This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: mZ3vi8ZyaExN637uggo+OX/O729dTb8cqQu3k0eIVPU= Subject key identifier: 6E:01:EC:17:7E:53:28:9A:7B:5A:BC:7C:49:88:84:12:5E:C2:AF:91 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 34249F5AA7EBD98FFBF34D6B4DF3E5B895E5A9D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 0139 Signing time: Wed 17 Dec 2025 01:11:04 +0000 Manifest this update: Wed 17 Dec 2025 01:06:04 +0000 Manifest next update: Sat 20 Dec 2025 09:44:04 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: HXtuxYqcWdK3Z+G4WjO9NmoomTpcMABeA4gw2T3aG9E=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: w/41sytHjKC/QPcghCbtZGh7eAiEZ9YCUK0KU/l3SEk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 09:44:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:24:9f:5a:a7:eb:d9:8f:fb:f3:4d:6b:4d:f3:e5:b8:95:e5:a9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Dec 17 01:06:04 2025 GMT Not After : Dec 20 09:44:04 2025 GMT Subject: CN=6E01EC177E53289A7B5ABC7C498884125EC2AF91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d5:62:8e:e8:29:5e:2a:7e:3e:c1:7b:a1:86: 24:1b:4e:39:e7:26:60:4b:c2:6d:45:28:07:ca:80: a6:a6:98:c4:05:ac:eb:0a:bb:86:bc:84:11:c2:d8: d9:3f:57:9e:43:bb:88:e3:82:a3:23:b3:cb:40:a9: 54:38:69:26:61:5b:28:e3:b7:ed:73:e5:b4:e8:bb: da:dd:66:6a:27:d9:62:9c:f5:66:d2:01:a0:75:73: a5:9b:18:30:31:f9:08:a6:b5:b8:cb:11:53:9d:ac: b3:52:45:dd:49:22:96:3a:b8:cb:94:26:e0:e6:4e: 84:88:6a:04:18:b7:ab:82:a8:41:42:eb:61:e3:8b: ba:5f:e8:db:39:89:1b:55:a8:88:e4:18:13:36:7b: 0d:24:39:0c:c7:27:5d:57:9b:41:68:6f:7d:37:83: 39:e8:7e:a1:ea:ea:3a:23:7c:ce:da:e4:5b:c3:a3: 90:31:6a:05:05:00:d5:14:2a:11:0e:b4:80:e7:64: 90:4d:da:d6:f5:35:89:4e:98:2d:eb:6e:d4:3a:e8: 4d:64:b1:1a:02:37:6f:a1:ba:c4:b4:b7:f5:03:c5: e5:a4:d1:21:ee:d5:0d:64:52:e8:66:8d:2e:e5:d7: 56:76:49:a0:33:a8:13:e3:be:97:0b:7e:ee:f4:c5: f2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:01:EC:17:7E:53:28:9A:7B:5A:BC:7C:49:88:84:12:5E:C2:AF:91 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:95:9f:a1:0d:d2:b9:2b:7a:b9:a1:a5:a4:18:6a:8f:76:40: f7:c4:0a:87:a6:60:dc:45:03:f3:e4:76:09:de:cb:e5:32:6e: 57:57:0e:03:26:06:6b:55:71:c6:eb:f9:e6:90:82:82:ef:fb: 07:7e:de:06:8c:36:ae:67:01:e3:0d:58:cb:e5:48:d9:38:09: fa:f1:22:9e:48:6e:6d:82:48:fe:30:4b:4c:ee:98:af:e4:4b: 89:79:2f:64:22:47:c4:8f:06:16:ee:9d:8c:a5:40:13:c2:83: b3:0c:69:12:1b:f4:b0:18:44:f4:79:d1:52:23:48:23:9a:f0: 98:b7:e6:8a:af:87:86:f8:72:14:4b:50:0b:65:64:c1:47:4a: 3e:29:35:95:00:7b:0d:bc:64:02:eb:e4:8f:e9:d7:c5:cc:73: c8:35:72:81:33:fc:59:31:77:b7:9f:6d:96:b0:f8:b6:c0:91: 72:ce:2e:30:d4:cf:33:a3:ae:45:9e:cc:d0:08:2b:34:9e:60: d2:a4:a3:59:4b:af:7e:56:73:c9:cf:03:ad:ba:cb:fb:e3:0b: 99:5d:56:f4:18:1f:0e:8a:86:17:9a:e7:0f:89:31:ea:0e:42: cb:5d:60:8b:20:c2:d7:5d:52:c4:cf:4a:ed:99:14:85:a5:2b: 19:32:d9:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNCSfWqfr2Y/7801rTfPluJXlqdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTEyMTcwMTA2MDRaFw0yNTEyMjAwOTQ0MDRaMDMxMTAvBgNV BAMTKDZFMDFFQzE3N0U1MzI4OUE3QjVBQkM3QzQ5ODg4NDEyNUVDMkFGOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm1WKO6CleKn4+wXuhhiQbTjnn JmBLwm1FKAfKgKammMQFrOsKu4a8hBHC2Nk/V55Du4jjgqMjs8tAqVQ4aSZhWyjj t+1z5bTou9rdZmon2WKc9WbSAaB1c6WbGDAx+QimtbjLEVOdrLNSRd1JIpY6uMuU JuDmToSIagQYt6uCqEFC62Hji7pf6Ns5iRtVqIjkGBM2ew0kOQzHJ11Xm0Fob303 gznofqHq6jojfM7a5FvDo5AxagUFANUUKhEOtIDnZJBN2tb1NYlOmC3rbtQ66E1k sRoCN2+husS0t/UDxeWk0SHu1Q1kUuhmjS7l11Z2SaAzqBPjvpcLfu70xfI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbgHsF35TKJp7Wrx8SYiEEl7Cr5EwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKVn6EN0rkrermhpaQYao92QPfECoemYNxF A/Pkdgney+UybldXDgMmBmtVccbr+eaQgoLv+wd+3gaMNq5nAeMNWMvlSNk4Cfrx Ip5Ibm2CSP4wS0zumK/kS4l5L2QiR8SPBhbunYylQBPCg7MMaRIb9LAYRPR50VIj SCOa8Ji35oqvh4b4chRLUAtlZMFHSj4pNZUAew28ZALr5I/p18XMc8g1coEz/Fkx d7efbZaw+LbAkXLOLjDUzzOjrkWezNAIKzSeYNKko1lLr35Wc8nPA626y/vjC5ld VvQYHw6Khhea5w+JMeoOQstdYIsgwtddUsTPSu2ZFIWlKxky2To= -----END CERTIFICATE-----Generated at Fri Dec 19 11:33:00 2025 by rpki-client