This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: IovgZRvx2lmAtoq01zGl0fSVQjvkJJ3cBFszobVzCf4= Subject key identifier: A3:B0:16:24:C3:AB:1D:02:4E:35:FA:0D:62:E7:7F:54:61:A2:60:87 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 5A25AF20DCCF518046504CD23D9CCDEF257402CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 023F Signing time: Tue 02 Dec 2025 05:31:10 +0000 Manifest this update: Tue 02 Dec 2025 05:26:10 +0000 Manifest next update: Fri 05 Dec 2025 13:48:10 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: id3bnJLESVXCPxhrzfl9AUz5SPJjDi5q2yHdQKat37s=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 13:48:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:25:af:20:dc:cf:51:80:46:50:4c:d2:3d:9c:cd:ef:25:74:02:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Dec 2 05:26:10 2025 GMT Not After : Dec 5 13:48:10 2025 GMT Subject: CN=A3B01624C3AB1D024E35FA0D62E77F5461A26087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:8b:8d:ac:13:93:2f:d5:b3:65:62:fa:89: 02:8c:65:d8:36:83:5b:84:06:cb:63:fc:0b:4a:51: 18:d1:5f:9f:35:3e:5a:a2:ee:26:b4:5b:5c:b1:32: 3d:17:7e:5c:71:d0:42:e1:33:a8:b8:b7:6f:e4:34: c5:d8:9d:16:43:59:86:0c:92:8d:f6:92:a1:76:33: 4d:01:61:4d:4f:99:c2:3e:e0:aa:46:9b:6f:c8:de: 14:7a:bc:f9:72:5d:71:60:38:ab:fe:35:af:fc:a1: 4e:ad:1f:79:64:78:40:26:24:63:f0:ef:d8:79:81: ec:89:07:b3:39:67:3c:17:70:38:4a:a0:ce:8e:aa: 77:f5:31:c5:67:f9:8a:83:be:35:4d:76:d4:5f:3f: a1:ec:d5:93:70:59:07:e1:a1:8f:55:3d:ad:c1:ed: 8a:c8:64:8a:fb:a9:1f:35:7b:ec:b6:d4:07:7c:5f: 33:53:e0:d8:6a:34:2e:2f:68:74:f6:4b:6c:13:72: be:36:38:5c:ba:3b:39:6d:51:35:d4:6d:a2:73:76: 2a:5c:bf:da:99:71:02:cc:db:2b:d4:e2:26:9a:a2: 08:8d:c9:6d:45:4c:45:56:d6:7e:dd:dc:03:38:7b: ec:73:e6:99:be:02:88:58:53:88:e8:95:b2:20:e8: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B0:16:24:C3:AB:1D:02:4E:35:FA:0D:62:E7:7F:54:61:A2:60:87 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:20:a8:81:47:bd:61:61:04:25:33:ca:4d:0f:10:c9:a1:f6: a4:c6:ea:00:43:91:c7:1c:7b:19:28:f3:c6:a6:be:05:16:74: 82:d0:0a:61:dc:2e:ac:91:63:db:3d:b7:21:92:3e:62:31:5a: 7d:0a:25:a3:6b:07:35:d6:7e:e9:d3:7c:7b:ae:2b:84:56:90: 4c:98:20:de:a9:f2:40:95:0f:e9:cd:6f:be:7b:3c:ff:27:74: b1:4c:d2:69:be:c9:89:3b:c1:54:b8:74:81:fb:75:e3:b7:b5: 62:2a:db:f0:93:b6:96:a3:68:b5:a2:30:e6:30:ec:85:3a:c5: 0f:29:41:f7:ef:3f:66:3b:db:ef:77:26:f3:a8:ac:e9:44:96: 55:b1:ed:c8:c4:45:7a:21:4f:e5:f1:4a:5d:e0:2a:8f:9b:a2: 77:94:b5:8e:24:88:37:71:84:a8:2d:45:62:7c:8a:4f:94:26: 24:c9:ca:43:db:16:c9:e6:0d:70:c5:98:2f:1c:f8:f4:32:5f: 55:42:ae:19:ed:b7:48:e8:69:51:0d:17:1c:e6:36:1f:cd:19: 09:21:4c:f7:a5:73:08:87:64:4d:f7:c1:5d:ac:6c:16:65:dc: ef:14:df:00:f7:79:4e:e0:27:1d:88:b1:c3:20:6b:87:22:3e: 79:d0:a6:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiWvINzPUYBGUEzSPZzN7yV0AsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTEyMDIwNTI2MTBaFw0yNTEyMDUxMzQ4MTBaMDMxMTAvBgNV BAMTKEEzQjAxNjI0QzNBQjFEMDI0RTM1RkEwRDYyRTc3RjU0NjFBMjYwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvyYuNrBOTL9WzZWL6iQKMZdg2 g1uEBstj/AtKURjRX581Plqi7ia0W1yxMj0Xflxx0ELhM6i4t2/kNMXYnRZDWYYM ko32kqF2M00BYU1PmcI+4KpGm2/I3hR6vPlyXXFgOKv+Na/8oU6tH3lkeEAmJGPw 79h5geyJB7M5ZzwXcDhKoM6Oqnf1McVn+YqDvjVNdtRfP6Hs1ZNwWQfhoY9VPa3B 7YrIZIr7qR81e+y21Ad8XzNT4NhqNC4vaHT2S2wTcr42OFy6OzltUTXUbaJzdipc v9qZcQLM2yvU4iaaogiNyW1FTEVW1n7d3AM4e+xz5pm+AohYU4jolbIg6CwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo7AWJMOrHQJONfoNYud/VGGiYIcwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADYgqIFHvWFhBCUzyk0PEMmh9qTG6gBDkccc exko88amvgUWdILQCmHcLqyRY9s9tyGSPmIxWn0KJaNrBzXWfunTfHuuK4RWkEyY IN6p8kCVD+nNb757PP8ndLFM0mm+yYk7wVS4dIH7deO3tWIq2/CTtpajaLWiMOYw 7IU6xQ8pQffvP2Y72+93JvOorOlEllWx7cjERXohT+XxSl3gKo+boneUtY4kiDdx hKgtRWJ8ik+UJiTJykPbFsnmDXDFmC8c+PQyX1VCrhntt0joaVENFxzmNh/NGQkh TPelcwiHZE33wV2sbBZl3O8U3wD3eU7gJx2IscMga4ciPnnQptw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:12 2025 by rpki-client