This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: sCA4CEXzrlbA1VYZ4/p0GAnVBiEVXvW5RHoRlSIL5X4= Subject key identifier: 7A:28:9A:A7:BC:96:31:26:BD:0B:1D:48:E3:34:61:87:18:FC:97:2A Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 42DE19458D25724C314C8F0DC7AF0243D0EC1BC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 048B Signing time: Tue 02 Dec 2025 04:32:21 +0000 Manifest this update: Tue 02 Dec 2025 04:27:21 +0000 Manifest next update: Fri 05 Dec 2025 06:47:21 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: x0J0SWYdQITQpgISzoI/wH0SDCf243P4/o0ZHJotSPU=) 2: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: oTMojUiAc0dJ0G+CBeq3DoCWkDCXGH7D0Qcbb3WIous=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 06:47:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:de:19:45:8d:25:72:4c:31:4c:8f:0d:c7:af:02:43:d0:ec:1b:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: Dec 2 04:27:21 2025 GMT Not After : Dec 5 06:47:21 2025 GMT Subject: CN=7A289AA7BC963126BD0B1D48E334618718FC972A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:4c:93:f9:94:45:8c:0c:06:a8:94:97:cd: 1e:5c:47:e9:d1:2e:78:f2:01:ed:54:66:3d:ea:d1: 02:a2:32:06:ff:89:44:c9:c7:3d:65:10:72:77:27: 6a:18:6d:b8:03:80:a3:be:17:8f:c1:2e:a3:eb:52: b9:a7:59:ea:7d:94:02:33:ff:3b:4d:93:af:d3:78: 02:d0:bc:a2:cb:72:2f:1f:71:25:6a:9c:e6:18:39: 82:f2:e3:83:5d:90:43:fe:ba:31:5b:23:41:54:fd: 1a:be:ef:26:38:33:bc:17:59:3c:d4:77:1b:72:20: 71:82:8d:97:9a:61:7d:72:52:7e:b6:fe:3c:e8:5c: 12:40:4d:93:56:73:16:11:fe:4e:2e:ca:3b:4a:b5: 34:48:5b:40:3e:59:1e:c4:79:b4:97:89:8d:b3:5d: a9:ea:5b:ce:d1:64:df:c9:bb:02:46:7c:8d:6f:12: 22:e9:2c:06:b3:e3:1e:9a:58:18:d7:64:ab:28:9b: 67:33:69:3d:8c:86:f6:a0:0d:be:a8:ce:8c:d3:6d: 9b:66:00:09:7a:71:75:2a:e7:8d:68:43:13:72:31: 87:05:91:6e:39:62:12:4c:ec:08:80:7f:32:64:12: d4:20:9d:19:75:bb:57:06:87:59:28:38:2a:23:b5: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:28:9A:A7:BC:96:31:26:BD:0B:1D:48:E3:34:61:87:18:FC:97:2A X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:50:a5:21:86:54:78:d8:17:0b:f8:72:ba:4f:c5:f0:22:b4: 3e:63:85:cf:b9:11:f0:14:b0:3c:f8:a9:57:6e:8e:4e:be:bc: 16:0c:8e:47:bf:d6:13:e9:c6:eb:f7:09:08:d0:03:ce:ff:2f: cf:b5:52:14:f1:f2:d5:41:b0:c4:61:4a:b0:7d:b4:cb:33:4c: 29:82:95:d7:d2:0a:8f:4a:b9:39:d3:02:41:14:cb:6e:70:28: 33:2e:2d:bc:51:6a:e1:60:c6:81:a4:e5:f6:69:ec:9e:cd:4b: 2d:6e:00:27:08:36:d8:d6:e6:ab:7a:aa:86:7a:a2:d7:ba:98: 62:2a:12:66:75:00:69:04:f7:38:30:b0:a0:78:54:0a:dd:e1: b3:33:20:9a:8f:bd:50:b6:41:bd:7d:1b:48:82:b2:57:63:60: 37:83:60:ff:f7:d1:5f:23:66:b8:99:da:a5:c1:25:4d:d9:8e: 98:a9:94:48:88:c6:a1:84:e1:38:36:49:21:bc:5c:98:e9:41: 8e:c5:6f:39:4a:14:a3:cf:36:07:87:2f:60:57:96:51:c3:81: a6:72:84:86:51:e8:43:fd:7b:d5:ba:f6:e7:27:9d:ca:79:f3: 97:dc:58:d1:9f:f2:3a:58:a5:4c:4d:84:b8:18:62:2a:07:20: 2b:7e:4c:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQt4ZRY0lckwxTI8Nx68CQ9DsG8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTEyMDIwNDI3MjFaFw0yNTEyMDUwNjQ3MjFaMDMxMTAvBgNV BAMTKDdBMjg5QUE3QkM5NjMxMjZCRDBCMUQ0OEUzMzQ2MTg3MThGQzk3MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC23kyT+ZRFjAwGqJSXzR5cR+nR LnjyAe1UZj3q0QKiMgb/iUTJxz1lEHJ3J2oYbbgDgKO+F4/BLqPrUrmnWep9lAIz /ztNk6/TeALQvKLLci8fcSVqnOYYOYLy44NdkEP+ujFbI0FU/Rq+7yY4M7wXWTzU dxtyIHGCjZeaYX1yUn62/jzoXBJATZNWcxYR/k4uyjtKtTRIW0A+WR7EebSXiY2z XanqW87RZN/JuwJGfI1vEiLpLAaz4x6aWBjXZKsom2czaT2MhvagDb6ozozTbZtm AAl6cXUq541oQxNyMYcFkW45YhJM7AiAfzJkEtQgnRl1u1cGh1koOCojtYZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeiiap7yWMSa9Cx1I4zRhhxj8lyowHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpQpSGGVHjYFwv4crpPxfAitD5jhc+5EfAU sDz4qVdujk6+vBYMjke/1hPpxuv3CQjQA87/L8+1UhTx8tVBsMRhSrB9tMszTCmC ldfSCo9KuTnTAkEUy25wKDMuLbxRauFgxoGk5fZp7J7NSy1uACcINtjW5qt6qoZ6 ote6mGIqEmZ1AGkE9zgwsKB4VArd4bMzIJqPvVC2Qb19G0iCsldjYDeDYP/30V8j ZriZ2qXBJU3ZjpiplEiIxqGE4Tg2SSG8XJjpQY7FbzlKFKPPNgeHL2BXllHDgaZy hIZR6EP9e9W69ucnncp585fcWNGf8jpYpUxNhLgYYioHICt+TM8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:41:58 2025 by rpki-client