This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft File: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft (raw, json) Hash identifier: E9BBGEdkJ2EDhYAdAnBj+m/XX1mNnl0VTXkxIFhhvBE= Subject key identifier: BB:1A:5F:B0:0A:D6:7C:04:DF:36:13:48:1C:0E:EE:59:D4:30:19:A7 Authority key identifier: 0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 Certificate issuer: /CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Certificate serial: 2958E44303FC881E0A37C1800999B17828BC5220 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft Manifest number: D7 Signing time: Tue 02 Dec 2025 21:11:11 +0000 Manifest this update: Tue 02 Dec 2025 21:06:11 +0000 Manifest next update: Fri 05 Dec 2025 21:15:11 +0000 Files and hashes: 1: 3136302e32322e3230342e302f32342d3234203d3e20313337333136.roa (hash: Zh8n/dPr3gHP9KgajNV0z2AsOCpEwb2affZu8V5L6qs=) 2: 0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl (hash: cseeJ93mvVax9AKxGhpaQyH/pdfNAFDlJPKxFUE5LA8=) 3: 3136302e32322e3230352e302f32342d3234203d3e20313337333136.roa (hash: 8dognkJ+3KqI8Zy3SbY9osu6X0L9/9P5xv+FtLtMt+4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 21:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:e4:43:03:fc:88:1e:0a:37:c1:80:09:99:b1:78:28:bc:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612 Validity Not Before: Dec 2 21:06:11 2025 GMT Not After : Dec 5 21:15:11 2025 GMT Subject: CN=BB1A5FB00AD67C04DF3613481C0EEE59D43019A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:79:dc:7d:74:01:cb:36:d4:f3:b5:b9:f9: ef:8f:56:92:ce:52:ed:81:21:b5:0e:ce:3f:3b:e6: a4:c7:70:50:aa:90:58:4e:5c:7d:5c:73:25:d6:87: 50:76:60:a4:25:4e:2f:25:46:0f:4e:ba:37:1b:e2: aa:fd:91:0c:85:97:aa:b1:57:46:1b:aa:d5:78:44: 4f:2e:6d:ba:87:af:14:b9:36:e7:f0:59:75:bb:c7: 67:09:69:2a:10:3f:ac:ad:cc:73:20:d3:bb:f2:47: b3:ee:54:3b:22:a8:0a:65:57:ca:9a:df:82:ac:cb: 30:d6:bd:83:06:40:da:6a:00:54:fb:c5:49:48:ca: 85:25:13:1e:a1:16:7f:0a:d7:e3:68:50:76:74:20: 1f:70:ab:71:2e:61:b2:c1:f1:25:4a:38:e9:04:a0: 6b:58:42:a6:23:73:d8:50:69:77:c0:cd:b7:18:9f: c0:31:69:d2:af:43:0a:e4:78:4c:e7:3d:39:6b:03: 05:f2:be:6b:68:51:e2:c4:8a:36:2a:7b:b0:d2:93: 7a:41:b5:28:ed:87:22:2b:dd:59:6c:45:5c:a2:1d: dc:a0:8e:3c:ae:b8:56:61:6f:14:a5:b4:c3:e9:83: d4:59:c3:1d:b3:30:53:bb:e4:91:f1:d3:b6:b6:9d: 45:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1A:5F:B0:0A:D6:7C:04:DF:36:13:48:1C:0E:EE:59:D4:30:19:A7 X509v3 Authority Key Identifier: keyid:0A:1B:FC:E6:76:1D:8B:7F:B2:09:F7:CF:9E:D1:B3:DA:F0:60:36:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c1b4c38-7747-45fc-a590-cac52163d538/0/0A1BFCE6761D8B7FB209F7CF9ED1B3DAF0603612.