This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: jE9ZyQ1BJH/2Yz5TQSOEO4MpPrt47lAL22BFNQHSyEk= Subject key identifier: 85:2C:8E:8D:AE:DF:B1:F6:01:C0:89:27:0C:42:60:AE:A5:C7:3E:A5 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 4AC91FEFE41BB1453A8C17A3D19AD26CC7E6BE79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 014B Signing time: Mon 01 Dec 2025 08:51:29 +0000 Manifest this update: Mon 01 Dec 2025 08:46:29 +0000 Manifest next update: Thu 04 Dec 2025 14:44:29 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 2: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 3: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: /UpkvGBOoa+SY+V60eEmRsmLU92RYsR0ZZ2aMk5WvIA=) 4: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 5: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 14:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c9:1f:ef:e4:1b:b1:45:3a:8c:17:a3:d1:9a:d2:6c:c7:e6:be:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Dec 1 08:46:29 2025 GMT Not After : Dec 4 14:44:29 2025 GMT Subject: CN=852C8E8DAEDFB1F601C089270C4260AEA5C73EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e1:79:80:0c:f2:dc:cc:b3:32:c3:8e:74:e6: 24:06:cc:9f:88:e5:36:f7:57:59:e6:54:0d:47:99: 61:50:25:ea:d0:e0:00:35:03:7c:e5:f8:00:a0:d0: f4:7c:dc:55:28:ef:c9:27:78:31:ed:d5:aa:fb:b2: 82:c0:94:2e:d3:2a:cd:eb:9f:55:5d:3b:32:98:b8: e8:42:12:ea:c3:4a:9a:d6:f3:d6:3f:4e:c8:59:ce: a9:48:67:0d:a6:c3:e8:5b:a7:71:73:33:49:ef:47: 45:6e:ed:69:4b:9b:0c:1b:74:6f:0e:2f:9d:8b:8b: 6a:c0:8c:8d:36:24:0b:91:bb:5c:f6:e1:99:16:64: 0b:b3:07:e8:f6:48:ca:36:81:af:8e:2c:a7:41:db: 83:d8:d3:8c:27:12:c4:dd:76:76:4e:c3:03:3f:09: 73:72:b6:24:6c:4f:c9:ee:a2:a4:01:9a:ef:47:c1: 11:1a:35:56:7a:67:12:72:08:cb:67:82:55:3b:76: 42:75:94:39:39:2e:bd:83:fa:93:03:3a:69:d3:8b: 62:85:8b:9f:7c:44:80:88:07:dc:13:f9:fc:68:1d: 4a:5a:a5:12:ac:35:42:4b:df:6b:4f:32:e5:c6:4d: 07:10:aa:06:5f:04:64:1c:51:24:5f:ee:2b:53:df: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2C:8E:8D:AE:DF:B1:F6:01:C0:89:27:0C:42:60:AE:A5:C7:3E:A5 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:13:88:e7:48:d1:65:f7:b6:16:c8:6b:ba:7a:dc:38:5c:31: 9c:42:64:9f:5d:72:4d:a3:1b:ca:b7:8d:90:b3:7c:d9:dd:83: 79:b0:66:ce:a2:b7:03:f0:ec:0b:1f:2f:3e:c4:1f:f4:00:7b: 07:6b:8e:30:c2:61:c5:d2:e2:91:4e:1c:37:35:db:74:40:70: e0:d0:c6:fe:0c:42:22:32:b2:70:5f:4c:b9:bc:1c:20:cb:9f: 32:e7:86:3d:45:20:13:7a:3c:fb:c5:9f:69:05:81:79:01:39: 97:3f:34:f4:0e:bd:dd:e4:fc:77:03:f8:43:44:4a:ee:d0:53: 4f:b3:df:14:60:76:df:94:7e:ac:0d:87:64:ba:08:40:26:25: 50:2f:0a:91:0b:5e:1d:d2:0e:5f:ac:54:e4:e3:b2:44:ab:f3: ec:4b:e1:56:72:ad:e3:61:84:4f:4d:9f:b7:3e:92:8d:29:f0: 4c:94:12:5c:bf:09:84:ba:39:db:3c:66:84:1c:fa:ef:82:bb: 19:f5:e2:b6:f6:8a:a7:66:03:d2:67:1d:6c:d1:77:dc:e4:17: bf:eb:ad:49:5c:45:ed:cb:66:dc:08:7d:ec:1b:57:57:b0:43: 36:2d:2d:b2:2b:22:ce:4e:10:fe:f5:32:53:77:f9:81:51:2e: 90:0b:c1:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSskf7+QbsUU6jBej0ZrSbMfmvnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTEyMDEwODQ2MjlaFw0yNTEyMDQxNDQ0MjlaMDMxMTAvBgNV BAMTKDg1MkM4RThEQUVERkIxRjYwMUMwODkyNzBDNDI2MEFFQTVDNzNFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd4XmADPLczLMyw4505iQGzJ+I 5Tb3V1nmVA1HmWFQJerQ4AA1A3zl+ACg0PR83FUo78kneDHt1ar7soLAlC7TKs3r n1VdOzKYuOhCEurDSprW89Y/TshZzqlIZw2mw+hbp3FzM0nvR0Vu7WlLmwwbdG8O L52Li2rAjI02JAuRu1z24ZkWZAuzB+j2SMo2ga+OLKdB24PY04wnEsTddnZOwwM/ CXNytiRsT8nuoqQBmu9HwREaNVZ6ZxJyCMtnglU7dkJ1lDk5Lr2D+pMDOmnTi2KF i598RICIB9wT+fxoHUpapRKsNUJL32tPMuXGTQcQqgZfBGQcUSRf7itT380NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSyOja7fsfYBwIknDEJgrqXHPqUwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADcTiOdI0WX3thbIa7p63DhcMZxCZJ9dck2j G8q3jZCzfNndg3mwZs6itwPw7AsfLz7EH/QAewdrjjDCYcXS4pFOHDc123RAcODQ xv4MQiIysnBfTLm8HCDLnzLnhj1FIBN6PPvFn2kFgXkBOZc/NPQOvd3k/HcD+ENE Su7QU0+z3xRgdt+UfqwNh2S6CEAmJVAvCpELXh3SDl+sVOTjskSr8+xL4VZyreNh hE9Nn7c+ko0p8EyUEly/CYS6Ods8ZoQc+u+Cuxn14rb2iqdmA9JnHWzRd9zkF7/r rUlcRe3LZtwIfewbV1ewQzYtLbIrIs5OEP71MlN3+YFRLpALwak= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:23 2025 by rpki-client