This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: aM06XmY9XYQgagB/NeaMvgoJLL0jK1TfpJVB4gRCAMs= Subject key identifier: B4:41:EA:37:BB:7F:F3:D8:C4:CB:DB:D2:51:7F:0A:06:95:7C:50:53 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 274E2D9E3D362CC662DAE8A3BA898D0C089169C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04C2 Signing time: Tue 18 Nov 2025 08:01:07 +0000 Manifest this update: Tue 18 Nov 2025 07:56:07 +0000 Manifest next update: Fri 21 Nov 2025 18:52:07 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 2: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: EnlFW4KCUnHEUXBsBtACeNyeupFKPCh88qrsPEQfqHw=) 3: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: 6YW7Ywg58/9Y3fL2UyBxi9/3nsJtBUBgtTiZry4s9Zg=) 4: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Nov 2025 18:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4e:2d:9e:3d:36:2c:c6:62:da:e8:a3:ba:89:8d:0c:08:91:69:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Nov 18 07:56:07 2025 GMT Not After : Nov 21 18:52:07 2025 GMT Subject: CN=B441EA37BB7FF3D8C4CBDBD2517F0A06957C5053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c0:4e:80:a3:f1:ca:cb:9a:5e:4c:5b:26:1a: 76:32:3b:f4:6b:e4:d0:61:02:b2:db:d2:e9:55:16: 74:34:d3:e1:d0:0c:28:f7:4f:01:0b:5f:85:ea:b9: 6e:d3:55:0f:61:7c:af:0c:74:47:15:26:50:a3:2b: b9:29:0b:69:34:69:7f:6a:f4:26:cc:b7:6a:21:3a: fc:c6:31:46:9f:6d:d7:68:94:59:a8:81:0a:6c:20: de:73:06:97:b3:b4:2a:61:89:1a:04:63:67:cf:e2: 57:1a:1c:e0:1b:b7:05:54:dc:30:f0:8b:5c:b1:ac: a5:20:7f:4f:93:6b:ea:da:0b:94:44:36:e2:4b:c7: 94:f0:b2:bf:ee:3c:54:de:5c:b6:90:60:c1:95:97: 2c:8a:0c:7e:26:b6:ed:b2:db:e1:6c:96:71:d5:87: 9b:02:dc:0f:8f:81:72:f6:a0:71:16:59:92:97:21: f6:42:81:74:cb:21:17:f4:42:2b:0b:8d:73:a8:5b: 82:1f:10:d1:d3:56:10:2d:a1:58:a1:a9:cf:6d:cd: 23:cb:9d:12:5d:72:63:b4:3f:f9:1b:06:6c:5c:8d: 63:86:83:cd:85:70:35:a7:35:94:4c:6a:3e:8e:98: 4e:21:9b:9a:b9:f1:47:97:c3:11:45:d4:aa:1e:23: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:41:EA:37:BB:7F:F3:D8:C4:CB:DB:D2:51:7F:0A:06:95:7C:50:53 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:9d:5a:91:b2:75:2f:91:a2:d7:5b:36:ae:e5:9a:8c:aa:d1: f6:80:c5:81:7c:f4:b6:13:96:ef:e1:d4:a0:2e:00:1b:58:8f: d0:5a:79:e5:c2:69:f4:6a:bd:de:58:3a:fe:a7:71:e4:e0:3f: 2d:86:2c:86:bc:54:be:87:7f:59:97:2a:8c:99:3a:43:89:f0: 96:4c:d6:54:3c:63:a0:b1:da:53:71:af:0d:02:ef:1f:a2:1e: 17:92:cc:0a:5f:42:74:20:87:a6:e3:a7:14:2a:be:e9:f0:76: 5f:0e:97:d0:5e:78:2a:f7:e4:02:8b:6d:53:ab:c7:00:df:57: 36:0a:67:a0:c0:4b:6b:ba:97:7a:dd:a5:df:db:d2:ff:d0:de: 7c:cb:d2:20:cb:2d:13:a1:34:cd:ea:fa:58:12:5e:d5:ed:3b: 88:63:cb:82:ee:4d:e8:73:e8:0b:ef:0a:d8:d1:73:ca:67:12: f2:c9:fb:dc:7a:91:b8:26:1a:6c:04:af:a7:b7:e3:ae:e7:11: fc:71:9f:11:38:00:de:52:bd:59:b8:6e:d6:c9:30:b7:0e:f5: dd:94:fe:ed:c0:b6:e9:0c:b1:02:e7:8a:97:7f:e0:30:eb:28: c3:42:2e:23:4b:09:ba:9c:78:65:32:dd:8c:0b:c8:60:84:c3: b7:1c:2d:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ04tnj02LMZi2uijuomNDAiRacgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTExMTgwNzU2MDdaFw0yNTExMjExODUyMDdaMDMxMTAvBgNV BAMTKEI0NDFFQTM3QkI3RkYzRDhDNENCREJEMjUxN0YwQTA2OTU3QzUwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDewE6Ao/HKy5peTFsmGnYyO/Rr 5NBhArLb0ulVFnQ00+HQDCj3TwELX4XquW7TVQ9hfK8MdEcVJlCjK7kpC2k0aX9q 9CbMt2ohOvzGMUafbddolFmogQpsIN5zBpeztCphiRoEY2fP4lcaHOAbtwVU3DDw i1yxrKUgf0+Ta+raC5RENuJLx5Twsr/uPFTeXLaQYMGVlyyKDH4mtu2y2+FslnHV h5sC3A+PgXL2oHEWWZKXIfZCgXTLIRf0QisLjXOoW4IfENHTVhAtoVihqc9tzSPL nRJdcmO0P/kbBmxcjWOGg82FcDWnNZRMaj6OmE4hm5q58UeXwxFF1KoeI7+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtEHqN7t/89jEy9vSUX8KBpV8UFMwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANSdWpGydS+RotdbNq7lmoyq0faAxYF89LYT lu/h1KAuABtYj9BaeeXCafRqvd5YOv6nceTgPy2GLIa8VL6Hf1mXKoyZOkOJ8JZM 1lQ8Y6Cx2lNxrw0C7x+iHheSzApfQnQgh6bjpxQqvunwdl8Ol9BeeCr35AKLbVOr xwDfVzYKZ6DAS2u6l3rdpd/b0v/Q3nzL0iDLLROhNM3q+lgSXtXtO4hjy4LuTehz 6AvvCtjRc8pnEvLJ+9x6kbgmGmwEr6e3467nEfxxnxE4AN5SvVm4btbJMLcO9d2U /u3AtukMsQLnipd/4DDrKMNCLiNLCbqceGUy3YwLyGCEw7ccLR8= -----END CERTIFICATE-----Generated at Tue Nov 18 17:48:48 2025 by rpki-client