This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: pgbKJ5inhHkGjaOQ3C55avyCG0HKM4npkKiMh8L8jEM= Subject key identifier: 49:73:F7:73:8B:C2:F5:24:AC:36:82:A4:4B:F4:1B:DE:65:04:3A:0A Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 7863BD2CDF825266971CA12FEE1EFA55A0677F57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 0106 Signing time: Thu 25 Dec 2025 20:32:27 +0000 Manifest this update: Thu 25 Dec 2025 20:27:27 +0000 Manifest next update: Mon 29 Dec 2025 03:11:27 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 2: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 3: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: nO/KObKQz9b5QOYbYapd6Ww3RTRu13OpoCpa/d6jNTg=) 4: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 03:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:63:bd:2c:df:82:52:66:97:1c:a1:2f:ee:1e:fa:55:a0:67:7f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Dec 25 20:27:27 2025 GMT Not After : Dec 29 03:11:27 2025 GMT Subject: CN=4973F7738BC2F524AC3682A44BF41BDE65043A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:11:68:6a:1b:73:d8:8f:a8:04:b6:c7:da:e9: 69:dd:ef:32:85:ca:c1:39:cb:18:40:67:b4:76:12: 0c:12:65:b6:6c:b7:42:be:f4:75:bc:71:4a:60:18: dc:6f:36:12:0e:a4:ab:0d:7b:7f:ae:41:f3:9e:0e: b2:91:46:4e:4f:45:45:d7:a7:69:0f:2a:7e:6a:42: 16:71:27:67:96:eb:d1:80:63:5e:72:f2:84:d8:56: df:5e:a8:a3:b1:a4:23:db:a8:2b:68:a2:c3:26:2f: a7:bf:9c:b5:a9:9a:de:a5:c0:00:c3:5b:70:51:0e: ab:95:0a:82:7a:0a:65:1e:2a:93:5b:38:a0:69:6f: bb:2c:ed:30:eb:25:ff:40:94:f1:52:7c:d8:23:79: c2:e5:a3:46:02:f6:87:22:06:be:dd:bc:1b:d8:8a: dc:5f:05:b7:74:9f:66:0c:88:5c:d5:50:82:ea:1f: 8e:85:f4:65:e3:6a:da:9d:7d:10:ff:f4:f2:93:db: 54:f0:48:27:54:b8:f6:2d:02:89:81:71:25:3b:3c: 1b:a0:87:75:59:6b:75:6c:85:28:60:65:28:1a:b1: ec:38:a0:96:4e:7d:16:d5:eb:98:87:30:a3:d8:ca: 35:45:bc:17:8e:fc:07:a9:4f:f7:c9:3c:54:87:a4: ed:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:73:F7:73:8B:C2:F5:24:AC:36:82:A4:4B:F4:1B:DE:65:04:3A:0A X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:10:46:b1:de:db:7b:c1:5f:8c:cc:34:48:1b:77:44:84:50: 9c:b7:f9:a8:99:2b:a5:49:cc:dd:f9:ff:ce:ca:d8:a4:7f:60: 72:1c:28:23:49:33:4a:09:9b:67:f1:5a:20:64:b4:0c:55:91: 5c:a0:94:c0:c0:8d:48:40:b8:0c:9f:ad:6b:b1:2f:9b:ec:d4: 1f:d4:66:88:02:3c:5b:82:72:e1:d2:6b:05:d3:62:82:5b:f3: 43:78:0c:86:f9:50:02:d1:ae:45:92:ee:00:d7:3a:d5:d1:db: 74:00:2d:10:a6:81:90:0c:8d:81:e5:f8:c2:4d:e2:01:e8:c8: 2b:1b:0f:48:0e:22:c9:12:be:a3:ba:b7:3e:55:0b:45:cd:16: 00:9a:2a:9a:d1:b0:48:5a:06:11:e1:f8:23:fe:4f:f1:d0:f5: c8:84:ce:3f:bb:a6:e2:fb:d7:2e:6c:81:1f:64:fd:c5:cf:2a: 77:88:03:9f:e7:76:85:58:59:40:ad:dc:f5:f8:88:d4:dc:75: 75:1f:05:77:d0:29:46:6d:0d:97:98:75:34:3d:57:26:87:11: 5d:7e:1e:a0:4c:98:ee:c7:4b:43:c6:d7:3f:c3:9e:d1:2f:75: 47:12:a2:10:bb:0f:8d:68:40:25:f7:95:40:16:47:8c:37:73: cd:37:59:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeGO9LN+CUmaXHKEv7h76VaBnf1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNTEyMjUyMDI3MjdaFw0yNTEyMjkwMzExMjdaMDMxMTAvBgNV BAMTKDQ5NzNGNzczOEJDMkY1MjRBQzM2ODJBNDRCRjQxQkRFNjUwNDNBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvEWhqG3PYj6gEtsfa6Wnd7zKF ysE5yxhAZ7R2EgwSZbZst0K+9HW8cUpgGNxvNhIOpKsNe3+uQfOeDrKRRk5PRUXX p2kPKn5qQhZxJ2eW69GAY15y8oTYVt9eqKOxpCPbqCtoosMmL6e/nLWpmt6lwADD W3BRDquVCoJ6CmUeKpNbOKBpb7ss7TDrJf9AlPFSfNgjecLlo0YC9ociBr7dvBvY itxfBbd0n2YMiFzVUILqH46F9GXjatqdfRD/9PKT21TwSCdUuPYtAomBcSU7PBug h3VZa3VshShgZSgasew4oJZOfRbV65iHMKPYyjVFvBeO/AepT/fJPFSHpO39AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSXP3c4vC9SSsNoKkS/Qb3mUEOgowHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8QRrHe23vBX4zMNEgbd0SEUJy3+aiZK6VJ zN35/87K2KR/YHIcKCNJM0oJm2fxWiBktAxVkVyglMDAjUhAuAyfrWuxL5vs1B/U ZogCPFuCcuHSawXTYoJb80N4DIb5UALRrkWS7gDXOtXR23QALRCmgZAMjYHl+MJN 4gHoyCsbD0gOIskSvqO6tz5VC0XNFgCaKprRsEhaBhHh+CP+T/HQ9ciEzj+7puL7 1y5sgR9k/cXPKneIA5/ndoVYWUCt3PX4iNTcdXUfBXfQKUZtDZeYdTQ9VyaHEV1+ HqBMmO7HS0PG1z/DntEvdUcSohC7D41oQCX3lUAWR4w3c803WWI= -----END CERTIFICATE-----Generated at Fri Dec 26 23:12:50 2025 by rpki-client