This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: oXSX+fmP35cSuoyo1c5tQaIvqWceff4apxawyuPgyhk= Subject key identifier: 5C:14:1C:FB:3E:E7:DE:85:1E:49:A6:FE:1D:51:95:3A:9F:E2:1D:4E Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 4193903459B092DC200758B394AF5D7884F17200 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 0253 Signing time: Mon 01 Dec 2025 15:40:50 +0000 Manifest this update: Mon 01 Dec 2025 15:35:50 +0000 Manifest next update: Thu 04 Dec 2025 17:20:50 +0000 Files and hashes: 1: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: tu/EpZDKEPeeo6HYLoiw5Ha+71e5dopee4tUhiBgJlw=) 2: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: j0lcRKDX7Zai080pL+d3IVmhJOqrL+V2aEhEgUdciuo=) 3: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: pLboy3es15Aee5R8ozV3T/lLrbC6yjQ2R9cCybdnsq4=) 4: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: PJJflVEuAqU1x1bzzs4n8zhyBWNQ4TBM8yQ5wwBc+Y8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 17:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:93:90:34:59:b0:92:dc:20:07:58:b3:94:af:5d:78:84:f1:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Dec 1 15:35:50 2025 GMT Not After : Dec 4 17:20:50 2025 GMT Subject: CN=5C141CFB3EE7DE851E49A6FE1D51953A9FE21D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3e:c3:91:dc:49:66:d2:05:16:30:47:13:91: 78:a8:c4:5e:c3:28:e1:49:12:9c:e2:5a:b1:5c:e0: c8:74:27:7f:53:6b:a9:0f:ca:17:a8:56:d6:5d:b1: da:8a:87:1b:b0:64:f4:32:4a:3e:3f:cd:84:59:00: b5:83:20:a6:0a:1f:3b:17:79:a5:e3:e5:db:e1:25: d9:20:9b:ab:24:e2:04:51:8b:9d:ed:a7:8e:10:73: aa:79:dc:1b:c5:fd:73:7a:77:6b:29:e3:eb:dc:7a: b6:29:0b:d9:5d:12:c3:31:ab:43:c7:af:e1:7b:37: 2b:3b:f1:60:cc:ea:8c:26:6e:a7:20:ba:be:67:a5: 98:0c:a3:ca:b5:f0:d3:af:5e:a7:98:83:83:86:6e: 13:de:cd:ec:8a:2d:52:9a:55:c9:a5:30:d4:8f:d7: bc:a8:be:f3:a4:f1:d5:ca:08:71:f8:3d:ae:e3:1b: da:01:f6:44:80:80:53:c5:a9:06:6f:5a:fe:60:63: 7d:b5:66:1d:fb:d2:85:ae:54:cc:a8:67:78:56:04: 1a:47:2d:9f:31:ab:82:aa:cd:d0:a4:be:d9:11:28: 99:ed:c4:79:d9:1f:ed:51:4c:47:36:70:00:03:ce: 1e:72:4a:31:de:bc:d3:1b:46:e0:1a:c9:7a:92:40: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:1C:FB:3E:E7:DE:85:1E:49:A6:FE:1D:51:95:3A:9F:E2:1D:4E X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:45:ea:f1:a9:38:22:63:d8:a5:86:22:43:65:4f:f6:06:78: 77:ac:88:bf:3e:23:f9:4e:5e:e7:73:3a:9a:bb:ee:74:b8:ae: 8d:b9:81:7a:2c:35:9c:d9:f1:1e:f0:4b:87:ea:be:70:fd:85: b5:8f:a6:71:51:bc:54:6c:68:d6:08:9e:53:54:94:e2:d7:ee: d4:d4:1a:97:af:34:86:6a:98:04:68:5c:c7:6e:97:06:3a:ab: 41:ab:af:d9:09:39:ec:f8:44:eb:97:43:c9:0d:b7:ab:3a:e0: be:87:f4:c8:41:bc:af:36:18:37:52:3e:f8:a2:83:10:b4:77: 20:6e:f3:53:5f:82:0e:30:d7:0e:01:15:a7:b2:f9:e9:9c:b0: 87:13:2e:c0:77:c6:f8:f4:b9:01:97:25:a8:cb:7b:ca:f6:f3: 36:94:5d:bf:e4:ed:86:78:eb:ca:7c:b0:d3:e5:b3:41:05:2a: ed:a4:55:ce:6c:e1:c2:38:37:54:e1:32:47:1e:75:af:4b:ed: 26:88:2f:6b:ec:5b:7e:71:9f:09:dd:4f:11:91:b1:55:ee:8b: 74:e0:a3:80:c0:e8:63:5d:56:37:7e:2c:4c:07:d0:3e:e7:ed: 2e:e8:c7:15:28:eb:71:5a:bd:3f:c4:98:76:78:a0:3d:4d:c9: ae:6f:7e:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZOQNFmwktwgB1izlK9deITxcgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTEyMDExNTM1NTBaFw0yNTEyMDQxNzIwNTBaMDMxMTAvBgNV BAMTKDVDMTQxQ0ZCM0VFN0RFODUxRTQ5QTZGRTFENTE5NTNBOUZFMjFENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPsOR3Elm0gUWMEcTkXioxF7D KOFJEpziWrFc4Mh0J39Ta6kPyheoVtZdsdqKhxuwZPQySj4/zYRZALWDIKYKHzsX eaXj5dvhJdkgm6sk4gRRi53tp44Qc6p53BvF/XN6d2sp4+vcerYpC9ldEsMxq0PH r+F7Nys78WDM6owmbqcgur5npZgMo8q18NOvXqeYg4OGbhPezeyKLVKaVcmlMNSP 17yovvOk8dXKCHH4Pa7jG9oB9kSAgFPFqQZvWv5gY321Zh370oWuVMyoZ3hWBBpH LZ8xq4KqzdCkvtkRKJntxHnZH+1RTEc2cAADzh5ySjHevNMbRuAayXqSQL/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBQc+z7n3oUeSab+HVGVOp/iHU4wHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlF6vGpOCJj2KWGIkNlT/YGeHesiL8+I/lO XudzOpq77nS4ro25gXosNZzZ8R7wS4fqvnD9hbWPpnFRvFRsaNYInlNUlOLX7tTU GpevNIZqmARoXMdulwY6q0Grr9kJOez4ROuXQ8kNt6s64L6H9MhBvK82GDdSPvii gxC0dyBu81Nfgg4w1w4BFaey+emcsIcTLsB3xvj0uQGXJajLe8r28zaUXb/k7YZ4 68p8sNPls0EFKu2kVc5s4cI4N1ThMkceda9L7SaIL2vsW35xnwndTxGRsVXui3Tg o4DA6GNdVjd+LEwH0D7n7S7oxxUo63FavT/EmHZ4oD1Nya5vftg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:00 2025 by rpki-client