This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: mts2Vi5nMI6Vt8gkhb7OLgqxXHNxeu8HP6kiPjtmSdM= Subject key identifier: F7:1E:2E:F6:8A:88:35:42:CA:40:AD:DA:D5:76:39:3E:6D:98:C6:38 Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 21D3CC79EE30CF4D790E8B379DAA9AEDC36654A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: 0145 Signing time: Wed 03 Dec 2025 01:40:49 +0000 Manifest this update: Wed 03 Dec 2025 01:35:49 +0000 Manifest next update: Sat 06 Dec 2025 06:14:49 +0000 Files and hashes: 1: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: FZ1g1tOiLoxBN8K/THwRbdRUPt9hz3RTQ4wi4ak+BsM=) 2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 06:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d3:cc:79:ee:30:cf:4d:79:0e:8b:37:9d:aa:9a:ed:c3:66:54:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: Dec 3 01:35:49 2025 GMT Not After : Dec 6 06:14:49 2025 GMT Subject: CN=F71E2EF68A883542CA40ADDAD576393E6D98C638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:62:be:5c:1b:26:92:3d:1a:56:90:28:5a:24: 0f:71:e6:e4:ba:69:0a:74:a7:32:7c:5c:6a:9e:8f: 41:ab:a2:04:77:61:2e:79:c7:51:df:04:5a:80:db: 7c:c4:90:9f:54:70:bb:0a:f2:c9:1b:c0:50:f9:f1: d1:d8:fd:31:f1:4c:c5:f5:f2:e8:e3:a9:59:90:2f: 4a:4d:29:bf:01:6c:85:5f:74:1a:e4:e6:ed:c7:77: 5a:bf:56:d6:b9:99:24:1c:c5:8c:5c:9f:35:32:22: a7:b5:04:fa:20:2d:75:35:eb:3d:4a:01:89:0e:2b: 03:64:c8:ee:0f:6b:5b:e4:c0:2d:7c:ad:d4:c7:ea: 20:5d:a0:b9:f9:32:90:70:ec:b2:0b:28:13:6a:db: 66:89:e0:9f:01:b8:7f:3f:43:62:a1:72:d9:d4:9a: 00:85:1c:cf:4d:e2:e1:ff:12:74:78:04:78:5a:1d: cb:1d:48:e4:9e:42:17:90:f6:04:3b:47:cd:ed:5d: 6b:e0:62:2d:5a:79:5d:76:a8:a8:78:73:14:4b:00: ae:98:1c:a3:56:26:37:91:59:e1:80:01:70:27:d2: 46:b9:75:31:87:19:10:2b:00:70:72:80:1a:7f:f7: 2d:a3:f7:50:57:44:03:62:00:2a:96:62:7e:83:72: d2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1E:2E:F6:8A:88:35:42:CA:40:AD:DA:D5:76:39:3E:6D:98:C6:38 X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:49:7f:54:97:ff:39:5c:6b:49:70:c3:04:e9:28:5d:44:b5: 95:4b:0f:bc:f1:19:e1:b0:3c:5b:6b:7a:03:4e:2b:7f:4f:46: 6a:f5:8f:8d:c9:a9:24:76:da:22:9c:4f:72:a5:3b:18:ac:6f: 18:e4:f2:80:be:98:be:c5:11:24:2d:40:dc:b7:ee:40:e5:0f: 4d:07:0a:7a:6f:9c:47:86:27:f7:37:97:33:85:9a:b7:b4:88: f4:69:b3:46:0c:fb:1c:fa:ac:93:ba:7c:b9:4f:61:7a:9c:e6: 41:3f:39:08:ac:c2:d9:19:e5:73:14:af:20:01:8a:cf:53:dd: 3b:ff:8f:10:aa:48:3f:00:32:ea:34:43:aa:1f:81:1f:a1:23: 29:75:3f:1d:77:ba:7c:ca:cd:be:de:0e:e6:e9:6e:95:ef:cf: 26:a8:a3:79:98:f9:3e:0d:3f:db:ac:71:7c:8f:50:ec:47:24: 0a:39:e5:73:cf:97:90:41:a4:0e:76:33:09:7f:1c:ac:13:a3: 49:61:16:53:ce:42:1f:31:53:23:7c:17:51:e3:8f:32:89:ef: 8e:c1:7d:60:81:9a:14:69:03:b7:ba:fa:9a:c3:b9:ed:08:1b: a1:ab:81:48:db:92:94:e6:1c:1a:9f:69:01:64:d7:e2:35:61: 35:49:b8:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdPMee4wz015Dos3naqa7cNmVKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNTEyMDMwMTM1NDlaFw0yNTEyMDYwNjE0NDlaMDMxMTAvBgNV BAMTKEY3MUUyRUY2OEE4ODM1NDJDQTQwQUREQUQ1NzYzOTNFNkQ5OEM2MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYr5cGyaSPRpWkChaJA9x5uS6 aQp0pzJ8XGqej0GrogR3YS55x1HfBFqA23zEkJ9UcLsK8skbwFD58dHY/THxTMX1 8ujjqVmQL0pNKb8BbIVfdBrk5u3Hd1q/Vta5mSQcxYxcnzUyIqe1BPogLXU16z1K AYkOKwNkyO4Pa1vkwC18rdTH6iBdoLn5MpBw7LILKBNq22aJ4J8BuH8/Q2KhctnU mgCFHM9N4uH/EnR4BHhaHcsdSOSeQheQ9gQ7R83tXWvgYi1aeV12qKh4cxRLAK6Y HKNWJjeRWeGAAXAn0ka5dTGHGRArAHBygBp/9y2j91BXRANiACqWYn6DctJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9x4u9oqINULKQK3a1XY5Pm2YxjgwHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARJf1SX/zlca0lwwwTpKF1EtZVLD7zxGeGw PFtregNOK39PRmr1j43JqSR22iKcT3KlOxisbxjk8oC+mL7FESQtQNy37kDlD00H CnpvnEeGJ/c3lzOFmre0iPRps0YM+xz6rJO6fLlPYXqc5kE/OQiswtkZ5XMUryAB is9T3Tv/jxCqSD8AMuo0Q6ofgR+hIyl1Px13unzKzb7eDubpbpXvzyaoo3mY+T4N P9uscXyPUOxHJAo55XPPl5BBpA52Mwl/HKwTo0lhFlPOQh8xUyN8F1HjjzKJ747B fWCBmhRpA7e6+prDue0IG6GrgUjbkpTmHBqfaQFk1+I1YTVJuE8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:26 2025 by rpki-client