This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: e92E31ItX+DhdvFSxW7XVaz74s0NcIQx9cM6EndGMdg= Subject key identifier: E8:03:83:54:3E:72:6E:7A:12:29:5E:80:45:97:6A:F5:EA:C6:32:5B Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 3BFAA6B9097E4121AAC35EA02FCCF0F8F00F69AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: F2 Signing time: Mon 15 Dec 2025 23:01:39 +0000 Manifest this update: Mon 15 Dec 2025 22:56:39 +0000 Manifest next update: Fri 19 Dec 2025 06:42:39 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: MWbAqXlxpwawfhTwN1G8uX3vH+JC6iGY4ENFFewI7yE=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 06:42:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fa:a6:b9:09:7e:41:21:aa:c3:5e:a0:2f:cc:f0:f8:f0:0f:69:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Dec 15 22:56:39 2025 GMT Not After : Dec 19 06:42:39 2025 GMT Subject: CN=E80383543E726E7A12295E8045976AF5EAC6325B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:42:4b:2d:21:26:41:05:d7:3f:2e:64:7f: 16:24:1f:51:93:bb:35:56:9e:26:ed:17:79:16:51: a4:e8:ec:ee:5b:00:45:b1:bb:57:ab:e7:75:7b:ed: a8:8a:f4:c2:f0:14:58:76:a3:c7:8e:c0:79:ba:7a: ec:b1:b3:fc:c4:99:56:04:45:fa:8e:27:46:ee:32: 80:ab:18:89:e9:47:73:11:39:b7:ff:7e:65:a0:91: 63:63:e4:0f:00:9c:18:46:48:3e:2e:b5:71:59:18: 43:25:3f:6d:67:61:a8:a1:55:d2:1f:72:52:6a:f2: 92:f9:4a:04:4a:c6:3c:f6:65:b0:d5:47:76:41:80: 17:b0:be:5f:6e:3c:9c:59:66:76:f9:83:7c:bc:21: b8:ac:68:b7:85:60:91:0b:43:22:45:9e:8d:d0:59: fe:ad:64:d5:b6:c6:3c:c4:4a:9e:f8:f7:dd:54:b6: 94:74:4b:48:ee:56:af:66:5e:e2:81:17:11:dd:ec: 2f:b2:30:06:c9:8c:a5:1d:fa:4b:c7:3a:da:f1:7d: 93:a3:f2:e3:5b:75:7b:93:7a:a8:24:4d:58:c9:56: 70:f5:cc:23:48:52:46:e0:b8:e8:57:ec:71:06:29: 75:8c:6c:b5:a1:b7:fc:ff:0e:1f:6f:0f:7f:f5:c7: 2d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:03:83:54:3E:72:6E:7A:12:29:5E:80:45:97:6A:F5:EA:C6:32:5B X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:0e:93:78:79:23:67:ea:79:c0:de:13:29:0a:d5:cb:1c: b5:e3:e9:a1:d9:8e:49:dc:0b:8b:36:99:d0:3a:39:81:2f:a0: b9:c8:b6:b4:44:b4:d5:80:5e:f6:3f:c5:4d:fe:fb:14:f3:9f: 54:5a:e3:bc:ed:82:06:67:da:a8:5b:8d:fc:5b:41:f2:a0:f8: 79:30:81:ae:95:63:cd:ee:61:49:e7:23:1e:d2:ee:2f:05:82: ff:8d:45:fa:23:14:20:dc:f5:5a:63:cd:3a:59:db:ee:f0:a2: 0b:ec:3c:79:66:7c:d0:3d:87:3d:78:be:1c:67:5d:77:17:d5: aa:f3:07:44:77:2e:33:44:86:5a:a5:a3:f2:85:73:41:35:d1: 6f:10:b3:1c:06:e5:47:ae:e5:d8:30:03:77:cd:9c:3b:2f:ef: 24:af:b8:83:f9:51:30:5d:8f:e5:ad:06:56:68:06:0e:fe:af: e9:f8:96:bf:83:b9:80:9a:62:3e:14:3c:b5:72:68:a7:1a:1c: b6:e5:26:84:47:88:ce:8b:b7:52:d7:f8:1d:58:64:67:c8:60: d5:49:45:e7:4a:c0:70:2b:ae:ea:ce:ce:42:36:1d:81:7e:f4: 4c:46:23:50:74:c0:34:18:ed:35:e3:5b:44:79:2c:30:4f:c5: d3:49:c9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/qmuQl+QSGqw16gL8zw+PAPaa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTEyMTUyMjU2MzlaFw0yNTEyMTkwNjQyMzlaMDMxMTAvBgNV BAMTKEU4MDM4MzU0M0U3MjZFN0ExMjI5NUU4MDQ1OTc2QUY1RUFDNjMyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFTEJLLSEmQQXXPy5kfxYkH1GT uzVWnibtF3kWUaTo7O5bAEWxu1er53V77aiK9MLwFFh2o8eOwHm6euyxs/zEmVYE RfqOJ0buMoCrGInpR3MRObf/fmWgkWNj5A8AnBhGSD4utXFZGEMlP21nYaihVdIf clJq8pL5SgRKxjz2ZbDVR3ZBgBewvl9uPJxZZnb5g3y8IbisaLeFYJELQyJFno3Q Wf6tZNW2xjzESp74991UtpR0S0juVq9mXuKBFxHd7C+yMAbJjKUd+kvHOtrxfZOj 8uNbdXuTeqgkTVjJVnD1zCNIUkbguOhX7HEGKXWMbLWht/z/Dh9vD3/1xy2lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6AODVD5ybnoSKV6ARZdq9erGMlswHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9wDpN4eSNn6nnA3hMpCtXLHLXj6aHZjknc C4s2mdA6OYEvoLnItrREtNWAXvY/xU3++xTzn1Ra47ztggZn2qhbjfxbQfKg+Hkw ga6VY83uYUnnIx7S7i8Fgv+NRfojFCDc9VpjzTpZ2+7wogvsPHlmfNA9hz14vhxn XXcX1arzB0R3LjNEhlqlo/KFc0E10W8QsxwG5Ueu5dgwA3fNnDsv7ySvuIP5UTBd j+WtBlZoBg7+r+n4lr+DuYCaYj4UPLVyaKcaHLblJoRHiM6Lt1LX+B1YZGfIYNVJ RedKwHArrurOzkI2HYF+9ExGI1B0wDQY7TXjW0R5LDBPxdNJyeA= -----END CERTIFICATE-----Generated at Wed Dec 17 19:08:19 2025 by rpki-client