This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: VwUYmM9exBoINKZYTWBqGeoVmzL4tTeK/HbE7kvVKRI= Subject key identifier: 01:36:E3:98:A8:1B:C3:F6:69:AB:90:1E:F8:B4:FB:6C:0D:E1:B3:92 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 4AD6FF1A1D6DF62C5AC4B29E16489148B443E27D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 050A Signing time: Tue 16 Dec 2025 17:21:45 +0000 Manifest this update: Tue 16 Dec 2025 17:16:45 +0000 Manifest next update: Sat 20 Dec 2025 03:25:45 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=) 2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: 2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=) 3: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: 8YB+wr4pc43UVW2RYmBaKNt2r+JQedQdcjo9dX/w0SU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 03:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:d6:ff:1a:1d:6d:f6:2c:5a:c4:b2:9e:16:48:91:48:b4:43:e2:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Dec 16 17:16:45 2025 GMT Not After : Dec 20 03:25:45 2025 GMT Subject: CN=0136E398A81BC3F669AB901EF8B4FB6C0DE1B392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0e:5a:b5:e1:c4:e7:8a:e7:3d:c5:a4:b7:5b: 05:a8:9f:95:94:b7:5f:e0:17:7d:aa:a0:4f:e4:77: 24:8e:77:4d:01:84:b2:f9:41:c8:f2:4c:e2:7f:7e: a5:2b:f9:63:ba:4a:6f:5b:6f:e6:dc:cd:17:c7:a9: bc:f7:d2:8d:c2:ef:1a:f8:4b:c1:ec:8f:45:cc:6b: c3:02:38:40:d5:3c:61:0d:47:47:9d:4c:e6:2d:e2: d7:b7:55:84:df:7b:c9:10:c5:47:b6:94:d9:fe:06: 70:6a:b8:6e:2e:12:36:c9:77:56:ff:36:8f:2b:28: 0e:ac:f3:52:1e:3a:9c:1b:d7:5b:a8:c5:a5:6c:a9: a7:d6:42:fc:cc:3d:43:1c:03:15:e9:a7:f4:59:65: 49:69:ca:8b:3f:f4:b2:07:34:ab:4d:50:ec:7e:6b: 50:bf:0c:77:1c:06:05:e2:b4:09:86:f4:7d:e3:13: ce:7e:bc:29:66:40:90:0d:cd:bf:bc:78:e0:cc:cf: 2b:67:9e:e0:b9:b6:90:31:42:28:60:ba:57:5c:d1: 91:7b:af:82:49:a7:39:6b:33:a1:14:96:09:d5:2d: ee:b1:3d:8c:e7:27:d8:79:73:b9:62:5f:be:be:c3: e1:07:d4:01:e7:89:a4:fc:de:a4:59:67:b5:57:62: e7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:36:E3:98:A8:1B:C3:F6:69:AB:90:1E:F8:B4:FB:6C:0D:E1:B3:92 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c4:ad:75:d0:20:f8:5a:de:a8:79:3c:f5:a3:b0:73:d4:70: dc:78:bb:ab:88:00:d4:35:3d:7e:be:d9:6e:df:3b:a1:f4:77: d5:c1:5e:98:3b:74:5e:ef:53:20:c5:c0:bc:95:16:72:87:bc: 7e:d1:87:94:04:90:fa:95:d9:08:b0:d3:f0:e5:7c:b4:7d:7d: 5c:91:98:4a:2f:e0:0a:fe:83:b4:98:37:3d:a6:1a:25:d7:82: ad:40:4c:29:97:d2:60:f2:8e:f1:44:b7:8f:0b:c0:8f:cf:2e: 93:ba:51:19:03:4c:3b:bd:32:1f:37:bd:82:5d:2c:4f:9f:61: 92:6e:e2:6c:b6:65:30:da:53:40:79:ce:23:80:b1:99:e5:74: d1:65:2d:ed:94:1d:90:e4:67:71:be:87:8c:e4:63:f3:fb:6c: a2:17:c1:bc:25:e4:d7:12:0e:a3:4d:7a:c3:49:9f:7f:dc:51: f6:01:08:53:98:40:d4:ed:33:75:66:dc:72:62:99:71:f2:d2: f3:d4:28:8b:b6:db:2e:ba:ad:55:81:46:f3:91:02:1c:0c:d1: fa:d8:4f:53:fc:5c:f2:d2:fc:fc:c8:eb:4b:d2:e6:94:a6:a2: 72:d9:b4:92:06:29:2e:f0:86:c2:20:2f:e3:10:ad:66:d4:af: 3a:17:47:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUStb/Gh1t9ixaxLKeFkiRSLRD4n0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNTEyMTYxNzE2NDVaFw0yNTEyMjAwMzI1NDVaMDMxMTAvBgNV BAMTKDAxMzZFMzk4QTgxQkMzRjY2OUFCOTAxRUY4QjRGQjZDMERFMUIzOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDlq14cTniuc9xaS3WwWon5WU t1/gF32qoE/kdySOd00BhLL5QcjyTOJ/fqUr+WO6Sm9bb+bczRfHqbz30o3C7xr4 S8Hsj0XMa8MCOEDVPGENR0edTOYt4te3VYTfe8kQxUe2lNn+BnBquG4uEjbJd1b/ No8rKA6s81IeOpwb11uoxaVsqafWQvzMPUMcAxXpp/RZZUlpyos/9LIHNKtNUOx+ a1C/DHccBgXitAmG9H3jE85+vClmQJANzb+8eODMzytnnuC5tpAxQihguldc0ZF7 r4JJpzlrM6EUlgnVLe6xPYznJ9h5c7liX76+w+EH1AHniaT83qRZZ7VXYud1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUATbjmKgbw/Zpq5Ae+LT7bA3hs5IwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPErXXQIPha3qh5PPWjsHPUcNx4u6uIANQ1 PX6+2W7fO6H0d9XBXpg7dF7vUyDFwLyVFnKHvH7Rh5QEkPqV2Qiw0/DlfLR9fVyR mEov4Ar+g7SYNz2mGiXXgq1ATCmX0mDyjvFEt48LwI/PLpO6URkDTDu9Mh83vYJd LE+fYZJu4my2ZTDaU0B5ziOAsZnldNFlLe2UHZDkZ3G+h4zkY/P7bKIXwbwl5NcS DqNNesNJn3/cUfYBCFOYQNTtM3Vm3HJimXHy0vPUKIu22y66rVWBRvORAhwM0frY T1P8XPLS/PzI60vS5pSmonLZtJIGKS7whsIgL+MQrWbUrzoXR9Q= -----END CERTIFICATE-----Generated at Fri Dec 19 09:48:12 2025 by rpki-client