This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: exofbhkKfaleikaRnVWO2NBhGvlcS7mqCnZluW8rJDU= Subject key identifier: F9:0D:E2:65:8A:F6:2A:EF:95:CD:72:1E:E4:AA:11:16:8F:87:39:FA Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 78E30AB4A2AB984238D7E0BCCC1BB0A968AD84D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01BB Signing time: Mon 01 Dec 2025 18:50:49 +0000 Manifest this update: Mon 01 Dec 2025 18:45:49 +0000 Manifest next update: Thu 04 Dec 2025 21:25:49 +0000 Files and hashes: 1: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: 4sRqcnfl28Qx3qMYiueLtJEnTwO1spNjb24E7TCWt0k=) 2: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: FGVr8rFJylq1tF/qqgBfR8BnuUuvbMzNtuFT5y6ZEO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 21:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e3:0a:b4:a2:ab:98:42:38:d7:e0:bc:cc:1b:b0:a9:68:ad:84:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Dec 1 18:45:49 2025 GMT Not After : Dec 4 21:25:49 2025 GMT Subject: CN=F90DE2658AF62AEF95CD721EE4AA11168F8739FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:c3:a5:4b:af:d3:eb:0e:9c:98:be:8a:18: cd:82:7d:57:7b:52:b5:66:c4:68:c9:c5:4c:d0:85: f0:33:8f:e6:67:16:93:c5:c7:6c:fd:57:52:32:f4: cb:a3:a1:4e:3c:6a:0a:57:d9:45:e7:63:da:0a:be: 9f:94:6b:9a:1c:58:b8:4a:cb:f4:96:b0:f7:4b:03: 3a:3b:91:7a:ed:86:8a:c5:3e:16:24:d4:e0:f5:58: e7:43:2a:24:b2:0c:1f:09:a5:86:08:df:31:3a:26: 0c:33:0c:5c:f1:8f:d5:22:0e:3d:28:e1:5c:84:2e: ea:75:d7:67:94:89:73:63:ce:4b:42:cc:b4:4e:d5: 4e:24:1e:60:bd:12:71:5d:f8:59:95:11:69:be:97: b1:55:e4:85:7d:e8:ea:31:5a:ed:45:2b:42:ec:0e: 8f:7a:42:7d:7f:fb:7f:d1:f4:d7:e4:8c:0e:c9:73: 65:78:0f:74:b3:d4:b4:3c:a7:88:1f:09:c5:18:8d: d2:e1:bc:9a:f1:35:50:42:ca:44:6d:c5:2a:71:25: 64:7c:91:38:33:51:8d:cd:e6:2a:29:35:6a:e6:7d: 63:d1:95:8a:59:7b:c8:92:bf:f4:15:9c:fc:af:b1: 76:09:2a:6d:3a:2a:ce:09:f7:01:96:93:27:29:1e: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0D:E2:65:8A:F6:2A:EF:95:CD:72:1E:E4:AA:11:16:8F:87:39:FA X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:fa:81:bd:2a:67:fc:b8:d6:7f:f2:82:26:62:38:17:30:e4: 53:6c:c0:da:45:86:84:9a:ec:e8:3f:24:14:eb:51:06:17:fc: 7a:14:f3:75:2e:45:60:bf:4d:22:1b:0b:1e:9d:38:dc:82:a2: 3e:ae:81:f3:56:eb:75:26:52:6c:cb:4f:e4:73:b0:03:a9:53: 04:07:88:a9:64:29:e5:87:eb:eb:17:50:40:34:56:bb:2b:d8: a8:e0:6e:76:49:a0:4f:52:37:36:81:fe:db:32:6d:29:c7:1a: ad:ba:ca:b7:73:58:bd:01:60:14:38:c6:4e:18:6b:10:b6:de: a5:df:d2:f9:13:1d:dc:44:29:23:5d:57:c5:e2:c4:c4:ac:96: 28:d6:81:8d:e2:98:e7:5f:74:2f:c5:ea:f0:b6:1d:ec:30:73: a1:19:02:92:59:16:b6:92:5d:e8:f3:ac:4b:18:46:ea:5f:d7: 1e:74:f9:00:1b:02:97:5d:5d:b4:e5:cf:b4:2a:f3:31:d6:09: 0f:1e:54:ac:b6:6f:a1:0a:16:50:e5:b4:3c:82:f4:1d:a2:33: 55:99:aa:a4:b4:0c:6a:71:26:95:bb:5f:80:f3:34:4d:bb:08: 4d:64:69:ea:ed:30:19:fe:3f:3e:0b:c7:3f:a2:a0:60:e1:d1: 44:fa:db:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeOMKtKKrmEI41+C8zBuwqWithNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNTEyMDExODQ1NDlaFw0yNTEyMDQyMTI1NDlaMDMxMTAvBgNV BAMTKEY5MERFMjY1OEFGNjJBRUY5NUNENzIxRUU0QUExMTE2OEY4NzM5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhcOlS6/T6w6cmL6KGM2CfVd7 UrVmxGjJxUzQhfAzj+ZnFpPFx2z9V1Iy9MujoU48agpX2UXnY9oKvp+Ua5ocWLhK y/SWsPdLAzo7kXrthorFPhYk1OD1WOdDKiSyDB8JpYYI3zE6JgwzDFzxj9UiDj0o 4VyELup112eUiXNjzktCzLRO1U4kHmC9EnFd+FmVEWm+l7FV5IV96OoxWu1FK0Ls Do96Qn1/+3/R9NfkjA7Jc2V4D3Sz1LQ8p4gfCcUYjdLhvJrxNVBCykRtxSpxJWR8 kTgzUY3N5iopNWrmfWPRlYpZe8iSv/QVnPyvsXYJKm06Ks4J9wGWkycpHorDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Q3iZYr2Ku+VzXIe5KoRFo+HOfowHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn6gb0qZ/y41n/ygiZiOBcw5FNswNpFhoSa 7Og/JBTrUQYX/HoU83UuRWC/TSIbCx6dONyCoj6ugfNW63UmUmzLT+RzsAOpUwQH iKlkKeWH6+sXUEA0Vrsr2KjgbnZJoE9SNzaB/tsybSnHGq26yrdzWL0BYBQ4xk4Y axC23qXf0vkTHdxEKSNdV8XixMSslijWgY3imOdfdC/F6vC2Hewwc6EZApJZFraS XejzrEsYRupf1x50+QAbApddXbTlz7Qq8zHWCQ8eVKy2b6EKFlDltDyC9B2iM1WZ qqS0DGpxJpW7X4DzNE27CE1kaertMBn+Pz4Lxz+ioGDh0UT621w= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:33 2025 by rpki-client