This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft File: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft (raw, json) Hash identifier: qDuA07MtKMZxWmJZS/EBkvYmBgF71qwuD3zUYzFebqA= Subject key identifier: B2:9E:F2:03:AB:0B:48:EB:1C:80:7E:53:62:8A:35:53:17:A2:06:86 Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 Certificate issuer: /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Certificate serial: 4D2946CE2C45DE74BAFCC9F67D8ABD1A9E94FA91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft Manifest number: 04EB Signing time: Tue 02 Dec 2025 13:42:02 +0000 Manifest this update: Tue 02 Dec 2025 13:37:02 +0000 Manifest next update: Sat 06 Dec 2025 00:52:02 +0000 Files and hashes: 1: 3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (hash: XAdZjhJ8p/Sfbf/+znyNJnyeiAlF9/1TNV8duJLhiwk=) 2: AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl (hash: zBvR55XsdyPvpwLFJtoFRkYKmnoX46XMdN5wV/oltsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:29:46:ce:2c:45:de:74:ba:fc:c9:f6:7d:8a:bd:1a:9e:94:fa:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906 Validity Not Before: Dec 2 13:37:02 2025 GMT Not After : Dec 6 00:52:02 2025 GMT Subject: CN=B29EF203AB0B48EB1C807E53628A355317A20686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6d:08:ad:97:3a:8c:36:41:e1:45:57:67:d5: 94:23:d7:86:06:59:2d:0a:93:9c:dd:4e:5d:7e:d4: 13:85:9d:53:c0:80:2a:7d:a8:b8:21:72:a2:f4:06: c0:da:ac:09:cf:b6:64:17:0b:bd:3f:de:6d:cd:91: 53:fd:6e:9d:59:25:6e:d2:41:be:bc:3b:c3:05:19: f9:6b:95:e1:38:77:60:5d:a9:74:ad:37:a3:9e:17: ec:ea:54:8c:88:0b:bb:7b:d6:79:59:92:b9:fc:d4: 88:18:ba:3d:fd:b2:6a:30:b7:e2:0a:28:ed:ca:7a: a8:81:c1:42:21:b0:f8:47:6a:e4:3b:14:65:98:be: dd:5d:b9:d8:f9:81:f4:91:47:ca:4d:97:28:08:e1: 2e:37:e6:5b:9a:bd:3f:31:9c:3d:3b:93:5c:bb:a5: 00:a2:9e:23:ef:13:76:76:64:d9:cf:7b:a0:e6:d3: c8:ea:a4:ea:98:b9:64:0f:2a:bc:c8:3c:ef:70:6f: 9a:12:46:c3:bc:64:c5:98:2f:bf:06:58:96:52:41: c1:8e:ce:12:aa:c4:d6:86:97:04:18:00:05:34:04: b9:10:bb:f4:2c:75:38:3d:58:66:01:ec:43:9d:cd: 00:66:58:86:f6:0f:fa:5f:77:57:1d:57:4c:81:74: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9E:F2:03:AB:0B:48:EB:1C:80:7E:53:62:8A:35:53:17:A2:06:86 X509v3 Authority Key Identifier: keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ca:73:d9:a0:a3:38:b6:8d:2b:c3:c4:d3:1c:55:da:a4:fe: e7:8b:eb:b9:2e:31:2f:ef:b8:a2:04:26:a3:7c:96:8c:f2:8b: ad:17:4d:f6:1f:c8:24:fe:55:ed:28:f6:47:76:19:fb:f6:88: d7:5a:27:29:70:c8:50:3c:4f:4b:1c:f2:2c:af:42:28:5a:1b: 48:df:a7:72:71:f6:94:20:99:c2:de:00:86:18:6e:4c:53:d4: f0:26:1c:45:4c:b9:da:51:a0:de:5b:45:27:e6:38:f7:c3:51: 5f:81:be:a6:62:c1:5b:62:e7:25:02:76:f0:82:61:db:06:39: ae:36:88:ea:15:1c:92:9e:5c:a9:e4:20:be:aa:5c:03:58:ff: 53:0e:71:3d:01:6e:c4:af:fc:96:75:46:65:43:ef:d7:87:f7: 2f:6d:01:a3:e8:16:f3:e8:b8:3c:73:a6:1e:af:09:df:6e:b3: 79:24:a9:94:df:64:53:34:29:fe:93:f7:8b:27:bf:76:c4:62: 48:29:6e:25:03:7f:6f:93:e8:fa:b2:da:14:d7:87:8a:2e:f8: 95:99:3c:3f:e8:48:5d:61:eb:07:a1:75:e8:e2:3e:6f:82:c2: 4b:ec:17:84:f4:d3:3c:81:e1:58:65:ab:65:e3:d7:9b:c7:17: 78:91:c6:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTSlGzixF3nS6/Mn2fYq9Gp6U+pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5 QjYxQTkwNjAeFw0yNTEyMDIxMzM3MDJaFw0yNTEyMDYwMDUyMDJaMDMxMTAvBgNV BAMTKEIyOUVGMjAzQUIwQjQ4RUIxQzgwN0U1MzYyOEEzNTUzMTdBMjA2ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybQitlzqMNkHhRVdn1ZQj14YG WS0Kk5zdTl1+1BOFnVPAgCp9qLghcqL0BsDarAnPtmQXC70/3m3NkVP9bp1ZJW7S Qb68O8MFGflrleE4d2BdqXStN6OeF+zqVIyIC7t71nlZkrn81IgYuj39smowt+IK KO3KeqiBwUIhsPhHauQ7FGWYvt1dudj5gfSRR8pNlygI4S435luavT8xnD07k1y7 pQCiniPvE3Z2ZNnPe6Dm08jqpOqYuWQPKrzIPO9wb5oSRsO8ZMWYL78GWJZSQcGO zhKqxNaGlwQYAAU0BLkQu/QsdTg9WGYB7EOdzQBmWIb2D/pfd1cdV0yBdKepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsp7yA6sLSOscgH5TYoo1UxeiBoYwHwYDVR0j BBgwFoAUrRy746Gr4comRMPi34Me+ZthqQYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzJlOTQ1Yy1lZDNkLTQ4OWEtODNlZC01MDE3MjczZDVhYTUvMC9BRDFDQkJFM0Ex QUJFMUNBMjY0NEMzRTJERjgzMUVGOTlCNjFBOTA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFFRjk5QjYx QTkwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMyZTk0NWMtZWQzZC00ODlhLTgz ZWQtNTAxNzI3M2Q1YWE1LzAvQUQxQ0JCRTNBMUFCRTFDQTI2NDRDM0UyREY4MzFF Rjk5QjYxQTkwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjKc9mgozi2jSvDxNMcVdqk/ueL67kuMS/v uKIEJqN8lozyi60XTfYfyCT+Ve0o9kd2Gfv2iNdaJylwyFA8T0sc8iyvQihaG0jf p3Jx9pQgmcLeAIYYbkxT1PAmHEVMudpRoN5bRSfmOPfDUV+BvqZiwVti5yUCdvCC YdsGOa42iOoVHJKeXKnkIL6qXANY/1MOcT0BbsSv/JZ1RmVD79eH9y9tAaPoFvPo uDxzph6vCd9us3kkqZTfZFM0Kf6T94snv3bEYkgpbiUDf2+T6Pqy2hTXh4ou+JWZ PD/oSF1h6wehdejiPm+CwkvsF4T00zyB4Vhlq2Xj15vHF3iRxug= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:27 2025 by rpki-client