This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: 48EaQ/cFuAGs02m3NykD1UOWMH60daw7GZq10g8lHBE= Subject key identifier: E9:E0:75:B5:2C:82:41:E1:44:F1:95:3E:78:9B:65:05:92:D2:F2:46 Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 7F1D811A4A3B5465D9C46F9F5A5A73BD910734D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 0338 Signing time: Tue 16 Dec 2025 14:41:34 +0000 Manifest this update: Tue 16 Dec 2025 14:36:34 +0000 Manifest next update: Fri 19 Dec 2025 17:59:34 +0000 Files and hashes: 1: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: 5uL/rz+wgdkesjjXik1D/Hsi+31EHFosWAUdGUrrYMA=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 17:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1d:81:1a:4a:3b:54:65:d9:c4:6f:9f:5a:5a:73:bd:91:07:34:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Dec 16 14:36:34 2025 GMT Not After : Dec 19 17:59:34 2025 GMT Subject: CN=E9E075B52C8241E144F1953E789B650592D2F246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:2c:82:54:56:20:27:e2:cb:4c:6b:59:30: 91:35:f3:c5:d5:62:5d:90:2a:dd:d2:ac:3d:9f:6e: 67:c4:7e:02:b1:26:d3:63:20:ad:0b:67:93:88:d9: a7:f1:20:47:27:77:a7:bd:20:4a:c9:0c:ad:29:e6: ce:18:8a:68:f0:08:4e:0e:b0:84:a2:f6:ff:59:f7: 94:23:aa:f2:a0:8b:f1:6d:85:50:3c:ea:ee:d2:24: 9a:5c:24:c3:94:68:d4:20:7b:c0:ed:d3:1b:5c:5d: eb:15:37:94:3b:da:f6:d7:cb:a6:4e:c4:da:cc:72: eb:1f:a9:e3:00:f0:9a:a0:c8:ed:18:64:b1:54:2f: 82:0f:f2:cd:e6:d8:8d:d6:f7:4d:66:80:2a:31:be: b9:f1:4f:bb:71:e2:cf:c4:f3:3e:d0:7a:14:83:97: 66:07:48:7c:80:a6:6f:c7:ed:4f:16:64:ba:3c:01: dd:d5:2c:79:56:d1:46:3d:e9:c9:08:2d:c9:dd:cd: 92:02:e3:b4:8c:57:2f:e2:ad:54:e4:7b:bb:c5:24: 3c:6f:d9:31:6d:08:e5:55:d4:32:92:9d:8a:d2:30: 46:48:25:4a:95:d7:9d:0b:ac:a9:64:4e:f0:06:16: d3:cb:a0:65:c4:f5:2f:78:17:c2:82:6e:d7:4d:78: f8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:75:B5:2C:82:41:E1:44:F1:95:3E:78:9B:65:05:92:D2:F2:46 X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:24:e9:ca:23:9b:35:25:e3:1c:a3:05:5b:6a:dd:bf:15:90: a0:05:85:2c:a5:7b:54:2e:03:94:66:95:6a:a2:49:74:1d:89: 1b:b4:22:32:56:ae:fa:57:b7:97:98:4e:e9:43:dc:2b:94:29: 62:85:00:17:02:55:17:05:7a:41:46:31:41:31:1b:7b:1f:7c: d2:82:b0:ae:46:e6:2f:b9:be:53:9e:1e:c6:9a:4e:3e:1c:33: eb:71:1e:f5:ab:f6:05:aa:44:04:2e:c8:72:c8:6e:16:04:53: e1:a2:d5:13:ad:2c:37:a4:9b:5e:ea:5a:7b:e2:4b:2a:63:9a: c2:9c:de:26:e5:ae:7a:92:c2:10:c4:da:0d:f1:cd:be:d2:f0: a1:84:b6:80:9a:6e:8a:ab:bc:c4:e8:cf:0c:ab:ce:ad:9b:25: 7c:d1:f0:0f:82:f8:31:a8:a4:87:b1:ba:55:bc:b1:50:74:57: c1:e7:88:c6:e7:49:b5:7c:25:8b:27:30:d4:35:eb:54:4b:58: 21:7b:af:c0:a5:d4:77:50:60:11:87:ec:91:0f:5a:ec:99:90: 08:4e:02:c6:ca:56:5f:0a:67:6a:c4:90:6e:59:c3:33:f6:f2: cc:d3:0b:13:3c:40:b2:79:0f:60:a6:68:a1:bc:5e:b4:50:34: 52:96:c1:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfx2BGko7VGXZxG+fWlpzvZEHNNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNTEyMTYxNDM2MzRaFw0yNTEyMTkxNzU5MzRaMDMxMTAvBgNV BAMTKEU5RTA3NUI1MkM4MjQxRTE0NEYxOTUzRTc4OUI2NTA1OTJEMkYyNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepyyCVFYgJ+LLTGtZMJE188XV Yl2QKt3SrD2fbmfEfgKxJtNjIK0LZ5OI2afxIEcnd6e9IErJDK0p5s4YimjwCE4O sISi9v9Z95QjqvKgi/FthVA86u7SJJpcJMOUaNQge8Dt0xtcXesVN5Q72vbXy6ZO xNrMcusfqeMA8JqgyO0YZLFUL4IP8s3m2I3W901mgCoxvrnxT7tx4s/E8z7QehSD l2YHSHyApm/H7U8WZLo8Ad3VLHlW0UY96ckILcndzZIC47SMVy/irVTke7vFJDxv 2TFtCOVV1DKSnYrSMEZIJUqV150LrKlkTvAGFtPLoGXE9S94F8KCbtdNePiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eB1tSyCQeFE8ZU+eJtlBZLS8kYwHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALck6cojmzUl4xyjBVtq3b8VkKAFhSyle1Qu A5RmlWqiSXQdiRu0IjJWrvpXt5eYTulD3CuUKWKFABcCVRcFekFGMUExG3sffNKC sK5G5i+5vlOeHsaaTj4cM+txHvWr9gWqRAQuyHLIbhYEU+Gi1ROtLDekm17qWnvi SypjmsKc3iblrnqSwhDE2g3xzb7S8KGEtoCaboqrvMTozwyrzq2bJXzR8A+C+DGo pIexulW8sVB0V8HniMbnSbV8JYsnMNQ161RLWCF7r8Cl1HdQYBGH7JEPWuyZkAhO AsbKVl8KZ2rEkG5ZwzP28szTCxM8QLJ5D2CmaKG8XrRQNFKWwe0= -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:53 2025 by rpki-client