This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: VqoS8ULwnrqFw34nEDK822y34jbk4Fk7FfDWBkbF9cQ= Subject key identifier: 5A:41:18:64:12:48:5C:80:E9:77:67:A6:EF:9D:F3:2F:9C:AA:06:48 Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 2B458872D6FEB0573299F6B44150E35DCFB5086E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 0534 Signing time: Wed 17 Dec 2025 22:42:16 +0000 Manifest this update: Wed 17 Dec 2025 22:37:16 +0000 Manifest next update: Sun 21 Dec 2025 04:10:16 +0000 Files and hashes: 1: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) 2: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 3: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: pZB+dhdUnbSMC+lsC8BmZYUr45ini7OHgzzyTDeKq7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 04:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:45:88:72:d6:fe:b0:57:32:99:f6:b4:41:50:e3:5d:cf:b5:08:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Dec 17 22:37:16 2025 GMT Not After : Dec 21 04:10:16 2025 GMT Subject: CN=5A41186412485C80E97767A6EF9DF32F9CAA0648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a1:3e:24:ea:d2:9c:1d:7d:b7:b9:89:09:b1: da:d5:a8:4a:e0:50:e3:33:47:e4:dc:39:14:36:c4: 01:fb:a9:26:f6:2a:e4:94:6d:05:6f:e9:36:d5:6e: 53:0e:d9:d4:e3:8f:5e:61:af:dc:39:a8:6e:52:41: 38:de:dd:08:1d:56:5f:92:a6:0a:2d:a4:76:ae:14: cf:90:30:c3:81:f3:d8:3e:d0:d4:d4:a0:76:af:0d: cd:2b:9e:bc:0c:f0:75:d3:22:11:42:50:8d:5f:2e: 05:53:69:57:4b:8d:3f:0c:38:98:f2:37:c8:47:4a: 9c:bb:4c:50:58:c1:70:cd:9a:5f:26:b8:47:a1:80: c3:8a:bf:ac:b8:ed:fa:bf:35:92:2e:98:ad:2e:a1: d9:ee:9b:4c:4b:c3:1d:56:43:a8:ca:d3:e5:15:da: b7:25:d2:1a:ad:74:8e:0a:b4:ef:9f:14:e6:a8:d2: b8:4c:11:10:9e:f2:eb:82:6f:15:80:fc:e6:d8:1d: 8f:85:c1:ce:dd:5c:95:cd:14:d1:50:62:35:bb:2f: 7a:8f:5d:f1:14:b9:d2:7d:cd:8a:21:01:0f:86:8c: 6c:45:73:f0:bc:40:c5:c0:83:f0:81:7e:36:2b:d8: 40:b1:37:09:2f:42:66:42:04:f6:85:f8:df:a7:12: e1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:41:18:64:12:48:5C:80:E9:77:67:A6:EF:9D:F3:2F:9C:AA:06:48 X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a4:a6:c2:f5:6c:b6:c8:29:ca:26:48:8b:69:26:45:f8:8d: 67:15:18:35:6f:68:68:33:a2:ad:65:42:74:f3:e5:49:60:4c: 6b:61:4b:e4:26:7f:a5:b9:a9:9c:0d:42:2e:a0:02:54:df:37: 98:1b:5a:23:c8:c8:f8:64:fd:ba:ca:6a:31:34:b9:ed:58:89: dc:12:38:cf:70:02:1e:4a:f9:27:29:ad:5b:1d:d3:a6:07:96: 36:a7:57:28:a7:18:6a:80:50:74:f8:6d:73:c3:da:e2:7e:b8: b9:ad:f9:a9:be:1b:c4:83:1d:60:a3:0c:46:f3:16:39:38:28: 6e:b1:4d:33:8c:0c:c3:11:b9:11:cd:17:ab:bb:9f:93:2c:06: f7:66:b5:1e:94:12:77:16:4c:49:ad:3a:c0:8c:c5:1f:ca:cb: 79:96:9c:21:19:ae:a6:aa:a3:6b:c9:f7:93:15:5a:85:33:27: a9:e0:b2:6d:47:06:f4:4b:80:94:6f:e9:91:a3:71:9c:27:85: 2e:b9:6e:12:26:be:59:f0:df:3e:51:f8:60:6f:4c:1b:c9:c7: 3f:cc:dd:f7:9b:80:ab:74:35:32:ad:c0:10:5e:91:b0:4f:bf: c8:4f:ce:62:a1:b5:2f:47:70:af:03:0d:05:bc:1f:4c:fb:1e: 7e:21:3d:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0WIctb+sFcymfa0QVDjXc+1CG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTEyMTcyMjM3MTZaFw0yNTEyMjEwNDEwMTZaMDMxMTAvBgNV BAMTKDVBNDExODY0MTI0ODVDODBFOTc3NjdBNkVGOURGMzJGOUNBQTA2NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoT4k6tKcHX23uYkJsdrVqErg UOMzR+TcORQ2xAH7qSb2KuSUbQVv6TbVblMO2dTjj15hr9w5qG5SQTje3QgdVl+S pgotpHauFM+QMMOB89g+0NTUoHavDc0rnrwM8HXTIhFCUI1fLgVTaVdLjT8MOJjy N8hHSpy7TFBYwXDNml8muEehgMOKv6y47fq/NZIumK0uodnum0xLwx1WQ6jK0+UV 2rcl0hqtdI4KtO+fFOao0rhMERCe8uuCbxWA/ObYHY+Fwc7dXJXNFNFQYjW7L3qP XfEUudJ9zYohAQ+GjGxFc/C8QMXAg/CBfjYr2ECxNwkvQmZCBPaF+N+nEuFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkEYZBJIXIDpd2em753zL5yqBkgwHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqkpsL1bLbIKcomSItpJkX4jWcVGDVvaGgz oq1lQnTz5UlgTGthS+Qmf6W5qZwNQi6gAlTfN5gbWiPIyPhk/brKajE0ue1YidwS OM9wAh5K+ScprVsd06YHljanVyinGGqAUHT4bXPD2uJ+uLmt+am+G8SDHWCjDEbz Fjk4KG6xTTOMDMMRuRHNF6u7n5MsBvdmtR6UEncWTEmtOsCMxR/Ky3mWnCEZrqaq o2vJ95MVWoUzJ6ngsm1HBvRLgJRv6ZGjcZwnhS65bhImvlnw3z5R+GBvTBvJxz/M 3febgKt0NTKtwBBekbBPv8hPzmKhtS9HcK8DDQW8H0z7Hn4hPfU= -----END CERTIFICATE-----Generated at Fri Dec 19 21:11:15 2025 by rpki-client