This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: pHqIiqZ/qXeuVKJXPpTiEpDUSvX0eRJEO4mUIAqJd+Q= Subject key identifier: 60:6C:04:C9:A1:F7:53:4A:B2:1F:FC:98:B7:F2:72:06:F0:E7:B2:F6 Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 4D39BB26C010E982DFA9488CA8AC2EC4D8EF143A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0255 Signing time: Wed 03 Dec 2025 14:51:20 +0000 Manifest this update: Wed 03 Dec 2025 14:46:20 +0000 Manifest next update: Sat 06 Dec 2025 15:54:20 +0000 Files and hashes: 1: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: SZUb1nw4Ek53qFC/TaP0qfCSk0ZsNtjYUem6+HvsvL8=) 2: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: dndH7k4QrpdRpSP4/WtipvESFO/tcWljX0yqzIdte+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 15:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:39:bb:26:c0:10:e9:82:df:a9:48:8c:a8:ac:2e:c4:d8:ef:14:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Dec 3 14:46:20 2025 GMT Not After : Dec 6 15:54:20 2025 GMT Subject: CN=606C04C9A1F7534AB21FFC98B7F27206F0E7B2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dd:4b:28:d6:bb:89:28:63:e1:94:f4:09:d0: 98:bc:78:c0:fb:3d:8b:ff:78:a9:21:69:d3:4f:f3: e5:a9:32:6d:5d:db:33:b6:13:59:d7:71:76:4d:5a: 08:f5:5c:78:e5:30:ec:23:0d:ec:76:d3:05:a2:f2: 4f:6a:3e:32:7b:93:68:a5:ca:15:cb:bf:44:0b:09: 02:0d:07:7c:a1:45:6f:9c:8e:5f:81:ff:84:85:d6: b1:60:9d:42:50:fa:f9:d2:29:16:ec:d9:c8:7b:c2: 6f:c4:33:3c:cb:a5:4a:d9:6a:71:99:01:1a:32:4d: cf:e9:78:99:22:81:10:4b:44:94:81:81:25:6b:8a: 43:33:b0:a8:2f:8a:c0:b1:ba:68:81:45:9c:ce:6e: 5d:c9:8a:5e:9b:21:a7:0d:6d:ec:d8:ee:f0:07:65: 7a:71:8b:7c:44:d7:e0:fc:ef:1d:42:26:70:4b:f6: dc:37:1c:b8:19:79:ba:b4:5f:0f:bb:f3:1a:5b:68: 2d:e9:aa:80:f4:90:19:8c:ba:c4:96:29:5f:1c:99: 5e:81:ea:75:18:ae:95:2e:95:ac:f6:f5:87:9f:d5: aa:1e:20:8c:de:54:00:cf:5f:f2:49:71:db:b3:50: e7:37:1b:f7:4f:2f:60:51:af:de:eb:60:95:41:8f: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6C:04:C9:A1:F7:53:4A:B2:1F:FC:98:B7:F2:72:06:F0:E7:B2:F6 X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9e:04:c3:01:34:f6:bb:ca:0c:26:84:27:e9:e9:f3:c1:ab: b8:71:e7:1a:dc:ce:ec:e7:65:2c:0b:98:2a:e2:57:b1:11:3c: a7:8d:71:79:d3:04:ce:c3:d7:ec:eb:53:ce:2f:9c:a6:6f:e2: fe:54:db:fa:3b:7b:1d:82:63:0c:37:03:fd:38:fd:55:2e:b0: 03:0b:96:14:02:51:c0:3f:14:a1:81:02:63:66:d2:fe:ed:5a: 89:0c:4f:e4:36:35:44:85:25:71:89:c0:50:90:04:b5:ab:8b: 3c:27:44:00:01:31:80:f0:d9:83:f1:d9:a2:6c:40:f3:d5:fd: 25:89:f4:ad:92:ba:bd:55:05:fc:89:14:39:c4:e7:ba:d5:ca: 25:ae:08:08:74:a1:c7:1f:7b:d8:b3:83:c9:7f:15:c0:75:78: cb:3f:7f:da:27:bb:9e:99:a9:ef:84:b1:42:9b:fa:ee:42:2f: bb:da:9d:4f:c1:a6:de:7b:96:01:2c:76:07:e6:51:07:3d:f9: d8:b2:02:e7:a7:2b:8f:6e:f4:ba:30:81:69:a4:2c:38:06:55: fd:3c:0a:31:1e:d9:0b:27:b5:ba:59:df:a6:83:18:53:9b:f1: d6:d5:aa:a7:55:fa:16:0f:de:7b:9e:8e:d3:60:b5:de:0e:a9: 02:6f:a6:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTm7JsAQ6YLfqUiMqKwuxNjvFDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNTEyMDMxNDQ2MjBaFw0yNTEyMDYxNTU0MjBaMDMxMTAvBgNV BAMTKDYwNkMwNEM5QTFGNzUzNEFCMjFGRkM5OEI3RjI3MjA2RjBFN0IyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw3Uso1ruJKGPhlPQJ0Ji8eMD7 PYv/eKkhadNP8+WpMm1d2zO2E1nXcXZNWgj1XHjlMOwjDex20wWi8k9qPjJ7k2il yhXLv0QLCQINB3yhRW+cjl+B/4SF1rFgnUJQ+vnSKRbs2ch7wm/EMzzLpUrZanGZ ARoyTc/peJkigRBLRJSBgSVrikMzsKgvisCxumiBRZzObl3Jil6bIacNbezY7vAH ZXpxi3xE1+D87x1CJnBL9tw3HLgZebq0Xw+78xpbaC3pqoD0kBmMusSWKV8cmV6B 6nUYrpUulaz29Yef1aoeIIzeVADPX/JJcduzUOc3G/dPL2BRr97rYJVBjyVXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYGwEyaH3U0qyH/yYt/JyBvDnsvYwHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWeBMMBNPa7ygwmhCfp6fPBq7hx5xrczuzn ZSwLmCriV7ERPKeNcXnTBM7D1+zrU84vnKZv4v5U2/o7ex2CYww3A/04/VUusAML lhQCUcA/FKGBAmNm0v7tWokMT+Q2NUSFJXGJwFCQBLWrizwnRAABMYDw2YPx2aJs QPPV/SWJ9K2Sur1VBfyJFDnE57rVyiWuCAh0occfe9izg8l/FcB1eMs/f9onu56Z qe+EsUKb+u5CL7vanU/Bpt57lgEsdgfmUQc9+diyAuenK49u9LowgWmkLDgGVf08 CjEe2QsntbpZ36aDGFOb8dbVqqdV+hYP3nuejtNgtd4OqQJvpnE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:10:58 2025 by rpki-client