This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft File: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft (raw, json) Hash identifier: ST8QngyvZioq8gFgKADurgWWwcr73cbPRXvtkhTp0Ko= Subject key identifier: 45:B1:7B:6E:C0:BA:CB:9E:A4:BF:C1:E4:F6:70:89:D6:FD:28:18:A9 Authority key identifier: A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A Certificate issuer: /CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Certificate serial: 540262F770509A25D861739EF04F1711F788D69C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft Manifest number: 01B8 Signing time: Wed 17 Dec 2025 13:01:06 +0000 Manifest this update: Wed 17 Dec 2025 12:56:06 +0000 Manifest next update: Sat 20 Dec 2025 20:01:06 +0000 Files and hashes: 1: 3130332e32322e3230342e302f32322d3234203d3e20313334363430.roa (hash: g1Ka7yfyJPbCamNmlkRkAf0k4fb7xbeQ8IZXUzIAW64=) 2: A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl (hash: lwDfRn0Qw7hFJH1emSWgczpODsBTSJnNBBQYupQl5aY=) 3: 323030313a6466303a6130303a3a2f34382d3438203d3e20313334363430.roa (hash: BDD90sSQsBf6TcZNY5H5fSy8FBCNfWqRzrbG2rv5UwQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:02:62:f7:70:50:9a:25:d8:61:73:9e:f0:4f:17:11:f7:88:d6:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A075EFE65C596438427C6A22E60EB0A01ADEDA8A Validity Not Before: Dec 17 12:56:06 2025 GMT Not After : Dec 20 20:01:06 2025 GMT Subject: CN=45B17B6EC0BACB9EA4BFC1E4F67089D6FD2818A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3e:90:82:d3:54:0b:28:46:ec:27:a4:7f:2d: a8:ac:fd:e3:02:92:56:c0:51:df:5a:5c:c4:95:14: be:6b:06:64:aa:b1:97:3f:60:e6:40:b6:c5:37:2f: 12:d9:54:e5:8e:64:b4:bd:04:60:a4:68:df:a1:58: b2:f0:9a:a1:68:a7:90:52:45:c5:0d:33:e0:92:54: d4:3f:26:de:1d:4d:78:1b:eb:04:f2:b4:68:68:fe: a4:1d:7b:58:62:9e:88:8e:7e:cd:48:cc:c8:b6:03: 61:31:2e:6c:0e:e7:d0:98:27:11:c0:37:79:b8:94: c6:6b:86:6f:57:c1:9d:e0:c4:a4:eb:c2:85:77:05: df:d8:e3:75:9d:25:4d:8d:9f:0b:2c:f7:4f:49:4e: 80:b8:9f:94:b0:f7:d1:38:de:77:82:f7:cb:9e:ba: a8:33:60:6f:9a:c2:5d:6c:21:db:7d:0c:1c:13:62: 82:18:84:fa:c7:11:e9:3a:1d:30:29:a3:67:bb:29: 3f:83:b7:e5:ae:e3:ab:dc:64:20:a9:d5:8c:82:35: 30:fc:09:3a:38:b3:6d:be:c6:aa:6b:99:9e:a5:15: 30:88:3b:e5:08:e9:f7:a6:2a:fb:84:fc:d5:1f:06: e6:4d:8b:05:fc:c7:ab:1b:4b:d2:5a:ec:18:9f:73: b0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B1:7B:6E:C0:BA:CB:9E:A4:BF:C1:E4:F6:70:89:D6:FD:28:18:A9 X509v3 Authority Key Identifier: