This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: p7X4b3c/1lJ8J9WzE76kg4ArQUKCEZfM2vu1MknQnSQ= Subject key identifier: 00:61:0B:AB:7C:D7:05:DD:15:7E:F8:25:D6:D1:FB:B7:D4:1A:A2:9D Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 4634A6D609F52AD78A3B7A547AD0D284EC609B2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 047B Signing time: Mon 01 Dec 2025 16:01:45 +0000 Manifest this update: Mon 01 Dec 2025 15:56:45 +0000 Manifest next update: Thu 04 Dec 2025 16:23:45 +0000 Files and hashes: 1: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: fYctMAteSUeA5CRos+WmYnpGs0bUd5saL/RjgCjYMVg=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 3: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:34:a6:d6:09:f5:2a:d7:8a:3b:7a:54:7a:d0:d2:84:ec:60:9b:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Dec 1 15:56:45 2025 GMT Not After : Dec 4 16:23:45 2025 GMT Subject: CN=00610BAB7CD705DD157EF825D6D1FBB7D41AA29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:45:2c:69:df:9d:a0:8f:b0:dc:82:11:27:20: ef:0d:2f:a8:5f:f6:44:6d:08:11:68:e0:ef:99:ca: c1:76:18:61:e8:e8:12:c0:19:46:fa:45:59:00:31: 46:50:05:93:d9:dd:88:0a:22:47:81:19:f2:9e:c4: fe:d8:8d:88:80:7a:fb:b3:37:c6:19:a0:67:a3:0e: 9d:af:ad:71:e8:68:7e:a1:4e:40:7c:82:fe:fd:24: a8:4a:74:7b:13:3a:0d:b8:a3:ca:45:9b:5f:fd:83: 06:21:45:83:8d:19:07:bb:eb:f6:4d:b4:62:eb:3c: 4d:50:e4:e2:40:72:db:0a:e1:d0:b6:67:53:57:d1: 84:1d:30:d3:3a:90:b9:9f:11:ec:23:f5:a8:53:cd: a7:12:08:83:30:19:a2:fb:2b:86:a9:04:54:d7:a9: 13:33:b0:74:14:a3:d6:69:63:2a:ee:3d:e5:15:52: 01:2a:13:82:3b:42:61:b8:1c:60:c8:00:55:79:17: fb:b9:e0:94:04:b6:ea:ac:80:af:d0:d5:71:d9:47: f4:d2:2d:ac:a2:d3:97:16:76:0f:5b:dc:b9:37:18: d0:fd:37:e1:12:57:d5:e8:ff:e3:3d:fa:84:66:a2: 45:0b:40:83:e3:b1:db:96:e0:a1:a9:a9:cb:90:f7: c8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:61:0B:AB:7C:D7:05:DD:15:7E:F8:25:D6:D1:FB:B7:D4:1A:A2:9D X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f8:a0:5c:4b:bb:3e:3e:fb:4d:f1:ec:f2:84:02:b1:9d:0f: f8:c6:e1:43:83:50:18:5c:27:13:2e:1b:0b:61:62:c1:af:20: df:78:9e:35:e9:7e:bc:52:a8:9d:6b:b3:90:03:7d:6c:16:08: e7:d5:61:09:28:88:15:d6:fd:92:ce:68:eb:eb:61:c1:5a:7a: 16:15:ae:3a:bc:db:1a:74:f4:91:b1:2d:a7:41:4a:c6:f8:1b: e1:7a:13:79:41:94:a9:c9:bf:4d:fb:37:f9:b8:e3:e1:eb:e4: c0:3e:eb:d4:d6:3c:b1:6e:0c:c4:b8:f3:b9:72:97:92:e1:7a: cb:4f:a4:8b:a2:d8:13:81:02:34:25:69:31:f8:fb:ce:f2:34: d9:0b:df:e4:06:da:00:99:7c:3f:6e:f2:ff:ed:28:32:e6:b3: 87:f5:7c:9a:4c:b6:6a:84:ca:d6:7f:52:01:c8:b3:99:a5:52: 6e:84:a5:9f:bf:22:70:6b:77:85:40:44:b5:cb:31:37:cf:dd: bf:db:9c:13:96:54:0c:3d:3b:f8:b7:47:4b:0e:cf:90:13:ef: 64:65:d7:50:3f:ca:83:ca:af:e3:ab:37:3b:b3:3f:c6:e9:92: 63:05:f7:66:0f:6e:53:06:35:a1:0b:81:c8:79:7b:ff:35:f6: 18:85:c8:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjSm1gn1KteKO3pUetDShOxgmywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNTEyMDExNTU2NDVaFw0yNTEyMDQxNjIzNDVaMDMxMTAvBgNV BAMTKDAwNjEwQkFCN0NENzA1REQxNTdFRjgyNUQ2RDFGQkI3RDQxQUEyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8RSxp352gj7DcghEnIO8NL6hf 9kRtCBFo4O+ZysF2GGHo6BLAGUb6RVkAMUZQBZPZ3YgKIkeBGfKexP7YjYiAevuz N8YZoGejDp2vrXHoaH6hTkB8gv79JKhKdHsTOg24o8pFm1/9gwYhRYONGQe76/ZN tGLrPE1Q5OJActsK4dC2Z1NX0YQdMNM6kLmfEewj9ahTzacSCIMwGaL7K4apBFTX qRMzsHQUo9ZpYyruPeUVUgEqE4I7QmG4HGDIAFV5F/u54JQEtuqsgK/Q1XHZR/TS Layi05cWdg9b3Lk3GND9N+ESV9Xo/+M9+oRmokULQIPjsduW4KGpqcuQ98j/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGELq3zXBd0Vfvgl1tH7t9Qaop0wHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr4oFxLuz4++03x7PKEArGdD/jG4UODUBhc JxMuGwthYsGvIN94njXpfrxSqJ1rs5ADfWwWCOfVYQkoiBXW/ZLOaOvrYcFaehYV rjq82xp09JGxLadBSsb4G+F6E3lBlKnJv037N/m44+Hr5MA+69TWPLFuDMS487ly l5LhestPpIui2BOBAjQlaTH4+87yNNkL3+QG2gCZfD9u8v/tKDLms4f1fJpMtmqE ytZ/UgHIs5mlUm6EpZ+/InBrd4VARLXLMTfP3b/bnBOWVAw9O/i3R0sOz5AT72Rl 11A/yoPKr+OrNzuzP8bpkmMF92YPblMGNaELgch5e/819hiFyIA= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:22 2025 by rpki-client