This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft File: A6A73303D7FB4B926766F1EA71A883290C724BC9.mft (raw, json) Hash identifier: pxUVdGHkUoCioUs42AD1QlMRNtV7bjzSKQ9hYXifKPM= Subject key identifier: 25:D7:EC:F9:EC:66:01:2D:8C:93:43:96:AA:32:30:69:39:3B:5A:A0 Authority key identifier: A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9 Certificate issuer: /CN=A6A73303D7FB4B926766F1EA71A883290C724BC9 Certificate serial: 737DFF951BB087AD0F4DCEC72B1874505F19FE07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft Manifest number: 01B0 Signing time: Tue 02 Dec 2025 16:11:55 +0000 Manifest this update: Tue 02 Dec 2025 16:06:55 +0000 Manifest next update: Fri 05 Dec 2025 18:01:55 +0000 Files and hashes: 1: A6A73303D7FB4B926766F1EA71A883290C724BC9.crl (hash: kTdW1s7HhQfNrxPQFZ6+P++N+oanX2/TS6YcAvsTOhc=) 2: 3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (hash: RSNgNbSzLZiojBETEw59kurATLLfVv4/u1yb/5OrU2I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.crl rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 18:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7d:ff:95:1b:b0:87:ad:0f:4d:ce:c7:2b:18:74:50:5f:19:fe:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6A73303D7FB4B926766F1EA71A883290C724BC9 Validity Not Before: Dec 2 16:06:55 2025 GMT Not After : Dec 5 18:01:55 2025 GMT Subject: CN=25D7ECF9EC66012D8C934396AA323069393B5AA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:3d:4f:b8:11:77:2e:ba:16:15:6d:c5:9a: f5:d6:42:f5:b7:56:73:87:28:3b:1a:fc:17:39:60: 6a:60:5d:a1:74:76:dd:83:3b:be:e3:46:93:b6:b2: 2f:c2:15:da:b7:64:f6:6a:8e:21:e1:13:42:c9:c1: ea:d0:b7:e5:cc:77:6d:a8:af:a6:e9:4d:26:05:9d: 1a:15:b1:88:ed:1b:e6:06:85:6b:f6:d6:61:ec:5c: 03:97:fb:00:b8:ad:50:6b:9a:08:db:40:35:78:72: 51:e8:51:0a:36:b0:ae:09:0b:9f:dd:5f:5b:b1:e9: ab:2a:bb:65:10:6f:b6:6a:ff:6c:dd:f8:fa:1c:8b: 4c:12:ec:e3:a4:c5:37:95:a3:1b:eb:53:45:52:57: 67:c1:33:9b:a4:66:40:af:9e:cb:3e:0d:df:30:ae: 18:b8:7e:95:b8:3f:8a:6e:d3:9e:28:64:1d:23:66: 15:d0:50:fa:42:5a:3b:f2:ff:e0:9b:1e:56:fc:5d: 03:96:62:6f:49:9c:2c:4c:63:15:4b:80:4b:cf:55: 6b:99:9a:c5:ff:db:f3:22:e5:81:3e:4e:8b:8a:56: 64:21:d5:db:e2:30:fd:92:15:48:64:ba:63:e1:26: 6d:d8:5c:ff:8a:78:63:51:ad:10:0a:9c:be:c6:29: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D7:EC:F9:EC:66:01:2D:8C:93:43:96:AA:32:30:69:39:3B:5A:A0 X509v3 Authority Key Identifier: keyid:A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4d:1f:b0:13:bd:d7:19:87:7a:55:94:02:fa:10:e0:89:14: