This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: h1sjMGX7s5uEJMzVn5IkXI8uuiO+1pyVppGXV8O6UNc= Subject key identifier: 38:A4:8F:5E:95:46:AA:D1:1E:E1:3B:AC:78:1E:F5:09:C6:2E:D8:51 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 3E6DFAB0B2579493C9B28E84BBA1A4FBC75D52C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 0316 Signing time: Tue 02 Dec 2025 13:01:18 +0000 Manifest this update: Tue 02 Dec 2025 12:56:18 +0000 Manifest next update: Fri 05 Dec 2025 17:40:18 +0000 Files and hashes: 1: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) 2: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: 1CPrFpKpJi6DbsjPYjLdS4hUswTqHfxIL7AUSMKA4FU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 17:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:6d:fa:b0:b2:57:94:93:c9:b2:8e:84:bb:a1:a4:fb:c7:5d:52:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Dec 2 12:56:18 2025 GMT Not After : Dec 5 17:40:18 2025 GMT Subject: CN=38A48F5E9546AAD11EE13BAC781EF509C62ED851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:46:62:12:8d:5b:86:6a:1a:17:89:fe:0c: 0a:7e:93:f7:65:7e:31:92:1a:ac:3a:15:8b:b0:18: 4d:4f:cd:50:19:a7:bb:05:79:ad:13:90:d4:37:af: 48:ac:e0:ab:3c:7f:41:c7:91:38:90:cd:0d:f2:2a: 6f:67:64:03:8c:c6:1a:e2:06:a0:66:5d:2a:78:56: 1d:44:c7:ee:75:7e:3d:b0:b0:18:98:7d:fd:b6:db: e8:74:cc:26:7f:8b:ef:51:b5:ee:6b:13:c0:d9:39: 44:36:6c:1a:56:a9:a7:fa:34:f2:66:1f:d6:96:a1: 59:bc:b6:02:cc:de:0a:d8:f2:9c:0a:59:aa:37:b4: 42:3f:cb:12:79:66:82:c8:b9:ad:c6:2e:14:c1:fd: f7:b1:16:2d:28:7a:3a:2b:88:e0:04:2b:e3:08:b1: 55:11:4b:0e:ff:1a:cb:d4:15:8c:9f:ad:3d:cf:de: 20:47:b1:45:5a:ea:be:7f:f4:fb:6e:b6:8c:1a:a4: 72:67:2b:c9:0f:d7:2f:1a:54:7b:5a:25:4e:2b:e0: 1d:01:8f:04:63:b0:bf:4f:7d:e0:43:82:ed:ba:49: d8:d7:65:17:ac:e0:2a:62:74:5b:d7:4f:92:f9:71: e0:15:ff:b0:f2:64:7d:1d:f5:6e:aa:79:50:dc:66: ed:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A4:8F:5E:95:46:AA:D1:1E:E1:3B:AC:78:1E:F5:09:C6:2E:D8:51 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:09:46:a5:95:f3:55:d2:52:17:43:9b:76:c1:54:75:ae:b6: 8f:0c:66:30:f6:0f:6f:89:5c:2d:13:0f:e6:b0:90:3e:76:84: 23:6e:ec:be:82:5e:bc:27:a6:da:df:20:4c:6e:d3:bc:d0:c1: 6f:00:c6:c1:ee:63:2b:f1:7e:d5:2b:d9:5a:06:32:fe:45:2b: fd:41:7d:c1:15:b9:64:a6:b7:00:d8:65:b0:b4:ae:f8:4a:dc: 82:9a:37:96:b4:42:2d:b3:80:4b:bb:c4:52:0b:66:1b:82:bb: 00:ae:5a:4d:ca:de:72:52:82:e6:a2:65:97:a9:40:b5:92:dd: ea:a4:6e:2f:1f:da:64:bd:96:bb:e0:15:41:51:91:e5:05:8d: a6:40:c8:51:9d:22:9c:a3:84:cb:15:61:d9:94:5f:e1:e8:ff: a8:c6:59:6f:64:b8:a9:08:9a:f7:bc:87:bc:41:9d:a5:c2:7b: 5d:72:9a:d2:ba:8a:fb:80:a4:b4:fe:87:76:87:06:44:87:6f: 3a:89:07:8a:cd:f2:5f:45:66:43:3a:4b:17:21:5b:7e:56:29: aa:dd:e1:50:2d:f2:22:64:6c:3b:cd:94:fa:3a:bf:8f:56:3b: 87:5c:ad:4b:85:87:60:17:a7:a0:26:ff:ba:98:aa:56:06:5e: 56:2a:e1:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPm36sLJXlJPJso6Eu6Gk+8ddUscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTEyMDIxMjU2MThaFw0yNTEyMDUxNzQwMThaMDMxMTAvBgNV BAMTKDM4QTQ4RjVFOTU0NkFBRDExRUUxM0JBQzc4MUVGNTA5QzYyRUQ4NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC540ZiEo1bhmoaF4n+DAp+k/dl fjGSGqw6FYuwGE1PzVAZp7sFea0TkNQ3r0is4Ks8f0HHkTiQzQ3yKm9nZAOMxhri BqBmXSp4Vh1Ex+51fj2wsBiYff222+h0zCZ/i+9Rte5rE8DZOUQ2bBpWqaf6NPJm H9aWoVm8tgLM3grY8pwKWao3tEI/yxJ5ZoLIua3GLhTB/fexFi0oejoriOAEK+MI sVURSw7/GsvUFYyfrT3P3iBHsUVa6r5/9PtutowapHJnK8kP1y8aVHtaJU4r4B0B jwRjsL9PfeBDgu26SdjXZRes4CpidFvXT5L5ceAV/7DyZH0d9W6qeVDcZu3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOKSPXpVGqtEe4TuseB71CcYu2FEwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8JRqWV81XSUhdDm3bBVHWuto8MZjD2D2+J XC0TD+awkD52hCNu7L6CXrwnptrfIExu07zQwW8AxsHuYyvxftUr2VoGMv5FK/1B fcEVuWSmtwDYZbC0rvhK3IKaN5a0Qi2zgEu7xFILZhuCuwCuWk3K3nJSguaiZZep QLWS3eqkbi8f2mS9lrvgFUFRkeUFjaZAyFGdIpyjhMsVYdmUX+Ho/6jGWW9kuKkI mve8h7xBnaXCe11ymtK6ivuApLT+h3aHBkSHbzqJB4rN8l9FZkM6SxchW35WKard 4VAt8iJkbDvNlPo6v49WO4dcrUuFh2AXp6Am/7qYqlYGXlYq4fI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:40 2025 by rpki-client