This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: NRmPSrWxUFl4E6/IbTTXe/dygOtgLX8kBQKWWcaFUG0= Subject key identifier: 28:5A:F0:EB:DE:AF:3D:F6:84:F9:C1:FC:EB:A9:72:4E:48:1B:F5:2F Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 7419764C004CB84CE257D685664BB146C4AA7BC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 03B0 Signing time: Tue 09 Dec 2025 10:04:36 +0000 Manifest this update: Tue 09 Dec 2025 09:59:36 +0000 Manifest next update: Fri 12 Dec 2025 10:34:36 +0000 Files and hashes: 1: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: TXBuOFs6gfq2kLZoCItCxU6YIRoVdwKEBdm+Ryo0790=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 10:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:19:76:4c:00:4c:b8:4c:e2:57:d6:85:66:4b:b1:46:c4:aa:7b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Dec 9 09:59:36 2025 GMT Not After : Dec 12 10:34:36 2025 GMT Subject: CN=285AF0EBDEAF3DF684F9C1FCEBA9724E481BF52F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5d:63:12:cb:08:c0:86:ca:f4:fa:8f:f0:ab: 88:be:3d:f1:4a:32:38:25:24:f9:2f:f4:67:30:e7: 0f:63:b8:a3:84:0c:bd:7a:00:dd:2a:f1:f4:6d:d5: 61:49:79:22:c1:8c:fa:cd:8e:0c:ab:3c:ed:51:74: bd:43:ad:1a:01:8f:06:aa:4c:b7:0e:24:11:be:df: b8:e8:6a:b9:d8:83:70:0b:6f:14:af:a9:a1:0b:60: 2b:2d:78:04:12:9d:1e:2c:74:0b:36:8d:56:66:55: 74:8f:18:ac:fd:9e:2f:83:ee:f6:1a:fa:a0:a8:1d: 45:92:ab:8a:39:a1:94:54:99:ad:b5:31:c9:70:f1: 14:1e:4d:bf:64:11:17:c2:0a:96:2a:9c:ca:67:a7: f6:0e:9d:78:a7:81:97:12:49:ed:1e:bb:9d:1e:fe: eb:fd:1d:73:d3:bf:2c:3f:68:07:fa:23:3f:c2:04: bb:ae:ac:b1:f9:c8:db:22:d4:91:a4:79:e1:14:73: 58:a5:85:c5:4d:22:87:57:a6:cf:49:72:9f:bf:ba: d1:7d:c6:b0:c7:ee:89:71:b3:07:c3:ea:8a:48:f4: 0f:22:22:6b:28:06:c8:cb:97:c2:cd:19:c0:01:1b: a4:40:cf:98:6d:06:fb:e9:b6:ed:2b:4f:75:b6:00: a7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:5A:F0:EB:DE:AF:3D:F6:84:F9:C1:FC:EB:A9:72:4E:48:1B:F5:2F X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:6c:b5:21:4a:49:fd:cd:60:7d:ba:11:a1:3b:ce:4c:55:57: d0:da:f4:c6:6c:70:ec:12:e1:ef:6c:74:f1:20:4d:c0:67:d3: 48:7f:bc:2e:7a:54:aa:93:31:49:73:a9:f9:30:48:e3:70:7b: 5c:4b:a1:0e:7e:2a:39:f9:a0:82:9f:b7:ed:f4:b7:ee:b4:a1: 03:ec:98:ea:5c:df:58:7e:cc:e1:03:69:6d:ba:2d:68:7c:f0: 9f:65:7d:8b:1f:04:7d:e8:ba:ff:47:c9:8f:83:db:d7:06:35: 90:0e:0a:a1:a0:e3:06:84:f5:2e:bc:23:34:a5:4a:bf:e0:8d: eb:0b:a3:dc:49:58:f9:f4:5d:34:3c:08:2d:37:53:ab:a3:4b: 7e:ac:77:f1:b5:83:eb:32:6b:2e:e8:58:be:3e:0a:e7:c1:be: b7:35:32:be:ff:c2:f6:0c:c1:bc:e9:d0:3e:ba:68:33:ea:f3: 1a:5e:4c:07:e3:c1:86:96:71:e6:c6:8b:2d:0b:eb:34:97:6f: 8a:80:4f:29:3c:94:9d:94:5a:38:ec:53:e2:c0:68:1f:47:73: 5e:72:1e:de:4b:4e:86:a5:36:5e:17:71:6f:21:40:45:68:9d: a4:1c:b3:20:23:89:54:3d:75:18:22:71:8e:de:82:1e:19:60: 95:0c:aa:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdBl2TABMuEziV9aFZkuxRsSqe8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTEyMDkwOTU5MzZaFw0yNTEyMTIxMDM0MzZaMDMxMTAvBgNV BAMTKDI4NUFGMEVCREVBRjNERjY4NEY5QzFGQ0VCQTk3MjRFNDgxQkY1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXWMSywjAhsr0+o/wq4i+PfFK MjglJPkv9Gcw5w9juKOEDL16AN0q8fRt1WFJeSLBjPrNjgyrPO1RdL1DrRoBjwaq TLcOJBG+37joarnYg3ALbxSvqaELYCsteAQSnR4sdAs2jVZmVXSPGKz9ni+D7vYa +qCoHUWSq4o5oZRUma21Mclw8RQeTb9kERfCCpYqnMpnp/YOnXingZcSSe0eu50e /uv9HXPTvyw/aAf6Iz/CBLuurLH5yNsi1JGkeeEUc1ilhcVNIodXps9Jcp+/utF9 xrDH7olxswfD6opI9A8iImsoBsjLl8LNGcABG6RAz5htBvvptu0rT3W2AKfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKFrw696vPfaE+cH866lyTkgb9S8wHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBstSFKSf3NYH26EaE7zkxVV9Da9MZscOwS 4e9sdPEgTcBn00h/vC56VKqTMUlzqfkwSONwe1xLoQ5+Kjn5oIKft+30t+60oQPs mOpc31h+zOEDaW26LWh88J9lfYsfBH3ouv9HyY+D29cGNZAOCqGg4waE9S68IzSl Sr/gjesLo9xJWPn0XTQ8CC03U6ujS36sd/G1g+syay7oWL4+CufBvrc1Mr7/wvYM wbzp0D66aDPq8xpeTAfjwYaWcebGiy0L6zSXb4qATyk8lJ2UWjjsU+LAaB9Hc15y Ht5LToalNl4XcW8hQEVonaQcsyAjiVQ9dRgicY7egh4ZYJUMqvQ= -----END CERTIFICATE-----Generated at Wed Dec 10 05:29:23 2025 by rpki-client