This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: CjJ87LBrF+X26ManbruEzRV6hCH+c3tTFBLmvg0v+fs= Subject key identifier: A2:C3:C6:6A:C0:95:42:E9:2B:FE:6C:7E:96:C8:76:BA:F4:F4:0A:2A Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 7CC2CD32329683806E77F231464C1EEBADB40193 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 0529 Signing time: Wed 03 Dec 2025 08:02:28 +0000 Manifest this update: Wed 03 Dec 2025 07:57:28 +0000 Manifest next update: Sat 06 Dec 2025 10:22:28 +0000 Files and hashes: 1: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: lupPOhWnqa3PhLoPFHPd8x3L7tZYhXoE8ezexheWuFY=) 2: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) 3: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) 4: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c2:cd:32:32:96:83:80:6e:77:f2:31:46:4c:1e:eb:ad:b4:01:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Dec 3 07:57:28 2025 GMT Not After : Dec 6 10:22:28 2025 GMT Subject: CN=A2C3C66AC09542E92BFE6C7E96C876BAF4F40A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:ea:c5:24:4f:71:29:de:4f:6a:fa:32:87: 1d:08:1d:65:e1:d9:26:29:01:3b:eb:78:f9:2f:e4: a4:8d:74:95:8c:92:8a:3e:36:e1:cf:b1:90:62:52: 68:b5:c4:6e:da:85:c7:d8:d8:e6:cb:f9:67:30:b2: 56:bf:f8:e2:50:71:f0:5e:4d:6e:15:e1:72:b4:6d: f4:58:26:90:f3:8c:c2:b7:b4:94:d2:f7:80:95:45: 47:12:b7:b6:64:53:9d:76:0a:bc:ca:14:14:b9:6b: dd:7f:a1:20:d8:6a:07:6c:40:56:ab:5a:a5:8d:a8: 72:f1:70:fa:e7:e3:df:38:1b:49:8d:49:da:78:2a: 2a:2a:68:72:33:11:b3:ab:28:d4:fa:2e:b1:fc:58: 64:15:a4:43:7e:ad:7d:84:10:4f:81:77:4e:a6:6c: 8c:6b:30:19:b0:84:2f:0d:b8:5a:6e:dc:ca:69:36: e7:eb:e2:bc:b5:4d:11:c6:08:46:0d:a3:ea:e0:7c: ed:49:35:ed:91:10:46:96:f0:f5:07:fc:ac:2f:2e: 9d:20:5f:b6:fe:a1:fd:37:ff:98:25:21:4d:91:c8: 3a:d6:c9:de:d8:d5:cd:6e:49:c7:67:ba:66:59:fe: 10:03:2c:b6:84:5b:62:6e:fa:b1:07:51:84:f9:e5: e4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C3:C6:6A:C0:95:42:E9:2B:FE:6C:7E:96:C8:76:BA:F4:F4:0A:2A X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:8f:aa:1f:a1:ec:35:5a:ad:99:d4:70:3b:80:aa:5e:60:98: d8:e8:76:7f:0f:5b:89:15:a8:cd:b0:99:3d:f1:f7:62:be:1c: 4c:63:da:92:57:b7:d5:73:34:f8:98:45:b1:30:e5:64:23:d5: 9d:98:64:c8:b7:2a:13:7c:92:df:c4:d3:dd:b6:53:12:bd:f1: 20:05:6e:c6:cd:9a:1e:de:6e:a2:99:a7:19:b4:c4:5f:2c:70: 6b:2f:35:e9:f8:0f:3a:c8:b4:e2:a0:8a:b4:38:23:99:2d:c6: 5b:f0:8f:0e:f2:ae:e5:2a:91:d0:61:7d:a5:8c:a6:af:40:5a: c4:26:47:84:58:71:41:00:0e:e5:30:02:3b:49:fd:59:4c:88: 61:38:ee:a0:9d:fd:9b:3e:2d:72:d9:69:42:8a:9c:62:e5:41: c1:6d:dd:2d:f8:2e:f9:93:f5:0a:60:f9:19:42:91:6e:b3:7d: 30:41:b4:27:75:7e:fa:d6:5d:2f:f0:07:83:6e:2a:15:32:17: bb:37:5b:fa:ca:f2:c0:1c:00:59:3f:92:3b:58:20:03:4d:fc: bc:9b:33:36:f3:72:64:88:dd:ff:46:9b:55:42:40:fb:5c:a7: 6a:5b:f4:a8:a2:9e:d2:98:b0:bd:b9:76:11:31:5f:3d:80:30: bd:cc:44:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMLNMjKWg4Bud/IxRkwe6620AZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTEyMDMwNzU3MjhaFw0yNTEyMDYxMDIyMjhaMDMxMTAvBgNV BAMTKEEyQzNDNjZBQzA5NTQyRTkyQkZFNkM3RTk2Qzg3NkJBRjRGNDBBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvT+rFJE9xKd5Pavoyhx0IHWXh 2SYpATvrePkv5KSNdJWMkoo+NuHPsZBiUmi1xG7ahcfY2ObL+Wcwsla/+OJQcfBe TW4V4XK0bfRYJpDzjMK3tJTS94CVRUcSt7ZkU512CrzKFBS5a91/oSDYagdsQFar WqWNqHLxcPrn4984G0mNSdp4KioqaHIzEbOrKNT6LrH8WGQVpEN+rX2EEE+Bd06m bIxrMBmwhC8NuFpu3MppNufr4ry1TRHGCEYNo+rgfO1JNe2REEaW8PUH/KwvLp0g X7b+of03/5glIU2RyDrWyd7Y1c1uScdnumZZ/hADLLaEW2Ju+rEHUYT55eTDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUosPGasCVQukr/mx+lsh2uvT0CiowHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2Pqh+h7DVarZnUcDuAql5gmNjodn8PW4kV qM2wmT3x92K+HExj2pJXt9VzNPiYRbEw5WQj1Z2YZMi3KhN8kt/E0922UxK98SAF bsbNmh7ebqKZpxm0xF8scGsvNen4DzrItOKgirQ4I5ktxlvwjw7yruUqkdBhfaWM pq9AWsQmR4RYcUEADuUwAjtJ/VlMiGE47qCd/Zs+LXLZaUKKnGLlQcFt3S34LvmT 9Qpg+RlCkW6zfTBBtCd1fvrWXS/wB4NuKhUyF7s3W/rK8sAcAFk/kjtYIANN/Lyb MzbzcmSI3f9Gm1VCQPtcp2pb9KiintKYsL25dhExXz2AML3MROU= -----END CERTIFICATE-----Generated at Wed Dec 3 17:38:55 2025 by rpki-client