This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft File: A575236C1BE8E700EF4D54FB243030C7256654C6.mft (raw, json) Hash identifier: Km86QKQmXhB/+JQCaOVeuyDDlsqkwVuC0C2Ve/qs3XY= Subject key identifier: 0D:7C:FA:19:1F:2E:D2:A6:A9:FA:C0:3D:67:95:5D:13:74:FD:24:8C Authority key identifier: A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 Certificate issuer: /CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Certificate serial: 5BD8800C15D883A8F6D40109FD11BE0994F9805A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft Manifest number: 0110 Signing time: Mon 01 Dec 2025 17:11:21 +0000 Manifest this update: Mon 01 Dec 2025 17:06:21 +0000 Manifest next update: Thu 04 Dec 2025 20:43:21 +0000 Files and hashes: 1: 3130332e3137352e3230342e302f32342d3234203d3e20313437313139.roa (hash: FwokdY5Winm64kPdNPud+dd5Ep75CI564UTa5xn81h0=) 2: A575236C1BE8E700EF4D54FB243030C7256654C6.crl (hash: pvQ1209nYMZ/qyLrYtERzkITcnmkVYJf4VVf621Z6Gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:d8:80:0c:15:d8:83:a8:f6:d4:01:09:fd:11:be:09:94:f9:80:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A575236C1BE8E700EF4D54FB243030C7256654C6 Validity Not Before: Dec 1 17:06:21 2025 GMT Not After : Dec 4 20:43:21 2025 GMT Subject: CN=0D7CFA191F2ED2A6A9FAC03D67955D1374FD248C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:10:59:da:21:3e:bb:9e:aa:8e:d4:43:ba:89: 9f:0d:75:22:0a:8e:90:55:bf:e5:f6:02:19:36:5f: c0:fe:3f:31:5c:02:19:ef:97:f0:93:3c:85:09:46: e6:08:bd:db:35:55:1c:63:9b:c8:43:81:90:22:b1: 28:9b:c9:e6:76:47:39:b2:f5:fe:34:b5:46:b3:27: 2f:20:a8:f4:2d:fb:56:15:d1:cc:58:83:67:0c:2f: 26:62:c5:0f:4e:ac:c1:16:98:43:5b:03:98:46:0d: 34:0f:a7:39:ff:95:c3:5c:b0:fd:3d:b9:33:07:25: cc:43:ae:4e:fd:e4:77:0b:b2:61:6a:2b:99:bd:f3: d8:8d:f2:3f:ee:8e:76:9b:cc:55:f1:3e:20:bf:b5: 71:8c:fa:9b:bc:01:ae:71:8e:88:cc:de:a7:f2:b1: 49:f9:ff:db:05:e6:6f:1d:a7:80:7d:e1:45:4c:f1: e0:c5:40:c8:a4:47:db:50:48:49:38:90:5f:11:0f: ca:54:ff:15:57:a1:20:ea:b7:0a:65:43:2c:6c:46: 52:0c:aa:5c:e5:4a:63:6c:5a:2b:7b:96:3e:c8:9e: 8c:d7:b6:97:bc:d8:e6:50:86:fb:16:43:1d:3b:2a: fe:a3:c9:53:59:2a:65:ee:17:c4:a5:55:71:ab:ab: 87:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7C:FA:19:1F:2E:D2:A6:A9:FA:C0:3D:67:95:5D:13:74:FD:24:8C X509v3 Authority Key Identifier: keyid:A5:75:23:6C:1B:E8:E7:00:EF:4D:54:FB:24:30:30:C7:25:66:54:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A575236C1BE8E700EF4D54FB243030C7256654C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6469c3e3-7b59-4490-84cf-fef1585ac75b/0/A575236C1BE8E700EF4D54FB243030C7256654C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:c8:42:e3:49:32:53:fb:65:9e:56:7c:95:cf:84:c8:a2:ce: