This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft File: A62202F88CE61D6BD47195FB36103CDD061D7D27.mft (raw, json) Hash identifier: smHhdroOrXGPFlCaZVTudbIuz4ioEWekByIqksXZCsc= Subject key identifier: 3D:F4:B8:AB:1C:8A:A7:B9:60:58:DB:76:86:8E:52:0A:C5:12:B7:DD Authority key identifier: A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 Certificate issuer: /CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Certificate serial: 2A6F6E700453E42EB2E5CA536DCAAB4BBD2046FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft Manifest number: 01E8 Signing time: Tue 02 Dec 2025 03:52:15 +0000 Manifest this update: Tue 02 Dec 2025 03:47:15 +0000 Manifest next update: Fri 05 Dec 2025 11:49:15 +0000 Files and hashes: 1: 3130332e3137382e38362e302f32342d3234203d3e20313439333230.roa (hash: 1bNdVmfT+djOhZ89RO79L01jzFp6ENRtflXpl+KJhHY=) 2: 3130332e3137382e38362e302f32332d3233203d3e20313439333230.roa (hash: kHcDvJb/DgVTvuuABJZolA65opC22Ih0u8COwgg0FLM=) 3: 3130332e3137382e38372e302f32342d3234203d3e20313439333230.roa (hash: ocoZWOXebE29PM9wf4GH+eYs09gSTcPRxglrbyGrg6Y=) 4: A62202F88CE61D6BD47195FB36103CDD061D7D27.crl (hash: PtDzWScX2X4WVTVmrANJ0pFyTcnjA036H0d7BObo2uI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:49:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6f:6e:70:04:53:e4:2e:b2:e5:ca:53:6d:ca:ab:4b:bd:20:46:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A62202F88CE61D6BD47195FB36103CDD061D7D27 Validity Not Before: Dec 2 03:47:15 2025 GMT Not After : Dec 5 11:49:15 2025 GMT Subject: CN=3DF4B8AB1C8AA7B96058DB76868E520AC512B7DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:79:73:1c:e6:ee:93:2d:4c:c0:3a:b4:eb: 06:b4:06:5a:22:19:25:a4:05:30:d8:9d:43:e5:7c: ed:92:87:02:73:d5:45:22:dc:34:9d:fd:12:2c:79: 1e:28:74:4b:a0:61:6e:93:29:78:df:34:8c:84:6c: 8b:81:4a:d7:89:7b:67:73:c7:26:a1:35:5d:b0:7d: 1b:35:b4:23:e0:30:7a:06:05:8a:ad:68:95:e7:92: 04:fc:80:0d:eb:d6:4a:f2:d1:3d:0d:4d:46:ee:c7: 7d:c8:c5:6c:b1:d6:2d:e5:8b:33:fd:23:a2:9e:e1: 9c:48:16:2e:f4:ee:e0:7c:92:d7:54:42:30:a3:21: 8d:cb:65:fa:66:b2:4a:15:2d:8f:8c:fb:41:2a:33: 0d:54:4b:82:f4:40:23:e4:28:a6:14:6e:d1:c6:a1: 42:5c:b7:1c:d1:6e:5a:f7:10:18:2a:05:4b:e0:24: 67:5f:f3:cf:b2:90:f0:3b:6a:0c:f5:da:36:62:25: 3c:82:99:21:fd:70:c0:db:37:f4:48:34:5f:c0:bc: 21:e4:d9:7c:f3:49:91:e6:25:ae:4c:30:db:19:15: f1:73:e2:30:70:19:89:4a:9a:34:9c:d8:18:42:de: d4:5c:e3:c6:ae:c7:b1:81:e9:9d:49:b8:79:87:46: 0d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F4:B8:AB:1C:8A:A7:B9:60:58:DB:76:86:8E:52:0A:C5:12:B7:DD X509v3 Authority Key Identifier: