This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: Eel8T/ingy2Nsl70LEtJVPvSAduwDaeJho58qKGwDoU= Subject key identifier: 8F:1B:18:BB:D8:92:49:45:4D:96:C1:12:DE:E5:F3:B5:79:E9:CA:9A Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 50A42AA090F48FB58FEA4749784A8349BC3DE665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 0213 Signing time: Sat 13 Dec 2025 08:12:11 +0000 Manifest this update: Sat 13 Dec 2025 08:07:11 +0000 Manifest next update: Tue 16 Dec 2025 15:27:11 +0000 Files and hashes: 1: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: D74wQ+/QILYDvbiWl3Kcz/pD/9m5zfi/HrGuuis9WdY=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 3: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 4: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 13:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:a4:2a:a0:90:f4:8f:b5:8f:ea:47:49:78:4a:83:49:bc:3d:e6:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Dec 13 08:07:11 2025 GMT Not After : Dec 16 15:27:11 2025 GMT Subject: CN=8F1B18BBD89249454D96C112DEE5F3B579E9CA9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4f:df:f4:5a:36:f6:5c:3a:6d:82:45:86:2e: 01:ac:02:be:3a:61:05:40:dd:0c:5f:51:e0:96:7e: 99:e3:f7:22:3f:78:a7:f3:58:7c:6a:ce:37:88:cb: 03:1b:c4:59:cf:b4:15:6c:1c:d6:2a:34:cd:64:a9: bf:98:cb:51:3b:40:81:68:76:af:9d:8e:42:27:40: 82:f4:22:75:49:05:7d:e8:3b:22:57:4b:a9:c7:52: 80:08:c5:f1:23:06:07:63:13:44:37:91:01:37:a0: f2:eb:4a:9b:b5:47:17:46:ff:06:fd:6d:cb:94:f3: 3e:99:19:8b:a0:69:2d:a0:54:38:08:90:56:f0:3f: 6f:a5:11:2a:54:c0:58:93:85:d8:41:91:b2:e6:69: d2:ea:c4:61:9f:a0:df:d4:c3:77:d7:cb:9e:17:28: 3d:dd:c4:d0:df:6d:9b:1d:cf:76:a7:91:d6:b2:26: ee:47:6c:e6:1c:d7:a1:48:7f:a0:54:d3:41:2a:33: 7c:2b:50:3d:e9:c7:63:52:15:91:c0:70:02:b7:45: 6d:c3:ac:13:02:1f:d6:7b:40:bf:a0:6b:f4:9f:24: df:20:86:ae:5e:24:2f:1a:05:ad:d3:f2:4e:ff:6c: 03:6d:4d:3d:19:8a:7f:28:9f:e1:c6:27:15:0e:50: 8d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1B:18:BB:D8:92:49:45:4D:96:C1:12:DE:E5:F3:B5:79:E9:CA:9A X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d2:2e:cd:01:1b:d2:b6:38:75:96:6e:69:c8:88:8b:b9:0b: 7e:f0:fc:da:ae:d3:5f:5a:5a:91:b7:d2:41:66:a9:59:76:ce: 22:90:d5:d0:23:2a:64:c5:78:44:32:00:33:26:03:05:2d:e3: 36:d8:f9:ac:ad:37:3e:98:ff:1f:3f:ef:c2:66:56:2b:33:7e: f5:54:8d:15:4f:cf:ef:60:59:42:dd:d0:5e:1c:5a:6c:fc:53: 46:d8:39:6f:11:ca:09:2a:0d:b8:e0:2f:e7:fa:e0:9c:a4:da: b7:ed:32:38:fd:17:b0:87:25:2f:9b:45:f5:54:13:32:bd:cd: eb:f3:0b:f1:2a:fe:a8:57:e4:55:6e:2b:a7:d5:d1:11:75:be: 83:f8:6f:eb:3c:5c:42:43:97:42:5d:f4:a0:39:79:48:18:73: d7:d2:98:d3:95:86:d2:b8:57:bb:99:6e:d0:fd:ba:e5:8b:58: 17:a8:db:3f:36:e2:c0:0d:b3:a3:ea:0a:ed:8a:a7:60:1a:ba: 15:62:3e:da:ed:69:38:3e:d9:80:47:fe:68:76:34:81:97:f8: d9:cd:ca:76:1b:2f:2e:ea:98:14:10:a2:8d:15:5b:4e:e7:3f: 16:58:00:2d:84:41:f9:5f:b0:bf:8c:fc:f5:d4:a1:3b:24:32: 90:21:51:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUKQqoJD0j7WP6kdJeEqDSbw95mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNTEyMTMwODA3MTFaFw0yNTEyMTYxNTI3MTFaMDMxMTAvBgNV BAMTKDhGMUIxOEJCRDg5MjQ5NDU0RDk2QzExMkRFRTVGM0I1NzlFOUNBOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeT9/0Wjb2XDptgkWGLgGsAr46 YQVA3QxfUeCWfpnj9yI/eKfzWHxqzjeIywMbxFnPtBVsHNYqNM1kqb+Yy1E7QIFo dq+djkInQIL0InVJBX3oOyJXS6nHUoAIxfEjBgdjE0Q3kQE3oPLrSpu1RxdG/wb9 bcuU8z6ZGYugaS2gVDgIkFbwP2+lESpUwFiThdhBkbLmadLqxGGfoN/Uw3fXy54X KD3dxNDfbZsdz3ankdayJu5HbOYc16FIf6BU00EqM3wrUD3px2NSFZHAcAK3RW3D rBMCH9Z7QL+ga/SfJN8ghq5eJC8aBa3T8k7/bANtTT0Zin8on+HGJxUOUI2RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjxsYu9iSSUVNlsES3uXztXnpypowHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjSLs0BG9K2OHWWbmnIiIu5C37w/Nqu019a WpG30kFmqVl2ziKQ1dAjKmTFeEQyADMmAwUt4zbY+aytNz6Y/x8/78JmViszfvVU jRVPz+9gWULd0F4cWmz8U0bYOW8RygkqDbjgL+f64Jyk2rftMjj9F7CHJS+bRfVU EzK9zevzC/Eq/qhX5FVuK6fV0RF1voP4b+s8XEJDl0Jd9KA5eUgYc9fSmNOVhtK4 V7uZbtD9uuWLWBeo2z824sANs6PqCu2Kp2AauhViPtrtaTg+2YBH/mh2NIGX+NnN ynYbLy7qmBQQoo0VW07nPxZYAC2EQflfsL+M/PXUoTskMpAhUVo= -----END CERTIFICATE-----Generated at Sun Dec 14 03:34:15 2025 by rpki-client