/vUlSLKgoUhfkTQZhAfTXiu6IM6y4fkHiA=) 4: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 07:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:9c:31:73:ab:e6:eb:e9:54:cf:28:a1:32:59:4d:1d:d4:b0:29:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Dec 16 00:16:08 2025 GMT Not After : Dec 19 07:00:08 2025 GMT Subject: CN=D8FF28EF32DFC0FDBC15CE1ACC1BBD0FF933A2A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e2:c9:a9:36:cb:75:a3:90:45:bd:07:71:66: 78:6a:de:b3:c7:56:a0:56:82:89:9f:6c:a0:36:80: 4f:2b:e8:40:a2:38:d7:ad:b5:d6:a2:60:ea:8f:9f: c8:9a:29:dc:fb:ae:d9:ac:03:75:3d:df:4d:3f:38: 53:fc:80:2f:ed:d3:44:02:84:b7:53:ab:fc:2c:e6: 59:6c:a7:99:e3:2d:00:a3:69:ee:34:eb:cb:fa:43: cb:6f:bb:39:f5:f7:2c:9b:db:15:fb:60:6e:20:67: ce:f8:a0:3e:4f:9b:a6:2c:06:fa:8a:9a:e1:71:58: 24:67:be:d3:25:d9:a4:80:de:8f:ab:a4:b9:b5:2d: 30:12:86:8e:f9:f7:c7:84:39:cd:68:a2:fb:dd:78: e8:5b:91:7f:a6:c2:25:2f:06:75:b5:1d:39:41:f2: e4:ab:1b:99:a8:d1:b3:98:9d:5d:cd:e4:42:2c:bb: 12:05:5c:2f:11:0d:57:4b:18:35:fd:98:88:e8:bd: d0:20:eb:1d:19:64:f9:21:04:a8:ac:d6:13:06:7c: 38:30:70:ae:a2:ce:c7:bb:65:64:ad:e3:0c:4f:45: 85:be:fb:3a:13:b7:19:05:43:a9:31:95:6c:de:43: 45:08:c2:de:24:89:43:b8:81:51:11:1b:ae:0c:37: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FF:28:EF:32:DF:C0:FD:BC:15:CE:1A:CC:1B:BD:0F:F9:33:A2:A2 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ff:d3:5d:2a:63:3c:af:31:39:85:e6:9f:4e:f7:ca:d1:00: 9a:63:6e:ab:ad:da:b7:50:6d:54:ca:6f:e8:dc:f9:fc:18:17: 16:7d:07:d7:b2:6c:49:88:fc:3a:20:5e:be:4b:73:76:d9:e2: 14:c0:1e:a9:0c:d9:5e:df:bd:7a:73:8b:de:fc:bf:3e:be:7f: 32:be:4c:26:92:2d:38:5c:c5:48:2e:21:fd:5d:cb:22:de:0d: 9c:c2:b1:64:de:99:f5:1a:de:13:11:7c:62:7a:ab:e1:a8:6f: 0a:18:c0:b7:13:e8:ba:14:f7:b2:fb:12:90:e3:b7:2e:77:f2: 00:ab:be:8a:22:12:7e:1d:57:f4:47:02:46:40:b7:90:eb:36: 63:0e:77:13:5d:02:12:c7:d6:e7:7e:50:c1:d6:e3:f5:c9:97: 99:5b:b8:2d:ab:93:3f:d4:25:ee:25:2d:37:7c:8d:f8:11:bd: 57:2c:13:00:2e:db:19:2d:ba:8f:fb:40:06:4b:0c:71:d7:ba: b2:28:6b:fc:a1:7d:5e:32:1b:cf:56:1c:46:a5:32:05:d2:75: 15:d5:2e:7c:60:ce:58:e6:30:e4:a9:de:24:f7:7b:98:c1:60: 6a:62:1d:13:2c:2b:45:91:cc:23:15:48:3e:e5:05:4b:8f:42: c1:b4:56:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfJwxc6vm6+lUzyihMllNHdSwKVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTEyMTYwMDE2MDhaFw0yNTEyMTkwNzAwMDhaMDMxMTAvBgNV BAMTKEQ4RkYyOEVGMzJERkMwRkRCQzE1Q0UxQUNDMUJCRDBGRjkzM0EyQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04smpNst1o5BFvQdxZnhq3rPH VqBWgomfbKA2gE8r6ECiONettdaiYOqPn8iaKdz7rtmsA3U9300/OFP8gC/t00QC hLdTq/ws5llsp5njLQCjae4068v6Q8tvuzn19yyb2xX7YG4gZ874oD5Pm6YsBvqK muFxWCRnvtMl2aSA3o+rpLm1LTASho7598eEOc1oovvdeOhbkX+mwiUvBnW1HTlB 8uSrG5mo0bOYnV3N5EIsuxIFXC8RDVdLGDX9mIjovdAg6x0ZZPkhBKis1hMGfDgw cK6izse7ZWSt4wxPRYW++zoTtxkFQ6kxlWzeQ0UIwt4kiUO4gVERG64MN//dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2P8o7zLfwP28Fc4azBu9D/kzoqIwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB//010qYzyvMTmF5p9O98rRAJpjbqut2rdQ bVTKb+jc+fwYFxZ9B9eybEmI/DogXr5Lc3bZ4hTAHqkM2V7fvXpzi978vz6+fzK+ TCaSLThcxUguIf1dyyLeDZzCsWTemfUa3hMRfGJ6q+GobwoYwLcT6LoU97L7EpDj ty538gCrvooiEn4dV/RHAkZAt5DrNmMOdxNdAhLH1ud+UMHW4/XJl5lbuC2rkz/U Je4lLTd8jfgRvVcsEwAu2xktuo/7QAZLDHHXurIoa/yhfV4yG89WHEalMgXSdRXV LnxgzljmMOSp3iT3e5jBYGpiHRMsK0WRzCMVSD7lBUuPQsG0Vpo= -----END CERTIFICATE-----Generated at Wed Dec 17 17:02:45 2025 by rpki-client