This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: yxvQVTlMU5UxWtQ+KMz/Yih/teeOGvbZ6HT42hYB5eg= Subject key identifier: BF:53:80:30:38:E2:DD:F5:7B:45:25:58:E2:8B:76:37:85:28:FD:F4 Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 7993CC5BCB4B1EB82581F7C612D44904D63B3412 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 0528 Signing time: Mon 01 Dec 2025 10:51:21 +0000 Manifest this update: Mon 01 Dec 2025 10:46:21 +0000 Manifest next update: Thu 04 Dec 2025 17:34:21 +0000 Files and hashes: 1: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) 2: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 3: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: El5ZEVOGtamD4m4uI3gHt9IaXhzdYo2QOzOOttAVO1U=) 4: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 5: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 6: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 7: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:34:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:93:cc:5b:cb:4b:1e:b8:25:81:f7:c6:12:d4:49:04:d6:3b:34:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Dec 1 10:46:21 2025 GMT Not After : Dec 4 17:34:21 2025 GMT Subject: CN=BF53803038E2DDF57B452558E28B76378528FDF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:33:ed:20:3c:d1:d5:54:5c:c8:04:6f:f8:7c: 23:2d:d9:c5:b7:cf:60:79:4d:1d:78:fe:8c:ae:09: f2:2b:57:1d:73:8d:f2:17:08:ce:74:14:5a:f4:25: b7:ce:ba:24:3b:21:06:dd:3f:0c:fb:e6:c7:86:41: b7:c4:11:7e:39:15:e7:d0:95:83:aa:c6:a6:a1:8d: 47:8f:25:7b:29:9c:b6:00:20:10:b4:d5:69:fa:93: ae:2c:b4:75:87:d2:99:49:3f:e9:a3:9d:83:52:2c: 56:0b:f3:b3:b1:04:8c:7d:1e:3f:9a:24:cb:d3:78: 85:30:e9:3d:78:26:e4:9a:33:7c:8b:17:f5:af:95: 26:de:6b:e2:66:05:ba:ef:15:3d:c8:9c:55:76:09: b5:8b:3d:59:f4:bf:6b:3e:24:5e:61:5d:29:95:ba: 12:3b:d1:fe:69:e9:17:db:62:38:79:1f:e1:9f:33: a9:86:d7:6f:0f:13:73:39:2a:4b:bc:21:82:0b:19: f0:bb:be:51:69:6e:a8:92:b1:da:21:d4:6c:2c:08: a3:e0:24:ea:22:17:c8:d6:89:84:d2:dc:36:d0:78: bd:8a:63:4f:74:11:26:96:c2:ec:fe:57:68:db:ff: 14:e8:e5:54:24:7c:31:34:09:59:1f:c7:31:90:a1: 94:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:53:80:30:38:E2:DD:F5:7B:45:25:58:E2:8B:76:37:85:28:FD:F4 X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ee:08:a6:14:1f:38:99:6d:bd:b5:fc:15:13:0f:bd:a5:8b: 40:26:ff:9b:7a:62:1a:5f:6d:de:31:96:26:99:0b:8e:e2:9b: 39:40:4f:fb:73:5c:f8:c1:1b:af:5b:6a:c0:0e:3b:7e:ea:77: bd:7f:38:bf:6c:ca:d0:75:ce:d4:5a:1a:67:41:1b:f5:f2:71: 3f:68:14:b7:c9:16:09:f8:9d:ab:1c:79:5f:4c:15:a1:0f:a7: 74:ca:8b:c0:9a:19:c4:bf:20:17:26:e0:89:b4:8e:83:34:98: 79:a4:77:3a:be:72:f6:f9:c5:03:4c:b9:c4:76:5d:c1:8b:ed: 56:20:95:ff:3a:88:33:08:4c:f5:5f:36:b6:4a:88:0f:e1:aa: 9e:23:1d:b8:d7:79:05:50:64:07:47:92:a1:40:98:aa:03:a7: 39:a5:f2:3d:8f:8c:30:2a:2e:f6:17:66:1c:2f:1b:53:0f:c9: 18:43:c7:3b:4d:ba:d6:35:e9:61:96:8b:81:65:20:19:d6:03: e8:4c:04:d1:da:a6:bd:bd:93:e0:49:48:aa:da:e7:5d:ed:32: 8f:b5:47:06:7c:60:a3:a4:e4:a9:56:f9:ab:9f:dd:1d:77:7f: c4:e7:66:2d:2f:9c:54:b3:f5:fc:b1:b5:e3:9f:8a:86:c7:df: 20:16:bd:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeZPMW8tLHrglgffGEtRJBNY7NBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNTEyMDExMDQ2MjFaFw0yNTEyMDQxNzM0MjFaMDMxMTAvBgNV BAMTKEJGNTM4MDMwMzhFMkRERjU3QjQ1MjU1OEUyOEI3NjM3ODUyOEZERjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpM+0gPNHVVFzIBG/4fCMt2cW3 z2B5TR14/oyuCfIrVx1zjfIXCM50FFr0JbfOuiQ7IQbdPwz75seGQbfEEX45FefQ lYOqxqahjUePJXspnLYAIBC01Wn6k64stHWH0plJP+mjnYNSLFYL87OxBIx9Hj+a JMvTeIUw6T14JuSaM3yLF/WvlSbea+JmBbrvFT3InFV2CbWLPVn0v2s+JF5hXSmV uhI70f5p6RfbYjh5H+GfM6mG128PE3M5Kku8IYILGfC7vlFpbqiSsdoh1GwsCKPg JOoiF8jWiYTS3DbQeL2KY090ESaWwuz+V2jb/xTo5VQkfDE0CVkfxzGQoZQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1OAMDji3fV7RSVY4ot2N4Uo/fQwHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAruCKYUHziZbb21/BUTD72li0Am/5t6Yhpf bd4xliaZC47imzlAT/tzXPjBG69basAOO37qd71/OL9sytB1ztRaGmdBG/XycT9o FLfJFgn4nasceV9MFaEPp3TKi8CaGcS/IBcm4Im0joM0mHmkdzq+cvb5xQNMucR2 XcGL7VYglf86iDMITPVfNrZKiA/hqp4jHbjXeQVQZAdHkqFAmKoDpzml8j2PjDAq LvYXZhwvG1MPyRhDxztNutY16WGWi4FlIBnWA+hMBNHapr29k+BJSKra513tMo+1 RwZ8YKOk5KlW+auf3R13f8TnZi0vnFSz9fyxteOfiobH3yAWvVg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:53 2025 by rpki-client