This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: HNTHK+ijUI/TdksU6nPCzadR/MpkJEU5DIFOs7h/lt0= Subject key identifier: 82:CF:76:BF:DC:AB:6B:08:B5:EF:C3:30:FF:AA:BB:05:0B:60:A2:F5 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 011E85370127A9CD1625B5C3CF9F2A4011443F80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 0236 Signing time: Sun 28 Dec 2025 02:31:45 +0000 Manifest this update: Sun 28 Dec 2025 02:26:45 +0000 Manifest next update: Wed 31 Dec 2025 04:44:45 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: AYXfpwSS/VcD/Xo07P+SgDxOWSZoEQ4Wu+i9pDga8RE=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: PvdK12E4s9Yge15BDY46tetIa8p6fp0ByVkxSzldIqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 04:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:1e:85:37:01:27:a9:cd:16:25:b5:c3:cf:9f:2a:40:11:44:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Dec 28 02:26:45 2025 GMT Not After : Dec 31 04:44:45 2025 GMT Subject: CN=82CF76BFDCAB6B08B5EFC330FFAABB050B60A2F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:29:c0:dd:e7:bb:94:76:91:93:57:b0:bd:de: 2e:f4:bc:11:bd:61:ff:d5:ce:39:4e:b9:d8:b7:e9: f9:0f:eb:ab:98:66:06:23:6b:b1:b6:e9:e5:d0:32: 8b:35:66:b8:e3:d5:04:31:46:63:cf:83:a7:12:1a: 78:25:29:8b:e3:c9:7a:86:fe:c3:37:ca:42:e1:e2: a9:cd:ee:4b:48:52:16:91:91:96:8d:4c:1f:94:e3: 6b:e9:bd:63:73:84:6a:c0:c7:59:c0:61:07:c4:a2: 65:ae:67:96:97:ce:cc:93:7a:1b:e8:66:6c:73:16: 23:59:23:c5:20:3a:28:39:19:87:03:5d:6a:6d:5d: 44:e9:09:5f:19:90:88:d9:2f:74:db:e3:19:a5:78: 65:23:1a:b1:74:0b:ea:e6:d3:da:a7:33:b8:da:06: 6b:44:2b:28:8f:2b:1a:2e:7e:a4:78:04:d7:24:0f: fb:95:35:2f:5a:fc:e3:68:0b:ec:71:fb:6a:cd:31: ef:80:69:54:2d:37:9c:e3:86:06:98:22:23:f8:ef: 97:27:05:63:d7:33:b9:83:8f:a7:16:68:a2:33:7b: 43:0b:5a:00:05:41:70:de:9e:82:3d:f7:a7:9a:56: d9:84:09:71:95:78:24:fd:25:33:fd:91:6e:ac:51: 10:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:76:BF:DC:AB:6B:08:B5:EF:C3:30:FF:AA:BB:05:0B:60:A2:F5 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:41:a1:83:c3:d6:24:88:f4:75:15:5e:46:79:7e:6c:2d:e6: 35:95:30:0e:bf:2b:51:49:ec:86:ff:27:1b:09:6e:09:85:0b: 1b:fe:e1:ce:79:ae:e7:fc:06:ed:de:04:d7:e5:76:71:0c:63: d4:02:22:8e:d1:5b:2c:23:c1:e0:65:9d:82:ba:3e:1b:dd:0a: 29:96:0a:bb:e8:ac:df:6c:cf:25:31:81:53:96:53:5a:1f:e6: 3a:29:bf:59:fa:ee:25:42:29:08:66:bd:40:ba:29:4a:42:16: 6d:af:b9:c4:fd:6d:63:72:8d:d6:5a:74:1a:9b:47:68:f9:9f: 02:e5:22:68:c3:c4:9b:fb:28:8f:42:cb:30:d1:5a:4f:b8:bc: 83:96:2f:0d:f1:4b:ed:4f:c6:bf:d2:38:7f:ef:3d:55:e4:af: ac:b8:92:e8:75:2a:3a:b2:a9:15:19:ba:d3:a7:7d:4c:8b:57: 2d:4b:70:78:fd:6a:27:74:06:06:a5:4b:95:f3:97:a4:05:93: 8b:11:38:e8:43:f1:2a:9f:4b:5a:95:8c:8a:e0:19:6a:69:9c: 1a:5d:10:6f:b1:8d:bc:fc:e4:70:ae:78:17:c6:79:b4:47:4f: ab:d8:03:6b:cb:26:a0:10:9f:46:66:66:9c:62:92:75:c9:c1: 36:1b:e2:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAR6FNwEnqc0WJbXDz58qQBFEP4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNTEyMjgwMjI2NDVaFw0yNTEyMzEwNDQ0NDVaMDMxMTAvBgNV BAMTKDgyQ0Y3NkJGRENBQjZCMDhCNUVGQzMzMEZGQUFCQjA1MEI2MEEyRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KcDd57uUdpGTV7C93i70vBG9 Yf/VzjlOudi36fkP66uYZgYja7G26eXQMos1Zrjj1QQxRmPPg6cSGnglKYvjyXqG /sM3ykLh4qnN7ktIUhaRkZaNTB+U42vpvWNzhGrAx1nAYQfEomWuZ5aXzsyTehvo ZmxzFiNZI8UgOig5GYcDXWptXUTpCV8ZkIjZL3Tb4xmleGUjGrF0C+rm09qnM7ja BmtEKyiPKxoufqR4BNckD/uVNS9a/ONoC+xx+2rNMe+AaVQtN5zjhgaYIiP475cn BWPXM7mDj6cWaKIze0MLWgAFQXDenoI996eaVtmECXGVeCT9JTP9kW6sURCHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgs92v9yrawi178Mw/6q7BQtgovUwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZBoYPD1iSI9HUVXkZ5fmwt5jWVMA6/K1FJ 7Ib/JxsJbgmFCxv+4c55ruf8Bu3eBNfldnEMY9QCIo7RWywjweBlnYK6PhvdCimW CrvorN9szyUxgVOWU1of5jopv1n67iVCKQhmvUC6KUpCFm2vucT9bWNyjdZadBqb R2j5nwLlImjDxJv7KI9CyzDRWk+4vIOWLw3xS+1Pxr/SOH/vPVXkr6y4kuh1Kjqy qRUZutOnfUyLVy1LcHj9aid0BgalS5Xzl6QFk4sROOhD8SqfS1qVjIrgGWppnBpd EG+xjbz85HCueBfGebRHT6vYA2vLJqAQn0ZmZpxiknXJwTYb4s4= -----END CERTIFICATE-----Generated at Sun Dec 28 23:26:01 2025 by rpki-client