fb:36:a0:de:60:9f:0d:6d:b6:a4:6b:c9:0c:a8:aa:59:8d:3d: 4d:e9:ab:8c:c6:68:b8:6e:f8:2f:7c:ee:6d:1b:65:44:3c:64: b4:94:9d:cb:47:b1:4c:7b:40:cb:86:c0:b7:82:8e:b3:af:83: 49:bb:02:55:2d:c0:fb:87:9d:d1:32:22:4f:4a:3f:08:aa:20: a5:81:c1:a0:aa:0e:98:8c:a8:37:f3:4d:76:1a:8d:5d:e0:54: 72:63:bd:78:c5:d3:9e:9b:dc:2b:62:a6:cf:c1:5c:8c:e3:85: 20:75:aa:50:8b:94:6f:aa:df:c1:d1:23:cc:af:40:ff:7e:6e: 09:7d:09:2b:81:62:b8:d5:39:d1:09:2a:64:4c:b1:06:95:dd: 3e:1e:cd:cc:cc:57:80:7c:e3:3c:ec:23:1a:e6:10:ef:21:10: 3a:bb:6a:92:12:47:3a:06:b9:60:d2:89:5a:79:2f:d0:20:55: ff:8d:ea:09:22:51:ea:8a:76:f1:98:f1:36:3e:a2:0a:ab:ea: 17:d4:12:6f:74:72:3d:5c:8f:bf:55:d8:35:4c:ea:a9:cd:09: 9b:bd:a6:b3:cd:61:92:3b:1c:c9:7d:54:ba:85:c3:fb:d3:c9: ed:0e:40:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW9iADBXYg6j21AEJ/RG+CZT5gFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcy NTY2NTRDNjAeFw0yNTEyMDExNzA2MjFaFw0yNTEyMDQyMDQzMjFaMDMxMTAvBgNV BAMTKDBEN0NGQTE5MUYyRUQyQTZBOUZBQzAzRDY3OTU1RDEzNzRGRDI0OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZEFnaIT67nqqO1EO6iZ8NdSIK jpBVv+X2Ahk2X8D+PzFcAhnvl/CTPIUJRuYIvds1VRxjm8hDgZAisSibyeZ2Rzmy 9f40tUazJy8gqPQt+1YV0cxYg2cMLyZixQ9OrMEWmENbA5hGDTQPpzn/lcNcsP09 uTMHJcxDrk795HcLsmFqK5m989iN8j/ujnabzFXxPiC/tXGM+pu8Aa5xjojM3qfy sUn5/9sF5m8dp4B94UVM8eDFQMikR9tQSEk4kF8RD8pU/xVXoSDqtwplQyxsRlIM qlzlSmNsWit7lj7InozXtpe82OZQhvsWQx07Kv6jyVNZKmXuF8SlVXGrq4cNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDXz6GR8u0qap+sA9Z5VdE3T9JIwwHwYDVR0j BBgwFoAUpXUjbBvo5wDvTVT7JDAwxyVmVMYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDY5YzNlMy03YjU5LTQ0OTAtODRjZi1mZWYxNTg1YWM3NWIvMC9BNTc1MjM2QzFC RThFNzAwRUY0RDU0RkIyNDMwMzBDNzI1NjY1NEM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMwQzcyNTY2 NTRDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ2OWMzZTMtN2I1OS00NDkwLTg0 Y2YtZmVmMTU4NWFjNzViLzAvQTU3NTIzNkMxQkU4RTcwMEVGNEQ1NEZCMjQzMDMw QzcyNTY2NTRDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvIQuNJMlP7ZZ5WfJXPhMiizvs2oN5gnw1t tqRryQyoqlmNPU3pq4zGaLhu+C987m0bZUQ8ZLSUnctHsUx7QMuGwLeCjrOvg0m7 AlUtwPuHndEyIk9KPwiqIKWBwaCqDpiMqDfzTXYajV3gVHJjvXjF056b3Ctips/B XIzjhSB1qlCLlG+q38HRI8yvQP9+bgl9CSuBYrjVOdEJKmRMsQaV3T4ezczMV4B8 4zzsIxrmEO8hEDq7apISRzoGuWDSiVp5L9AgVf+N6gkiUeqKdvGY8TY+ogqr6hfU Em90cj1cj79V2DVM6qnNCZu9prPNYZI7HMl9VLqFw/vTye0OQPg= -----END CERTIFICATE-----Generated at Wed Dec 3 15:32:25 2025 by rpki-client