This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft File: A0098405BC0A535E6E4D613793C362C743319143.mft (raw, json) Hash identifier: xukbhV10Up12o6mV9xVW9t8J18BDNUEBiGSaZ231lnQ= Subject key identifier: 46:43:FF:C4:3F:D7:71:5F:92:A4:9A:54:9C:32:DA:EB:AD:77:22:81 Authority key identifier: A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 Certificate issuer: /CN=A0098405BC0A535E6E4D613793C362C743319143 Certificate serial: 169E3D4E87D190644BD6F34410E1E2F52221C5DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft Manifest number: F1 Signing time: Wed 17 Dec 2025 08:21:08 +0000 Manifest this update: Wed 17 Dec 2025 08:16:08 +0000 Manifest next update: Sat 20 Dec 2025 10:40:08 +0000 Files and hashes: 1: 3130332e3135372e38312e302f32342d3234203d3e20313431313133.roa (hash: 7E801eHzByrlpX824SF5Bv9nBKvFuISx0tzFKJn/f5I=) 2: 3130332e3135372e38302e302f32342d3234203d3e20313431313133.roa (hash: Q6e0e1mxnvq7Z9cyA+57spYXR6whshtcuglsUxuXceY=) 3: A0098405BC0A535E6E4D613793C362C743319143.crl (hash: 8fMTdY+bYDK/fV/kUFX3dJB7EHJwtZ8CWd7yzczXyic=) 4: 323030313a6466353a313738303a3a2f34382d3438203d3e20313431313133.roa (hash: ULILjGfRQgoXvgl0tXvCQV4c2a3dPck8tfEpBWTuXWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 10:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9e:3d:4e:87:d1:90:64:4b:d6:f3:44:10:e1:e2:f5:22:21:c5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0098405BC0A535E6E4D613793C362C743319143 Validity Not Before: Dec 17 08:16:08 2025 GMT Not After : Dec 20 10:40:08 2025 GMT Subject: CN=4643FFC43FD7715F92A49A549C32DAEBAD772281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:41:58:66:44:f6:37:1a:01:9c:6e:6c:86:5d: 59:5d:ca:19:1d:2b:1f:04:b1:a1:d4:23:6b:a2:c1: 8d:37:75:80:03:25:5e:7b:11:69:0d:9b:89:3c:84: f3:52:ce:33:9f:92:01:0d:b2:86:bb:b7:cb:2a:34: d5:db:a5:46:7e:78:50:b5:8d:27:b9:94:95:8b:fe: 85:5d:c2:ef:27:56:7e:83:60:44:98:26:98:32:3a: f3:e2:44:13:a5:6e:3d:51:d5:4e:91:9b:7a:72:80: 14:37:58:24:22:25:0e:c7:25:85:f1:2f:d8:ba:1b: b6:cd:70:48:48:1c:5d:44:d1:81:b0:cd:84:50:c8: 0e:09:88:66:65:23:9e:16:19:23:f3:f3:12:3b:4c: f5:a1:94:ce:39:ef:a5:4f:73:f8:ef:90:c7:22:c0: ff:32:08:fe:74:e7:85:2e:35:c7:1d:70:27:11:58: 79:51:a1:1a:8a:6f:4f:50:7d:8b:74:83:b4:f9:2b: 34:0c:2f:e8:25:4e:6c:5c:9b:ab:e4:9b:9b:6d:f8: b6:81:f5:19:8e:a9:12:46:68:45:13:fc:ac:cf:3a: cf:6f:a9:26:5a:be:ea:5f:e9:82:5e:de:48:f5:05: 9b:e8:e4:3b:64:85:f0:e9:35:2e:c3:71:ec:8d:58: 58:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:43:FF:C4:3F:D7:71:5F:92:A4:9A:54:9C:32:DA:EB:AD:77:22:81 X509v3 Authority Key Identifier: keyid:A0:09:84:05:BC:0A:53:5E:6E:4D:61:37:93:C3:62:C7:43:31:91:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0098405BC0A535E6E4D613793C362C743319143.