This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: t2YmkLmXFR4d25IDhLx8cd1rYjCQ93ihEBJ0Fqsqi3A= Subject key identifier: A3:CC:96:16:30:3C:44:19:EC:EB:24:19:6A:5D:9F:F3:D0:A2:41:63 Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 3C9DE56C29E585339A47DB460C7A0221ADF67C85 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 0332 Signing time: Tue 02 Dec 2025 20:01:34 +0000 Manifest this update: Tue 02 Dec 2025 19:56:34 +0000 Manifest next update: Sat 06 Dec 2025 00:55:34 +0000 Files and hashes: 1: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) 2: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: BVWWHiZKqTpD4x/EVU3DmPtfY6YHoSBYUZK+MZZdEaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:9d:e5:6c:29:e5:85:33:9a:47:db:46:0c:7a:02:21:ad:f6:7c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Dec 2 19:56:34 2025 GMT Not After : Dec 6 00:55:34 2025 GMT Subject: CN=A3CC9616303C4419ECEB24196A5D9FF3D0A24163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:b3:df:8c:63:24:9e:cc:3a:48:c3:e2:00: d7:8f:7c:d7:cc:db:45:f7:0f:c9:69:24:3c:5b:b3: 3f:7c:b3:c7:48:46:dc:a2:0f:4a:24:6d:66:d3:93: 98:f8:07:dc:03:fa:11:ee:7e:13:53:4b:dd:2d:22: a9:17:f9:1b:c2:54:04:7d:d8:22:75:d8:02:11:6d: 5e:1e:64:b6:fb:b2:88:94:70:43:46:98:43:f4:f0: bd:8b:68:5a:0a:bc:0a:04:64:3d:09:41:86:50:48: 56:ea:11:64:0b:18:11:60:14:be:f0:02:bf:db:be: f2:8d:5a:df:fe:1d:b8:c8:f1:4e:79:e3:85:c4:3b: 0a:d6:c7:67:21:5a:99:6d:37:d5:7c:59:94:51:a2: 50:68:a7:93:77:ba:07:94:12:fd:66:77:24:b8:c5: 8f:3b:6a:dc:0c:45:2d:8a:8c:5c:3f:c1:c1:05:fb: 76:f1:01:8c:dc:b8:7d:45:2d:f2:7e:8d:4e:95:48: b8:9c:52:1c:3b:b0:27:6b:61:f7:59:a0:fd:8b:bf: 14:62:de:f8:14:98:30:67:3c:f6:da:19:ff:28:a2: 4f:5b:f2:f0:2b:74:99:7e:e7:31:c5:1e:56:3a:d8: cc:8e:5e:f6:9d:6b:0f:ef:ee:12:eb:51:f7:8f:7b: f2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CC:96:16:30:3C:44:19:EC:EB:24:19:6A:5D:9F:F3:D0:A2:41:63 X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1c:bc:f9:0e:73:01:02:8b:ec:1f:9f:6b:31:35:77:7f:c8: 1d:9d:a7:47:ad:18:7f:70:9e:a2:da:e0:f9:fc:a2:86:57:bd: 70:01:0a:2f:c5:be:b6:c0:00:96:61:fc:bc:e9:10:89:e0:53: e6:ce:c1:eb:a2:11:db:7f:54:48:76:00:ef:dc:53:95:e7:a1: ea:a9:fc:7c:6d:7b:5c:43:b0:eb:22:aa:16:34:9a:65:7e:11: ff:ba:9f:ee:97:a3:51:77:d8:26:0c:af:23:bc:46:08:fc:8c: 9c:dc:de:9a:e6:6d:50:e6:f6:53:8d:07:d6:bb:34:7b:00:f3: 51:a5:5d:67:ee:75:ba:ac:cb:61:18:49:90:20:64:83:93:4c: bb:b0:59:14:3b:da:26:e7:c5:b7:5e:0e:5b:63:7f:35:c1:96: 26:86:46:3d:ed:f0:2c:e1:15:69:c0:ea:60:48:c2:cc:0a:85: 87:c5:26:96:fe:68:b8:12:e7:af:a6:ac:ab:0c:0d:51:40:96: e2:91:23:ea:aa:d9:cb:c9:ab:cd:74:b1:25:ae:bf:e7:81:b0: fa:1b:63:4d:9e:03:cb:d9:2b:10:be:26:ae:27:30:79:14:11: ea:19:f6:8e:91:1d:df:9e:0d:6f:76:42:08:1a:2b:a9:d0:c0: 09:de:12:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJ3lbCnlhTOaR9tGDHoCIa32fIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNTEyMDIxOTU2MzRaFw0yNTEyMDYwMDU1MzRaMDMxMTAvBgNV BAMTKEEzQ0M5NjE2MzAzQzQ0MTlFQ0VCMjQxOTZBNUQ5RkYzRDBBMjQxNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVf7PfjGMknsw6SMPiANePfNfM 20X3D8lpJDxbsz98s8dIRtyiD0okbWbTk5j4B9wD+hHufhNTS90tIqkX+RvCVAR9 2CJ12AIRbV4eZLb7soiUcENGmEP08L2LaFoKvAoEZD0JQYZQSFbqEWQLGBFgFL7w Ar/bvvKNWt/+HbjI8U5544XEOwrWx2chWpltN9V8WZRRolBop5N3ugeUEv1mdyS4 xY87atwMRS2KjFw/wcEF+3bxAYzcuH1FLfJ+jU6VSLicUhw7sCdrYfdZoP2LvxRi 3vgUmDBnPPbaGf8ook9b8vArdJl+5zHFHlY62MyOXvadaw/v7hLrUfePe/ITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8yWFjA8RBns6yQZal2f89CiQWMwHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8cvPkOcwECi+wfn2sxNXd/yB2dp0etGH9w nqLa4Pn8ooZXvXABCi/FvrbAAJZh/LzpEIngU+bOweuiEdt/VEh2AO/cU5Xnoeqp /Hxte1xDsOsiqhY0mmV+Ef+6n+6Xo1F32CYMryO8Rgj8jJzc3prmbVDm9lONB9a7 NHsA81GlXWfudbqsy2EYSZAgZIOTTLuwWRQ72ibnxbdeDltjfzXBliaGRj3t8Czh FWnA6mBIwswKhYfFJpb+aLgS56+mrKsMDVFAluKRI+qq2cvJq810sSWuv+eBsPob Y02eA8vZKxC+Jq4nMHkUEeoZ9o6RHd+eDW92QggaK6nQwAneEpg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:55 2025 by rpki-client