This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: XaDg3ccpJJmdyiZ3FpgzyG3HBuZuduxbVvv/CPqpWSc= Subject key identifier: 96:A4:20:34:14:90:DA:97:8F:DD:70:9D:76:52:8A:D2:36:15:60:DA Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 5E3B0571B5D5FB7E99FF537DFE80FDA2C1D0D333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 022B Signing time: Wed 03 Dec 2025 03:11:46 +0000 Manifest this update: Wed 03 Dec 2025 03:06:46 +0000 Manifest next update: Sat 06 Dec 2025 08:07:46 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: ay9z5MjQqFt2z2JXE0eSKYba1nASo4YtG+5R+0cvxBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3b:05:71:b5:d5:fb:7e:99:ff:53:7d:fe:80:fd:a2:c1:d0:d3:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Dec 3 03:06:46 2025 GMT Not After : Dec 6 08:07:46 2025 GMT Subject: CN=96A420341490DA978FDD709D76528AD2361560DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a3:e2:37:13:3d:93:d8:c0:08:23:c5:e8:bc: 54:92:07:49:ba:39:31:6b:1e:3f:a6:df:74:ae:42: ac:fb:e5:d4:fe:ea:c7:75:2e:aa:d8:5b:3c:66:4a: f3:30:33:33:a4:1e:b9:af:f4:aa:4a:eb:8a:5a:f5: 6a:65:7a:b7:d1:9d:7f:01:e2:b4:d1:da:fd:8f:8c: 39:a2:94:e1:37:b2:ba:d0:59:32:10:7f:be:c4:23: 85:8c:48:67:30:bb:61:bb:e1:ef:58:36:1d:78:55: 7c:a0:c4:38:cb:28:77:da:5b:d0:63:9e:fe:a6:dd: 5b:0a:6c:ef:6f:7b:09:bf:99:f4:d0:48:cc:2a:d3: aa:22:c6:9f:b7:0f:cd:2a:3a:3c:f5:05:fa:19:c4: 6a:01:28:f4:32:24:ae:0e:37:4e:04:11:3f:38:65: f3:1c:ff:70:f1:9b:7b:4e:1f:27:2f:8a:83:3b:7f: c2:cc:7f:ab:02:7e:87:d6:ec:e3:ac:50:8c:e4:cd: e4:2d:7c:ee:c2:9c:3f:e9:66:ee:9e:9c:ba:f1:54: ad:6f:5c:9b:0a:7c:ab:44:b3:28:b1:45:6e:6d:ff: 2c:3a:81:4f:05:7e:b5:95:e4:26:0c:cd:bf:6a:66: f4:a5:be:1b:88:9f:ee:ac:f2:a9:4d:33:c2:62:ed: b0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A4:20:34:14:90:DA:97:8F:DD:70:9D:76:52:8A:D2:36:15:60:DA X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:48:c1:af:b6:24:20:50:c1:7b:f3:7d:cb:b8:6d:8c:ec:5c: 05:02:29:b9:0e:92:a5:9e:1e:ce:a9:e5:56:33:1e:fd:ff:91: db:66:f2:fd:d6:ad:85:b3:56:70:1f:cd:bf:bc:17:41:b1:8c: 48:8e:14:34:ae:3d:45:ce:db:7b:4d:8d:6d:1f:59:95:b1:37: 57:9a:49:fe:fe:8d:7c:79:8f:d8:f7:a9:f4:42:47:a5:a8:28: 29:a0:f1:52:ec:b0:41:e0:6f:68:26:b2:c2:e5:3e:85:fa:20: 63:d2:32:04:be:fc:7a:8f:ca:1b:c5:c1:d2:32:7d:91:7d:8e: 02:93:b1:94:74:31:f3:92:8c:ce:72:f9:8a:af:e7:e6:60:8c: 2a:e6:12:b5:d8:43:01:4a:0a:c7:cd:37:ee:2e:02:d2:9f:02: 8d:95:e5:78:53:3f:54:9a:26:49:ca:3b:b1:88:a7:2b:63:02: 0e:74:62:5f:7e:21:c9:60:52:e6:99:24:c5:c0:a5:24:53:64: 2b:f6:39:3b:49:f6:06:ab:45:ee:e0:56:2f:ca:92:f1:5d:ba: 4d:20:d3:7a:7f:4b:79:cd:e5:fb:62:a2:d7:14:fa:b3:53:36: 7e:32:50:d8:5b:79:b5:39:e5:21:3d:da:e9:76:ef:fc:86:fd: 8d:66:47:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjsFcbXV+36Z/1N9/oD9osHQ0zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTEyMDMwMzA2NDZaFw0yNTEyMDYwODA3NDZaMDMxMTAvBgNV BAMTKDk2QTQyMDM0MTQ5MERBOTc4RkRENzA5RDc2NTI4QUQyMzYxNTYwREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDno+I3Ez2T2MAII8XovFSSB0m6 OTFrHj+m33SuQqz75dT+6sd1LqrYWzxmSvMwMzOkHrmv9KpK64pa9WplerfRnX8B 4rTR2v2PjDmilOE3srrQWTIQf77EI4WMSGcwu2G74e9YNh14VXygxDjLKHfaW9Bj nv6m3VsKbO9vewm/mfTQSMwq06oixp+3D80qOjz1BfoZxGoBKPQyJK4ON04EET84 ZfMc/3Dxm3tOHycvioM7f8LMf6sCfofW7OOsUIzkzeQtfO7CnD/pZu6enLrxVK1v XJsKfKtEsyixRW5t/yw6gU8FfrWV5CYMzb9qZvSlvhuIn+6s8qlNM8Ji7bD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlqQgNBSQ2peP3XCddlKK0jYVYNowHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhIwa+2JCBQwXvzfcu4bYzsXAUCKbkOkqWe Hs6p5VYzHv3/kdtm8v3WrYWzVnAfzb+8F0GxjEiOFDSuPUXO23tNjW0fWZWxN1ea Sf7+jXx5j9j3qfRCR6WoKCmg8VLssEHgb2gmssLlPoX6IGPSMgS+/HqPyhvFwdIy fZF9jgKTsZR0MfOSjM5y+Yqv5+ZgjCrmErXYQwFKCsfNN+4uAtKfAo2V5XhTP1Sa JknKO7GIpytjAg50Yl9+IclgUuaZJMXApSRTZCv2OTtJ9garRe7gVi/KkvFduk0g 03p/S3nN5ftiotcU+rNTNn4yUNhbebU55SE92ul27/yG/Y1mR4s= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:58 2025 by rpki-client