This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft File: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft (raw, json) Hash identifier: tpqHbUt47VjbovseeqsN3gnqagl0haR8QiE0+nJ7ajg= Subject key identifier: 51:93:08:47:54:85:16:2C:35:9D:94:9B:62:54:F1:5B:EB:5F:41:E5 Authority key identifier: A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A Certificate issuer: /CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Certificate serial: 46C057B21B4D7F02F9EFBAF43CB47522EAE1A2F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft Manifest number: 0530 Signing time: Sat 13 Dec 2025 00:32:19 +0000 Manifest this update: Sat 13 Dec 2025 00:27:19 +0000 Manifest next update: Tue 16 Dec 2025 09:08:19 +0000 Files and hashes: 1: A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl (hash: nFFcptzExFAd65sAyvDisTniILSKPglzX0BK9xDYoPc=) 2: 3130332e33302e3234342e302f32322d3234203d3e20313331373435.roa (hash: Lfmrbgi7I4VUpzGw3wvKThYLzEQmB11Zng6ABNZdlxE=) 3: 3230322e38332e3132302e302f32322d3234203d3e20313331373435.roa (hash: Ctn9Yisa6OnP3ScXQT5GVDtbqvcEhdIPhnJD0xSvFz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 09:08:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c0:57:b2:1b:4d:7f:02:f9:ef:ba:f4:3c:b4:75:22:ea:e1:a2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A Validity Not Before: Dec 13 00:27:19 2025 GMT Not After : Dec 16 09:08:19 2025 GMT Subject: CN=519308475485162C359D949B6254F15BEB5F41E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:70:7c:79:09:b3:3a:59:96:84:3c:be:75: 3f:e3:4e:78:be:aa:2d:05:96:6d:4e:de:ac:31:3e: 05:4f:59:6f:93:13:13:6e:a5:61:74:e4:0a:04:05: 4a:07:74:12:4c:d9:7a:1a:dc:3a:04:94:f7:37:24: 8a:ac:c1:c0:23:d3:9f:ae:00:ac:6e:08:2e:9e:e9: a8:ca:c9:67:ff:9a:09:3f:0e:02:04:42:bb:c9:49: c0:94:c6:85:a1:30:4f:42:b3:6f:01:af:1a:8b:85: 52:14:f6:b0:b4:a9:8a:ff:c3:c0:e7:d4:19:b4:63: 68:15:76:e3:12:07:02:c7:45:cc:11:7a:ed:7d:50: a3:99:2d:39:37:a1:6a:8b:7b:32:d4:ee:a3:cc:5c: ce:7d:25:d9:1c:ad:f7:9e:12:33:bc:d3:84:27:31: 05:e1:13:aa:87:c9:f3:5e:9b:f9:51:2e:4c:1d:a1: a9:b9:bf:3e:6c:92:a5:1e:73:bc:2c:1c:e0:47:ab: fa:bb:6b:49:38:09:b2:b9:b5:9a:bc:50:13:e1:00: 21:b7:7e:a2:2d:23:5e:7f:d8:96:f2:0e:e5:5d:43: d6:22:42:96:7b:fd:c0:b5:44:15:fb:d5:15:1f:47: 7c:82:b1:fd:00:e0:af:17:ec:80:72:5f:e2:ee:c3: b1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:93:08:47:54:85:16:2C:35:9D:94:9B:62:54:F1:5B:EB:5F:41:E5 X509v3 Authority Key Identifier: keyid:A6:6E:6F:78:7B:7D:E2:EA:2F:F1:C1:9F:30:DF:E2:21:5B:0B:EB:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/538c621d-05bc-4bcd-9657-cdf33860f21a/0/A66E6F787B7DE2EA2FF1C19F30DFE2215B0BEB4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:24:7e:46:d8:f8:29:bc:ee:55:37:8f:cc:f9:01:82:55:36: 86:cf:86:23:c8:33:f9:58:4e:3a:db:7c:37:bb:0f:15:b6:21: 20:9e:90:7a:a3:5c:8a:21:3d:7c:1a:ab:ab:fa:9c:0d:93:db: a4:be:3a:6e:b8:88:83:d5:8b:17:2d:d9:75:75:b3:a7:cd:b1: dc:a2:41:d7:1a:24:43:47:ec:64:c9:0f:d5:42:4b:e2:a4:3c: 2d:04:a2:d4:83:77:3d:8b:56:b4:a9:c2:3c:20:87:14:d0:96: fb:9e:a5:c0:e5:91:32:14:82:a5:e1:60:0e:a9:3a:0d:fe:0d: 3e:35:31:78:83:d7:21:16:7f:73:5f:6e:c1:2a:a8:fc:b2:3a: 5b:06:88:08:0f:35:bf:c7:38:50:c0:9d:76:61:6f:ba:25:45: d7:f0:b1:1f:95:aa:d9:26:84:09:85:60:61:a7:17:8d:32:eb: 87:39:59:9d:11:c6:18:f9:30:b1:28:2c:af:60:bc:99:ff:2d: 02:a9:e6:ab:ca:aa:38:d6:fa:1d:14:61:67:0a:39:15:2d:9c: 3a:36:f2:25:31:15:51:af:97:4e:85:e5:b1:94:0e:6e:67:56: 38:9b:ed:8e:ee:9e:b1:25:c6:4e:42:27:19:cb:b5:bc:d8:50: 51:d3:b2:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURsBXshtNfwL577r0PLR1IurhovYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1 QjBCRUI0QTAeFw0yNTEyMTMwMDI3MTlaFw0yNTEyMTYwOTA4MTlaMDMxMTAvBgNV BAMTKDUxOTMwODQ3NTQ4NTE2MkMzNTlEOTQ5QjYyNTRGMTVCRUI1RjQxRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzgnB8eQmzOlmWhDy+dT/jTni+ qi0Flm1O3qwxPgVPWW+TExNupWF05AoEBUoHdBJM2Xoa3DoElPc3JIqswcAj05+u AKxuCC6e6ajKyWf/mgk/DgIEQrvJScCUxoWhME9Cs28BrxqLhVIU9rC0qYr/w8Dn 1Bm0Y2gVduMSBwLHRcwReu19UKOZLTk3oWqLezLU7qPMXM59JdkcrfeeEjO804Qn MQXhE6qHyfNem/lRLkwdoam5vz5skqUec7wsHOBHq/q7a0k4CbK5tZq8UBPhACG3 fqItI15/2JbyDuVdQ9YiQpZ7/cC1RBX71RUfR3yCsf0A4K8X7IByX+Luw7FdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUZMIR1SFFiw1nZSbYlTxW+tfQeUwHwYDVR0j BBgwFoAUpm5veHt94uov8cGfMN/iIVsL60owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzhjNjIxZC0wNWJjLTRiY2QtOTY1Ny1jZGYzMzg2MGYyMWEvMC9BNjZFNkY3ODdC N0RFMkVBMkZGMUMxOUYzMERGRTIyMTVCMEJFQjRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUyMjE1QjBC RUI0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTM4YzYyMWQtMDViYy00YmNkLTk2 NTctY2RmMzM4NjBmMjFhLzAvQTY2RTZGNzg3QjdERTJFQTJGRjFDMTlGMzBERkUy MjE1QjBCRUI0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMkfkbY+Cm87lU3j8z5AYJVNobPhiPIM/lY TjrbfDe7DxW2ISCekHqjXIohPXwaq6v6nA2T26S+Om64iIPVixct2XV1s6fNsdyi QdcaJENH7GTJD9VCS+KkPC0EotSDdz2LVrSpwjwghxTQlvuepcDlkTIUgqXhYA6p Og3+DT41MXiD1yEWf3NfbsEqqPyyOlsGiAgPNb/HOFDAnXZhb7olRdfwsR+Vqtkm hAmFYGGnF40y64c5WZ0Rxhj5MLEoLK9gvJn/LQKp5qvKqjjW+h0UYWcKORUtnDo2 8iUxFVGvl06F5bGUDm5nVjib7Y7unrElxk5CJxnLtbzYUFHTsjE= -----END CERTIFICATE-----Generated at Sat Dec 13 23:08:53 2025 by rpki-client