d3:de:b0:10:d2:85:00:17:91:36:0a:03:85:bf:9b:6e:ad:e6: 5e:16:bc:a6:52:ea:3e:5b:d5:5d:a3:93:fa:f7:06:9c:73:59: 59:0d:8a:b0:29:63:88:d3:f0:23:fa:d6:34:8d:d5:b9:76:fe: fd:da:0e:e9:5e:2c:93:3d:19:22:d4:28:2e:6e:22:80:19:7d: 10:28:bd:50:dd:47:b4:99:da:07:75:86:55:89:dd:f3:d4:62: 71:22:cd:11:d1:c4:c0:16:1f:51:95:95:28:aa:5b:34:81:39: 23:df:66:96:24:01:31:51:c2:ef:66:e7:3c:31:5a:6e:8e:28: d7:3b:f1:04:85:46:d8:48:5e:cc:57:a4:6e:aa:5c:cc:52:91: 7a:21:e9:79:01:0e:24:7f:f7:70:c3:a0:8c:3d:30:54:5a:9d: 05:b8:8f:dc:1a:16:9f:7f:ae:90:9b:ca:27:1a:9b:d2:27:f3: d3:ba:8b:0a:b6:70:24:ec:98:54:61:19:8e:19:0d:d2:bc:08: 5a:4e:58:9d:8d:4c:1b:94:3a:6e:c9:11:06:31:0f:e9:af:a8: 7f:fc:07:57:ab:5b:65:13:18:ec:45:17:43:44:5f:93:86:35: cf:20:ed:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc33/lRuwh60PTc7HKxh0UF8Z/gcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTZBNzMzMDNEN0ZCNEI5MjY3NjZGMUVBNzFBODgzMjkw QzcyNEJDOTAeFw0yNTEyMDIxNjA2NTVaFw0yNTEyMDUxODAxNTVaMDMxMTAvBgNV BAMTKDI1RDdFQ0Y5RUM2NjAxMkQ4QzkzNDM5NkFBMzIzMDY5MzkzQjVBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRj1PuBF3LroWFW3FmvXWQvW3 VnOHKDsa/Bc5YGpgXaF0dt2DO77jRpO2si/CFdq3ZPZqjiHhE0LJwerQt+XMd22o r6bpTSYFnRoVsYjtG+YGhWv21mHsXAOX+wC4rVBrmgjbQDV4clHoUQo2sK4JC5/d X1ux6asqu2UQb7Zq/2zd+Poci0wS7OOkxTeVoxvrU0VSV2fBM5ukZkCvnss+Dd8w rhi4fpW4P4pu054oZB0jZhXQUPpCWjvy/+CbHlb8XQOWYm9JnCxMYxVLgEvPVWuZ msX/2/Mi5YE+TouKVmQh1dviMP2SFUhkumPhJm3YXP+KeGNRrRAKnL7GKffhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJdfs+exmAS2Mk0OWqjIwaTk7WqAwHwYDVR0j BBgwFoAUpqczA9f7S5JnZvHqcaiDKQxyS8kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjY0ZDhjMS1jNzE0LTQ1OTItOGZjNS1lMzkyZWJmZjFlOTgvMC9BNkE3MzMwM0Q3 RkI0QjkyNjc2NkYxRUE3MUE4ODMyOTBDNzI0QkM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTZBNzMzMDNEN0ZCNEI5MjY3NjZGMUVBNzFBODgzMjkwQzcy NEJDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2NGQ4YzEtYzcxNC00NTkyLThm YzUtZTM5MmViZmYxZTk4LzAvQTZBNzMzMDNEN0ZCNEI5MjY3NjZGMUVBNzFBODgz MjkwQzcyNEJDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFNH7ATvdcZh3pVlAL6EOCJFNPesBDShQAX kTYKA4W/m26t5l4WvKZS6j5b1V2jk/r3BpxzWVkNirApY4jT8CP61jSN1bl2/v3a DuleLJM9GSLUKC5uIoAZfRAovVDdR7SZ2gd1hlWJ3fPUYnEizRHRxMAWH1GVlSiq WzSBOSPfZpYkATFRwu9m5zwxWm6OKNc78QSFRthIXsxXpG6qXMxSkXoh6XkBDiR/ 93DDoIw9MFRanQW4j9waFp9/rpCbyicam9In89O6iwq2cCTsmFRhGY4ZDdK8CFpO WJ2NTBuUOm7JEQYxD+mvqH/8B1erW2UTGOxFF0NEX5OGNc8g7b0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:12:11 2025 by rpki-client