This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: zvn3Ys8EcbKwhGBjqDx2aPIo6UUIfcQQ+gNg+z4oZw4= Subject key identifier: 7E:03:BC:79:7C:1B:14:72:60:7E:BD:40:6D:57:0B:99:E2:81:B9:1B Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 458770AF0554570B31143192BAFBFFB6E76C7B3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: DE Signing time: Thu 18 Dec 2025 10:11:11 +0000 Manifest this update: Thu 18 Dec 2025 10:06:11 +0000 Manifest next update: Sun 21 Dec 2025 18:30:11 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 2: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: smz3n2NySkJlXe213w09XvKerXgmPvFgnQ+P7A9+2gQ=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 18:30:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:87:70:af:05:54:57:0b:31:14:31:92:ba:fb:ff:b6:e7:6c:7b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Dec 18 10:06:11 2025 GMT Not After : Dec 21 18:30:11 2025 GMT Subject: CN=7E03BC797C1B1472607EBD406D570B99E281B91B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:79:07:ca:4f:5d:4c:89:64:33:2c:e3:68: 48:f3:57:31:cc:d6:a1:7d:b6:53:ff:a5:5b:50:db: 3b:50:ed:4e:57:f6:36:d8:9f:62:07:7d:57:a7:40: 0a:a1:de:61:cc:28:a9:bf:2e:cb:16:9c:83:95:55: b3:eb:da:4b:b1:f2:16:2b:79:18:19:68:49:82:78: 01:5c:f2:6e:27:3f:c5:f6:a1:a3:7d:57:8a:63:43: 49:67:27:59:02:81:ff:9c:c7:9a:8f:fd:07:a7:2c: a3:90:00:be:cf:03:c6:26:96:90:4f:9d:53:88:bd: 20:5c:c1:8f:1c:08:fa:ec:a8:47:37:0a:42:1d:4d: 91:eb:78:0e:a7:fc:c7:46:7e:41:1d:4f:03:94:f5: 9a:6c:d9:71:8a:ec:93:26:04:36:77:aa:27:a6:68: ec:0f:bc:4c:f3:8e:ac:16:ca:f5:88:9a:00:10:de: 91:96:0e:3a:67:0b:db:eb:1a:cb:b8:af:79:9e:af: e0:75:d0:df:cc:f2:28:fe:02:a0:bf:e5:70:b0:33: ef:a2:be:79:3e:41:69:5f:3a:82:5d:6c:64:79:66: f5:cc:f9:1b:3f:b8:a0:79:c6:a3:f3:f0:ce:45:44: c1:23:73:85:c4:9b:c7:d8:34:4a:81:0f:0f:44:bc: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:03:BC:79:7C:1B:14:72:60:7E:BD:40:6D:57:0B:99:E2:81:B9:1B X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:59:f2:a4:96:47:6a:28:de:1e:f5:d0:30:a9:d4:5a:5d:10: ab:ee:d2:f8:0a:40:19:48:f6:41:25:e9:4e:66:7e:0d:65:31: 9a:73:06:3a:a5:bd:56:32:d7:da:a2:0a:61:c2:4c:43:3b:e5: e7:d0:fe:67:ee:34:9a:c7:1b:c9:02:d9:11:3c:7d:eb:d6:36: 36:72:c3:a6:28:ea:8b:bd:d0:17:dd:ef:ba:a2:23:2e:e5:7e: ae:66:58:2e:1e:c7:eb:17:52:37:fe:05:0e:6f:35:cf:11:3c: 59:fe:ad:50:ff:ec:12:dd:a2:72:1b:a3:5b:85:f0:a0:93:8e: 1e:ea:2d:dc:97:c5:58:32:47:1a:4d:fd:8d:28:98:54:5c:b6: 61:06:72:12:b9:4d:c5:ba:68:74:7d:f4:be:a5:03:97:bb:55: 20:c6:e6:16:7a:0d:a8:4a:b7:c7:0f:21:cf:ca:30:1f:f4:c3: bd:c1:7b:f1:08:17:8c:7e:ce:59:ec:a4:c8:0c:b2:13:2d:ba: b5:4f:ea:11:7f:99:34:12:a8:3f:17:df:3c:85:68:fb:58:71: aa:db:22:bb:f5:a1:21:5f:c7:e8:de:39:96:7e:81:b8:d0:6a: 61:4b:71:fa:d5:d5:e6:2f:52:ce:eb:24:6e:96:9e:0b:7b:6c: fd:de:73:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYdwrwVUVwsxFDGSuvv/tudsezwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTEyMTgxMDA2MTFaFw0yNTEyMjExODMwMTFaMDMxMTAvBgNV BAMTKDdFMDNCQzc5N0MxQjE0NzI2MDdFQkQ0MDZENTcwQjk5RTI4MUI5MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56HkHyk9dTIlkMyzjaEjzVzHM 1qF9tlP/pVtQ2ztQ7U5X9jbYn2IHfVenQAqh3mHMKKm/LssWnIOVVbPr2kux8hYr eRgZaEmCeAFc8m4nP8X2oaN9V4pjQ0lnJ1kCgf+cx5qP/QenLKOQAL7PA8YmlpBP nVOIvSBcwY8cCPrsqEc3CkIdTZHreA6n/MdGfkEdTwOU9Zps2XGK7JMmBDZ3qiem aOwPvEzzjqwWyvWImgAQ3pGWDjpnC9vrGsu4r3mer+B10N/M8ij+AqC/5XCwM++i vnk+QWlfOoJdbGR5ZvXM+Rs/uKB5xqPz8M5FRMEjc4XEm8fYNEqBDw9EvOgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfgO8eXwbFHJgfr1AbVcLmeKBuRswHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFZ8qSWR2oo3h710DCp1FpdEKvu0vgKQBlI 9kEl6U5mfg1lMZpzBjqlvVYy19qiCmHCTEM75efQ/mfuNJrHG8kC2RE8fevWNjZy w6Yo6ou90Bfd77qiIy7lfq5mWC4ex+sXUjf+BQ5vNc8RPFn+rVD/7BLdonIbo1uF 8KCTjh7qLdyXxVgyRxpN/Y0omFRctmEGchK5TcW6aHR99L6lA5e7VSDG5hZ6DahK t8cPIc/KMB/0w73Be/EIF4x+zlnspMgMshMturVP6hF/mTQSqD8X3zyFaPtYcarb Irv1oSFfx+jeOZZ+gbjQamFLcfrV1eYvUs7rJG6Wngt7bP3ec7A= -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:33 2025 by rpki-client