This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: vCGnSb8ZQHNnbjhaBH/gwvAtcFGepAazARPfCt8K3mA= Subject key identifier: 47:12:F0:98:6F:A4:F7:F6:06:15:B4:41:DF:8E:D2:07:56:46:D8:95 Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 0CDB9B4FD7C3B3FD522212C4CDDAF09D31F37FA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 0229 Signing time: Wed 17 Dec 2025 09:21:26 +0000 Manifest this update: Wed 17 Dec 2025 09:16:26 +0000 Manifest next update: Sat 20 Dec 2025 15:27:26 +0000 Files and hashes: 1: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: I1RKdkbJl0ZjOoVhwT8CXFUIguUzb8O0annhsnwSM4Q=) 2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 15:27:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:db:9b:4f:d7:c3:b3:fd:52:22:12:c4:cd:da:f0:9d:31:f3:7f:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Dec 17 09:16:26 2025 GMT Not After : Dec 20 15:27:26 2025 GMT Subject: CN=4712F0986FA4F7F60615B441DF8ED2075646D895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fa:72:c1:7f:5b:4c:23:6a:e8:f0:ef:51:30: de:90:12:8d:ce:fc:1d:f2:be:97:48:c0:da:af:1d: 07:ba:39:cf:ba:95:cb:b3:b3:01:19:95:84:55:48: 18:f0:b5:c4:73:da:df:eb:38:ca:8d:cd:9a:c3:8b: df:8a:90:c6:d8:44:a2:31:01:ee:f4:7d:68:0c:a8: 40:66:3e:9b:6b:58:14:58:d1:b2:3c:ba:dd:ac:ae: 45:57:49:3c:1e:e9:32:34:0b:1d:31:e6:ca:49:e6: 2d:c5:5d:24:e8:66:e4:7f:61:89:ff:da:f1:16:45: 67:5b:a4:24:03:ad:f4:a9:86:e1:01:fb:52:d2:ec: f3:ea:bb:9f:db:10:fe:64:91:44:12:85:b8:d5:7e: 50:80:ce:60:54:1c:5b:7e:7d:6a:d2:85:99:51:b1: 24:f7:bc:74:c1:91:21:d1:70:0f:6f:c9:0d:76:e5: 61:2c:0a:41:ca:f3:37:9c:07:55:a4:9f:eb:25:75: 6b:6c:29:00:0a:eb:fb:25:6c:a7:2a:bf:24:4d:c8: ba:16:43:6b:d2:2b:1f:86:34:ad:a8:16:15:44:aa: 24:37:48:3c:33:d9:ba:4e:1c:c7:1e:9a:8a:4e:70: 78:9e:8f:c6:26:3a:91:b1:2a:8e:3b:72:55:93:92: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:12:F0:98:6F:A4:F7:F6:06:15:B4:41:DF:8E:D2:07:56:46:D8:95 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:9f:00:ee:3a:dd:e5:e9:5d:ca:a8:3e:5d:ad:fe:88:bb:65: 35:bc:0c:f6:f2:40:e9:11:78:85:d6:1c:94:64:ab:c0:1c:a9: ca:c5:59:a4:c8:eb:fb:53:2d:f7:fe:a9:2d:d6:b3:9d:da:de: eb:c0:f1:e0:31:da:f3:76:c7:c5:38:93:d3:60:d4:73:da:45: 58:e1:56:c3:9b:59:18:c7:4d:2d:f5:1e:c2:57:ad:44:f6:1d: a3:d1:3e:96:1e:30:4d:8b:e8:e7:e0:48:4a:e5:40:04:76:76: 2f:25:f9:35:03:c5:da:49:36:a1:bf:89:f5:88:6e:81:e8:df: ea:f5:54:27:e3:16:57:4d:85:b0:2e:65:fc:44:49:4b:33:39: d8:ae:b7:07:2f:f2:dd:4b:e4:17:17:83:c0:18:72:e0:a2:c5: 97:c3:03:e0:82:3f:75:e3:fe:4a:fa:44:79:ff:8f:36:74:6e: 1d:7f:c4:a4:a9:3f:ce:28:5d:e6:2b:c4:58:b6:73:2b:ff:eb: ec:eb:78:fe:f0:bf:48:32:50:6a:8c:b8:31:fc:74:e5:13:76: bf:dc:78:7c:80:6b:8a:d7:65:fb:44:b6:2f:a0:51:20:69:7e: 73:f5:f0:39:0e:fc:3e:78:c7:75:10:12:12:92:24:2e:24:bd: 90:43:40:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNubT9fDs/1SIhLEzdrwnTHzf6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNTEyMTcwOTE2MjZaFw0yNTEyMjAxNTI3MjZaMDMxMTAvBgNV BAMTKDQ3MTJGMDk4NkZBNEY3RjYwNjE1QjQ0MURGOEVEMjA3NTY0NkQ4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+nLBf1tMI2ro8O9RMN6QEo3O /B3yvpdIwNqvHQe6Oc+6lcuzswEZlYRVSBjwtcRz2t/rOMqNzZrDi9+KkMbYRKIx Ae70fWgMqEBmPptrWBRY0bI8ut2srkVXSTwe6TI0Cx0x5spJ5i3FXSToZuR/YYn/ 2vEWRWdbpCQDrfSphuEB+1LS7PPqu5/bEP5kkUQShbjVflCAzmBUHFt+fWrShZlR sST3vHTBkSHRcA9vyQ125WEsCkHK8zecB1Wkn+sldWtsKQAK6/slbKcqvyRNyLoW Q2vSKx+GNK2oFhVEqiQ3SDwz2bpOHMcemopOcHiej8YmOpGxKo47clWTkgANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURxLwmG+k9/YGFbRB347SB1ZG2JUwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOfAO463eXpXcqoPl2t/oi7ZTW8DPbyQOkR eIXWHJRkq8AcqcrFWaTI6/tTLff+qS3Ws53a3uvA8eAx2vN2x8U4k9Ng1HPaRVjh VsObWRjHTS31HsJXrUT2HaPRPpYeME2L6OfgSErlQAR2di8l+TUDxdpJNqG/ifWI boHo3+r1VCfjFldNhbAuZfxESUszOdiutwcv8t1L5BcXg8AYcuCixZfDA+CCP3Xj /kr6RHn/jzZ0bh1/xKSpP84oXeYrxFi2cyv/6+zreP7wv0gyUGqMuDH8dOUTdr/c eHyAa4rXZftEti+gUSBpfnP18DkO/D54x3UQEhKSJC4kvZBDQK8= -----END CERTIFICATE-----Generated at Thu Dec 18 12:26:54 2025 by rpki-client