This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: d1G7zhnEMZpSxD3j78FYZqqrWiJ6Odxzky+K3cumFxI= Subject key identifier: 43:0E:20:9E:BB:90:D2:94:4F:7D:EA:71:9D:C4:6A:2A:5F:3B:AE:EE Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 5CDD047CA6D50C552E308CCD5786C87E13B3C6A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 0229 Signing time: Tue 09 Dec 2025 00:30:49 +0000 Manifest this update: Tue 09 Dec 2025 00:25:49 +0000 Manifest next update: Fri 12 Dec 2025 03:54:49 +0000 Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) 2: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: I0T3HAzmxNVahOAU3SywVbRk6wwzxplatb9NXMazD9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:54:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dd:04:7c:a6:d5:0c:55:2e:30:8c:cd:57:86:c8:7e:13:b3:c6:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Dec 9 00:25:49 2025 GMT Not After : Dec 12 03:54:49 2025 GMT Subject: CN=430E209EBB90D2944F7DEA719DC46A2A5F3BAEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:b0:11:ec:a8:fb:4c:11:e9:ef:c3:8d:22: 0d:7f:e0:b8:7e:23:e4:61:99:10:ee:e4:28:73:df: bf:d9:46:40:f4:57:de:fe:dc:38:c3:1f:b2:27:b8: b8:76:df:d2:e0:cb:4d:2f:85:09:bf:36:a8:3b:3a: 65:29:cb:92:f2:68:33:9d:e4:6c:16:8a:83:b7:12: f5:4a:71:de:4f:72:f0:0e:f4:73:6a:50:4a:ed:da: cf:90:ac:c7:ea:c5:b3:23:82:b7:b4:34:d2:b0:d1: c1:fc:f1:89:24:6d:35:fd:21:fc:a0:74:b8:b6:dd: 9a:fe:9c:b5:69:f5:8c:be:04:96:15:57:c4:c7:e9: ae:3d:d0:55:23:cb:22:19:2c:34:e9:ec:0c:73:60: a6:e4:70:63:87:f9:47:c2:b6:d7:97:c9:cd:15:13: c5:92:e6:48:fa:60:b5:89:81:98:b2:82:37:3f:d0: ce:06:4e:6e:b3:ed:14:74:a8:0e:87:1a:ff:46:ed: d0:ed:10:54:f9:8d:0f:3d:ce:72:90:49:85:a3:af: 47:8c:49:68:2c:12:b8:7c:2a:c1:d5:fc:54:14:8f: c3:c0:d7:bd:57:16:9b:3a:44:bb:04:96:1e:d3:1e: 3a:ea:44:16:07:b8:66:96:24:63:8f:43:f7:be:ac: b1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0E:20:9E:BB:90:D2:94:4F:7D:EA:71:9D:C4:6A:2A:5F:3B:AE:EE X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:b5:c6:54:1f:fa:5b:0d:1c:65:4d:e1:30:3e:e6:bc:ff:7a: f6:9e:ad:41:69:1c:24:cf:83:d7:2e:3e:35:d8:db:94:a4:26: b1:e5:6d:06:84:6a:82:51:e3:ef:d6:68:f7:c1:b1:db:6f:6c: 14:c4:68:d5:4d:7e:12:c1:66:3c:79:a2:52:fc:73:44:2d:65: b9:13:d5:ad:0d:88:c8:ba:0a:53:fb:cc:86:08:a7:ce:e8:25: c6:69:16:0c:5c:7c:c4:94:5d:98:f5:0c:f4:13:5e:96:fc:40: 32:ca:ea:0b:74:60:77:9d:76:37:03:10:cf:69:4b:31:10:20: 0d:59:f4:e1:af:7b:24:16:75:36:6c:e1:b8:08:67:29:8d:33: 15:2c:d6:1e:96:4a:16:f7:bb:19:8a:51:0d:35:1a:a6:16:9b: 75:c9:47:c8:6e:ac:19:29:a4:31:f3:e7:03:3b:f6:8f:d4:21: e4:c6:38:1e:13:9d:b9:5c:e8:b4:a4:61:f7:5d:c0:4e:75:ae: 07:e0:22:ab:17:3a:cc:65:fa:b8:05:b2:f7:2c:b0:84:af:d7: 26:b6:ce:de:d5:01:cc:1e:7c:57:60:d5:89:31:2e:34:91:34: d3:4e:28:81:83:ae:1c:b3:47:60:6a:78:e0:05:08:3f:ae:60: 14:bd:74:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXN0EfKbVDFUuMIzNV4bIfhOzxqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTEyMDkwMDI1NDlaFw0yNTEyMTIwMzU0NDlaMDMxMTAvBgNV BAMTKDQzMEUyMDlFQkI5MEQyOTQ0RjdERUE3MTlEQzQ2QTJBNUYzQkFFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFarAR7Kj7TBHp78ONIg1/4Lh+ I+RhmRDu5Chz37/ZRkD0V97+3DjDH7InuLh239Lgy00vhQm/Nqg7OmUpy5LyaDOd 5GwWioO3EvVKcd5PcvAO9HNqUErt2s+QrMfqxbMjgre0NNKw0cH88YkkbTX9Ifyg dLi23Zr+nLVp9Yy+BJYVV8TH6a490FUjyyIZLDTp7AxzYKbkcGOH+UfCtteXyc0V E8WS5kj6YLWJgZiygjc/0M4GTm6z7RR0qA6HGv9G7dDtEFT5jQ89znKQSYWjr0eM SWgsErh8KsHV/FQUj8PA171XFps6RLsElh7THjrqRBYHuGaWJGOPQ/e+rLHtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQw4gnruQ0pRPfepxncRqKl87ru4wHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOK1xlQf+lsNHGVN4TA+5rz/evaerUFpHCTP g9cuPjXY25SkJrHlbQaEaoJR4+/WaPfBsdtvbBTEaNVNfhLBZjx5olL8c0QtZbkT 1a0NiMi6ClP7zIYIp87oJcZpFgxcfMSUXZj1DPQTXpb8QDLK6gt0YHeddjcDEM9p SzEQIA1Z9OGveyQWdTZs4bgIZymNMxUs1h6WShb3uxmKUQ01GqYWm3XJR8hurBkp pDHz5wM79o/UIeTGOB4Tnblc6LSkYfddwE51rgfgIqsXOsxl+rgFsvcssISv1ya2 zt7VAcwefFdg1YkxLjSRNNNOKIGDrhyzR2BqeOAFCD+uYBS9dNQ= -----END CERTIFICATE-----Generated at Wed Dec 10 05:31:10 2025 by rpki-client