This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft File: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft (raw, json) Hash identifier: MMzuzPlQbysKiKFsHZAi6Vdzvpe7sDf9fOnQTruSfUI= Subject key identifier: 19:43:0D:D8:32:21:57:56:A5:80:D8:BB:C7:CF:36:7F:5C:FD:D6:D4 Authority key identifier: A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 Certificate issuer: /CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Certificate serial: 297A413DBD428D26032CEBDCEC46366A17FBC457 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft Manifest number: 02B5 Signing time: Tue 02 Dec 2025 04:51:13 +0000 Manifest this update: Tue 02 Dec 2025 04:46:13 +0000 Manifest next update: Fri 05 Dec 2025 10:18:13 +0000 Files and hashes: 1: 3130332e372e38372e302f32342d3234203d3e20313331363934.roa (hash: +JM0TomazNNUIzDrdeT/2lCB49TQVdyUwiNybNA2Lao=) 2: 3130332e372e38362e302f32342d3234203d3e20313331363934.roa (hash: +uqH4dZVRd/BNuma17esD+DC5t8XckmCgoWEZgqVoMc=) 3: 3130332e372e38342e302f32332d3234203d3e20313331363934.roa (hash: JILAlyEUCKaQwya6IqmIgI2ApwRDLktJQgK62DvR8co=) 4: 3130332e372e38342e302f32322d3234203d3e20313331363934.roa (hash: 71BPyF6TQbJ+TmKpEFmEYqSO/ws8/NivO3sz64KU1XU=) 5: 3130332e372e38342e302f32342d3234203d3e20313331363934.roa (hash: +OuFRQQCgw1PD5PrziLmo5M1zEaNfWHIcGtXO9rN0mk=) 6: A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl (hash: V3yTLFmRkfeabZ/fu6dDyBSAhw0pIqITqwdAbTTaiKc=) 7: 3130332e372e38362e302f32332d3234203d3e20313331363934.roa (hash: APpcCxdCQsZeZ4X6Dve/zLkKutoUIXdYu4ws8c5i5zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7a:41:3d:bd:42:8d:26:03:2c:eb:dc:ec:46:36:6a:17:fb:c4:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9ECE2086AFC3046DE0F6A07858FF1851AD68517 Validity Not Before: Dec 2 04:46:13 2025 GMT Not After : Dec 5 10:18:13 2025 GMT Subject: CN=19430DD832215756A580D8BBC7CF367F5CFDD6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c4:c5:8d:2d:9c:34:13:20:b3:d8:70:ac:f4: 35:a2:2b:15:2d:90:26:03:ac:7c:7d:a8:9f:c8:07: 13:7f:22:7a:09:a7:07:85:9f:8b:1e:3c:c1:76:3a: 9c:b7:ef:64:74:71:6f:0e:92:48:79:4f:f5:77:74: 79:28:2c:f7:bb:a4:21:dd:5d:fc:42:66:be:15:9e: 24:82:d9:37:fc:5e:1d:7d:0c:c2:b6:27:99:90:87: 74:d5:9c:d6:09:d3:2b:2c:54:67:91:84:cf:cb:14: 50:8b:72:a6:ac:c9:f4:bf:b4:b1:fb:f4:71:65:48: e2:3f:6b:88:bb:6b:dd:03:64:e5:1f:f6:c8:78:fc: 24:0a:92:f5:c1:1f:8f:24:aa:bd:07:27:3e:e9:1c: 55:30:f3:71:87:25:1e:cb:0f:3d:ca:54:df:2c:23: 39:3a:f3:b9:1f:e9:24:b0:05:c4:99:cc:40:0d:92: fd:e0:20:87:41:11:c7:34:04:e5:4f:ce:c5:05:6d: d8:15:27:c5:18:1b:ba:8f:22:29:7d:be:20:be:17: da:9a:cb:3b:48:3e:47:3f:f8:a7:a0:14:42:fe:24: 01:c7:85:ab:b5:27:62:48:f5:76:4e:9f:db:e1:77: e9:7f:17:50:77:73:a1:99:7e:89:8f:7b:d7:c1:c3: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:43:0D:D8:32:21:57:56:A5:80:D8:BB:C7:CF:36:7F:5C:FD:D6:D4 X509v3 Authority Key Identifier: keyid:A9:EC:E2:08:6A:FC:30:46:DE:0F:6A:07:85:8F:F1:85:1A:D6:85:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d0278b7d-47ed-4860-ab3a-9c114cc5f09b/0/A9ECE2086AFC3046DE0F6A07858FF1851AD68517.