keyid:A6:22:02:F8:8C:E6:1D:6B:D4:71:95:FB:36:10:3C:DD:06:1D:7D:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A62202F88CE61D6BD47195FB36103CDD061D7D27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d738314-a975-4fd1-9bc9-52138f83b56e/0/A62202F88CE61D6BD47195FB36103CDD061D7D27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:12:e8:99:0c:a4:37:f8:0b:f7:65:45:68:35:d7:b5:a0:09: e4:b7:2b:39:27:61:36:6f:91:68:97:6f:3e:99:2f:35:4a:20: cb:24:91:a7:b6:5b:d4:b9:c1:41:b1:f1:ec:37:3d:54:e0:a5: 81:2f:a3:03:21:cb:f6:dd:29:e0:1c:b6:eb:f2:07:0d:f8:fd: 9f:c3:3f:da:5f:6a:89:97:11:fd:9e:66:aa:60:07:77:dc:35: 29:a7:07:a6:ce:16:1a:68:ff:46:ef:f7:2b:c9:8d:90:93:62: 26:80:fa:b1:32:dd:51:12:27:cf:c7:57:7f:4f:c8:ab:33:7d: 4e:ce:9f:56:78:a0:c2:23:6e:5d:0a:57:c9:57:28:e4:74:15: f9:83:97:22:9d:ea:12:74:c6:4e:7e:57:cc:88:22:74:59:28: 78:07:b6:ce:47:11:eb:48:d3:76:d9:d4:1b:4a:52:5f:ba:da: 3d:05:75:2e:a4:d6:03:91:48:5d:c3:be:91:67:5e:6f:d9:cf: 5a:93:09:c1:3c:ce:a4:e4:3c:d5:aa:31:ae:80:35:97:15:bd: 68:90:38:cb:54:4b:2a:1d:75:63:94:9e:d9:3e:5d:95:bc:93: bf:7e:64:75:0d:42:f0:38:dd:ba:de:1b:46:3d:c3:dd:54:bf: 7f:de:b4:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKm9ucART5C6y5cpTbcqrS70gRvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQw NjFEN0QyNzAeFw0yNTEyMDIwMzQ3MTVaFw0yNTEyMDUxMTQ5MTVaMDMxMTAvBgNV BAMTKDNERjRCOEFCMUM4QUE3Qjk2MDU4REI3Njg2OEU1MjBBQzUxMkI3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkw3lzHObuky1MwDq06wa0Bloi GSWkBTDYnUPlfO2ShwJz1UUi3DSd/RIseR4odEugYW6TKXjfNIyEbIuBSteJe2dz xyahNV2wfRs1tCPgMHoGBYqtaJXnkgT8gA3r1kry0T0NTUbux33IxWyx1i3lizP9 I6Ke4ZxIFi707uB8ktdUQjCjIY3LZfpmskoVLY+M+0EqMw1US4L0QCPkKKYUbtHG oUJctxzRblr3EBgqBUvgJGdf88+ykPA7agz12jZiJTyCmSH9cMDbN/RINF/AvCHk 2XzzSZHmJa5MMNsZFfFz4jBwGYlKmjSc2BhC3tRc48aux7GB6Z1JuHmHRg23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfS4qxyKp7lgWNt2ho5SCsUSt90wHwYDVR0j BBgwFoAUpiIC+IzmHWvUcZX7NhA83QYdfScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDczODMxNC1hOTc1LTRmZDEtOWJjOS01MjEzOGY4M2I1NmUvMC9BNjIyMDJGODhD RTYxRDZCRDQ3MTk1RkIzNjEwM0NERDA2MUQ3RDI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDNDREQwNjFE N0QyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q3MzgzMTQtYTk3NS00ZmQxLTli YzktNTIxMzhmODNiNTZlLzAvQTYyMjAyRjg4Q0U2MUQ2QkQ0NzE5NUZCMzYxMDND REQwNjFEN0QyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoS6JkMpDf4C/dlRWg117WgCeS3KzknYTZv kWiXbz6ZLzVKIMskkae2W9S5wUGx8ew3PVTgpYEvowMhy/bdKeActuvyBw34/Z/D P9pfaomXEf2eZqpgB3fcNSmnB6bOFhpo/0bv9yvJjZCTYiaA+rEy3VESJ8/HV39P yKszfU7On1Z4oMIjbl0KV8lXKOR0FfmDlyKd6hJ0xk5+V8yIInRZKHgHts5HEetI 03bZ1BtKUl+62j0FdS6k1gORSF3DvpFnXm/Zz1qTCcE8zqTkPNWqMa6ANZcVvWiQ OMtUSyoddWOUntk+XZW8k79+ZHUNQvA43breG0Y9w91Uv3/etE4= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:33 2025 by rpki-client