This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: FUo7wkPhHPqV3jsG+kAYaY0j7ASkh7t9gHkIqXmMZLs= Subject key identifier: 6C:FD:A5:C1:39:FB:54:57:26:2B:49:79:8D:57:2A:90:54:49:A7:C3 Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 1B48697AD073C2A7C9F6845235C4168E4689D324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: FA Signing time: Sun 21 Dec 2025 11:33:10 +0000 Manifest this update: Sun 21 Dec 2025 11:28:10 +0000 Manifest next update: Wed 24 Dec 2025 21:46:10 +0000 Files and hashes: 1: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) 2: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 3: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: 4PiASxjdb6djdMEoZK3jIkGO8kRKJmf+/PqVbngq2nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 15:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:48:69:7a:d0:73:c2:a7:c9:f6:84:52:35:c4:16:8e:46:89:d3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Dec 21 11:28:10 2025 GMT Not After : Dec 24 21:46:10 2025 GMT Subject: CN=6CFDA5C139FB5457262B49798D572A905449A7C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:e2:24:8f:9b:d1:6f:10:6a:40:9c:0e:9f: e8:ec:15:59:4c:20:b7:7c:4f:8c:ea:26:4b:aa:a2: c8:c7:a7:43:1b:85:e8:b1:93:d2:a8:12:01:31:83: 4a:d6:ef:12:c1:26:07:0f:f6:99:a2:6c:b1:b6:80: 5b:fc:e0:eb:84:24:c3:8c:60:98:09:0c:2c:77:77: 81:34:5d:6d:a9:8a:36:e1:dc:2c:dc:a2:80:c3:59: 03:de:ef:47:de:e2:76:0d:5c:e4:f8:00:3c:82:08: db:38:3e:f7:fe:02:45:b6:20:d4:c9:04:26:97:d4: 1c:8c:42:3a:c8:d7:8c:cf:4e:87:47:fa:ec:27:8b: ea:1c:3e:b0:8a:10:0b:ec:e2:33:df:ee:b3:6c:bf: 2d:08:33:79:95:f3:7e:bf:1f:7e:65:86:6f:83:0a: c8:75:4c:06:fd:e0:17:8a:81:cb:0a:f1:bf:24:b8: 2c:66:97:c1:8d:da:7b:ba:7f:b8:c4:c0:52:56:2a: 24:9f:52:1c:c3:c2:1a:2e:ba:45:af:3e:37:9c:a3: d6:0a:8d:25:c5:89:a9:36:85:98:87:0d:ce:fd:a3: 1b:22:37:2e:a5:70:75:54:aa:88:d0:bc:ea:e7:ea: 16:06:b0:37:a3:d7:9b:3f:05:d8:c5:f2:bd:cf:c3: 65:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FD:A5:C1:39:FB:54:57:26:2B:49:79:8D:57:2A:90:54:49:A7:C3 X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:89:30:b1:0e:45:b5:47:3e:d2:20:f9:4d:06:fa:c9:c9:fc: 11:fe:66:31:41:d9:d0:33:ba:fd:b5:ef:7a:4c:af:49:0a:ff: 36:77:b5:4c:5b:1b:c7:84:7d:5e:3d:0a:f4:46:ba:ca:d7:71: 22:1b:0c:3b:8c:33:eb:ef:64:84:45:66:b3:22:0f:d0:39:b9: 93:72:c7:03:f0:0f:3f:3e:e8:0c:fe:65:f0:d3:b1:5c:e0:a7: 70:61:c5:d9:4e:c9:33:9b:2c:5a:7f:69:3f:5e:d1:d6:d3:67: 66:bc:9c:19:45:44:b2:b3:2e:24:f9:37:4f:7e:d1:0e:fa:36: 7a:28:e5:7c:49:4a:a4:93:42:a2:83:93:06:df:6c:56:02:65: ca:e6:e2:f5:b8:c5:35:a1:17:6e:e9:3d:2d:81:ec:1e:1b:06: 34:f6:fa:4e:bb:be:35:9d:e6:ec:22:3f:6d:e1:18:1d:85:ff: cb:02:53:ee:24:0d:bf:7a:4e:c1:60:47:9a:6b:31:2f:18:04: 05:25:3c:12:49:33:85:62:25:0d:42:47:e7:dd:9d:d6:df:34: 21:ec:47:49:01:18:ee:a6:86:62:c0:70:0c:2f:10:e8:b6:95: 51:d9:93:00:3c:8b:34:44:04:48:53:90:c2:8c:a4:0a:49:42: 29:a6:b2:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0hpetBzwqfJ9oRSNcQWjkaJ0yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNTEyMjExMTI4MTBaFw0yNTEyMjQyMTQ2MTBaMDMxMTAvBgNV BAMTKDZDRkRBNUMxMzlGQjU0NTcyNjJCNDk3OThENTcyQTkwNTQ0OUE3QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIt+Ikj5vRbxBqQJwOn+jsFVlM ILd8T4zqJkuqosjHp0Mbheixk9KoEgExg0rW7xLBJgcP9pmibLG2gFv84OuEJMOM YJgJDCx3d4E0XW2pijbh3CzcooDDWQPe70fe4nYNXOT4ADyCCNs4Pvf+AkW2INTJ BCaX1ByMQjrI14zPTodH+uwni+ocPrCKEAvs4jPf7rNsvy0IM3mV836/H35lhm+D Csh1TAb94BeKgcsK8b8kuCxml8GN2nu6f7jEwFJWKiSfUhzDwhouukWvPjeco9YK jSXFiak2hZiHDc79oxsiNy6lcHVUqojQvOrn6hYGsDej15s/BdjF8r3Pw2UjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbP2lwTn7VFcmK0l5jVcqkFRJp8MwHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSJMLEORbVHPtIg+U0G+snJ/BH+ZjFB2dAz uv2173pMr0kK/zZ3tUxbG8eEfV49CvRGusrXcSIbDDuMM+vvZIRFZrMiD9A5uZNy xwPwDz8+6Az+ZfDTsVzgp3BhxdlOyTObLFp/aT9e0dbTZ2a8nBlFRLKzLiT5N09+ 0Q76Nnoo5XxJSqSTQqKDkwbfbFYCZcrm4vW4xTWhF27pPS2B7B4bBjT2+k67vjWd 5uwiP23hGB2F/8sCU+4kDb96TsFgR5prMS8YBAUlPBJJM4ViJQ1CR+fdndbfNCHs R0kBGO6mhmLAcAwvEOi2lVHZkwA8izREBEhTkMKMpApJQimmsu4= -----END CERTIFICATE-----Generated at Mon Dec 22 06:32:28 2025 by rpki-client