This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: v6Zq5vh+oZJyEFaEEDNiOdtdl+Yju/k7yZjGn73XhzY= Subject key identifier: 5A:33:B0:D0:00:0B:0D:1E:71:E3:62:04:DE:F0:15:FF:EA:D1:5E:0D Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 5673DBECE0F775A92562B9FD5C1C5848DEB51F98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 048E Signing time: Mon 22 Dec 2025 12:30:00 +0000 Manifest this update: Mon 22 Dec 2025 12:25:00 +0000 Manifest next update: Thu 25 Dec 2025 21:14:00 +0000 Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: vpkP2I+jsYf4yNhOQDaWFsp82/t4YtHnOVzW33GwhFU=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:db:ec:e0:f7:75:a9:25:62:b9:fd:5c:1c:58:48:de:b5:1f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Dec 22 12:25:00 2025 GMT Not After : Dec 25 21:14:00 2025 GMT Subject: CN=5A33B0D0000B0D1E71E36204DEF015FFEAD15E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:2d:7d:29:05:1e:f6:41:83:06:3c:31:6b: 64:b5:b1:cf:11:83:2f:f4:30:31:f9:d7:b0:18:7e: 84:5a:a2:2a:97:92:c2:93:7d:e9:80:9f:75:87:f0: 70:c9:f7:44:05:85:e6:0f:b1:12:25:1c:0b:8a:64: 37:c7:f6:74:c0:25:07:bb:81:34:f5:f5:ee:6c:72: bc:0d:5b:10:c9:d5:14:46:08:06:97:10:87:81:4f: c5:ca:41:6a:60:6e:db:9e:56:ed:a6:ad:4b:b6:97: 51:f3:3b:e1:ef:0e:7f:a3:87:81:bf:79:03:92:e7: 0b:a1:dc:67:2e:2b:8c:7a:59:8c:91:64:f8:54:37: 12:7c:99:1b:2c:e5:be:c8:91:4c:b9:73:d8:52:84: ca:48:0d:c2:70:b0:e6:8a:e8:ce:04:d2:67:b0:62: 10:35:fc:b6:00:eb:f0:df:74:65:be:b2:ac:b4:ca: c0:fd:e4:5d:f7:2d:17:74:40:a5:69:dc:2f:7e:b7: d7:74:f1:c6:6e:66:39:ee:6a:ee:92:6b:90:8b:33: ac:04:d0:74:56:51:da:7d:09:d3:c9:e2:3b:8c:23: 93:2f:15:87:9b:00:98:f0:aa:b9:22:9a:23:c2:eb: 9a:20:45:53:bf:cb:74:c6:2b:b0:bd:07:54:b6:3b: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:33:B0:D0:00:0B:0D:1E:71:E3:62:04:DE:F0:15:FF:EA:D1:5E:0D X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:05:8d:0a:30:17:ad:c7:f0:34:d0:db:69:c3:60:61:18:54: 86:aa:9b:9c:de:0b:c5:73:8e:cd:df:99:32:f4:79:52:8f:d1: c5:e5:54:b7:a8:b0:7d:ec:0c:19:d1:4b:a3:a9:b7:82:91:76: 3e:d7:cc:0b:35:74:57:5b:86:22:b5:a6:75:21:eb:d1:6a:e5: 6e:9e:81:95:07:ee:28:95:c6:97:8f:a8:35:0a:fa:7d:07:cc: 7b:73:c5:f8:fa:63:30:4f:77:d0:2b:78:57:30:0e:95:f4:bd: 2d:94:c5:40:27:22:b9:ed:eb:03:5b:c3:ef:64:00:c8:77:53: 0a:77:61:42:37:cd:35:75:33:95:94:a5:f4:12:de:d7:9d:6a: b7:61:e1:89:a4:fa:ba:74:3d:43:b9:b4:4a:31:28:ee:f6:c2: 91:e2:40:22:77:1e:fe:ff:3f:02:b4:bf:9d:36:3a:5c:ca:0c: 66:3f:ba:1c:09:2c:06:d4:5f:8f:df:76:dd:fa:f3:78:34:66: ed:c5:29:5c:42:7b:0f:64:32:9c:c3:ec:48:9c:e3:78:e3:89: 82:94:59:35:21:eb:72:91:76:32:20:a4:95:dc:33:ba:ec:27: cd:11:80:14:23:72:9c:44:7c:00:45:15:c1:b3:77:ed:2b:bf: 8a:4b:0e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnPb7OD3daklYrn9XBxYSN61H5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNTEyMjIxMjI1MDBaFw0yNTEyMjUyMTE0MDBaMDMxMTAvBgNV BAMTKDVBMzNCMEQwMDAwQjBEMUU3MUUzNjIwNERFRjAxNUZGRUFEMTVFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSgC19KQUe9kGDBjwxa2S1sc8R gy/0MDH517AYfoRaoiqXksKTfemAn3WH8HDJ90QFheYPsRIlHAuKZDfH9nTAJQe7 gTT19e5scrwNWxDJ1RRGCAaXEIeBT8XKQWpgbtueVu2mrUu2l1HzO+HvDn+jh4G/ eQOS5wuh3GcuK4x6WYyRZPhUNxJ8mRss5b7IkUy5c9hShMpIDcJwsOaK6M4E0mew YhA1/LYA6/DfdGW+sqy0ysD95F33LRd0QKVp3C9+t9d08cZuZjnuau6Sa5CLM6wE 0HRWUdp9CdPJ4juMI5MvFYebAJjwqrkimiPC65ogRVO/y3TGK7C9B1S2O5TbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjOw0AALDR5x42IE3vAV/+rRXg0wHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIFjQowF63H8DTQ22nDYGEYVIaqm5zeC8Vz js3fmTL0eVKP0cXlVLeosH3sDBnRS6Opt4KRdj7XzAs1dFdbhiK1pnUh69Fq5W6e gZUH7iiVxpePqDUK+n0HzHtzxfj6YzBPd9AreFcwDpX0vS2UxUAnIrnt6wNbw+9k AMh3Uwp3YUI3zTV1M5WUpfQS3tedardh4Ymk+rp0PUO5tEoxKO72wpHiQCJ3Hv7/ PwK0v502OlzKDGY/uhwJLAbUX4/fdt3683g0Zu3FKVxCew9kMpzD7Eic43jjiYKU WTUh63KRdjIgpJXcM7rsJ80RgBQjcpxEfABFFcGzd+0rv4pLDqg= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:40 2025 by rpki-client