This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: BVtRKlvS6vRhXoaimcvUR28APNS6+K3Z9mG010my/OE= Subject key identifier: AA:A3:92:C5:EE:F6:9F:EB:BF:09:CC:3C:12:79:2F:E6:B1:51:FA:03 Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 59F810BBD4A2B4DA57089CD7A137768393F8A760 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 048F Signing time: Wed 24 Dec 2025 21:20:00 +0000 Manifest this update: Wed 24 Dec 2025 21:15:00 +0000 Manifest next update: Sun 28 Dec 2025 06:34:00 +0000 Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: HK8ogYvvmFjyXfExvQ1IVm17qe6hg779+C+VfC/ExGk=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:f8:10:bb:d4:a2:b4:da:57:08:9c:d7:a1:37:76:83:93:f8:a7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Dec 24 21:15:00 2025 GMT Not After : Dec 28 06:34:00 2025 GMT Subject: CN=AAA392C5EEF69FEBBF09CC3C12792FE6B151FA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:bf:57:19:fd:55:ca:4b:f7:99:b9:70:a6: b4:46:9c:d7:e9:ec:69:aa:74:fe:b3:1e:35:45:75: 14:62:c9:68:90:92:2a:7f:16:1c:a5:25:3c:05:e0: b8:f4:86:47:38:12:71:0c:25:98:9f:0b:82:20:09: 68:86:6b:8e:1f:c1:5c:49:46:a1:ec:4c:2d:8b:cf: 5c:23:b4:bb:77:3b:45:7a:cd:b7:1a:4f:de:d1:4f: ff:0f:54:90:90:71:f4:a9:0d:41:39:9d:df:fe:fc: e1:70:3c:9a:f0:aa:19:b5:35:4e:68:e6:2e:0b:4d: bf:a9:26:db:16:07:bc:60:53:27:1f:4e:ac:22:1f: 49:a9:39:48:ca:c6:9c:fa:48:7b:6f:25:c1:42:fd: 40:d1:d8:18:b4:16:7c:7b:db:22:35:20:b6:63:ef: 29:87:98:a8:f5:7e:3e:37:20:67:0a:d3:98:d6:d5: c1:12:53:84:86:eb:3d:64:9d:0b:5b:0c:44:1e:17: 6d:89:42:28:56:03:5d:86:3e:09:c7:b7:ef:9c:bb: cb:40:4d:85:d5:24:c5:1d:c8:40:3c:80:c1:13:36: 5e:af:df:c9:a9:ac:38:e3:3e:b3:d3:34:e3:85:c9: 75:8d:89:98:f9:a6:ae:0d:fe:11:fc:ff:e6:c5:e9: 9e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A3:92:C5:EE:F6:9F:EB:BF:09:CC:3C:12:79:2F:E6:B1:51:FA:03 X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:6e:55:1b:38:96:ee:9e:57:ce:f1:fc:05:15:60:37:2c:64: b8:1a:15:8d:92:c9:14:43:50:fb:d1:21:a7:d9:98:55:ba:54: 08:15:ba:b1:d6:52:92:80:5d:6f:68:05:56:e3:91:4a:ac:98: 0f:e7:f8:71:d8:2f:8c:47:ad:e4:f4:14:fd:13:f7:be:1e:c0: e3:07:e2:5e:a0:c4:cb:ed:b6:20:27:53:21:4a:c6:1f:1f:ec: 1b:02:61:df:2f:69:f0:8d:a5:78:43:b7:5a:cd:1d:3d:df:92: b3:75:4c:48:70:c7:0c:c0:56:26:9e:ee:98:72:d9:32:08:79: 99:5c:b9:14:41:cb:cb:b2:ed:fa:ff:69:82:75:32:32:2b:71: 05:a5:9a:04:e5:17:b3:50:96:d9:e7:12:c3:a4:7a:b5:58:2f: bf:66:35:26:8c:ce:a7:c3:f2:c6:0a:a4:11:1f:f3:0c:93:0e: e5:87:36:a0:a0:bc:25:b9:86:98:d0:79:3f:eb:32:c3:58:93: e1:0e:bf:b3:2c:76:d9:46:85:de:bd:da:1c:ec:b8:0d:08:95: 73:69:06:a4:89:f3:ac:65:0a:f5:22:65:f2:da:9c:f5:c1:36: c9:ea:3d:e1:a9:4e:44:8c:8e:a4:d2:04:15:ea:7a:bc:a7:e7: b3:ce:0d:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWfgQu9SitNpXCJzXoTd2g5P4p2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTEyMjQyMTE1MDBaFw0yNTEyMjgwNjM0MDBaMDMxMTAvBgNV BAMTKEFBQTM5MkM1RUVGNjlGRUJCRjA5Q0MzQzEyNzkyRkU2QjE1MUZBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Xb9XGf1Vykv3mblwprRGnNfp 7GmqdP6zHjVFdRRiyWiQkip/FhylJTwF4Lj0hkc4EnEMJZifC4IgCWiGa44fwVxJ RqHsTC2Lz1wjtLt3O0V6zbcaT97RT/8PVJCQcfSpDUE5nd/+/OFwPJrwqhm1NU5o 5i4LTb+pJtsWB7xgUycfTqwiH0mpOUjKxpz6SHtvJcFC/UDR2Bi0Fnx72yI1ILZj 7ymHmKj1fj43IGcK05jW1cESU4SG6z1knQtbDEQeF22JQihWA12GPgnHt++cu8tA TYXVJMUdyEA8gMETNl6v38mprDjjPrPTNOOFyXWNiZj5pq4N/hH8/+bF6Z6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqqOSxe72n+u/Ccw8Enkv5rFR+gMwHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJduVRs4lu6eV87x/AUVYDcsZLgaFY2SyRRD UPvRIafZmFW6VAgVurHWUpKAXW9oBVbjkUqsmA/n+HHYL4xHreT0FP0T974ewOMH 4l6gxMvttiAnUyFKxh8f7BsCYd8vafCNpXhDt1rNHT3fkrN1TEhwxwzAViae7phy 2TIIeZlcuRRBy8uy7fr/aYJ1MjIrcQWlmgTlF7NQltnnEsOkerVYL79mNSaMzqfD 8sYKpBEf8wyTDuWHNqCgvCW5hpjQeT/rMsNYk+EOv7MsdtlGhd692hzsuA0IlXNp BqSJ86xlCvUiZfLanPXBNsnqPeGpTkSMjqTSBBXqeryn57PODYI= -----END CERTIFICATE-----Generated at Thu Dec 25 07:24:57 2025 by rpki-client