This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft File: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft (raw, json) Hash identifier: HGczOnN2H+V9DpAbV2BDgbEDsx01J6r4mZ26pwBKwac= Subject key identifier: 98:73:43:59:C5:98:7E:6D:00:37:31:EB:4F:BB:94:77:D2:6A:B8:A3 Authority key identifier: A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 Certificate issuer: /CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Certificate serial: 1A760947BC1852EC621C32250B838FB49824393E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft Manifest number: 0535 Signing time: Fri 19 Dec 2025 07:50:02 +0000 Manifest this update: Fri 19 Dec 2025 07:45:02 +0000 Manifest next update: Mon 22 Dec 2025 12:11:02 +0000 Files and hashes: 1: A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl (hash: sn1hi1J/5ggWTn/tYw7VowuPrslZ3CUnpxWpuEh+qGM=) 2: 3130332e37392e39362e302f32342d3234203d3e203634333038.roa (hash: wGapFjIoWrukGBmT8iRgZP0dNhbzHUcz+UdRp6Wb0WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 12:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:76:09:47:bc:18:52:ec:62:1c:32:25:0b:83:8f:b4:98:24:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36 Validity Not Before: Dec 19 07:45:02 2025 GMT Not After : Dec 22 12:11:02 2025 GMT Subject: CN=98734359C5987E6D003731EB4FBB9477D26AB8A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3b:71:90:3f:20:18:27:f4:6b:7f:5d:ec:fa: 69:26:0e:42:8d:f9:2b:04:96:0e:7a:34:35:73:8e: e3:6e:4c:58:cc:4a:c9:ab:9f:d4:0c:68:85:6f:99: 25:5f:c1:a2:21:3b:0a:84:0e:a0:54:22:a4:57:f8: fc:66:52:1a:63:4a:f5:7d:47:e5:1d:62:f7:4f:72: da:8c:1e:a0:3c:41:2e:df:f7:74:7f:74:26:56:86: f1:b7:f6:3f:c4:00:6d:64:52:ad:14:44:c3:68:a7: 52:be:68:a1:86:17:d3:68:a9:4a:c4:be:24:21:be: 0d:6a:80:fc:d7:dd:b0:9b:c1:83:7d:f6:80:fe:8c: 29:f4:66:cb:ad:b7:0f:65:1e:28:79:25:3d:b9:67: 06:2b:32:16:b1:fb:7b:9f:1b:ca:48:61:f6:20:91: b6:69:3c:d7:c9:84:84:6f:8d:7c:f2:0c:5c:1b:0c: fd:ca:a9:2f:d7:07:52:fd:82:47:e0:fb:ff:41:20: ee:c8:57:9a:f3:84:0e:ee:ed:93:4c:25:25:4a:6d: e7:88:b6:cc:b1:9e:a4:dc:eb:18:23:46:e1:65:78: c5:46:07:51:26:1a:ab:0f:ea:54:0d:9a:b9:fb:3b: a5:b8:f9:fb:7a:3e:1c:c6:0e:54:63:a0:ec:1c:1d: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:73:43:59:C5:98:7E:6D:00:37:31:EB:4F:BB:94:77:D2:6A:B8:A3 X509v3 Authority Key Identifier: keyid:A8:AC:DE:BC:6E:B4:FF:09:A4:8B:38:FE:B1:7C:C1:45:AA:5E:9F:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/506cd155-b53f-4146-a17c-7f1375eca24a/0/A8ACDEBC6EB4FF09A48B38FEB17CC145AA5E9F36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b0:35:d8:40:ca:87:48:02:37:e6:ca:53:f7:0b:e6:b2:a0: 