This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: 83Rg0CJWR78+Pz79bRjY/KCDKsNKeYsKUJzI2rXAyGQ= Subject key identifier: 82:AB:DD:0D:BC:51:C3:4C:7A:60:01:CF:4B:DF:53:F8:E2:B9:D4:88 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 18D4B5223395C79A391D98DBC70F20B2F87418EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 03B6 Signing time: Mon 22 Dec 2025 19:43:43 +0000 Manifest this update: Mon 22 Dec 2025 19:38:43 +0000 Manifest next update: Thu 25 Dec 2025 22:44:43 +0000 Files and hashes: 1: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: RStfVani62bVl6J1mudVYelWyRJT/tAVXvE6HPgAjQ0=) 2: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: NZRvAk91/qS+2e4QEna7jFq1miR9hnIOcdT25pcAymk=) 3: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: HXG6M2lkHdM7H0q8sMHL2RuqzQnwYr9btslEMX8iQ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d4:b5:22:33:95:c7:9a:39:1d:98:db:c7:0f:20:b2:f8:74:18:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Dec 22 19:38:43 2025 GMT Not After : Dec 25 22:44:43 2025 GMT Subject: CN=82ABDD0DBC51C34C7A6001CF4BDF53F8E2B9D488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:d6:55:29:88:13:f2:de:8e:b2:32:e0:fe: 4a:31:df:a4:3d:ed:34:c6:4a:6c:be:c4:57:cd:76: 7b:33:bd:26:ab:6d:54:6c:d9:8f:37:6a:b9:9e:56: b2:dd:ec:1a:2c:ed:c2:33:93:a3:82:cf:8c:10:f4: 38:78:51:e9:6b:ca:68:48:1a:3f:ea:86:72:ca:f2: 9d:74:cd:b4:c2:34:b8:3a:e6:cb:60:0c:1d:72:49: 40:9b:de:5d:ad:bc:ca:f5:ed:cd:bd:f1:a7:03:32: 12:21:67:b3:15:a2:36:70:10:7f:96:57:0e:8b:c3: df:57:f5:73:fc:69:f3:35:32:a1:41:56:ef:ae:49: 9a:8e:d3:1b:02:ae:21:b9:9a:32:66:f7:fa:85:56: a2:fd:7a:cd:96:75:27:54:a5:cf:c7:6e:36:15:f0: f3:21:fd:ca:fd:20:a8:90:0d:50:8f:64:b7:39:77: 0e:04:b8:c3:4e:01:ee:64:b2:21:82:1a:a6:a9:a6: 3d:b0:2b:9b:60:47:2d:d6:97:fa:89:e1:73:da:05: f7:3f:80:fb:45:d3:ab:0d:fb:5c:2d:cb:ef:df:e5: 69:49:de:84:6c:66:33:82:c0:91:87:3c:69:b3:cd: 40:7e:ba:0a:a4:9d:81:d9:30:04:28:d2:fc:37:0f: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AB:DD:0D:BC:51:C3:4C:7A:60:01:CF:4B:DF:53:F8:E2:B9:D4:88 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:97:86:de:51:6d:1c:32:55:68:ee:2d:e6:a8:66:b9:b0:9e: f5:40:0b:26:b3:bb:4d:a0:92:36:27:28:91:d2:bd:00:13:3e: 3c:8c:0f:14:ec:0e:b9:63:c9:b8:0d:44:b3:db:54:e8:4b:4e: aa:52:9d:ef:a2:fa:97:3f:49:22:e3:6a:19:e4:77:2b:24:df: 25:53:45:77:6b:da:47:78:03:5f:00:17:ef:6e:e3:25:80:9e: 4b:65:7c:56:cd:d9:e4:19:a4:b7:0e:87:d1:2e:5c:82:eb:13: 1e:12:f3:9f:5c:10:37:7f:d2:95:4a:37:dc:22:92:3c:4c:c3: e9:37:c9:3d:aa:4f:2d:1e:cf:df:c6:03:e9:19:a7:fd:9a:74: e9:66:43:64:97:bc:3f:5b:93:53:0d:42:bd:74:80:95:7d:3e: 1c:fd:4f:1d:c5:ff:0c:4e:74:e9:4e:6f:66:c3:ae:79:bc:65: 27:70:c9:92:d0:f4:04:08:4a:12:ef:13:78:5c:73:d1:13:a0: 9c:e2:c4:92:c4:1c:35:ca:14:5f:6e:9a:fa:5c:29:31:bd:9a: 27:4d:1b:c0:8c:08:96:1b:f6:17:19:2c:60:be:c9:ba:89:45: dd:20:3a:18:f3:56:57:5d:4c:24:2e:4e:d3:03:ef:7e:c3:fd: 3a:a6:d1:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGNS1IjOVx5o5HZjbxw8gsvh0GOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNTEyMjIxOTM4NDNaFw0yNTEyMjUyMjQ0NDNaMDMxMTAvBgNV BAMTKDgyQUJERDBEQkM1MUMzNEM3QTYwMDFDRjRCREY1M0Y4RTJCOUQ0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4tZVKYgT8t6OsjLg/kox36Q9 7TTGSmy+xFfNdnszvSarbVRs2Y83armeVrLd7Bos7cIzk6OCz4wQ9Dh4UelrymhI Gj/qhnLK8p10zbTCNLg65stgDB1ySUCb3l2tvMr17c298acDMhIhZ7MVojZwEH+W Vw6Lw99X9XP8afM1MqFBVu+uSZqO0xsCriG5mjJm9/qFVqL9es2WdSdUpc/HbjYV 8PMh/cr9IKiQDVCPZLc5dw4EuMNOAe5ksiGCGqappj2wK5tgRy3Wl/qJ4XPaBfc/ gPtF06sN+1wty+/f5WlJ3oRsZjOCwJGHPGmzzUB+ugqknYHZMAQo0vw3D5b5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgqvdDbxRw0x6YAHPS99T+OK51IgwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqXht5RbRwyVWjuLeaoZrmwnvVACyazu02g kjYnKJHSvQATPjyMDxTsDrljybgNRLPbVOhLTqpSne+i+pc/SSLjahnkdysk3yVT RXdr2kd4A18AF+9u4yWAnktlfFbN2eQZpLcOh9EuXILrEx4S859cEDd/0pVKN9wi kjxMw+k3yT2qTy0ez9/GA+kZp/2adOlmQ2SXvD9bk1MNQr10gJV9Phz9Tx3F/wxO dOlOb2bDrnm8ZSdwyZLQ9AQIShLvE3hcc9EToJzixJLEHDXKFF9umvpcKTG9midN G8CMCJYb9hcZLGC+ybqJRd0gOhjzVlddTCQuTtMD737D/Tqm0ec= -----END CERTIFICATE-----Generated at Tue Dec 23 01:25:36 2025 by rpki-client