This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: fYI9nKIgkCBg/7MTQn/Hsef2H7jejc5+Jc/LLBUxhWo= Subject key identifier: 85:B0:1B:9D:AA:BF:B3:5F:3F:3E:0F:CF:05:B0:0A:3B:96:BD:52:0F Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 16BAD753A9ED523C763E55FA3FA0AFC51B05B83E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: EA Signing time: Mon 01 Dec 2025 11:01:07 +0000 Manifest this update: Mon 01 Dec 2025 10:56:07 +0000 Manifest next update: Thu 04 Dec 2025 13:47:07 +0000 Files and hashes: 1: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) 2: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) 3: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: 26X6tEomfg9/U7JnHomHbmS/t0mctp8gbm5MPBc+e1E=) 4: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 13:47:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ba:d7:53:a9:ed:52:3c:76:3e:55:fa:3f:a0:af:c5:1b:05:b8:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Dec 1 10:56:07 2025 GMT Not After : Dec 4 13:47:07 2025 GMT Subject: CN=85B01B9DAABFB35F3F3E0FCF05B00A3B96BD520F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:aa:c4:d9:ad:f0:b7:88:db:91:d5:e8:d4: 8c:59:27:b7:b6:f2:32:4a:4e:e4:3e:ef:a1:47:55: 26:5c:f2:f4:3d:cd:84:58:08:bb:48:f1:bb:38:e2: dd:6a:62:2b:1e:d4:99:17:56:19:9d:97:4d:6f:cd: 3b:f3:4b:98:23:48:9f:c5:39:c0:e9:57:a7:16:9d: ac:01:43:e7:63:72:20:3b:82:2a:59:df:8a:5d:55: 54:55:ec:27:ad:52:50:4c:5d:19:64:24:50:b8:e7: 45:4d:85:fc:78:8e:6c:aa:34:91:2a:18:0e:f1:8d: 93:4c:00:12:7b:a6:7e:7a:02:7a:f0:95:0f:76:43: 95:af:b6:9a:75:ba:a1:f4:86:8a:74:8f:d0:26:f9: 1e:03:89:60:37:13:a7:82:4f:5c:2f:c8:8f:49:80: ce:a5:08:4d:21:6f:57:50:3c:50:29:00:1c:f3:dd: fd:f5:59:53:0f:0a:f1:ec:f4:15:b8:0c:4c:58:bf: 69:5f:8e:e5:a1:17:10:38:85:db:1e:3e:ce:aa:5b: 9d:0f:bf:8d:20:0c:55:8c:df:ca:a9:c5:ba:74:c6: f1:c6:45:0e:4a:ab:e1:25:d1:45:f6:38:fa:a7:e2: 39:3e:9b:45:94:98:e9:23:0e:77:aa:de:a9:fb:a4: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:B0:1B:9D:AA:BF:B3:5F:3F:3E:0F:CF:05:B0:0A:3B:96:BD:52:0F X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e0:cf:65:0b:90:c7:27:1a:4d:a4:7b:74:8f:b2:ca:ba:bc: 32:01:12:51:d7:96:03:4e:27:9c:55:84:8e:15:35:7a:84:3e: 97:b6:0f:10:fd:86:08:5a:ea:31:90:e5:d5:b9:bd:9f:bf:a5: ca:1a:ff:9f:11:55:0c:c2:aa:5d:84:f9:8e:4c:27:d1:a9:12: fc:da:a5:69:3b:15:37:2e:5e:1d:0d:9e:70:77:9a:1b:23:60: 57:cc:8a:cc:9b:32:58:da:8c:c8:2f:fc:11:4b:da:af:9f:f8: 7f:61:ae:5b:ee:cb:4e:41:34:ff:be:ef:d4:c3:37:2c:f4:41: 28:3a:ab:6d:6d:03:1a:f8:e2:0f:42:40:b3:1e:93:f5:60:51: ba:4c:1d:b6:81:6b:e3:69:f6:67:2f:60:6c:23:26:55:66:eb: 1a:b9:c4:2b:f8:d3:3a:66:ef:0a:9f:33:2b:12:c5:2e:a4:9f: 2a:e1:28:74:6b:b1:85:d0:c5:6d:54:1f:eb:cd:b9:36:75:b6: bb:42:20:37:b9:df:b8:db:03:4f:9e:90:30:fb:d6:71:b9:1c: cc:db:23:1a:af:1c:2b:41:26:3d:81:a7:fe:12:22:c2:d3:0f: 3b:dc:78:93:c1:e1:f4:0d:fb:5a:77:2e:fd:3f:fa:f8:26:f9: 1e:a3:f8:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrrXU6ntUjx2PlX6P6CvxRsFuD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTEyMDExMDU2MDdaFw0yNTEyMDQxMzQ3MDdaMDMxMTAvBgNV BAMTKDg1QjAxQjlEQUFCRkIzNUYzRjNFMEZDRjA1QjAwQTNCOTZCRDUyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1IarE2a3wt4jbkdXo1IxZJ7e2 8jJKTuQ+76FHVSZc8vQ9zYRYCLtI8bs44t1qYise1JkXVhmdl01vzTvzS5gjSJ/F OcDpV6cWnawBQ+djciA7gipZ34pdVVRV7CetUlBMXRlkJFC450VNhfx4jmyqNJEq GA7xjZNMABJ7pn56AnrwlQ92Q5Wvtpp1uqH0hop0j9Am+R4DiWA3E6eCT1wvyI9J gM6lCE0hb1dQPFApABzz3f31WVMPCvHs9BW4DExYv2lfjuWhFxA4hdsePs6qW50P v40gDFWM38qpxbp0xvHGRQ5Kq+El0UX2OPqn4jk+m0WUmOkjDneq3qn7pEZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbAbnaq/s18/Pg/PBbAKO5a9Ug8wHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABngz2ULkMcnGk2ke3SPssq6vDIBElHXlgNO J5xVhI4VNXqEPpe2DxD9hgha6jGQ5dW5vZ+/pcoa/58RVQzCql2E+Y5MJ9GpEvza pWk7FTcuXh0NnnB3mhsjYFfMisybMljajMgv/BFL2q+f+H9hrlvuy05BNP++79TD Nyz0QSg6q21tAxr44g9CQLMek/VgUbpMHbaBa+Np9mcvYGwjJlVm6xq5xCv40zpm 7wqfMysSxS6knyrhKHRrsYXQxW1UH+vNuTZ1trtCIDe537jbA0+ekDD71nG5HMzb IxqvHCtBJj2Bp/4SIsLTDzvceJPB4fQN+1p3Lv0/+vgm+R6j+Is= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:28 2025 by rpki-client