This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: EMldJlikl0QEwa3CaPo/twMklX2Kpr3asaGL+cIua8E= Subject key identifier: 7A:A6:21:A4:7C:8A:96:7D:FE:DE:55:73:D1:E9:65:F4:86:0E:B7:4C Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 3B99F6E981064531DA105FB4975FDB1DBE685F70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 021C Signing time: Mon 01 Dec 2025 08:52:36 +0000 Manifest this update: Mon 01 Dec 2025 08:47:36 +0000 Manifest next update: Thu 04 Dec 2025 19:21:36 +0000 Files and hashes: 1: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: brRr7ZtjvF4DooZnSqHxkjg1/PVTVoltvI/oJwGU/RM=) 2: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 3: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 19:21:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:99:f6:e9:81:06:45:31:da:10:5f:b4:97:5f:db:1d:be:68:5f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Dec 1 08:47:36 2025 GMT Not After : Dec 4 19:21:36 2025 GMT Subject: CN=7AA621A47C8A967DFEDE5573D1E965F4860EB74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:cb:3d:3f:13:74:63:dd:46:f7:b1:b5:e0:b8: f5:6a:e4:76:b1:6c:3d:fa:b6:ef:22:23:bc:d2:8b: c0:b5:d6:70:ad:ab:4c:4d:63:0d:3d:17:51:ee:4f: 9b:64:4e:62:2e:a9:40:a5:bc:cd:41:ad:ce:59:74: f8:16:dd:b8:0d:71:7f:1c:9c:2f:d9:6c:b5:6e:cc: 23:d7:21:c1:2b:21:66:b4:22:f0:7e:52:c6:43:cc: 99:41:f3:52:41:95:bb:ef:e6:84:1d:53:71:b9:8e: 5f:55:6e:d6:db:8a:db:6a:a2:8b:58:95:81:0a:b5: 9b:1d:1e:a0:aa:29:0e:d8:2a:a7:09:4c:9c:51:fe: a6:2a:dc:62:1f:26:07:93:68:40:09:ec:b5:6a:cb: 15:00:ff:b3:59:b2:5a:55:68:05:58:25:c1:36:7d: 88:b4:a4:a4:36:8c:40:c2:5b:e3:dc:d7:3f:46:dd: 1e:54:8f:4f:32:12:a8:d8:39:e2:2c:cf:f4:93:41: 5a:79:87:4c:e1:d0:db:5a:76:20:14:fa:0e:bb:41: c2:80:5d:29:b0:4c:e5:42:7a:54:11:5d:bb:6b:b6: 5f:03:66:03:d3:b7:08:6c:dd:4c:b5:7b:0a:fd:dc: dd:cb:4c:ce:11:1b:17:e5:36:98:d4:aa:d4:a9:c7: 7c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A6:21:A4:7C:8A:96:7D:FE:DE:55:73:D1:E9:65:F4:86:0E:B7:4C X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:41:44:e3:e0:64:e4:cf:4b:78:89:e2:d7:32:e1:1b:c5:66: b1:19:34:fe:1a:bb:9b:87:5b:41:0d:d2:a0:b8:54:de:8f:4c: 31:90:1d:7a:27:74:34:ad:22:24:56:88:a0:f4:6b:69:85:45: 57:31:cf:f8:7d:9f:07:51:b4:ad:f4:c9:1c:44:5b:1a:61:6f: 60:41:60:84:18:a1:46:20:fa:49:85:f9:a0:05:cd:51:93:28: 2d:1a:31:5c:08:42:3d:03:fb:db:a2:12:f7:f6:df:82:f0:30: 92:19:f5:9b:24:66:c0:50:b3:37:76:d8:3a:db:9c:4c:5b:ce: 8e:58:97:33:86:7f:e8:0a:ab:27:fa:04:c3:23:9b:85:62:aa: f8:dd:0d:f1:0e:ae:5d:e0:18:87:7f:62:c8:25:e5:06:d1:43: ea:79:52:5c:7c:35:10:06:48:02:f5:94:2f:ab:23:01:97:db: 3f:97:1e:3d:ad:2c:34:ca:86:91:2d:a5:c1:f3:ea:cb:b1:fe: 20:14:b8:9d:af:39:38:fe:63:6a:4e:70:56:1b:a9:df:75:86: 9d:44:06:52:ec:0b:cf:9e:8d:43:30:fd:a3:de:51:4d:bf:2b: ed:fd:f8:b5:ad:09:28:b2:be:00:c1:6c:98:74:2a:d8:3a:e2: 4e:c7:0f:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5n26YEGRTHaEF+0l1/bHb5oX3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTEyMDEwODQ3MzZaFw0yNTEyMDQxOTIxMzZaMDMxMTAvBgNV BAMTKDdBQTYyMUE0N0M4QTk2N0RGRURFNTU3M0QxRTk2NUY0ODYwRUI3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkyz0/E3Rj3Ub3sbXguPVq5Hax bD36tu8iI7zSi8C11nCtq0xNYw09F1HuT5tkTmIuqUClvM1Brc5ZdPgW3bgNcX8c nC/ZbLVuzCPXIcErIWa0IvB+UsZDzJlB81JBlbvv5oQdU3G5jl9VbtbbittqootY lYEKtZsdHqCqKQ7YKqcJTJxR/qYq3GIfJgeTaEAJ7LVqyxUA/7NZslpVaAVYJcE2 fYi0pKQ2jEDCW+Pc1z9G3R5Uj08yEqjYOeIsz/STQVp5h0zh0NtadiAU+g67QcKA XSmwTOVCelQRXbtrtl8DZgPTtwhs3Uy1ewr93N3LTM4RGxflNpjUqtSpx3wbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeqYhpHyKln3+3lVz0ell9IYOt0wwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALpBROPgZOTPS3iJ4tcy4RvFZrEZNP4au5uH W0EN0qC4VN6PTDGQHXondDStIiRWiKD0a2mFRVcxz/h9nwdRtK30yRxEWxphb2BB YIQYoUYg+kmF+aAFzVGTKC0aMVwIQj0D+9uiEvf234LwMJIZ9ZskZsBQszd22Drb nExbzo5YlzOGf+gKqyf6BMMjm4ViqvjdDfEOrl3gGId/Ysgl5QbRQ+p5Ulx8NRAG SAL1lC+rIwGX2z+XHj2tLDTKhpEtpcHz6sux/iAUuJ2vOTj+Y2pOcFYbqd91hp1E BlLsC8+ejUMw/aPeUU2/K+39+LWtCSiyvgDBbJh0Ktg64k7HD+w= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:13 2025 by rpki-client