This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: rM3S8ScyM1KmHWcW8UCgHhzszqmlMRARGtccRMEht1c= Subject key identifier: 06:8B:6F:95:CB:81:0B:C4:08:BC:1D:8F:70:96:9E:E4:F5:7F:11:DC Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 2A54D685A7660C2FC311BFD603993A0F5172BF0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 021A Signing time: Tue 02 Dec 2025 21:52:01 +0000 Manifest this update: Tue 02 Dec 2025 21:47:01 +0000 Manifest next update: Fri 05 Dec 2025 23:20:01 +0000 Files and hashes: 1: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: GYOdgB5E6zAfN6csGwKvCQu8t1dBnuZsHYI8ZcYsOXc=) 2: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: eU4CsIBkCNHWwkLGYk1dQXK+PlYTeSPnN5JLGBDdwoE=) 3: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: VA2MwcCaVNpr3I+OdZ3pR+RJmuL2UZYMETO47v3d6kM=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: wMwayzIPwqMBIP88IOsXTpqmzpX3PVf3WfVEJ/JlX8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 23:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:d6:85:a7:66:0c:2f:c3:11:bf:d6:03:99:3a:0f:51:72:bf:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Dec 2 21:47:01 2025 GMT Not After : Dec 5 23:20:01 2025 GMT Subject: CN=068B6F95CB810BC408BC1D8F70969EE4F57F11DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:e6:63:5a:8e:66:5c:d1:83:71:93:3c:a4: ff:4f:17:12:71:0d:11:9d:f4:db:21:bd:91:6b:c4: 93:e2:a4:67:f2:06:a5:5e:f9:86:46:c0:1b:f9:ff: c1:98:41:3b:a9:79:1a:bd:39:bb:cf:4f:49:3a:1b: 4c:90:33:a4:96:1d:bd:2c:5d:85:78:20:77:9a:14: 4e:aa:ec:af:8b:7d:91:5b:eb:fc:f1:87:1a:23:9d: 02:aa:06:04:08:aa:dd:d1:85:fe:48:b8:94:be:7a: bc:bc:3e:7e:8e:ad:3c:3f:bc:ec:d1:37:e6:f0:a7: d6:55:0a:bf:80:81:f5:88:b3:7a:ce:9f:3f:ed:16: 58:9e:ca:d9:d3:b0:e9:7d:63:fa:a2:34:20:43:ca: 11:bd:b3:4a:49:33:c8:7b:83:c3:16:cd:09:da:5c: bb:5b:c2:c3:61:ca:d1:b9:83:13:26:31:7c:70:d5: a5:55:56:79:e6:c3:05:96:8d:3f:8e:52:ed:56:73: 26:a1:d1:dc:f3:dd:00:10:92:10:7d:15:bd:89:13: 8f:d1:d5:ac:42:6f:e5:6f:ac:c8:aa:95:7c:9e:8b: f5:f9:10:cd:7a:66:a3:5e:09:bf:2f:80:20:15:97: ba:3d:36:fc:aa:94:d9:f5:f4:ea:1b:dd:f7:0c:b7: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:8B:6F:95:CB:81:0B:C4:08:BC:1D:8F:70:96:9E:E4:F5:7F:11:DC X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:de:7a:e7:15:95:d0:5f:3c:6f:30:a1:7c:c6:5b:b6:b9:87: 0e:da:32:a1:97:89:26:c6:bc:76:d6:bf:9d:6b:73:8f:40:95: 2a:bd:d6:9e:43:e8:d3:a5:4d:43:18:9a:03:74:f0:ee:05:0b: 33:45:8e:04:76:e0:b5:f5:15:8c:68:3a:e4:b3:41:a8:83:11: bd:31:61:e8:9a:fc:60:2c:76:d7:9e:f1:62:8d:a7:61:3a:46: 7a:21:0b:c9:e8:a2:91:9d:0b:19:1f:b0:d6:d6:eb:7e:4c:0a: 0c:4b:b0:3a:e1:c2:55:e2:a9:27:a8:59:93:76:26:6c:4b:d4: 62:8a:f9:f4:a6:a3:52:fa:75:9b:de:83:25:36:ed:a6:7f:3c: 25:dc:de:a3:ca:59:c8:30:76:df:23:67:b8:c4:c6:fa:a5:b8: 01:d7:98:72:88:35:4f:5c:68:06:a5:d9:7e:2a:24:14:96:a1: 3a:26:ea:f7:69:92:ee:ed:d9:39:9d:43:07:40:63:e2:04:de: 8b:12:e9:86:c4:b3:18:98:0f:c1:9d:39:86:2c:b4:d3:15:cd: 9a:1f:fe:d7:45:51:3d:92:e3:aa:1f:e1:7e:93:85:17:af:dc: 4d:28:4b:00:48:6b:38:6a:d3:a6:f4:3b:b3:8a:d7:fa:3a:9c: 4e:76:6d:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlTWhadmDC/DEb/WA5k6D1FyvwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNTEyMDIyMTQ3MDFaFw0yNTEyMDUyMzIwMDFaMDMxMTAvBgNV BAMTKDA2OEI2Rjk1Q0I4MTBCQzQwOEJDMUQ4RjcwOTY5RUU0RjU3RjExREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLt+ZjWo5mXNGDcZM8pP9PFxJx DRGd9NshvZFrxJPipGfyBqVe+YZGwBv5/8GYQTupeRq9ObvPT0k6G0yQM6SWHb0s XYV4IHeaFE6q7K+LfZFb6/zxhxojnQKqBgQIqt3Rhf5IuJS+ery8Pn6OrTw/vOzR N+bwp9ZVCr+AgfWIs3rOnz/tFlieytnTsOl9Y/qiNCBDyhG9s0pJM8h7g8MWzQna XLtbwsNhytG5gxMmMXxw1aVVVnnmwwWWjT+OUu1Wcyah0dzz3QAQkhB9Fb2JE4/R 1axCb+VvrMiqlXyei/X5EM16ZqNeCb8vgCAVl7o9NvyqlNn19Oob3fcMt1YpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBotvlcuBC8QIvB2PcJae5PV/EdwwHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfeeucVldBfPG8woXzGW7a5hw7aMqGXiSbG vHbWv51rc49AlSq91p5D6NOlTUMYmgN08O4FCzNFjgR24LX1FYxoOuSzQaiDEb0x Yeia/GAsdtee8WKNp2E6RnohC8noopGdCxkfsNbW635MCgxLsDrhwlXiqSeoWZN2 JmxL1GKK+fSmo1L6dZvegyU27aZ/PCXc3qPKWcgwdt8jZ7jExvqluAHXmHKINU9c aAal2X4qJBSWoTom6vdpku7t2TmdQwdAY+IE3osS6YbEsxiYD8GdOYYstNMVzZof /tdFUT2S46of4X6ThRev3E0oSwBIazhq06b0O7OK1/o6nE52bXo= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:34 2025 by rpki-client