keyid:A0:75:EF:E6:5C:59:64:38:42:7C:6A:22:E6:0E:B0:A0:1A:DE:DA:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/904d0397-ffa0-4903-805f-084527bc430c/0/A075EFE65C596438427C6A22E60EB0A01ADEDA8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f8:4a:af:e9:ce:ba:4d:d1:b4:c7:d1:eb:9e:ab:65:3a:52: 69:6e:42:fb:a3:ee:e0:d2:c2:65:e9:68:89:72:86:11:ef:d6: 7f:58:3b:12:d7:f2:c6:c7:66:51:8a:aa:cd:51:c7:a6:6d:e1: a3:85:94:8c:34:34:c2:8d:a1:8c:a2:4d:c1:bc:1b:ad:2e:5a: ed:5d:3e:99:ab:97:4e:d7:0a:74:77:4b:54:98:da:58:dd:4b: c4:89:80:81:34:6c:92:c0:d5:b5:b2:40:c4:a9:2a:cd:85:9f: 51:29:2a:a8:18:77:a8:9a:ce:d8:cc:0e:85:67:70:d4:2a:02: 9e:ba:4e:f2:17:5c:44:3d:6a:a0:b8:39:13:14:7b:b4:d1:b0: 8e:5b:ee:56:a9:1c:3e:5b:c9:f9:47:2e:7c:09:64:85:20:ee: 20:c0:59:13:0a:83:cc:6d:5e:72:ff:53:a8:f3:26:66:36:bc: 37:cd:d9:11:de:13:4c:2d:57:da:d4:06:50:c7:da:b8:28:8f: 58:5a:3f:a1:5b:ec:32:b4:ff:b6:75:ca:00:95:be:e2:11:5d: 42:ea:99:33:30:fd:a5:67:27:81:a3:e2:c3:59:b0:12:3c:89: ec:74:ce:c5:e4:a1:3b:86:37:fe:3a:de:bc:2f:75:9e:5b:db: 4f:39:73:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVAJi93BQmiXYYXOe8E8XEfeI1pwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAx QURFREE4QTAeFw0yNTEyMTcxMjU2MDZaFw0yNTEyMjAyMDAxMDZaMDMxMTAvBgNV BAMTKDQ1QjE3QjZFQzBCQUNCOUVBNEJGQzFFNEY2NzA4OUQ2RkQyODE4QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYPpCC01QLKEbsJ6R/Lais/eMC klbAUd9aXMSVFL5rBmSqsZc/YOZAtsU3LxLZVOWOZLS9BGCkaN+hWLLwmqFop5BS RcUNM+CSVNQ/Jt4dTXgb6wTytGho/qQde1hinoiOfs1IzMi2A2ExLmwO59CYJxHA N3m4lMZrhm9XwZ3gxKTrwoV3Bd/Y43WdJU2Nnwss909JToC4n5Sw99E43neC98ue uqgzYG+awl1sIdt9DBwTYoIYhPrHEek6HTApo2e7KT+Dt+Wu46vcZCCp1YyCNTD8 CTo4s22+xqprmZ6lFTCIO+UI6femKvuE/NUfBuZNiwX8x6sbS9Ja7Bifc7AbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbF7bsC6y56kv8Hk9nCJ1v0oGKkwHwYDVR0j BBgwFoAUoHXv5lxZZDhCfGoi5g6woBre2oowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDRkMDM5Ny1mZmEwLTQ5MDMtODA1Zi0wODQ1MjdiYzQzMGMvMC9BMDc1RUZFNjVD NTk2NDM4NDI3QzZBMjJFNjBFQjBBMDFBREVEQThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIwQTAxQURF REE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA0ZDAzOTctZmZhMC00OTAzLTgw NWYtMDg0NTI3YmM0MzBjLzAvQTA3NUVGRTY1QzU5NjQzODQyN0M2QTIyRTYwRUIw QTAxQURFREE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHb4Sq/pzrpN0bTH0eueq2U6UmluQvuj7uDS wmXpaIlyhhHv1n9YOxLX8sbHZlGKqs1Rx6Zt4aOFlIw0NMKNoYyiTcG8G60uWu1d Ppmrl07XCnR3S1SY2ljdS8SJgIE0bJLA1bWyQMSpKs2Fn1EpKqgYd6iaztjMDoVn cNQqAp66TvIXXEQ9aqC4ORMUe7TRsI5b7lapHD5byflHLnwJZIUg7iDAWRMKg8xt XnL/U6jzJmY2vDfN2RHeE0wtV9rUBlDH2rgoj1haP6Fb7DK0/7Z1ygCVvuIRXULq mTMw/aVnJ4Gj4sNZsBI8iex0zsXkoTuGN/463rwvdZ5b2085czQ= -----END CERTIFICATE-----Generated at Fri Dec 19 16:57:29 2025 by rpki-client