27:fd:77:02:ae:3f:d5:69:ae:3d:7d:cf:1c:f7:ef:39:57:af: 7f:1e:21:e1:bc:83:f7:97:fc:b8:d1:35:be:d3:f0:ec:36:47: d7:b6:5a:55:e8:b2:97:37:b8:7e:9a:f1:ea:d2:27:76:66:90: 65:bf:61:57:4d:e8:9d:26:b6:f5:9c:82:c5:ad:80:75:8e:1c: a8:47:55:7d:58:c6:66:e9:0b:cd:f2:44:02:4a:dd:7f:8d:13: 00:b0:60:ed:b9:8a:c2:89:bc:35:49:80:63:e4:6c:3c:ad:7a: 01:10:9a:8f:db:d0:f0:dd:c2:8b:0f:78:67:08:80:24:0c:60: 82:89:75:c4:55:d5:c8:51:57:be:58:31:b0:ad:b9:2c:9b:57: c7:6c:24:4b:70:e8:13:db:11:4f:6a:0d:d2:34:19:34:9a:de: 2c:6a:b6:d6:6f:cb:a8:f9:de:0f:46:32:cf:85:39:2c:b9:d6: bb:86:ff:13:81:36:7c:4c:2a:88:fc:10:ef:45:da:c2:04:c1: 8c:43:9c:c1:3e:b4:60:0d:61:5e:16:0f:1f:e2:12:4c:da:88: f6:72:76:f1:2f:da:0a:c6:6f:ed:27:b1:c3:12:15:d6:45:1c: 21:66:da:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnYJR7wYUuxiHDIlC4OPtJgkOT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVB QTVFOUYzNjAeFw0yNTEyMTkwNzQ1MDJaFw0yNTEyMjIxMjExMDJaMDMxMTAvBgNV BAMTKDk4NzM0MzU5QzU5ODdFNkQwMDM3MzFFQjRGQkI5NDc3RDI2QUI4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8O3GQPyAYJ/Rrf13s+mkmDkKN +SsElg56NDVzjuNuTFjMSsmrn9QMaIVvmSVfwaIhOwqEDqBUIqRX+PxmUhpjSvV9 R+UdYvdPctqMHqA8QS7f93R/dCZWhvG39j/EAG1kUq0URMNop1K+aKGGF9NoqUrE viQhvg1qgPzX3bCbwYN99oD+jCn0Zsuttw9lHih5JT25ZwYrMhax+3ufG8pIYfYg kbZpPNfJhIRvjXzyDFwbDP3KqS/XB1L9gkfg+/9BIO7IV5rzhA7u7ZNMJSVKbeeI tsyxnqTc6xgjRuFleMVGB1EmGqsP6lQNmrn7O6W4+ft6PhzGDlRjoOwcHaVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmHNDWcWYfm0ANzHrT7uUd9JquKMwHwYDVR0j BBgwFoAUqKzevG60/wmkizj+sXzBRapenzYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MDZjZDE1NS1iNTNmLTQxNDYtYTE3Yy03ZjEzNzVlY2EyNGEvMC9BOEFDREVCQzZF QjRGRjA5QTQ4QjM4RkVCMTdDQzE0NUFBNUU5RjM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0MxNDVBQTVF OUYzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTA2Y2QxNTUtYjUzZi00MTQ2LWEx N2MtN2YxMzc1ZWNhMjRhLzAvQThBQ0RFQkM2RUI0RkYwOUE0OEIzOEZFQjE3Q0Mx NDVBQTVFOUYzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIywNdhAyodIAjfmylP3C+ayoCf9dwKuP9Vp rj19zxz37zlXr38eIeG8g/eX/LjRNb7T8Ow2R9e2WlXospc3uH6a8erSJ3ZmkGW/ YVdN6J0mtvWcgsWtgHWOHKhHVX1YxmbpC83yRAJK3X+NEwCwYO25isKJvDVJgGPk bDytegEQmo/b0PDdwosPeGcIgCQMYIKJdcRV1chRV75YMbCtuSybV8dsJEtw6BPb EU9qDdI0GTSa3ixqttZvy6j53g9GMs+FOSy51ruG/xOBNnxMKoj8EO9F2sIEwYxD nME+tGANYV4WDx/iEkzaiPZydvEv2grGb+0nscMSFdZFHCFm2gA= -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:48 2025 by rpki-client