This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: lphgTRSXqPqSSRI9Q9dyi5ZuM1ZP84nCk5zM1D93its= Subject key identifier: D4:B4:C9:F9:9A:85:E4:E2:EA:B5:75:CF:CC:BB:08:6A:68:27:2C:94 Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 1ECBDF2DCADA06CC450C7DA9454020DBCC50C9F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 0192 Signing time: Wed 24 Dec 2025 07:02:30 +0000 Manifest this update: Wed 24 Dec 2025 06:57:30 +0000 Manifest next update: Sat 27 Dec 2025 11:16:30 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 2: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) 3: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: 3lK70DHapurYTeOmywzCBdnbhqTWIGiv5pVk/RGk1z0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 11:16:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:cb:df:2d:ca:da:06:cc:45:0c:7d:a9:45:40:20:db:cc:50:c9:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Dec 24 06:57:30 2025 GMT Not After : Dec 27 11:16:30 2025 GMT Subject: CN=D4B4C9F99A85E4E2EAB575CFCCBB086A68272C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:29:54:e3:a5:15:a6:b1:d4:dd:6c:02:2b: a4:be:f8:c8:b9:ac:3a:97:26:fe:de:b7:63:ea:a6: 90:7a:29:be:42:5e:c3:51:81:c4:2c:65:aa:07:64: 68:a9:8c:3e:9e:08:b8:a0:0a:19:fe:d7:33:85:8e: e8:11:c2:69:be:ab:70:b1:54:ff:8d:b6:dc:a0:8d: f4:df:02:35:c8:a0:9d:16:cd:87:e0:9f:c9:a8:dc: 48:99:c7:60:ba:5d:b5:97:0e:e3:f6:76:1e:73:e0: 0f:6c:9a:d4:c3:1f:6a:0d:d6:22:18:7a:ec:75:d5: 48:9a:73:1f:72:3c:10:d6:00:90:ec:a6:fa:a5:c0: 7c:53:84:08:fd:af:f6:bf:fc:69:ed:cb:65:50:56: f9:f1:74:c5:c1:04:22:a3:a1:91:d8:e4:84:29:39: 1c:0d:24:a1:65:24:ff:75:48:24:23:1b:7b:1d:1d: 59:af:23:1f:6c:1b:58:51:f9:b0:ed:21:ac:fe:5e: 3f:cc:ce:ff:fb:f0:2d:cf:aa:8b:48:bb:0d:68:a6: a2:ac:7d:32:0a:f9:a0:48:79:0d:02:95:8c:96:3d: 2e:35:cd:78:06:7b:de:63:52:e5:41:82:65:ad:f5: 2b:c0:ec:7a:d9:bf:ac:91:17:77:81:e8:f5:fc:21: cc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B4:C9:F9:9A:85:E4:E2:EA:B5:75:CF:CC:BB:08:6A:68:27:2C:94 X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:72:3c:cd:f0:05:a5:e1:4a:bb:50:d2:4b:32:5d:72:9c:09: be:f2:1a:d1:a5:25:59:df:60:0e:39:86:f3:d4:5e:8d:60:58: d1:d0:d8:9a:f2:1c:d0:0b:c5:2b:6e:56:67:c9:fb:70:ee:a3: b8:1d:4e:2e:71:6b:9e:b6:a2:04:61:74:56:8d:c0:e0:c3:8d: 6e:c6:da:35:69:b9:dc:b4:e0:5a:28:0b:da:1c:cf:5c:b3:21: cc:93:b7:29:2c:7a:3f:74:e6:e0:98:08:1f:52:75:86:7d:45: cd:33:57:91:4d:15:88:e4:b2:be:03:13:30:70:61:e9:18:78: e6:f1:fe:be:d8:70:fc:a4:bc:a9:42:d1:12:bb:84:e7:04:0d: d2:24:fb:16:b2:a2:ba:bb:e3:7e:f2:b0:b3:68:aa:a1:78:7f: 02:00:6b:8b:6a:d3:e9:f1:88:a3:6b:7c:b4:85:d8:4e:a8:4a: 49:6e:e3:70:2e:e3:cb:0b:fb:aa:c8:4e:f7:06:d2:d7:1c:18: dc:82:71:eb:19:7f:2e:83:35:6b:dd:b9:6e:de:bf:ca:bd:f8: 60:a2:75:19:9c:3a:71:ba:a5:5e:81:2b:95:e6:a9:d4:97:fc: ea:12:8c:34:39:49:df:81:37:1f:40:7b:e0:0f:a0:99:1f:13: 8a:bd:9c:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHsvfLcraBsxFDH2pRUAg28xQyfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTEyMjQwNjU3MzBaFw0yNTEyMjcxMTE2MzBaMDMxMTAvBgNV BAMTKEQ0QjRDOUY5OUE4NUU0RTJFQUI1NzVDRkNDQkIwODZBNjgyNzJDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uilU46UVprHU3WwCK6S++Mi5 rDqXJv7et2PqppB6Kb5CXsNRgcQsZaoHZGipjD6eCLigChn+1zOFjugRwmm+q3Cx VP+NttygjfTfAjXIoJ0WzYfgn8mo3EiZx2C6XbWXDuP2dh5z4A9smtTDH2oN1iIY eux11Uiacx9yPBDWAJDspvqlwHxThAj9r/a//Gnty2VQVvnxdMXBBCKjoZHY5IQp ORwNJKFlJP91SCQjG3sdHVmvIx9sG1hR+bDtIaz+Xj/Mzv/78C3PqotIuw1opqKs fTIK+aBIeQ0ClYyWPS41zXgGe95jUuVBgmWt9SvA7HrZv6yRF3eB6PX8IcyVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1LTJ+ZqF5OLqtXXPzLsIamgnLJQwHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMRyPM3wBaXhSrtQ0ksyXXKcCb7yGtGlJVnf YA45hvPUXo1gWNHQ2JryHNALxStuVmfJ+3Duo7gdTi5xa562ogRhdFaNwODDjW7G 2jVpudy04FooC9ocz1yzIcyTtyksej905uCYCB9SdYZ9Rc0zV5FNFYjksr4DEzBw YekYeObx/r7YcPykvKlC0RK7hOcEDdIk+xayorq7437ysLNoqqF4fwIAa4tq0+nx iKNrfLSF2E6oSklu43Au48sL+6rITvcG0tccGNyCcesZfy6DNWvduW7ev8q9+GCi dRmcOnG6pV6BK5XmqdSX/OoSjDQ5Sd+BNx9Ae+APoJkfE4q9nM4= -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:49 2025 by rpki-client