This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json) Hash identifier: zgDtwl8iSHjsoPRTsy7YLTFWfJiGwdIXNo7tM32iqN4= Subject key identifier: 2F:47:37:9E:B3:6D:41:20:F2:1A:C5:F7:C4:41:29:BD:00:D4:72:E0 Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 2C4F855F7BDD2F518A423D620FD707FE6E84DE58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft Manifest number: 0315 Signing time: Tue 23 Dec 2025 06:10:57 +0000 Manifest this update: Tue 23 Dec 2025 06:05:57 +0000 Manifest next update: Fri 26 Dec 2025 17:35:57 +0000 Files and hashes: 1: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: Lmz18fdqrBCAPSvf0BqVRkbA3CV2isxcO+mwXlFF+EI=) 2: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: uFvJDDnE+LzWscDNPWULjpdUKOX2mvB/YxTyjJbL490=) 3: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: DZhIHh+Q1/lFglHPCtQYtJARiOU+Khz/cuUC8LvdiAk=) 4: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: SaglbTs2Sm97iqGUTpHLhK4uFUxx2JxCBReDItgEQOA=) 5: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: ta8cyJGAuX8M5px06fD7ixeqP65bXdztJIzRgtjjUTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 17:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4f:85:5f:7b:dd:2f:51:8a:42:3d:62:0f:d7:07:fe:6e:84:de:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Dec 23 06:05:57 2025 GMT Not After : Dec 26 17:35:57 2025 GMT Subject: CN=2F47379EB36D4120F21AC5F7C44129BD00D472E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ca:45:f2:b6:1f:e4:c4:b7:f2:8f:ea:1f:ea: 2f:dd:ad:62:22:c3:9b:d9:22:12:fc:38:41:74:c1: 43:aa:27:de:1a:ee:dc:78:18:59:6d:d5:84:ca:b6: d0:ea:e3:ff:4a:5d:e4:9f:04:ae:6b:82:e7:1e:e5: 31:6f:75:7f:03:73:c8:d2:b0:e9:f1:be:c7:bc:24: 17:b5:fe:1a:53:42:a0:47:e8:4e:03:71:34:d9:be: f5:61:21:f1:d4:ba:25:cf:92:08:d2:0c:7d:43:7c: 88:1e:a1:5c:52:6f:18:0f:b7:58:6b:cc:0d:b8:0b: 16:99:a6:73:91:f1:30:f2:fc:9c:6e:f9:45:fb:07: 0c:00:14:6c:da:d0:77:54:dc:3d:6a:cd:42:22:7a: 9d:fc:74:5b:a0:e8:b3:9e:12:47:2f:f8:bd:7e:24: 09:a3:be:d5:00:42:0d:0c:48:e8:b7:d7:5f:bd:54: 6d:31:60:dd:ea:69:ad:48:27:07:b7:96:c4:d9:a3: 84:04:4c:34:bf:17:64:64:96:45:96:14:80:a9:cf: 5e:37:9c:bc:a3:75:99:36:7d:26:57:57:07:5c:1e: 2d:2b:17:43:16:33:78:97:e3:fe:36:ed:f9:be:24: 8e:9a:2e:8d:40:0e:57:3a:29:6d:7d:70:a5:23:f7: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:47:37:9E:B3:6D:41:20:F2:1A:C5:F7:C4:41:29:BD:00:D4:72:E0 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:f1:bb:d9:66:5a:67:b2:92:56:cb:70:92:d7:94:28:a4:53: a4:21:40:43:c0:f4:c3:7e:26:62:71:a5:af:79:8d:a8:5e:01: 99:f1:57:ad:de:54:2c:17:0a:48:01:5a:bb:4f:c0:43:bc:f2: fd:e0:3e:61:45:c1:46:eb:b6:a5:f5:54:f7:2b:50:2b:a5:e3: d1:d5:47:13:a8:e3:f2:0c:20:f4:69:b2:42:61:19:4f:76:61: b0:ac:49:a6:69:8c:60:39:37:12:8c:e2:2d:15:37:08:30:65: b7:d1:4c:ff:69:c2:f9:f9:16:fa:01:e2:40:d8:c3:8b:2b:81: cd:c8:27:4a:67:e9:08:ad:39:2b:d8:d1:a9:ea:3b:ab:b4:5b: fa:45:35:a5:9d:6c:68:1e:78:7e:ad:25:da:2a:d1:9d:50:c2: 0d:d2:2e:53:a7:bb:58:4b:70:ea:fd:46:99:6f:a8:f8:da:c9: 4c:a8:80:be:90:60:2e:80:d6:2c:52:16:52:fb:7e:2e:7a:47: dd:c6:a5:2a:4a:4b:5f:45:c9:16:09:9f:8f:6c:43:d3:7e:3d: 68:a9:41:2e:13:17:3e:b1:04:98:a0:e0:98:aa:f0:1e:30:5a: 8b:98:8b:e8:ff:41:13:8a:88:6c:f6:6c:21:05:a2:45:b9:b3: d8:fd:7c:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULE+FX3vdL1GKQj1iD9cH/m6E3lgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNTEyMjMwNjA1NTdaFw0yNTEyMjYxNzM1NTdaMDMxMTAvBgNV BAMTKDJGNDczNzlFQjM2RDQxMjBGMjFBQzVGN0M0NDEyOUJEMDBENDcyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwykXyth/kxLfyj+of6i/drWIi w5vZIhL8OEF0wUOqJ94a7tx4GFlt1YTKttDq4/9KXeSfBK5rguce5TFvdX8Dc8jS sOnxvse8JBe1/hpTQqBH6E4DcTTZvvVhIfHUuiXPkgjSDH1DfIgeoVxSbxgPt1hr zA24CxaZpnOR8TDy/Jxu+UX7BwwAFGza0HdU3D1qzUIiep38dFug6LOeEkcv+L1+ JAmjvtUAQg0MSOi311+9VG0xYN3qaa1IJwe3lsTZo4QETDS/F2RklkWWFICpz143 nLyjdZk2fSZXVwdcHi0rF0MWM3iX4/427fm+JI6aLo1ADlc6KW19cKUj97gzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0c3nrNtQSDyGsX3xEEpvQDUcuAwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMz Mzc2RjNGRTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTxu9lmWmeyklbLcJLXlCikU6QhQEPA9MN+ JmJxpa95jaheAZnxV63eVCwXCkgBWrtPwEO88v3gPmFFwUbrtqX1VPcrUCul49HV RxOo4/IMIPRpskJhGU92YbCsSaZpjGA5NxKM4i0VNwgwZbfRTP9pwvn5FvoB4kDY w4srgc3IJ0pn6QitOSvY0anqO6u0W/pFNaWdbGgeeH6tJdoq0Z1Qwg3SLlOnu1hL cOr9RplvqPjayUyogL6QYC6A1ixSFlL7fi56R93GpSpKS19FyRYJn49sQ9N+PWip QS4TFz6xBJig4Jiq8B4wWouYi+j/QROKiGz2bCEFokW5s9j9fI4= -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:54 2025 by rpki-client