This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: pzPLlbNwsyds6A9nXLsChulFMffVOX70rWAS0cLDnxE= Subject key identifier: 3F:B1:42:34:16:F1:D8:D0:41:54:21:CA:31:70:EC:4E:EC:1A:B0:4D Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 514ACA49D65B7225F51A2591DBE02054E7692084 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 01BA Signing time: Tue 02 Dec 2025 07:21:16 +0000 Manifest this update: Tue 02 Dec 2025 07:16:16 +0000 Manifest next update: Fri 05 Dec 2025 15:13:16 +0000 Files and hashes: 1: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: j6euL0Vp2FBJXahOIaUhC8x72rtC7wYxKwq9D/ZeZp8=) 2: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: sGZm0xdyFxMZwoTHBW7dsSsbZairpJCJTC8T66ycaek=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: sALgAcrv6GTHzHXKVXP7PsSP+NYmqiEn9G9dF74k/j0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4a:ca:49:d6:5b:72:25:f5:1a:25:91:db:e0:20:54:e7:69:20:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Dec 2 07:16:16 2025 GMT Not After : Dec 5 15:13:16 2025 GMT Subject: CN=3FB1423416F1D8D0415421CA3170EC4EEC1AB04D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:d8:cb:ec:72:55:19:17:3d:a8:6a:7f:34: be:87:39:c1:7a:b7:a7:c2:db:82:8c:9b:84:97:76: ea:e2:39:6d:56:9e:8a:9d:49:5a:89:88:54:4f:81: 1e:49:63:01:55:9b:a3:6b:ae:b6:b6:f6:04:21:80: 3f:36:b7:f2:11:70:1f:6f:26:cb:af:2b:64:30:12: 98:23:3b:a3:99:da:da:a6:20:1f:bb:74:38:79:9f: 92:d4:e9:a2:91:fe:15:aa:5b:30:6b:e3:e1:96:07: a5:3b:5d:74:80:97:fe:cb:b8:ce:f3:c8:e1:3a:10: ec:30:be:b6:d4:04:37:4d:86:ad:68:ae:e8:49:f3: 8c:e2:56:cc:ef:7f:e9:a8:a9:55:31:99:97:d4:bd: 44:d4:e1:63:d0:6d:f8:dc:7e:58:24:09:56:83:e1: 62:df:63:37:8d:15:91:0a:2e:da:53:02:5c:4d:86: e3:99:82:95:91:99:ba:b3:98:a9:a7:ad:53:30:b0: 9a:65:22:2b:c1:0a:aa:c8:b5:7c:11:9d:57:db:d7: 23:3a:40:a4:3d:62:05:29:a4:19:19:72:76:3e:6b: a0:ad:c4:d3:ff:95:33:bb:b0:63:4f:18:57:e4:57: 49:a7:90:38:e7:57:ec:49:3e:fc:a0:c5:56:b2:6c: bb:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B1:42:34:16:F1:D8:D0:41:54:21:CA:31:70:EC:4E:EC:1A:B0:4D X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0a:fa:ac:62:27:58:13:51:0d:14:e1:10:3e:60:43:89:76: 5d:61:70:11:77:87:14:83:4e:ef:7b:5c:55:a1:ab:1e:f3:00: cc:61:af:f9:74:17:f6:51:12:e4:1c:0b:2b:59:66:0d:b0:22: 2d:fc:a0:61:7e:c8:0a:ca:85:21:69:e1:1b:9d:de:a4:1d:16: 7d:e7:f3:3f:77:cc:bb:80:d2:44:bd:07:80:62:de:f2:19:5e: 57:80:f9:21:8a:47:d0:85:5d:14:af:ab:d2:a2:2b:fa:f9:07: 37:46:ee:aa:cf:80:fd:fa:ce:19:1d:1c:85:f2:8d:f0:05:2b: d5:af:66:22:75:e8:18:4d:06:7d:cf:46:a6:b9:df:df:55:e1: 23:70:30:68:80:37:60:f1:4f:16:9d:2c:77:0b:11:cd:14:83: d7:6f:18:00:2c:de:96:04:19:a8:15:c8:52:fe:ef:c6:48:fa: b4:45:58:06:90:bb:df:45:b1:95:c1:f0:dd:9f:1b:07:f2:3d: e2:cf:56:08:7c:bc:86:af:6a:25:c4:bc:b4:ca:e4:60:85:d2: 83:fe:01:4a:52:6e:a0:7f:14:5a:dd:cd:18:3a:2d:f6:5e:1a: d6:cc:9e:6a:51:56:68:96:ba:12:f7:b9:aa:cc:27:d7:70:d1: 73:c5:fd:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUrKSdZbciX1GiWR2+AgVOdpIIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTEyMDIwNzE2MTZaFw0yNTEyMDUxNTEzMTZaMDMxMTAvBgNV BAMTKDNGQjE0MjM0MTZGMUQ4RDA0MTU0MjFDQTMxNzBFQzRFRUMxQUIwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEhdjL7HJVGRc9qGp/NL6HOcF6 t6fC24KMm4SXduriOW1WnoqdSVqJiFRPgR5JYwFVm6Nrrra29gQhgD82t/IRcB9v JsuvK2QwEpgjO6OZ2tqmIB+7dDh5n5LU6aKR/hWqWzBr4+GWB6U7XXSAl/7LuM7z yOE6EOwwvrbUBDdNhq1oruhJ84ziVszvf+moqVUxmZfUvUTU4WPQbfjcflgkCVaD 4WLfYzeNFZEKLtpTAlxNhuOZgpWRmbqzmKmnrVMwsJplIivBCqrItXwRnVfb1yM6 QKQ9YgUppBkZcnY+a6CtxNP/lTO7sGNPGFfkV0mnkDjnV+xJPvygxVaybLshAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP7FCNBbx2NBBVCHKMXDsTuwasE0wHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUK+qxiJ1gTUQ0U4RA+YEOJdl1hcBF3hxSD Tu97XFWhqx7zAMxhr/l0F/ZREuQcCytZZg2wIi38oGF+yArKhSFp4Rud3qQdFn3n 8z93zLuA0kS9B4Bi3vIZXleA+SGKR9CFXRSvq9KiK/r5BzdG7qrPgP36zhkdHIXy jfAFK9WvZiJ16BhNBn3PRqa5399V4SNwMGiAN2DxTxadLHcLEc0Ug9dvGAAs3pYE GagVyFL+78ZI+rRFWAaQu99FsZXB8N2fGwfyPeLPVgh8vIavaiXEvLTK5GCF0oP+ AUpSbqB/FFrdzRg6LfZeGtbMnmpRVmiWuhL3uarMJ9dw0XPF/fg= -----END CERTIFICATE-----Generated at Wed Dec 3 16:20:56 2025 by rpki-client