This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json) Hash identifier: LI03XnJyhj5YP44BmtssluKTOZJai1QfNw9WU0UVlRA= Subject key identifier: 64:95:D7:2B:FE:C1:3A:03:A2:83:37:4D:BD:82:2C:86:EF:2B:4E:C3 Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Certificate serial: 5D28858C211B09430C78093B58CD5FCB5DDD3D54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft Manifest number: 013A Signing time: Wed 03 Dec 2025 01:11:27 +0000 Manifest this update: Wed 03 Dec 2025 01:06:27 +0000 Manifest next update: Sat 06 Dec 2025 08:15:27 +0000 Files and hashes: 1: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: TGtCm6IUNwy7vlUXUw1/LchvV4msLQqJlwBxfvfPWOI=) 2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: DfqIL490+LsA+4agQ2y8Kna/SVON2TJhoIAx11noI9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:28:85:8c:21:1b:09:43:0c:78:09:3b:58:cd:5f:cb:5d:dd:3d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Validity Not Before: Dec 3 01:06:27 2025 GMT Not After : Dec 6 08:15:27 2025 GMT Subject: CN=6495D72BFEC13A03A283374DBD822C86EF2B4EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c6:4e:1e:a7:3f:ff:9e:f3:25:fc:30:0a:51: 70:63:39:7f:0d:97:99:47:80:0b:0e:74:ba:aa:e7: 01:77:7d:a9:fe:f4:66:10:42:ed:f4:ab:4b:7b:83: 81:ca:67:0c:fd:3d:ec:a4:30:a3:24:40:b9:2c:e3: f1:01:c9:14:9b:69:de:06:de:36:87:89:19:85:1c: bd:ee:5a:d3:38:29:09:68:5b:ef:81:d8:9d:7e:34: f4:14:1b:f1:b8:40:e4:b8:4a:c2:5b:e1:25:40:82: b5:d9:2e:af:0d:a0:c8:44:c5:65:14:70:a1:f4:0f: 4b:a7:ca:5d:ec:76:dd:f2:da:2d:0c:d5:e7:ff:22: e7:28:8b:df:f4:27:47:46:2f:e6:e5:e4:19:87:b2: a9:58:33:f7:97:49:13:7b:91:05:f5:e5:f6:27:61: ad:2e:01:51:e5:f5:62:e2:d4:1d:12:de:f8:9b:f2: 26:e3:17:4e:3f:91:dd:b9:9e:7d:5c:57:85:7c:db: 0c:e3:44:26:b8:66:66:30:a3:e7:67:d7:16:ac:ec: 94:9e:08:c0:60:a3:0a:7e:15:97:5e:8a:28:06:5d: 6e:e5:aa:62:00:8c:ed:57:a2:96:1d:e9:00:93:64: f7:ee:52:ba:8b:2a:7f:7b:0c:06:40:51:64:a8:96: fb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:95:D7:2B:FE:C1:3A:03:A2:83:37:4D:BD:82:2C:86:EF:2B:4E:C3 X509v3 Authority Key Identifier: keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:95:53:e4:b5:ed:6f:b8:60:db:16:93:66:da:61:f9:09:c7: 00:ac:1f:83:48:2c:e6:96:58:ee:f8:f9:94:ad:d9:40:5b:40: 6e:6e:63:ff:e9:a8:70:83:e6:8e:e9:30:2b:c0:36:61:87:f0: cd:eb:64:1f:96:6a:b8:38:aa:00:a0:02:23:04:db:08:b6:aa: 24:f6:22:3b:50:c0:02:a1:7d:04:34:3a:1a:a5:18:a8:89:8e: d4:40:a6:42:3b:48:bb:69:d3:ad:df:82:14:6e:aa:df:53:22: 66:9e:60:4d:7c:10:10:1d:48:6b:68:00:6b:74:90:f0:cc:be: e3:06:d6:9a:92:ff:c7:17:a7:c9:cd:f5:6d:57:9f:28:70:68: 1b:f6:be:21:ec:dc:d2:01:32:e6:5f:84:37:1d:38:ef:d2:25: 23:28:ef:91:e6:81:65:ef:53:dd:64:db:a3:ba:59:0e:8f:bd: b0:cf:23:ce:39:39:0a:a1:11:b1:44:c9:22:aa:5d:3a:cb:b8: 73:e5:32:1e:a1:0b:0a:ba:d5:0c:4e:a7:0e:54:9a:ad:0a:9d: b7:30:2b:b6:33:50:13:66:06:e3:a3:6a:89:a8:c9:ce:3c:3d: d5:cd:41:3c:e4:40:fd:6f:00:82:19:70:49:6c:5a:01:47:d0: 39:f4:17:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSiFjCEbCUMMeAk7WM1fy13dPVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE OTg5NTU5NjAeFw0yNTEyMDMwMTA2MjdaFw0yNTEyMDYwODE1MjdaMDMxMTAvBgNV BAMTKDY0OTVENzJCRkVDMTNBMDNBMjgzMzc0REJEODIyQzg2RUYyQjRFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGxk4epz//nvMl/DAKUXBjOX8N l5lHgAsOdLqq5wF3fan+9GYQQu30q0t7g4HKZwz9PeykMKMkQLks4/EByRSbad4G 3jaHiRmFHL3uWtM4KQloW++B2J1+NPQUG/G4QOS4SsJb4SVAgrXZLq8NoMhExWUU cKH0D0unyl3sdt3y2i0M1ef/Iucoi9/0J0dGL+bl5BmHsqlYM/eXSRN7kQX15fYn Ya0uAVHl9WLi1B0S3vib8ibjF04/kd25nn1cV4V82wzjRCa4ZmYwo+dn1xas7JSe CMBgowp+FZdeiigGXW7lqmIAjO1XopYd6QCTZPfuUrqLKn97DAZAUWSolvvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZJXXK/7BOgOigzdNvYIshu8rTsMwHwYDVR0j BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5 NTU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEw RUJEOTg5NTU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOVU+S17W+4YNsWk2baYfkJxwCsH4NILOaW WO74+ZSt2UBbQG5uY//pqHCD5o7pMCvANmGH8M3rZB+Warg4qgCgAiME2wi2qiT2 IjtQwAKhfQQ0OhqlGKiJjtRApkI7SLtp063fghRuqt9TImaeYE18EBAdSGtoAGt0 kPDMvuMG1pqS/8cXp8nN9W1XnyhwaBv2viHs3NIBMuZfhDcdOO/SJSMo75HmgWXv U91k26O6WQ6PvbDPI845OQqhEbFEySKqXTrLuHPlMh6hCwq61QxOpw5Umq0Knbcw K7YzUBNmBuOjaomoyc48PdXNQTzkQP1vAIIZcElsWgFH0Dn0Fyg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:07:12 2025 by rpki-client