This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft File: A500108F09BF54E5603B5C1F6E6325A561FE7126.mft (raw, json) Hash identifier: MP/OOtVPSSsDybT1HEXRziY6kqAD+gojaDPe+nj3e04= Subject key identifier: 20:DC:5A:6F:7F:5A:05:C3:A2:0A:16:9B:DF:11:1A:9F:06:0B:8E:E9 Authority key identifier: A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 Certificate issuer: /CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Certificate serial: 0AB51B2B33DBBDA4572B78DDDE7E891498FD84B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft Manifest number: 0530 Signing time: Thu 18 Dec 2025 16:22:28 +0000 Manifest this update: Thu 18 Dec 2025 16:17:28 +0000 Manifest next update: Sun 21 Dec 2025 17:48:28 +0000 Files and hashes: 1: A500108F09BF54E5603B5C1F6E6325A561FE7126.crl (hash: 4NVWjd7CpiniZN7f1Yeu77iyXNNFREnKBTd6Bb2BZKs=) 2: 3130332e3131322e3136322e302f32332d3234203d3e20313337333331.roa (hash: lIpuwQni1CJCCy7a6RQeBOueUSsNd+BwETQKPZ3/nzw=) 3: 323030313a6466343a623130303a3a2f34382d3438203d3e20313337333331.roa (hash: N5WXqZ6Jw+zSS8rnedVuQEefp7BbCpCEzbN4PssNcrU=) 4: 3130332e3133332e3232322e302f32332d3234203d3e20313337333331.roa (hash: oiQrxAKU3WAq8WQAa4AsG/VSgBXo6JykRbhPhmfaGc4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b5:1b:2b:33:db:bd:a4:57:2b:78:dd:de:7e:89:14:98:fd:84:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A500108F09BF54E5603B5C1F6E6325A561FE7126 Validity Not Before: Dec 18 16:17:28 2025 GMT Not After : Dec 21 17:48:28 2025 GMT Subject: CN=20DC5A6F7F5A05C3A20A169BDF111A9F060B8EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:7b:ef:8e:a8:b3:df:4d:91:16:85:5b:e4: b1:61:9c:96:17:45:56:3d:b1:0e:ea:10:57:1f:b7: 55:34:4f:4f:d4:18:36:ae:c9:11:61:08:4a:00:dd: e9:3b:96:60:e2:c1:43:57:1b:a0:e8:2f:2a:69:ac: 5a:64:ab:5c:25:84:e4:6d:e8:16:3c:8c:0d:74:32: 96:cd:70:98:be:eb:71:44:90:11:7f:90:53:14:1f: 24:4b:12:ea:81:37:19:92:d9:b1:c6:33:88:93:f7: 3a:7e:cc:18:cc:ee:f9:ff:6f:0b:3d:f2:a9:6d:ed: 82:1a:13:a9:a4:f8:71:88:5c:14:0d:81:b4:d8:b1: 12:96:6a:a6:01:70:b5:25:7f:15:22:03:f0:f9:a2: ee:00:1c:60:81:86:b0:1f:80:4f:52:c1:68:53:80: 73:3e:ed:94:fa:4b:05:6e:13:7f:72:54:40:06:f2: f5:c0:b5:fc:7a:74:98:3d:06:e5:f6:3f:5f:b0:e4: 33:27:25:14:c7:14:31:9f:37:0c:80:fc:ee:88:e7: e3:a5:a4:8a:26:91:46:b0:cf:95:57:71:3e:33:76: b5:aa:aa:49:e9:16:77:ff:f3:b3:43:89:c0:0d:10: da:25:56:fc:83:51:c6:77:64:be:31:19:29:ca:d1: b5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:5A:6F:7F:5A:05:C3:A2:0A:16:9B:DF:11:1A:9F:06:0B:8E:E9 X509v3 Authority Key Identifier: keyid:A5:00:10:8F:09:BF:54:E5:60:3B:5C:1F:6E:63:25:A5:61:FE:71:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A500108F09BF54E5603B5C1F6E6325A561FE7126.