This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft File: A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft (raw, json) Hash identifier: 3iYv7im1NSRsli3SXfKDuLGvOvi5MhJHqdFA+KWC+GE= Subject key identifier: 1D:D3:9B:6A:4C:21:E1:58:6C:28:C2:D7:99:D2:55:3D:54:61:84:AA Authority key identifier: A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 Certificate issuer: /CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1 Certificate serial: 7100D2F9B282FAF505294DF592B521D881DE1D51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft Manifest number: 01C4 Signing time: Tue 02 Dec 2025 07:00:05 +0000 Manifest this update: Tue 02 Dec 2025 06:55:05 +0000 Manifest next update: Fri 05 Dec 2025 09:30:05 +0000 Files and hashes: 1: 3130332e3130342e39392e302f32342d3234203d3e20313336383839.roa (hash: uYRFbOTJHuqcvL3sxKrVp0jUqn44sf+z1FQI1Oe3KA4=) 2: A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl (hash: rcgkJcuXtFhgLg8kvlvcFnSGEm1coG+hELBnDs6U1Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:00:d2:f9:b2:82:fa:f5:05:29:4d:f5:92:b5:21:d8:81:de:1d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A6053DEB0B12DBEE36D52629512562089CCBC1A1 Validity Not Before: Dec 2 06:55:05 2025 GMT Not After : Dec 5 09:30:05 2025 GMT Subject: CN=1DD39B6A4C21E1586C28C2D799D2553D546184AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:b5:54:ca:f5:04:33:70:bd:28:11:d3:63: e5:96:07:22:16:ad:35:b3:99:79:01:25:3a:31:19: 33:53:2e:f1:54:d6:ac:6e:2d:0b:e4:f1:72:f6:88: b8:1d:b1:27:9c:f9:64:b6:a3:86:cc:8a:d9:66:9a: 7a:00:02:5b:3b:3a:ae:a9:bc:f1:18:80:a6:67:18: 5f:b5:0b:d0:25:f2:f3:c4:25:d9:3d:c0:7e:e5:d2: 35:83:09:7d:0c:3c:31:79:3d:f4:38:dc:73:3a:48: 60:1d:de:1a:d8:88:ae:3a:30:82:35:fd:ad:0e:95: b2:b0:d5:cc:0c:cf:65:4e:90:cf:66:17:3a:21:fe: 2b:d0:2f:26:e8:1c:0f:ca:08:d1:ad:30:37:ae:a0: a0:9d:72:67:7f:8f:fa:3b:5e:f9:6b:25:ab:fd:7f: 07:2b:9b:f8:1f:33:f7:8f:53:09:4c:80:39:06:bf: 2a:34:79:4b:ff:ef:24:67:1f:45:3a:ec:c8:3f:f2: 2f:2d:7d:75:65:fe:8a:32:eb:17:59:6a:e0:7f:71: c3:5d:49:15:a4:67:e3:d9:3c:4f:8c:25:5d:fd:d0: e5:bc:db:11:fa:47:d8:ac:47:cd:08:d8:e6:d2:68: cd:21:a5:e0:cb:9f:4f:fd:57:ca:54:ef:70:df:71: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D3:9B:6A:4C:21:E1:58:6C:28:C2:D7:99:D2:55:3D:54:61:84:AA X509v3 Authority Key Identifier: keyid:A6:05:3D:EB:0B:12:DB:EE:36:D5:26:29:51:25:62:08:9C:CB:C1:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6053DEB0B12DBEE36D52629512562089CCBC1A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d7f9eb-3c2d-41a1-9081-0780a58873ea/0/A6053DEB0B12DBEE36D52629512562089CCBC1A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:31:39:cc:10:c6:39:d3:20:49:31:72:d3:9f:f9:89:ed:97: 