This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: zdLEvRJn3TcO3ua/soxUe5vvjVRysDsF6JUMpRmtmHM= Subject key identifier: 66:E5:37:5C:BB:5E:52:15:C9:82:DE:D6:4C:2C:23:0B:BD:A6:45:18 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 376272FF2B2039019D981850D56DAE06F1324600 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 0231 Signing time: Wed 17 Dec 2025 03:11:45 +0000 Manifest this update: Wed 17 Dec 2025 03:06:45 +0000 Manifest next update: Sat 20 Dec 2025 11:34:45 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: 9kqYKDP6AGuOJDBb2eGDsmRUZcc06q1Q3j1AOhS5NJA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 11:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:62:72:ff:2b:20:39:01:9d:98:18:50:d5:6d:ae:06:f1:32:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Dec 17 03:06:45 2025 GMT Not After : Dec 20 11:34:45 2025 GMT Subject: CN=66E5375CBB5E5215C982DED64C2C230BBDA64518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:b0:d8:b0:55:17:34:25:5c:d7:61:2e:3c: b3:41:a8:23:69:67:29:ad:21:a1:f0:81:dc:90:9d: a3:f4:cc:4f:2c:1c:d1:b8:f4:5f:83:60:85:5d:72: 3e:68:b5:59:12:07:24:3c:e5:08:7d:cb:32:65:6d: 5f:81:df:24:6e:12:56:2b:37:82:00:17:01:24:27: f0:06:8b:12:d7:cc:29:7f:04:b4:0b:bc:1b:86:a5: f8:a7:75:e0:0d:76:60:03:67:f4:9d:97:df:b6:b9: 15:03:2d:32:f2:1a:ce:87:8d:92:d5:3a:10:46:29: 19:28:60:9f:a6:ba:2d:51:22:17:e3:7f:ed:86:bc: 8e:92:4c:72:16:55:5b:23:4b:08:40:f1:2f:1f:6e: 04:2e:28:fb:9a:9d:74:22:84:a0:4c:9f:5d:e8:2f: e6:03:74:89:af:e2:f7:1f:d4:b9:66:2f:6f:6f:26: 2b:db:87:b3:68:db:1c:4b:fa:59:c9:a1:29:3e:ac: e7:63:d7:3a:95:87:16:fe:79:be:37:e4:b6:56:4e: 72:d6:cf:9c:68:e6:b9:30:63:b4:79:7e:e1:2d:59: 84:de:02:ba:73:f1:00:39:79:9e:20:45:80:78:28: cf:00:e2:35:f2:71:c7:9d:54:71:78:fa:34:c1:af: 77:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E5:37:5C:BB:5E:52:15:C9:82:DE:D6:4C:2C:23:0B:BD:A6:45:18 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:d5:51:41:54:49:a9:3e:33:21:15:bd:73:db:57:49:b5:53: d8:b4:4a:72:e1:c7:b5:3b:f8:b7:0a:46:f1:ed:28:e8:14:31: d5:49:fd:a9:fe:ab:30:72:8f:ce:52:e4:3c:94:ce:19:4d:f6: 9c:51:a9:d9:66:16:be:cd:e7:c6:30:8a:41:48:6c:6c:84:49: fa:42:11:d5:c8:b3:02:69:81:8d:2d:21:ff:86:f6:ba:22:9d: 4d:1f:cf:eb:e5:68:f8:41:f6:0d:1d:45:ec:38:c1:c8:75:50: a7:57:0e:74:4e:e5:71:be:86:4b:85:37:81:d5:c2:55:7b:dc: f5:ee:2e:43:56:63:44:04:89:73:0d:6c:dc:a8:07:22:2d:4e: 12:e6:6c:24:33:c7:c0:9b:d4:4a:19:ed:4f:00:9b:e6:81:5c: 4e:73:93:5e:e0:52:83:fc:5b:8f:86:5e:9c:28:5e:95:08:e7: 06:14:5c:61:2c:7f:ec:88:16:fb:5f:1c:95:6a:fc:a8:46:65: 67:77:64:e3:14:5d:cc:33:d8:73:1b:a6:13:67:3e:34:6f:f7: 10:7c:6c:00:e5:20:0a:1a:5c:11:2d:34:02:66:7c:98:f7:8b: 7f:c0:11:68:b6:a1:2a:15:39:7c:5d:43:23:3b:57:64:61:0e: 6f:6e:cc:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2Jy/ysgOQGdmBhQ1W2uBvEyRgAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTEyMTcwMzA2NDVaFw0yNTEyMjAxMTM0NDVaMDMxMTAvBgNV BAMTKDY2RTUzNzVDQkI1RTUyMTVDOTgyREVENjRDMkMyMzBCQkRBNjQ1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+UrDYsFUXNCVc12EuPLNBqCNp ZymtIaHwgdyQnaP0zE8sHNG49F+DYIVdcj5otVkSByQ85Qh9yzJlbV+B3yRuElYr N4IAFwEkJ/AGixLXzCl/BLQLvBuGpfindeANdmADZ/Sdl9+2uRUDLTLyGs6HjZLV OhBGKRkoYJ+mui1RIhfjf+2GvI6STHIWVVsjSwhA8S8fbgQuKPuanXQihKBMn13o L+YDdImv4vcf1LlmL29vJivbh7No2xxL+lnJoSk+rOdj1zqVhxb+eb435LZWTnLW z5xo5rkwY7R5fuEtWYTeArpz8QA5eZ4gRYB4KM8A4jXyccedVHF4+jTBr3djAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZuU3XLteUhXJgt7WTCwjC72mRRgwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXVUUFUSak+MyEVvXPbV0m1U9i0SnLhx7U7 +LcKRvHtKOgUMdVJ/an+qzByj85S5DyUzhlN9pxRqdlmFr7N58YwikFIbGyESfpC EdXIswJpgY0tIf+G9roinU0fz+vlaPhB9g0dRew4wch1UKdXDnRO5XG+hkuFN4HV wlV73PXuLkNWY0QEiXMNbNyoByItThLmbCQzx8Cb1EoZ7U8Am+aBXE5zk17gUoP8 W4+GXpwoXpUI5wYUXGEsf+yIFvtfHJVq/KhGZWd3ZOMUXcwz2HMbphNnPjRv9xB8 bADlIAoaXBEtNAJmfJj3i3/AEWi2oSoVOXxdQyM7V2RhDm9uzH8= -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:08 2025 by rpki-client