This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: dZhnrOV8+Jao8ka8jZnkw6acFFYl/A0e3b+EDNN1CaY= Subject key identifier: E1:C8:73:45:16:19:BA:A4:26:64:CE:0B:32:26:6B:A6:5F:9D:D1:04 Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 2C747B049FBF8274F8BB4ACB8C17B29DEE965F93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 01B2 Signing time: Wed 03 Dec 2025 09:21:05 +0000 Manifest this update: Wed 03 Dec 2025 09:16:05 +0000 Manifest next update: Sat 06 Dec 2025 19:14:05 +0000 Files and hashes: 1: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: g1Ka7yfyJPbCamNmlkRkAf0k4fb7xbeQ8IZXUzIAW64=) 2: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: u7CavQzDk2p4nlKvJJ+NcqOLJrAcry9XhxFiEo+B/Jg=) 3: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: BDD90sSQsBf6TcZNY5H5fSy8FBCNfWqRzrbG2rv5UwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 19:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:74:7b:04:9f:bf:82:74:f8:bb:4a:cb:8c:17:b2:9d:ee:96:5f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Dec 3 09:16:05 2025 GMT Not After : Dec 6 19:14:05 2025 GMT Subject: CN=E1C873451619BAA42664CE0B32266BA65F9DD104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:81:be:e5:33:f9:9a:49:11:05:e9:a6:16: 35:47:2e:23:28:13:b8:bd:f9:aa:72:e0:55:17:48: 8f:e1:d7:03:03:17:a0:ad:28:f8:5b:92:67:e8:47: 61:f5:99:fc:46:d2:da:74:3c:4a:a7:82:57:6e:96: 36:14:38:f4:2e:2a:a8:fb:c5:82:04:ac:84:c3:79: 21:40:71:1c:b9:af:bd:f3:d7:b7:88:4b:eb:f7:73: d9:53:10:fd:4f:9b:45:20:4a:da:89:2d:c4:af:28: 20:8a:7e:14:cf:87:16:c3:e6:01:31:a0:e7:58:7f: 45:4b:ae:d8:43:33:22:6a:09:f5:d2:48:1f:83:a7: 2b:dd:13:af:20:1d:43:8b:dc:45:ee:7b:31:34:8d: c2:6b:d2:08:bb:5a:94:4f:b7:e1:d3:35:9e:13:37: 5a:2e:3c:0f:35:67:90:fc:6c:d5:ee:41:02:30:ba: 3e:16:87:1d:2b:d8:62:d2:dd:76:74:07:63:50:ac: ae:11:d0:c6:0f:80:3e:c2:46:6d:b3:0c:26:d5:72: e9:65:87:8a:ab:0b:a5:21:fb:19:b4:8c:64:90:df: 8e:d8:d1:50:69:70:b1:3b:fb:f9:c9:fe:65:2f:9d: 70:30:79:d4:51:59:23:04:15:25:a1:39:c3:be:1d: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C8:73:45:16:19:BA:A4:26:64:CE:0B:32:26:6B:A6:5F:9D:D1:04 X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:e4:d0:5f:61:da:be:ea:a4:59:87:e8:a2:da:3b:47:29: 63:b1:c3:3e:cc:be:d6:0e:c0:a7:0d:74:46:ce:71:c2:25:72: d3:98:03:15:08:47:b1:c8:e1:81:1d:d8:dd:0c:81:99:33:b8: dc:53:5c:12:4f:20:54:f2:6c:90:81:25:97:ec:85:f2:a5:51: b5:75:05:5c:f1:7c:1b:08:30:ef:d3:a8:df:7f:68:46:fa:2f: f3:25:49:8d:74:d9:17:8d:23:2c:cc:ed:e9:b3:35:14:72:0f: 82:d6:07:86:af:d8:9b:40:e9:f1:d1:8b:fe:25:b2:2d:dc:35: b6:c1:50:64:ef:5c:c4:15:62:ee:aa:f9:80:94:20:8a:c0:2b: d1:bb:7f:d5:25:d5:a4:3d:f3:cf:9a:ec:cc:80:d5:58:18:78: 95:7a:0e:20:cf:09:8d:0b:0d:12:de:22:37:66:f8:7b:05:88: 79:06:6f:a4:2e:52:aa:30:62:e6:cc:8d:3b:5c:22:d1:c3:1e: 1d:f8:67:4b:d0:e4:8e:4d:e7:5a:ff:91:08:70:df:19:87:23: 9d:e1:c7:a9:0a:d8:a6:9c:bb:e5:4d:50:6a:00:53:cf:90:b7: 81:49:1c:f4:9d:5c:95:79:99:85:43:63:9b:49:e2:fd:95:36: b3:d9:88:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHR7BJ+/gnT4u0rLjBeyne6WX5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNTEyMDMwOTE2MDVaFw0yNTEyMDYxOTE0MDVaMDMxMTAvBgNV BAMTKEUxQzg3MzQ1MTYxOUJBQTQyNjY0Q0UwQjMyMjY2QkE2NUY5REQxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIn4G+5TP5mkkRBemmFjVHLiMo E7i9+apy4FUXSI/h1wMDF6CtKPhbkmfoR2H1mfxG0tp0PEqnglduljYUOPQuKqj7 xYIErITDeSFAcRy5r73z17eIS+v3c9lTEP1Pm0UgStqJLcSvKCCKfhTPhxbD5gEx oOdYf0VLrthDMyJqCfXSSB+DpyvdE68gHUOL3EXuezE0jcJr0gi7WpRPt+HTNZ4T N1ouPA81Z5D8bNXuQQIwuj4Whx0r2GLS3XZ0B2NQrK4R0MYPgD7CRm2zDCbVcull h4qrC6Uh+xm0jGSQ347Y0VBpcLE7+/nJ/mUvnXAwedRRWSMEFSWhOcO+HaiBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4chzRRYZuqQmZM4LMiZrpl+d0QQwHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzR5NBfYdq+6qRZh+ii2jtHKWOxwz7MvtYO wKcNdEbOccIlctOYAxUIR7HI4YEd2N0MgZkzuNxTXBJPIFTybJCBJZfshfKlUbV1 BVzxfBsIMO/TqN9/aEb6L/MlSY102ReNIyzM7emzNRRyD4LWB4av2JtA6fHRi/4l si3cNbbBUGTvXMQVYu6q+YCUIIrAK9G7f9Ul1aQ988+a7MyA1VgYeJV6DiDPCY0L DRLeIjdm+HsFiHkGb6QuUqowYubMjTtcItHDHh34Z0vQ5I5N51r/kQhw3xmHI53h x6kK2Kacu+VNUGoAU8+Qt4FJHPSdXJV5mYVDY5tJ4v2VNrPZiHo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:35:31 2025 by rpki-client