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fcf7c9e-f8c3-4015-881b-a2c21819d6b9/0/A0098405BC0A535E6E4D613793C362C743319143.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:8c:ba:45:0d:bd:90:ce:6e:ab:36:ee:2d:96:82:a0:64:b3: 60:26:37:6f:1b:0b:51:f9:9d:a4:c3:f5:13:5e:27:db:f0:39: 9a:9a:65:46:6f:78:b5:e6:eb:b7:70:21:16:64:94:e2:54:ea: b9:85:fe:28:e0:a2:42:53:ce:a6:51:25:0f:00:5f:7d:2c:68: 75:e2:f4:5c:3a:77:35:b1:6a:13:c7:67:77:ad:d5:2f:08:a2: ce:e8:ad:27:25:91:12:f2:36:67:2e:c4:85:15:b5:8b:45:59: c7:7d:60:e6:5a:15:68:f2:5c:1f:ac:95:d6:d5:a7:c8:05:8a: 41:6c:b8:e0:fc:23:0e:87:42:15:03:61:2d:1a:2c:39:f8:14: e6:c4:23:4c:fd:6d:ee:14:9c:6f:ad:49:5f:c1:c0:66:49:9d: 39:b4:c1:fe:60:b2:1a:c2:d1:20:bc:b5:52:84:52:ff:f1:80: 07:79:f3:1f:aa:fe:52:4c:68:c7:62:4b:8c:8a:a9:f5:53:f0: 80:91:46:01:d1:7b:61:b8:18:f9:e1:17:74:f9:d3:e5:7c:1f: 30:71:ce:12:36:74:40:f3:2d:1a:46:dd:74:64:62:ca:92:80: fb:a6:b5:0e:f5:71:8c:08:df:cc:d5:63:3c:16:ed:15:5b:cb: 57:61:63:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFp49TofRkGRL1vNEEOHi9SIhxd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0 MzMxOTE0MzAeFw0yNTEyMTcwODE2MDhaFw0yNTEyMjAxMDQwMDhaMDMxMTAvBgNV BAMTKDQ2NDNGRkM0M0ZENzcxNUY5MkE0OUE1NDlDMzJEQUVCQUQ3NzIyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOQVhmRPY3GgGcbmyGXVldyhkd Kx8EsaHUI2uiwY03dYADJV57EWkNm4k8hPNSzjOfkgENsoa7t8sqNNXbpUZ+eFC1 jSe5lJWL/oVdwu8nVn6DYESYJpgyOvPiRBOlbj1R1U6Rm3pygBQ3WCQiJQ7HJYXx L9i6G7bNcEhIHF1E0YGwzYRQyA4JiGZlI54WGSPz8xI7TPWhlM4576VPc/jvkMci wP8yCP5054UuNccdcCcRWHlRoRqKb09QfYt0g7T5KzQML+glTmxcm6vkm5tt+LaB 9RmOqRJGaEUT/KzPOs9vqSZavupf6YJe3kj1BZvo5DtkhfDpNS7DceyNWFhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURkP/xD/XcV+SpJpUnDLa6613IoEwHwYDVR0j BBgwFoAUoAmEBbwKU15uTWE3k8Nix0MxkUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmNmN2M5ZS1mOGMzLTQwMTUtODgxYi1hMmMyMTgxOWQ2YjkvMC9BMDA5ODQwNUJD MEE1MzVFNkU0RDYxMzc5M0MzNjJDNzQzMzE5MTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYyQzc0MzMx OTE0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZjZjdjOWUtZjhjMy00MDE1LTg4 MWItYTJjMjE4MTlkNmI5LzAvQTAwOTg0MDVCQzBBNTM1RTZFNEQ2MTM3OTNDMzYy Qzc0MzMxOTE0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF6MukUNvZDObqs27i2WgqBks2AmN28bC1H5 naTD9RNeJ9vwOZqaZUZveLXm67dwIRZklOJU6rmF/ijgokJTzqZRJQ8AX30saHXi 9Fw6dzWxahPHZ3et1S8Ios7orSclkRLyNmcuxIUVtYtFWcd9YOZaFWjyXB+sldbV p8gFikFsuOD8Iw6HQhUDYS0aLDn4FObEI0z9be4UnG+tSV/BwGZJnTm0wf5gshrC 0SC8tVKEUv/xgAd58x+q/lJMaMdiS4yKqfVT8ICRRgHRe2G4GPnhF3T50+V8HzBx zhI2dEDzLRpG3XRkYsqSgPumtQ71cYwI38zVYzwW7RVby1dhY/s= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:01 2025 by rpki-client