This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: JP3PQGH+04Fmt4sTdiB6sij2neFlr2TEDwjVzRDpmlc= Subject key identifier: 28:94:6D:06:DA:FF:9A:34:57:3E:4C:8B:70:23:AB:6D:14:10:17:FF Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 44386F11D76FD9F32D520632ECA1DBBF5C3662B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 01F2 Signing time: Wed 31 Dec 2025 16:11:56 +0000 Manifest this update: Wed 31 Dec 2025 16:06:56 +0000 Manifest next update: Sun 04 Jan 2026 02:27:56 +0000 Files and hashes: 1: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: gwBlMBrSpLgsa+ACTv/ospejLYlB+0aLA704l83TjHw=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=) 3: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: TIrKgW93TYeEhKdcGL9Df+rVkbG12AbPWacjCuk866M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 19:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:38:6f:11:d7:6f:d9:f3:2d:52:06:32:ec:a1:db:bf:5c:36:62:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Dec 31 16:06:56 2025 GMT Not After : Jan 4 02:27:56 2026 GMT Subject: CN=28946D06DAFF9A34573E4C8B7023AB6D141017FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:61:89:43:e6:ac:a0:3c:5f:e6:67:84:c7: 1b:1a:e9:41:1e:30:3b:49:8d:2a:52:df:fb:3b:42: 1c:f8:33:ce:28:aa:d8:60:3b:12:26:e7:6d:48:d9: 76:f4:a2:ca:ef:be:bf:68:3c:57:6f:4d:31:48:2b: 30:6e:c9:be:aa:8e:16:7d:87:fb:fe:64:82:11:4a: 21:e5:b2:af:a1:d8:68:43:87:5a:6f:80:6b:29:18: ff:ec:3e:a4:9b:2b:da:9f:51:ba:6d:8e:67:59:80: c9:84:7c:4c:4e:5e:25:57:2b:e2:36:9b:41:0a:34: e5:0e:b2:10:15:7b:9e:f9:7d:2b:b5:88:fd:47:4a: 16:1b:f6:99:8e:39:cf:11:bf:e4:10:e3:7d:c2:6d: 69:37:d4:fc:f2:c6:b9:62:50:da:60:b7:73:e2:d9: e6:6e:20:0d:80:37:da:ca:c2:5a:59:43:4b:f1:c9: d3:97:c1:b2:70:e3:68:32:fc:db:6a:64:42:8a:e3: 2b:c0:1e:16:71:47:18:80:c8:e5:e4:1c:b2:5c:c6: e0:d8:50:c5:82:25:b9:e4:f1:2c:6b:9b:09:30:68: 1f:8b:20:64:b4:f6:8c:20:13:90:1e:08:3d:2f:45: 70:8e:ca:a4:53:58:bd:fa:84:17:38:ff:4b:1b:de: ca:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:6D:06:DA:FF:9A:34:57:3E:4C:8B:70:23:AB:6D:14:10:17:FF X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:7d:3f:39:44:5b:e3:f2:0e:44:e8:ef:1a:16:22:81:b5:8e: c4:55:be:5b:01:ef:ef:a4:8c:39:c3:d4:66:e2:14:0d:95:f0: cb:dd:80:83:18:ce:2c:96:46:f8:8f:c7:a1:d5:2d:ea:8b:f4: 75:a5:02:a8:69:5c:ee:6d:7b:16:66:99:19:bf:7b:f3:d6:b3: 2d:7b:48:1f:74:7f:51:45:06:6a:5d:66:8d:3f:c6:2a:cb:59: 18:4f:ab:6a:04:3d:04:a8:cc:26:5f:47:97:3c:10:58:4b:da: e4:b3:2c:e8:c0:a3:7d:5f:fd:72:0c:9b:e4:22:53:b1:51:41: 6b:6b:b0:be:81:c9:b8:bc:55:92:16:26:b3:67:e2:ae:a8:02: 04:36:2a:aa:8f:d6:8f:44:c0:bc:f1:7f:b4:9d:34:51:64:bf: da:17:37:ad:ab:7a:1d:b4:0c:3a:4a:12:9c:28:44:e6:a9:a7: 89:72:ff:72:8c:4e:57:fe:50:02:83:2f:04:bc:aa:d8:be:12: 41:62:9e:15:b2:39:2a:c3:61:93:01:d1:6e:37:ae:63:0a:9b: 81:4d:a2:3e:fe:dd:b0:38:9b:a3:ce:70:c1:79:5c:d1:e6:88: bf:00:c3:bc:4d:51:f6:61:fb:f3:57:47:24:6b:7d:a3:bb:65: 6e:57:f2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDhvEddv2fMtUgYy7KHbv1w2YrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTEyMzExNjA2NTZaFw0yNjAxMDQwMjI3NTZaMDMxMTAvBgNV BAMTKDI4OTQ2RDA2REFGRjlBMzQ1NzNFNEM4QjcwMjNBQjZEMTQxMDE3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC152GJQ+asoDxf5meExxsa6UEe MDtJjSpS3/s7Qhz4M84oqthgOxIm521I2Xb0osrvvr9oPFdvTTFIKzBuyb6qjhZ9 h/v+ZIIRSiHlsq+h2GhDh1pvgGspGP/sPqSbK9qfUbptjmdZgMmEfExOXiVXK+I2 m0EKNOUOshAVe575fSu1iP1HShYb9pmOOc8Rv+QQ433CbWk31PzyxrliUNpgt3Pi 2eZuIA2AN9rKwlpZQ0vxydOXwbJw42gy/NtqZEKK4yvAHhZxRxiAyOXkHLJcxuDY UMWCJbnk8SxrmwkwaB+LIGS09owgE5AeCD0vRXCOyqRTWL36hBc4/0sb3spvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKJRtBtr/mjRXPkyLcCOrbRQQF/8wHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ19PzlEW+PyDkTo7xoWIoG1jsRVvlsB7++k jDnD1GbiFA2V8MvdgIMYziyWRviPx6HVLeqL9HWlAqhpXO5texZmmRm/e/PWsy17 SB90f1FFBmpdZo0/xirLWRhPq2oEPQSozCZfR5c8EFhL2uSzLOjAo31f/XIMm+Qi U7FRQWtrsL6Bybi8VZIWJrNn4q6oAgQ2KqqP1o9EwLzxf7SdNFFkv9oXN62reh20 DDpKEpwoROapp4ly/3KMTlf+UAKDLwS8qti+EkFinhWyOSrDYZMB0W43rmMKm4FN oj7+3bA4m6POcMF5XNHmiL8Aw7xNUfZh+/NXRyRrfaO7ZW5X8mI= -----END CERTIFICATE-----Generated at Wed Dec 31 20:10:33 2025 by rpki-client