7b:1f:e9:24:be:8b:4f:73:25:b7:6b:4f:2a:33:f9:ba:3e:f3: e3:e6:67:83:bd:c7:d4:a4:72:5e:0a:da:16:37:50:8e:37:7c: f9:82:8a:a3:08:5a:5f:fe:94:f6:eb:b1:a9:2c:b2:ca:61:be: 5b:f6:54:c1:2b:f3:11:24:cc:24:75:78:41:5e:08:e0:36:ba: db:ab:66:8c:e2:21:eb:16:1f:c0:cd:4b:42:53:71:3e:50:88: 1e:13:f8:40:9f:89:01:84:26:d5:67:52:65:db:31:3a:52:b9: 24:7c:f1:d1:03:3e:ca:59:0e:67:23:f8:ea:50:43:f8:75:0e: 6d:69:c7:40:1f:c6:38:32:93:8b:15:ee:92:fe:95:fc:bf:e8: 79:f9:d0:04:66:ba:7f:9a:8a:c9:be:32:fc:e0:8c:5d:2e:2f: 76:74:02:d7:dc:e2:d2:5f:a6:f2:8a:d1:0d:23:88:71:7f:dd: b0:9d:60:1e:7f:06:17:9a:28:21:6a:d8:aa:e2:52:54:87:5c: df:55:d6:ec:8b:a6:70:f5:e3:e2:ca:a1:1c:27:22:27:cb:c5: 57:34:96:79:fc:94:c4:96:20:b3:fe:fa:38:7d:1e:34:cd:f7: 51:22:6f:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQDS+bKC+vUFKU31krUh2IHeHVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwNTNERUIwQjEyREJFRTM2RDUyNjI5NTEyNTYyMDg5 Q0NCQzFBMTAeFw0yNTEyMDIwNjU1MDVaFw0yNTEyMDUwOTMwMDVaMDMxMTAvBgNV BAMTKDFERDM5QjZBNEMyMUUxNTg2QzI4QzJENzk5RDI1NTNENTQ2MTg0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHIbVUyvUEM3C9KBHTY+WWByIW rTWzmXkBJToxGTNTLvFU1qxuLQvk8XL2iLgdsSec+WS2o4bMitlmmnoAAls7Oq6p vPEYgKZnGF+1C9Al8vPEJdk9wH7l0jWDCX0MPDF5PfQ43HM6SGAd3hrYiK46MII1 /a0OlbKw1cwMz2VOkM9mFzoh/ivQLyboHA/KCNGtMDeuoKCdcmd/j/o7XvlrJav9 fwcrm/gfM/ePUwlMgDkGvyo0eUv/7yRnH0U67Mg/8i8tfXVl/ooy6xdZauB/ccNd SRWkZ+PZPE+MJV390OW82xH6R9isR80I2ObSaM0hpeDLn0/9V8pU73DfcdhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHdObakwh4VhsKMLXmdJVPVRhhKowHwYDVR0j BBgwFoAUpgU96wsS2+421SYpUSViCJzLwaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2Q3ZjllYi0zYzJkLTQxYTEtOTA4MS0wNzgwYTU4ODczZWEvMC9BNjA1M0RFQjBC MTJEQkVFMzZENTI2Mjk1MTI1NjIwODlDQ0JDMUExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYwNTNERUIwQjEyREJFRTM2RDUyNjI5NTEyNTYyMDg5Q0NC QzFBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNkN2Y5ZWItM2MyZC00MWExLTkw ODEtMDc4MGE1ODg3M2VhLzAvQTYwNTNERUIwQjEyREJFRTM2RDUyNjI5NTEyNTYy MDg5Q0NCQzFBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO0xOcwQxjnTIEkxctOf+Yntl3sf6SS+i09z JbdrTyoz+bo+8+PmZ4O9x9Skcl4K2hY3UI43fPmCiqMIWl/+lPbrsaksssphvlv2 VMEr8xEkzCR1eEFeCOA2uturZoziIesWH8DNS0JTcT5QiB4T+ECfiQGEJtVnUmXb MTpSuSR88dEDPspZDmcj+OpQQ/h1Dm1px0Afxjgyk4sV7pL+lfy/6Hn50ARmun+a ism+MvzgjF0uL3Z0Atfc4tJfpvKK0Q0jiHF/3bCdYB5/BheaKCFq2KriUlSHXN9V 1uyLpnD14+LKoRwnIifLxVc0lnn8lMSWILP++jh9HjTN91Eib5s= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:52 2025 by rpki-client