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:08:07:48:f1:4d:1d:c1:3b:2b:00:70:d4:ef:f2:78:b0:ac: 6a:ca:34:30:5c:6a:3f:b7:e6:8b:24:18:56:4b:e6:4a:bc:72: 20:13:59:b0:14:65:97:0e:15:0e:ee:a1:1b:27:86:fd:81:f8: 5a:29:84:c1:da:1d:4f:9c:ba:a2:c5:57:07:a9:58:02:d6:6b: 03:57:7d:82:3b:c0:6e:29:03:2b:30:c5:6a:c4:f2:30:cb:dc: 78:58:18:86:0f:54:47:ee:3d:94:cb:cc:17:ff:51:af:47:1a: 78:f5:8d:41:cb:5d:9a:b0:73:17:86:83:73:ad:63:7d:69:7d: ed:34:56:7f:e8:7e:6f:9a:20:9e:a9:0a:d0:a4:79:f1:7e:ab: bc:d0:b8:8b:f5:f2:08:ed:d2:6e:9d:39:44:2b:d9:fe:3d:d9: cd:6f:17:a3:7d:ad:73:e0:7c:2c:67:ab:77:f5:d1:2f:35:7c: 98:87:81:b4:40:e1:71:ba:ef:61:11:a7:4a:4e:aa:2e:32:ea: f1:cd:f1:3d:79:20:46:3d:59:38:de:7f:48:5c:b7:17:69:b6: 31:52:15:85:3d:1e:78:1d:de:9b:88:03:ea:5e:d1:7c:3a:26: 97:32:48:05:69:27:d7:30:68:de:4b:31:31:6a:db:90:25:78: f1:f0:b4:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKVjkQwP8iB4KN8GACZmxeCi8UiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFG MDYwMzYxMjAeFw0yNTEyMDIyMTA2MTFaFw0yNTEyMDUyMTE1MTFaMDMxMTAvBgNV BAMTKEJCMUE1RkIwMEFENjdDMDRERjM2MTM0ODFDMEVFRTU5RDQzMDE5QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoiXncfXQByzbU87W5+e+PVpLO Uu2BIbUOzj875qTHcFCqkFhOXH1ccyXWh1B2YKQlTi8lRg9Oujcb4qr9kQyFl6qx V0YbqtV4RE8ubbqHrxS5NufwWXW7x2cJaSoQP6ytzHMg07vyR7PuVDsiqAplV8qa 34KsyzDWvYMGQNpqAFT7xUlIyoUlEx6hFn8K1+NoUHZ0IB9wq3EuYbLB8SVKOOkE oGtYQqYjc9hQaXfAzbcYn8AxadKvQwrkeEznPTlrAwXyvmtoUeLEijYqe7DSk3pB tSjthyIr3VlsRVyiHdygjjyuuFZhbxSltMPpg9RZwx2zMFO75JHx07a2nUX1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuxpfsArWfATfNhNIHA7uWdQwGacwHwYDVR0j BBgwFoAUChv85nYdi3+yCffPntGz2vBgNhIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YzFiNGMzOC03NzQ3LTQ1ZmMtYTU5MC1jYWM1MjE2M2Q1MzgvMC8wQTFCRkNFNjc2 MUQ4QjdGQjIwOUY3Q0Y5RUQxQjNEQUYwNjAzNjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIzREFGMDYw MzYxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWMxYjRjMzgtNzc0Ny00NWZjLWE1 OTAtY2FjNTIxNjNkNTM4LzAvMEExQkZDRTY3NjFEOEI3RkIyMDlGN0NGOUVEMUIz REFGMDYwMzYxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgIB0jxTR3BOysAcNTv8niwrGrKNDBcaj+3 5oskGFZL5kq8ciATWbAUZZcOFQ7uoRsnhv2B+FophMHaHU+cuqLFVwepWALWawNX fYI7wG4pAyswxWrE8jDL3HhYGIYPVEfuPZTLzBf/Ua9HGnj1jUHLXZqwcxeGg3Ot Y31pfe00Vn/ofm+aIJ6pCtCkefF+q7zQuIv18gjt0m6dOUQr2f492c1vF6N9rXPg fCxnq3f10S81fJiHgbRA4XG672ERp0pOqi4y6vHN8T15IEY9WTjef0hctxdptjFS FYU9Hngd3puIA+pe0Xw6JpcySAVpJ9cwaN5LMTFq25AlePHwtHs= -----END CERTIFICATE-----Generated at Wed Dec 3 16:36:20 2025 by rpki-client