This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: XcKminjaMf6/XLTupd/yV3+L+ecv0xNPHiUgz9/2zv4= Subject key identifier: 9B:B8:38:A4:1D:ED:0C:5B:6A:80:99:B0:C2:EB:01:DC:89:0F:EF:70 Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 782CC82D59BAD3243D1085F7B2BECF2CD2342AFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 01ED Signing time: Sat 20 Dec 2025 05:42:27 +0000 Manifest this update: Sat 20 Dec 2025 05:37:27 +0000 Manifest next update: Tue 23 Dec 2025 08:29:27 +0000 Files and hashes: 1: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=) 2: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: gwBlMBrSpLgsa+ACTv/ospejLYlB+0aLA704l83TjHw=) 3: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: vzIxOIrzaVpeXgBZdRF/RsD9JCp8l0gsyuXbaIleyTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 08:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2c:c8:2d:59:ba:d3:24:3d:10:85:f7:b2:be:cf:2c:d2:34:2a:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Dec 20 05:37:27 2025 GMT Not After : Dec 23 08:29:27 2025 GMT Subject: CN=9BB838A41DED0C5B6A8099B0C2EB01DC890FEF70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:40:77:50:41:61:3f:0c:1f:4a:30:fa:95:d6: a6:cc:58:29:22:b5:68:ae:46:f9:6f:6c:44:ea:98: 6c:4c:8c:1d:75:52:39:9e:51:65:6f:4f:11:39:c9: 5b:ed:f1:ca:f6:78:40:63:16:29:16:d8:7d:a5:2a: 5a:f7:ab:12:d1:e9:53:28:7d:a8:65:c1:1b:b6:6a: b8:b7:bb:c1:50:c7:94:5a:55:89:1e:cc:d8:70:80: 6e:c0:24:58:82:08:2b:56:92:2e:ed:32:3d:2d:51: 27:c1:55:47:d8:be:50:2c:5c:87:fe:0e:63:fb:8d: 91:f2:9c:23:f8:88:86:31:56:42:55:66:ca:e0:c4: 6f:75:5a:28:dd:dd:6c:3c:38:8d:3c:61:a0:87:85: 3c:65:5a:05:4f:44:31:c4:b5:62:f5:c4:0e:40:81: 24:90:b1:60:e3:38:99:14:49:60:a1:e8:85:bd:bc: bf:c4:79:15:46:15:e9:7f:8c:41:ef:18:12:b9:41: f5:5f:c5:e2:fc:78:30:02:6f:19:ab:b7:54:7e:ae: 78:4a:9c:60:24:ff:67:7c:67:ae:05:94:51:9e:e3: 15:e1:90:b8:fb:aa:1e:59:a8:cd:10:50:af:24:97: 86:85:86:38:41:f4:78:0a:57:a0:59:00:51:c3:49: 0d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B8:38:A4:1D:ED:0C:5B:6A:80:99:B0:C2:EB:01:DC:89:0F:EF:70 X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:8c:ba:3a:54:5c:3b:b7:24:a7:49:5c:13:56:67:39:0e:bf: b8:61:32:16:cf:29:65:80:87:e4:f9:f9:1a:a1:6d:77:1b:29: 6f:00:4a:ee:73:76:91:56:29:53:46:41:b2:3e:52:40:c4:87: 84:03:0b:74:5a:1b:f9:8c:e2:01:a1:82:fc:86:3b:b9:5e:0e: 4c:52:21:e2:0e:ac:f8:cc:26:8a:0c:a2:86:d3:69:1b:64:eb: 57:d3:37:08:64:f5:1e:66:2c:bb:5e:98:db:fe:9f:2c:e4:31: 61:fe:c7:c8:e0:d2:4e:d4:7f:b5:6c:6e:6e:68:c4:d4:9a:d2: 4f:ba:7c:df:e4:01:30:8a:24:00:04:a3:e6:d8:93:d5:b8:77: 6a:a9:1e:fb:e6:cc:42:19:d8:48:80:1f:b1:47:52:a4:ad:6b: f3:4e:64:86:51:0e:fe:07:11:7a:94:80:0d:59:c5:21:f8:1b: 4c:1b:3c:3f:9c:4f:61:5f:f1:a3:51:3a:27:64:72:d5:b2:5a: 1d:30:f6:32:91:2f:f4:d8:87:b1:17:0c:f8:b1:41:9a:dd:37: f5:f7:1b:62:9c:37:0a:a6:a5:19:41:b0:83:7e:18:6b:fc:8f: 72:6d:ed:03:f7:98:8d:e2:dd:cf:58:87:2b:cd:43:95:a8:e6: 2b:b6:fe:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCzILVm60yQ9EIX3sr7PLNI0KvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNTEyMjAwNTM3MjdaFw0yNTEyMjMwODI5MjdaMDMxMTAvBgNV BAMTKDlCQjgzOEE0MURFRDBDNUI2QTgwOTlCMEMyRUIwMURDODkwRkVGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQHdQQWE/DB9KMPqV1qbMWCki tWiuRvlvbETqmGxMjB11UjmeUWVvTxE5yVvt8cr2eEBjFikW2H2lKlr3qxLR6VMo fahlwRu2ari3u8FQx5RaVYkezNhwgG7AJFiCCCtWki7tMj0tUSfBVUfYvlAsXIf+ DmP7jZHynCP4iIYxVkJVZsrgxG91Wijd3Ww8OI08YaCHhTxlWgVPRDHEtWL1xA5A gSSQsWDjOJkUSWCh6IW9vL/EeRVGFel/jEHvGBK5QfVfxeL8eDACbxmrt1R+rnhK nGAk/2d8Z64FlFGe4xXhkLj7qh5ZqM0QUK8kl4aFhjhB9HgKV6BZAFHDSQ3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7g4pB3tDFtqgJmwwusB3IkP73AwHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiMujpUXDu3JKdJXBNWZzkOv7hhMhbPKWWA h+T5+RqhbXcbKW8ASu5zdpFWKVNGQbI+UkDEh4QDC3RaG/mM4gGhgvyGO7leDkxS IeIOrPjMJooMoobTaRtk61fTNwhk9R5mLLtemNv+nyzkMWH+x8jg0k7Uf7Vsbm5o xNSa0k+6fN/kATCKJAAEo+bYk9W4d2qpHvvmzEIZ2EiAH7FHUqSta/NOZIZRDv4H EXqUgA1ZxSH4G0wbPD+cT2Ff8aNROidkctWyWh0w9jKRL/TYh7EXDPixQZrdN/X3 G2KcNwqmpRlBsIN+GGv8j3Jt7QP3mI3i3c9YhyvNQ5Wo5iu2/os= -----END CERTIFICATE-----Generated at Mon Dec 22 01:42:09 2025 by rpki-client