This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: zQeRyc1RExILehw/nHCHHbEWEFrz1aP5PahIoilKGew= Subject key identifier: A2:58:23:69:85:28:DF:35:B5:39:AF:B6:01:79:1E:F6:74:C9:74:20 Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 47F8AAC37A8C8AFC86B65F9D843E49962D6CC15F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: AA Signing time: Tue 02 Dec 2025 11:22:05 +0000 Manifest this update: Tue 02 Dec 2025 11:17:05 +0000 Manifest next update: Fri 05 Dec 2025 16:40:05 +0000 Files and hashes: 1: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=) 2: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: hvuCCvzBI9Hn8gETDZKIk18rSaWy2bf38D/a/770svA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 16:40:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f8:aa:c3:7a:8c:8a:fc:86:b6:5f:9d:84:3e:49:96:2d:6c:c1:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Dec 2 11:17:05 2025 GMT Not After : Dec 5 16:40:05 2025 GMT Subject: CN=A25823698528DF35B539AFB601791EF674C97420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:31:89:5f:18:90:98:a6:8d:43:40:9a:26: ec:ff:70:67:68:59:1b:ba:4c:2f:14:fb:40:e4:dd: 45:48:b7:3f:ac:6b:d2:f1:4e:9a:22:a7:f1:d4:e7: 08:aa:09:eb:fe:c6:82:0f:68:cd:2d:51:76:1c:fb: 74:c2:78:11:c4:91:2a:4a:e2:05:82:d8:b4:a5:43: 41:46:75:c2:10:ed:13:99:03:e4:ed:1b:73:a8:69: 17:f3:0c:53:db:6c:5b:5e:09:2c:5f:59:98:16:d0: 43:05:29:af:7f:5d:24:da:ee:e5:7f:89:3d:aa:c3: aa:b4:48:dc:ab:20:65:c5:b0:6b:54:0f:45:32:00: 54:31:22:4c:ac:2d:c1:b7:dd:3d:bc:6e:95:29:10: 7a:ef:74:4a:85:61:56:0f:46:d2:64:65:31:00:7c: 55:21:b9:2e:17:fb:a4:45:04:67:31:d2:98:0c:ef: 02:5b:27:2b:a5:27:0a:70:8a:d6:17:ba:85:14:74: 4f:6e:f0:61:93:49:26:a4:a0:53:ed:03:90:f6:69: 80:09:dc:c0:35:98:66:d3:f7:b9:7b:4d:15:05:fd: ed:16:4a:91:1e:6a:51:18:7c:89:84:1d:6a:9c:94: 5f:3d:a1:95:20:5c:48:f5:1d:86:4a:dc:d5:36:fc: 2c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:23:69:85:28:DF:35:B5:39:AF:B6:01:79:1E:F6:74:C9:74:20 X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:af:50:2c:ae:a6:96:ff:cc:3b:15:66:3c:18:c3:30:b5:af: 7a:b1:fe:33:91:63:e5:56:0a:6a:73:01:ac:41:80:7c:a7:1f: 45:40:0c:a0:7f:70:82:7e:c3:cd:5d:4a:be:87:6f:0a:36:e0: 69:ea:9e:a6:ee:ca:ae:a2:35:a3:63:2a:b6:3c:ea:ec:f9:43: d4:b8:dd:e4:48:e0:7c:bc:c1:24:b6:c7:e5:aa:9f:6f:0d:ea: 29:43:64:f3:b5:ae:e0:8b:5f:c5:a7:54:5c:ef:d9:d7:19:28: a3:d2:34:5a:48:1e:ee:ad:de:08:68:9d:6b:7a:a8:46:64:5b: 99:a2:53:7c:29:12:4c:49:82:b2:4a:99:f9:7d:99:16:21:bc: 7f:04:bd:ca:84:8c:97:c2:ac:b7:a9:75:6c:11:f1:75:2b:f0: 47:50:58:35:57:ea:9f:2d:a6:b1:7a:ab:80:24:34:36:4a:c5: a6:d1:09:61:ed:8f:59:ee:cd:31:21:90:f9:30:45:83:3a:d4: a1:c1:f7:29:11:4b:5f:16:62:4a:94:b0:91:7a:c8:c7:29:a5: c6:20:6f:1a:13:83:da:9d:cc:67:68:59:2d:3d:4e:64:68:57: 3b:60:05:5b:09:b8:8e:fe:78:82:94:d5:4a:b2:f9:d1:1d:aa: f0:7c:0f:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/iqw3qMivyGtl+dhD5Jli1swV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNTEyMDIxMTE3MDVaFw0yNTEyMDUxNjQwMDVaMDMxMTAvBgNV BAMTKEEyNTgyMzY5ODUyOERGMzVCNTM5QUZCNjAxNzkxRUY2NzRDOTc0MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDViTGJXxiQmKaNQ0CaJuz/cGdo WRu6TC8U+0Dk3UVItz+sa9LxTpoip/HU5wiqCev+xoIPaM0tUXYc+3TCeBHEkSpK 4gWC2LSlQ0FGdcIQ7ROZA+TtG3OoaRfzDFPbbFteCSxfWZgW0EMFKa9/XSTa7uV/ iT2qw6q0SNyrIGXFsGtUD0UyAFQxIkysLcG33T28bpUpEHrvdEqFYVYPRtJkZTEA fFUhuS4X+6RFBGcx0pgM7wJbJyulJwpwitYXuoUUdE9u8GGTSSakoFPtA5D2aYAJ 3MA1mGbT97l7TRUF/e0WSpEealEYfImEHWqclF89oZUgXEj1HYZK3NU2/CwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolgjaYUo3zW1Oa+2AXke9nTJdCAwHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSvUCyuppb/zDsVZjwYwzC1r3qx/jORY+VW CmpzAaxBgHynH0VADKB/cIJ+w81dSr6Hbwo24Gnqnqbuyq6iNaNjKrY86uz5Q9S4 3eRI4Hy8wSS2x+Wqn28N6ilDZPO1ruCLX8WnVFzv2dcZKKPSNFpIHu6t3ghonWt6 qEZkW5miU3wpEkxJgrJKmfl9mRYhvH8EvcqEjJfCrLepdWwR8XUr8EdQWDVX6p8t prF6q4AkNDZKxabRCWHtj1nuzTEhkPkwRYM61KHB9ykRS18WYkqUsJF6yMcppcYg bxoTg9qdzGdoWS09TmRoVztgBVsJuI7+eIKU1Uqy+dEdqvB8D/Y= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:03 2025 by rpki-client