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fd80d96-ef1b-44b2-903a-7f6da941a836/0/A500108F09BF54E5603B5C1F6E6325A561FE7126.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:98:45:cf:71:a6:86:19:52:f3:3e:80:fc:3c:1c:27:9e:17: 32:45:7c:83:46:9f:88:d7:9c:54:93:cd:5e:32:66:6a:3f:36: b4:65:34:e1:d8:3e:5b:82:54:8e:19:83:94:71:62:e2:e8:68: fb:02:c3:d1:4e:a9:3f:bb:97:22:4d:bd:c8:11:0f:28:d1:c4: 86:2c:fe:9a:c4:6c:03:d1:e7:16:1c:04:98:85:4d:43:b0:c5: 3e:35:fc:83:1b:0f:d1:56:f9:92:4d:19:78:99:1f:0b:dc:30: 7b:b5:1c:5d:ed:88:46:8c:af:81:dd:ac:af:57:19:bf:f9:cd: 5f:75:7b:94:90:9c:e8:f3:7e:ea:78:a0:9d:d0:25:db:b9:f2: 50:ed:2f:e0:26:0e:64:00:52:49:c3:5c:c7:5b:63:63:28:a9: 61:26:b7:6d:1c:99:12:cb:7a:5d:e4:aa:4d:14:a6:4f:28:45: 4f:db:4f:03:f8:56:d8:22:71:20:d8:1f:1c:e1:4b:e0:92:43: 82:dd:92:1c:67:13:5d:e1:82:50:95:d6:5f:1e:5a:f5:53:63: 69:ec:d5:b6:07:60:ec:55:25:70:68:ec:02:2e:a8:0f:90:1a: 8c:ac:0f:20:a0:a5:82:8b:e1:40:5b:25:19:cc:5b:61:ff:15: 8c:e5:e3:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrUbKzPbvaRXK3jd3n6JFJj9hLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2 MUZFNzEyNjAeFw0yNTEyMTgxNjE3MjhaFw0yNTEyMjExNzQ4MjhaMDMxMTAvBgNV BAMTKDIwREM1QTZGN0Y1QTA1QzNBMjBBMTY5QkRGMTExQTlGMDYwQjhFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/y3vvjqiz302RFoVb5LFhnJYX RVY9sQ7qEFcft1U0T0/UGDauyRFhCEoA3ek7lmDiwUNXG6DoLypprFpkq1wlhORt 6BY8jA10MpbNcJi+63FEkBF/kFMUHyRLEuqBNxmS2bHGM4iT9zp+zBjM7vn/bws9 8qlt7YIaE6mk+HGIXBQNgbTYsRKWaqYBcLUlfxUiA/D5ou4AHGCBhrAfgE9SwWhT gHM+7ZT6SwVuE39yVEAG8vXAtfx6dJg9BuX2P1+w5DMnJRTHFDGfNwyA/O6I5+Ol pIomkUawz5VXcT4zdrWqqknpFnf/87NDicANENolVvyDUcZ3ZL4xGSnK0bURAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINxab39aBcOiChab3xEanwYLjukwHwYDVR0j BBgwFoAUpQAQjwm/VOVgO1wfbmMlpWH+cSYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmQ4MGQ5Ni1lZjFiLTQ0YjItOTAzYS03ZjZkYTk0MWE4MzYvMC9BNTAwMTA4RjA5 QkY1NEU1NjAzQjVDMUY2RTYzMjVBNTYxRkU3MTI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1QTU2MUZF NzEyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZkODBkOTYtZWYxYi00NGIyLTkw M2EtN2Y2ZGE5NDFhODM2LzAvQTUwMDEwOEYwOUJGNTRFNTYwM0I1QzFGNkU2MzI1 QTU2MUZFNzEyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOYRc9xpoYZUvM+gPw8HCeeFzJFfINGn4jX nFSTzV4yZmo/NrRlNOHYPluCVI4Zg5RxYuLoaPsCw9FOqT+7lyJNvcgRDyjRxIYs /prEbAPR5xYcBJiFTUOwxT41/IMbD9FW+ZJNGXiZHwvcMHu1HF3tiEaMr4HdrK9X Gb/5zV91e5SQnOjzfup4oJ3QJdu58lDtL+AmDmQAUknDXMdbY2MoqWEmt20cmRLL el3kqk0Upk8oRU/bTwP4VtgicSDYHxzhS+CSQ4LdkhxnE13hglCV1l8eWvVTY2ns 1bYHYOxVJXBo7AIuqA+QGoysDyCgpYKL4UBbJRnMW2H/FYzl47g= -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:40 2025 by rpki-client