This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json) Hash identifier: 7fSacYFwWplQeKWk1NA0Z0vAHf54qbIbu6x/RDuCu5k= Subject key identifier: 30:EB:D8:2F:17:B8:8D:35:51:32:F9:9B:60:61:CE:F1:41:AC:F7:0D Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Certificate serial: 13E4598BC0F5B929153378BDD25A2F8BC892606A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft Manifest number: 0141 Signing time: Thu 18 Dec 2025 12:41:28 +0000 Manifest this update: Thu 18 Dec 2025 12:36:28 +0000 Manifest next update: Sun 21 Dec 2025 12:50:28 +0000 Files and hashes: 1: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: DfqIL490+LsA+4agQ2y8Kna/SVON2TJhoIAx11noI9Y=) 2: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: NlTMPPc8pzQ+7OKNLYLj3i82GNlusMpUTgg+M3RIIyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 12:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e4:59:8b:c0:f5:b9:29:15:33:78:bd:d2:5a:2f:8b:c8:92:60:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Validity Not Before: Dec 18 12:36:28 2025 GMT Not After : Dec 21 12:50:28 2025 GMT Subject: CN=30EBD82F17B88D355132F99B6061CEF141ACF70D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:be:c4:fc:56:5f:2f:68:1b:df:55:79:36:87: ae:9f:e7:89:04:47:b1:32:28:7d:d9:6e:5c:fb:24: 44:5d:bd:b6:c3:ed:7e:6c:53:9b:d6:d6:6f:89:c3: a3:8e:c3:f9:85:41:ed:bd:be:3f:e2:44:09:3c:18: 60:76:e4:30:e5:77:09:e6:42:c2:74:2f:3b:a8:fa: b0:3b:8d:d0:f8:2c:67:8c:f4:37:9c:a2:91:25:e1: df:9e:53:00:66:d8:6d:15:ea:91:4d:6f:2e:44:7d: 52:41:50:74:b3:a9:bc:0a:66:71:85:c0:84:74:c5: 6d:21:c9:1b:e4:71:6f:91:ac:d5:b1:c9:5a:e4:6c: 94:4f:79:0b:52:03:4d:0a:d4:a5:f4:49:7d:80:7a: d1:ff:3d:b4:b5:b9:f5:7d:8a:0b:2d:22:4f:04:e1: ba:05:7d:8f:2e:41:e7:7b:cf:6a:8d:2d:89:13:b6: 5e:b4:6d:22:d9:00:b7:b2:78:7c:40:56:23:44:63: 98:fb:56:c4:d7:66:40:67:d9:95:10:42:13:68:79: fe:c2:ed:66:e4:07:1f:e3:94:f9:e8:58:6b:0b:cc: 2f:71:16:68:c3:96:20:26:11:97:80:c3:0f:27:72: 99:33:6c:c9:88:73:18:a1:75:b7:64:ea:90:e7:93: b8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EB:D8:2F:17:B8:8D:35:51:32:F9:9B:60:61:CE:F1:41:AC:F7:0D X509v3 Authority Key Identifier: keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:e0:72:82:e6:13:52:6d:79:dd:89:11:16:70:26:fa:bb:60: de:60:e3:2f:98:37:72:98:74:c2:b7:63:84:95:8c:02:76:07: db:cf:30:60:17:f0:04:ef:41:d7:c2:fa:e7:c1:70:9a:20:49: 93:37:9c:d6:1e:73:70:92:4c:e5:28:f0:3b:70:0a:20:49:66: 7e:1c:58:04:22:44:39:e0:b4:40:2f:5a:18:5e:29:67:3d:d0: 0a:14:73:df:10:7a:44:98:b0:7e:b6:54:3f:27:80:e7:75:b8: 96:f3:a9:be:ba:88:8a:22:e1:c7:18:24:f7:01:15:35:9f:2e: 78:97:a1:ba:0f:85:91:84:2b:15:26:25:c0:e7:e9:fe:38:fe: cf:f9:3d:55:ce:01:6d:1d:3f:86:f2:ce:9d:7b:68:2c:f2:91: 77:1c:ae:4b:ca:f5:33:9e:de:5c:5f:a2:e6:87:b0:df:c7:28: df:fa:4a:58:f0:71:2a:49:e2:69:06:34:f4:6e:6f:45:30:f9: b8:1f:b9:4b:77:3d:97:01:ef:7f:03:f6:84:5b:a8:94:25:1a: 7a:b7:9c:01:d3:57:43:e9:17:f0:f1:29:ff:e2:bc:28:b0:05: 19:35:f3:fa:d5:51:13:15:bc:a4:5a:e4:8a:eb:85:e4:6f:58: 37:5c:0a:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+RZi8D1uSkVM3i90lovi8iSYGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE OTg5NTU5NjAeFw0yNTEyMTgxMjM2MjhaFw0yNTEyMjExMjUwMjhaMDMxMTAvBgNV BAMTKDMwRUJEODJGMTdCODhEMzU1MTMyRjk5QjYwNjFDRUYxNDFBQ0Y3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOvsT8Vl8vaBvfVXk2h66f54kE R7EyKH3Zblz7JERdvbbD7X5sU5vW1m+Jw6OOw/mFQe29vj/iRAk8GGB25DDldwnm QsJ0Lzuo+rA7jdD4LGeM9DecopEl4d+eUwBm2G0V6pFNby5EfVJBUHSzqbwKZnGF wIR0xW0hyRvkcW+RrNWxyVrkbJRPeQtSA00K1KX0SX2AetH/PbS1ufV9igstIk8E 4boFfY8uQed7z2qNLYkTtl60bSLZALeyeHxAViNEY5j7VsTXZkBn2ZUQQhNoef7C 7WbkBx/jlPnoWGsLzC9xFmjDliAmEZeAww8ncpkzbMmIcxihdbdk6pDnk7h1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOvYLxe4jTVRMvmbYGHO8UGs9w0wHwYDVR0j BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5 NTU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEw RUJEOTg5NTU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvgcoLmE1Jted2JERZwJvq7YN5g4y+YN3KY dMK3Y4SVjAJ2B9vPMGAX8ATvQdfC+ufBcJogSZM3nNYec3CSTOUo8DtwCiBJZn4c WAQiRDngtEAvWhheKWc90AoUc98QekSYsH62VD8ngOd1uJbzqb66iIoi4ccYJPcB FTWfLniXoboPhZGEKxUmJcDn6f44/s/5PVXOAW0dP4byzp17aCzykXccrkvK9TOe 3lxfouaHsN/HKN/6SljwcSpJ4mkGNPRub0Uw+bgfuUt3PZcB738D9oRbqJQlGnq3 nAHTV0PpF/DxKf/ivCiwBRk18/rVURMVvKRa5IrrheRvWDdcCm0= -----END CERTIFICATE-----Generated at Fri Dec 19 11:18:43 2025 by rpki-client