This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: 0660ujq2hyDQSzCH2HdSWKqikUPtbMnkJ9+fql63/20= Subject key identifier: 12:DE:A6:FB:B1:4A:F1:40:DD:0C:55:3B:5C:01:BF:11:69:24:14:3B Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 4B1A0AD331E54249AF8718989B2387B5EB13C0F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 01C2 Signing time: Wed 17 Dec 2025 22:41:12 +0000 Manifest this update: Wed 17 Dec 2025 22:36:12 +0000 Manifest next update: Sun 21 Dec 2025 08:41:12 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: SpZC59e78RFSMTIi2T0VjoxX/8FXFEY34gXVgn2Wfv8=) 2: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: 8gVNOLPBWo8O5ulgfaJA12fmgA+ibo4/PEn07lZ3SbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 08:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1a:0a:d3:31:e5:42:49:af:87:18:98:9b:23:87:b5:eb:13:c0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Dec 17 22:36:12 2025 GMT Not After : Dec 21 08:41:12 2025 GMT Subject: CN=12DEA6FBB14AF140DD0C553B5C01BF116924143B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:55:71:4e:5a:b7:4f:76:bf:d1:cd:25:ca:ee: 7f:89:c8:a6:95:8f:f1:ef:9f:ab:77:59:bc:b1:3e: d2:b3:54:fc:7e:33:a7:77:3b:c5:ca:b5:1a:75:a7: 51:3e:63:e7:e3:c7:1b:d1:b6:1a:e3:7e:4a:03:67: 06:a6:99:63:0e:fa:16:08:cf:85:43:57:38:37:58: ef:16:cd:1c:3d:c5:f8:bf:26:83:39:fe:af:38:c0: 58:aa:97:6b:ce:c7:dc:ca:58:b1:c2:a1:e9:51:67: c3:5d:87:1d:71:4c:f0:d3:f2:84:ce:6c:47:51:c3: d5:c3:f9:4d:c1:59:31:bd:04:05:27:6b:04:a4:47: 53:b5:90:b1:bc:63:8e:34:68:af:ca:f2:82:3e:0a: e2:66:2c:3f:28:b3:6b:f7:47:35:3b:08:aa:0f:c9: 03:fb:24:71:8b:f5:7e:f4:ea:8d:1c:40:47:75:37: 09:7b:c7:5d:49:1d:26:6d:b2:b7:e9:86:c3:13:f2: 78:1c:61:e3:8b:94:de:25:87:fd:cb:06:33:6f:10: 8e:55:00:0f:6d:a8:5a:56:aa:b3:10:dc:3e:dd:93: 4f:83:b4:eb:38:e2:e3:e7:37:59:c0:54:c0:c7:c3: 83:4e:d5:a4:42:73:7d:8d:44:26:49:d8:a9:78:31: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DE:A6:FB:B1:4A:F1:40:DD:0C:55:3B:5C:01:BF:11:69:24:14:3B X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3d:d2:bc:53:20:1e:d2:a4:0b:7a:ca:fa:98:e8:25:90:a9: a5:6e:50:fa:00:e5:dc:6e:63:b3:0a:e3:01:4b:4f:d4:12:0e: 79:99:21:4d:e9:76:f3:01:d0:27:42:8a:c9:70:c8:73:49:69: 8e:ab:b4:68:48:3c:8c:e4:85:5c:35:7c:c1:8b:79:4d:de:0e: 91:27:25:e2:ab:53:18:d0:16:b5:31:f7:14:84:43:73:b4:6a: 64:a7:18:14:c3:d0:55:75:6c:a0:d9:c3:0d:fb:8f:81:40:ef: fb:6d:a2:84:1c:22:5e:c7:43:2a:85:8a:a4:66:6b:f8:68:29: c5:91:49:d0:1d:67:16:82:3d:da:ce:89:62:09:96:80:86:f9: a0:19:30:d3:ab:e9:57:00:05:2d:1d:7a:c4:db:81:f9:5b:8a: 16:a2:78:39:09:05:f5:fd:94:11:5c:37:76:4d:cb:6e:65:9f: c5:2a:13:6b:0a:bb:30:f0:85:5e:b7:7c:ef:08:f2:a8:ce:05: 25:46:1b:d7:14:9e:4f:b4:40:af:f7:15:f8:5d:38:af:fa:29: 13:33:14:b7:4a:6c:ba:ff:87:77:d7:7c:6d:66:89:15:ea:c7: d6:bd:64:36:85:9a:c4:a6:88:12:b7:a5:af:38:34:7e:3f:ad: c9:d5:96:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxoK0zHlQkmvhxiYmyOHtesTwPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNTEyMTcyMjM2MTJaFw0yNTEyMjEwODQxMTJaMDMxMTAvBgNV BAMTKDEyREVBNkZCQjE0QUYxNDBERDBDNTUzQjVDMDFCRjExNjkyNDE0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVXFOWrdPdr/RzSXK7n+JyKaV j/Hvn6t3WbyxPtKzVPx+M6d3O8XKtRp1p1E+Y+fjxxvRthrjfkoDZwammWMO+hYI z4VDVzg3WO8WzRw9xfi/JoM5/q84wFiql2vOx9zKWLHCoelRZ8Ndhx1xTPDT8oTO bEdRw9XD+U3BWTG9BAUnawSkR1O1kLG8Y440aK/K8oI+CuJmLD8os2v3RzU7CKoP yQP7JHGL9X706o0cQEd1Nwl7x11JHSZtsrfphsMT8ngcYeOLlN4lh/3LBjNvEI5V AA9tqFpWqrMQ3D7dk0+DtOs44uPnN1nAVMDHw4NO1aRCc32NRCZJ2Kl4MTXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEt6m+7FK8UDdDFU7XAG/EWkkFDswHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI090rxTIB7SpAt6yvqY6CWQqaVuUPoA5dxu Y7MK4wFLT9QSDnmZIU3pdvMB0CdCislwyHNJaY6rtGhIPIzkhVw1fMGLeU3eDpEn JeKrUxjQFrUx9xSEQ3O0amSnGBTD0FV1bKDZww37j4FA7/ttooQcIl7HQyqFiqRm a/hoKcWRSdAdZxaCPdrOiWIJloCG+aAZMNOr6VcABS0desTbgflbihaieDkJBfX9 lBFcN3ZNy25ln8UqE2sKuzDwhV63fO8I8qjOBSVGG9cUnk+0QK/3FfhdOK/6KRMz FLdKbLr/h3fXfG1miRXqx9a9ZDaFmsSmiBK3pa84NH4/rcnVll8= -----END CERTIFICATE-----Generated at Fri Dec 19 10:53:26 2025 by rpki-client