This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: ErbLcqIVUPsJxdm2NTwFHy6XrLPVEJkAp7pmcSX9H8Y= Subject key identifier: AA:0A:4C:63:E2:34:8C:A9:31:EC:33:85:99:83:AC:32:0F:59:A6:BA Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 2ED79A5804C353B6CA61468C8507A4469E75FE2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 025B Signing time: Fri 19 Dec 2025 13:30:51 +0000 Manifest this update: Fri 19 Dec 2025 13:25:51 +0000 Manifest next update: Mon 22 Dec 2025 22:57:51 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=) 2: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: kR7f+QbSDQGljWadtB58fQP67/nBgODo/KtERDIkT4I=) 3: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: 6V0Q8MFEE8oGTdmzImHO7rXxtvj37Hkw7ey8e+5CIwU=) 4: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 22:57:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d7:9a:58:04:c3:53:b6:ca:61:46:8c:85:07:a4:46:9e:75:fe:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Dec 19 13:25:51 2025 GMT Not After : Dec 22 22:57:51 2025 GMT Subject: CN=AA0A4C63E2348CA931EC33859983AC320F59A6BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:36:2e:a7:8b:2c:9c:6d:d8:0c:77:5a:b4:21: 35:40:62:32:6b:9c:96:c3:51:ec:26:8b:54:0d:40: f7:32:cd:f6:54:c9:b4:e1:39:b1:54:41:9e:7f:57: 9e:9d:dd:f7:cc:a5:b9:40:c5:12:c6:31:13:aa:d7: 87:b2:99:3a:ca:dc:0e:2e:fe:23:87:0b:b9:57:1e: 8b:fe:2c:bd:96:a1:fc:59:67:4f:80:b9:6a:63:9d: 68:4b:93:b3:11:42:cb:b3:12:ef:60:93:e0:87:cb: aa:62:6d:31:2f:f8:ac:53:f9:80:5c:16:5a:09:21: 47:3d:9a:b8:fd:06:eb:6e:20:20:a7:50:a7:35:ba: 87:63:4f:7e:db:cc:3f:c0:39:fb:29:b3:ef:93:c3: 01:25:d5:04:b4:ff:52:be:57:a9:14:23:cf:83:da: 23:c3:41:a5:5f:fb:89:64:27:5f:9c:f6:0d:5d:bb: e2:d6:57:3d:c4:c3:9a:4b:35:c2:de:0c:69:b8:3b: 24:db:d7:73:5f:af:61:d3:f4:d9:32:c6:e9:e0:89: 13:e9:68:a2:0d:5a:d7:99:83:d6:29:d8:2b:2b:b2: f2:cc:1b:58:a8:4e:18:d4:63:aa:b3:36:0b:8e:95: 13:c1:27:2c:d3:cd:5d:3e:5b:32:9f:72:b7:b8:5b: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:4C:63:E2:34:8C:A9:31:EC:33:85:99:83:AC:32:0F:59:A6:BA X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:ee:8f:a3:a9:6f:31:2c:92:5b:62:24:8e:03:32:92:c0: 58:69:34:a7:6a:14:73:0d:df:4d:29:90:f0:a3:d0:ae:f1:17: 66:63:fb:05:75:84:71:b8:05:6d:37:3a:61:0d:8e:8f:d8:1e: a2:ab:2f:ef:8f:43:a7:8d:10:b9:c4:13:61:46:a4:ed:d5:e6: 28:49:57:4c:05:9e:d2:9a:25:3e:4c:cd:60:f6:b8:df:fc:e5: ff:9d:c3:a5:e0:80:12:49:31:07:b0:4a:01:50:85:50:36:ec: 3d:dc:5a:65:f4:a3:77:03:44:69:04:36:02:dc:a0:c3:2e:0e: ac:47:6c:73:e1:1d:86:55:ea:ac:09:65:69:04:8b:43:3a:45: 9c:98:c1:d3:48:ea:41:b2:6f:24:9e:ba:50:89:69:24:f0:09: 00:6e:1d:72:96:26:33:20:5e:e5:c8:33:89:80:55:f2:39:51: b4:ac:56:ca:2f:bc:5f:e6:0b:db:3a:29:b7:ed:2a:d9:05:c3: 7d:3f:21:09:e4:70:fc:47:88:23:5c:43:8c:54:ba:38:4a:7d: fe:0d:5d:22:b8:97:80:9d:60:85:60:d0:80:e5:8a:c5:00:e3: 96:d9:d0:a3:2b:fa:82:88:5a:cf:f5:e4:23:37:2a:e2:17:30: 94:4c:b2:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULteaWATDU7bKYUaMhQekRp51/i4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNTEyMTkxMzI1NTFaFw0yNTEyMjIyMjU3NTFaMDMxMTAvBgNV BAMTKEFBMEE0QzYzRTIzNDhDQTkzMUVDMzM4NTk5ODNBQzMyMEY1OUE2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmNi6niyycbdgMd1q0ITVAYjJr nJbDUewmi1QNQPcyzfZUybThObFUQZ5/V56d3ffMpblAxRLGMROq14eymTrK3A4u /iOHC7lXHov+LL2WofxZZ0+AuWpjnWhLk7MRQsuzEu9gk+CHy6pibTEv+KxT+YBc FloJIUc9mrj9ButuICCnUKc1uodjT37bzD/AOfsps++TwwEl1QS0/1K+V6kUI8+D 2iPDQaVf+4lkJ1+c9g1du+LWVz3Ew5pLNcLeDGm4OyTb13Nfr2HT9NkyxungiRPp aKINWteZg9Yp2CsrsvLMG1ioThjUY6qzNguOlRPBJyzTzV0+WzKfcre4WyhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqgpMY+I0jKkx7DOFmYOsMg9ZprowHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7y7o+jqW8xLJJbYiSOAzKSwFhpNKdqFHMN 300pkPCj0K7xF2Zj+wV1hHG4BW03OmENjo/YHqKrL++PQ6eNELnEE2FGpO3V5ihJ V0wFntKaJT5MzWD2uN/85f+dw6XggBJJMQewSgFQhVA27D3cWmX0o3cDRGkENgLc oMMuDqxHbHPhHYZV6qwJZWkEi0M6RZyYwdNI6kGybySeulCJaSTwCQBuHXKWJjMg XuXIM4mAVfI5UbSsVsovvF/mC9s6KbftKtkFw30/IQnkcPxHiCNcQ4xUujhKff4N XSK4l4CdYIVg0IDlisUA45bZ0KMr+oKIWs/15CM3KuIXMJRMsgw= -----END CERTIFICATE-----Generated at Sat Dec 20 18:43:40 2025 by rpki-client