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:5b:47:79:38:e7:5d:61:37:06:54:f4:7c:ac:83:8f:6a:fd: 2c:0b:23:73:46:5d:00:3f:74:e3:d8:f4:c5:8b:ab:63:05:df: 07:2d:70:1d:f2:7b:8c:4a:04:5d:19:3c:b7:7f:c2:f1:c4:cc: 9e:3e:b3:5d:84:8f:ac:0e:e2:a9:7c:7d:5b:bf:84:8a:f3:b0: 0a:e1:5c:bf:26:cb:db:90:6e:04:b4:6d:6f:ef:32:ff:61:99: 37:d4:5d:69:8f:e9:d8:01:65:cf:d6:e7:87:05:43:1d:38:43: cb:b2:06:e5:2b:57:ef:f9:8b:e7:13:06:6b:a5:67:3a:ec:2f: 44:3c:c4:07:54:e0:02:3c:b2:6c:24:73:8a:ee:f1:82:8b:0e: 56:a8:03:58:6b:5c:cd:c3:6f:ae:98:9c:82:af:0e:ad:3a:78: 54:22:fe:e6:06:ff:e2:8f:24:1e:40:dc:03:3a:28:d8:11:c7: 55:ad:81:52:b0:14:68:6b:4f:ca:99:ee:39:4f:a3:b3:81:66: cd:50:9b:65:76:5a:62:1b:48:b9:9a:fd:09:e0:0d:86:32:14: fe:d1:5d:e8:73:72:f9:4e:dd:8e:0c:6f:34:89:f0:ec:99:37: 1d:2c:74:4e:60:ff:9f:e4:6b:83:92:ed:67:00:c8:78:21:ee: 7d:57:70:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKXpBPb1CjSYDLOvc7EY2ahf7xFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUx QUQ2ODUxNzAeFw0yNTEyMDIwNDQ2MTNaFw0yNTEyMDUxMDE4MTNaMDMxMTAvBgNV BAMTKDE5NDMwREQ4MzIyMTU3NTZBNTgwRDhCQkM3Q0YzNjdGNUNGREQ2RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2xMWNLZw0EyCz2HCs9DWiKxUt kCYDrHx9qJ/IBxN/InoJpweFn4sePMF2Opy372R0cW8Okkh5T/V3dHkoLPe7pCHd XfxCZr4VniSC2Tf8Xh19DMK2J5mQh3TVnNYJ0yssVGeRhM/LFFCLcqasyfS/tLH7 9HFlSOI/a4i7a90DZOUf9sh4/CQKkvXBH48kqr0HJz7pHFUw83GHJR7LDz3KVN8s Izk687kf6SSwBcSZzEANkv3gIIdBEcc0BOVPzsUFbdgVJ8UYG7qPIil9viC+F9qa yztIPkc/+KegFEL+JAHHhau1J2JI9XZOn9vhd+l/F1B3c6GZfomPe9fBw76RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUMN2DIhV1algNi7x882f1z91tQwHwYDVR0j BBgwFoAUqeziCGr8MEbeD2oHhY/xhRrWhRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDI3OGI3ZC00N2VkLTQ4NjAtYWIzYS05YzExNGNjNWYwOWIvMC9BOUVDRTIwODZB RkMzMDQ2REUwRjZBMDc4NThGRjE4NTFBRDY4NTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYxODUxQUQ2 ODUxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDAyNzhiN2QtNDdlZC00ODYwLWFi M2EtOWMxMTRjYzVmMDliLzAvQTlFQ0UyMDg2QUZDMzA0NkRFMEY2QTA3ODU4RkYx ODUxQUQ2ODUxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBbR3k4511hNwZU9Hysg49q/SwLI3NGXQA/ dOPY9MWLq2MF3wctcB3ye4xKBF0ZPLd/wvHEzJ4+s12Ej6wO4ql8fVu/hIrzsArh XL8my9uQbgS0bW/vMv9hmTfUXWmP6dgBZc/W54cFQx04Q8uyBuUrV+/5i+cTBmul ZzrsL0Q8xAdU4AI8smwkc4ru8YKLDlaoA1hrXM3Db66YnIKvDq06eFQi/uYG/+KP JB5A3AM6KNgRx1WtgVKwFGhrT8qZ7jlPo7OBZs1Qm2V2WmIbSLma/QngDYYyFP7R XehzcvlO3Y4MbzSJ8OyZNx0sdE5g/5/ka4OS7WcAyHgh7n1XcIg= -----END CERTIFICATE-----Generated at Wed Dec 3 13:57:13 2025 by rpki-client