This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft File: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft (raw, json) Hash identifier: YhzP9UJKQzNrxgXGPCk585FzaGTOoHL7Wi0u29ymuY8= Subject key identifier: 48:5D:A5:08:B2:4C:CF:0A:A1:AA:97:09:05:9F:00:54:A2:34:47:E7 Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 Certificate issuer: /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Certificate serial: 284C9199F74EC026626643DCDAA47622E135973A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft Manifest number: 0491 Signing time: Mon 15 Dec 2025 14:42:20 +0000 Manifest this update: Mon 15 Dec 2025 14:37:20 +0000 Manifest next update: Fri 19 Dec 2025 02:27:20 +0000 Files and hashes: 1: 3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (hash: x0J0SWYdQITQpgISzoI/wH0SDCf243P4/o0ZHJotSPU=) 2: 01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl (hash: kzmfdSE0rqU8GAhGLcNfKZLXsFmSV4cdgL9qbwnrQmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4c:91:99:f7:4e:c0:26:62:66:43:dc:da:a4:76:22:e1:35:97:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690 Validity Not Before: Dec 15 14:37:20 2025 GMT Not After : Dec 19 02:27:20 2025 GMT Subject: CN=485DA508B24CCF0AA1AA9709059F0054A23447E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c0:23:3b:22:6b:7b:39:93:e9:12:3c:28:40: aa:ef:d5:d8:7d:f2:94:64:14:93:71:0d:0c:04:9c: 98:1b:6b:b0:59:f2:9f:1a:ce:3e:cc:42:f8:9d:25: cd:27:8f:bd:1d:95:8c:7d:88:97:ca:0b:a3:ea:35: b2:8d:ac:69:9c:2d:87:8e:00:36:cd:ad:b1:1f:8e: 1a:27:9b:fe:1b:e5:74:ad:6a:de:cc:f0:2f:92:68: 9e:50:80:76:72:90:3c:e8:72:49:b0:07:fc:89:d5: 47:09:b4:42:bd:b1:73:b7:19:31:9c:14:7d:92:4d: 47:61:35:87:ad:65:e3:af:72:cf:75:b1:18:aa:95: 2f:d2:47:5d:69:c4:c9:f5:95:16:d9:55:fa:36:ef: 28:9f:12:10:6f:50:c7:26:06:0a:1f:fa:ee:29:9b: 6b:d5:cf:f2:55:cc:92:00:7b:07:20:02:b5:45:ff: 7a:e6:90:c6:c5:db:a3:ff:94:b7:73:fe:61:f8:d3: 45:94:c7:1f:01:f0:1e:76:af:95:1a:55:28:92:84: 5a:a1:3d:d7:df:9b:89:ac:ab:d8:5f:cb:3f:48:8f: 36:a5:9f:68:35:98:30:85:52:51:39:4d:8e:e5:af: 42:63:b4:56:d6:41:7b:a5:de:26:db:85:6e:ba:48: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:A5:08:B2:4C:CF:0A:A1:AA:97:09:05:9F:00:54:A2:34:47:E7 X509v3 Authority Key Identifier: keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:af:f5:30:26:9e:e6:29:f3:9a:31:0a:4f:9c:51:c8:2f:2b: b8:fc:34:2d:32:2c:8b:80:e4:ef:d1:d4:02:96:11:95:56:c6: af:45:2e:6a:f3:ba:8e:b5:5d:a4:0e:88:bf:ed:0a:81:48:64: a2:44:0c:dc:17:e0:dd:5a:ca:2a:12:7c:11:40:f9:56:ef:e0: e6:f9:84:24:8d:de:c6:9e:3f:dc:67:3f:5c:00:b7:20:02:a2: e2:a2:04:96:6e:57:b0:e5:ab:8b:ad:fb:3d:e4:85:a9:35:a5: 48:fd:99:be:52:39:13:ba:fc:dd:fd:07:56:91:24:c4:3f:34: 2a:91:a5:2c:d8:10:da:27:57:4f:9e:f8:0d:82:b0:4c:49:c8: ba:53:6f:66:a1:2f:fc:e4:d9:0a:42:2b:f0:32:4d:4f:39:86: 65:94:fc:7e:22:38:fe:87:1b:72:de:01:48:82:f2:6b:6b:dc: a1:2f:15:5c:2e:14:46:ea:a3:40:cd:5d:56:60:ff:a9:be:78: 28:90:57:1b:1d:ec:ff:19:be:ac:82:87:f7:4d:aa:af:e3:ae: 76:11:17:63:d4:62:7a:3b:3f:32:c8:ec:9c:a3:9b:52:19:2e: d1:7c:6c:44:15:81:1c:ad:87:18:a6:f8:66:cd:3e:79:19:ca: 87:a2:71:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKEyRmfdOwCZiZkPc2qR2IuE1lzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE NkI4QzY5MDAeFw0yNTEyMTUxNDM3MjBaFw0yNTEyMTkwMjI3MjBaMDMxMTAvBgNV BAMTKDQ4NURBNTA4QjI0Q0NGMEFBMUFBOTcwOTA1OUYwMDU0QTIzNDQ3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIwCM7Imt7OZPpEjwoQKrv1dh9 8pRkFJNxDQwEnJgba7BZ8p8azj7MQvidJc0nj70dlYx9iJfKC6PqNbKNrGmcLYeO ADbNrbEfjhonm/4b5XStat7M8C+SaJ5QgHZykDzockmwB/yJ1UcJtEK9sXO3GTGc FH2STUdhNYetZeOvcs91sRiqlS/SR11pxMn1lRbZVfo27yifEhBvUMcmBgof+u4p m2vVz/JVzJIAewcgArVF/3rmkMbF26P/lLdz/mH400WUxx8B8B52r5UaVSiShFqh Pdffm4msq9hfyz9Ijzaln2g1mDCFUlE5TY7lr0JjtFbWQXul3ibbhW66SD6zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSF2lCLJMzwqhqpcJBZ8AVKI0R+cwHwYDVR0j BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4 QzY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGYzMTUxZGItMTMzMC00ZTcwLTlj YzQtOWI4ZmNkNWVkMmQyLzAvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFC NjhENkI4QzY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKv9TAmnuYp85oxCk+cUcgvK7j8NC0yLIuA 5O/R1AKWEZVWxq9FLmrzuo61XaQOiL/tCoFIZKJEDNwX4N1ayioSfBFA+Vbv4Ob5 hCSN3saeP9xnP1wAtyACouKiBJZuV7Dlq4ut+z3khak1pUj9mb5SORO6/N39B1aR JMQ/NCqRpSzYENonV0+e+A2CsExJyLpTb2ahL/zk2QpCK/AyTU85hmWU/H4iOP6H G3LeAUiC8mtr3KEvFVwuFEbqo0DNXVZg/6m+eCiQVxsd7P8ZvqyCh/dNqq/jrnYR F2PUYno7PzLI7Jyjm1IZLtF8bEQVgRythxim+GbNPnkZyoeicas= -----END CERTIFICATE-----Generated at Mon Dec 15 19:49:26 2025 by rpki-client