This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: uoGvMADW05+AX8AwP7+k1K8eIkZGAgxzZKuaD68nRZA= Subject key identifier: E0:BF:5C:DD:79:BE:3B:8A:FD:82:04:48:47:50:52:30:53:24:4A:2B Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 5F128FAD5EBFE3F0F2E9B3779DCB36260EC373F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 0225 Signing time: Sun 21 Dec 2025 19:23:45 +0000 Manifest this update: Sun 21 Dec 2025 19:18:45 +0000 Manifest next update: Wed 24 Dec 2025 23:51:45 +0000 Files and hashes: 1: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: fP83AJCpDECw1fqGhnD+CKNcJlOjmdHdQf6q5q/uVtw=) 2: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 07:39:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:12:8f:ad:5e:bf:e3:f0:f2:e9:b3:77:9d:cb:36:26:0e:c3:73:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Dec 21 19:18:45 2025 GMT Not After : Dec 24 23:51:45 2025 GMT Subject: CN=E0BF5CDD79BE3B8AFD8204484750523053244A2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:64:22:b4:39:44:fc:b9:81:5b:de:04:ae: bc:26:cc:7e:fb:6c:75:70:16:c7:eb:8f:d3:60:8f: 17:51:1e:e5:14:43:e6:74:4f:2c:49:cd:05:b7:5f: ae:3b:fb:f7:34:6c:93:02:1c:52:02:77:4c:1c:3a: 6f:db:14:7d:f7:b0:96:3f:db:af:d0:6a:09:58:6f: 5f:61:30:94:34:09:dd:92:78:4e:b9:1b:3b:67:a0: 8c:9c:c0:3c:54:b8:71:75:dd:9d:09:87:e4:ea:70: 85:d9:9c:16:67:88:6d:d4:99:27:1f:f3:33:b5:bf: 48:f6:71:bd:96:97:75:b6:25:cc:6f:b4:57:a2:ee: 76:bb:e4:33:22:5d:fe:7f:f3:2b:64:d5:a2:f4:29: 58:93:d0:0f:66:85:ae:0c:6d:a7:46:2e:d7:34:68: 64:a5:6e:9a:09:0d:5a:14:f5:6a:b8:65:6f:0d:68: 85:99:35:91:ef:47:43:39:e3:33:f2:90:32:c4:0e: 62:fe:72:6a:c7:49:8d:b3:ca:cd:94:e6:cb:fc:cc: c7:ba:d0:26:42:ca:51:5f:9b:37:5c:de:e4:df:95: 16:f9:05:47:51:e2:27:c8:93:d8:3d:73:18:17:10: dc:18:a1:a9:5c:7e:bd:b2:06:29:06:15:4d:54:30: c4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BF:5C:DD:79:BE:3B:8A:FD:82:04:48:47:50:52:30:53:24:4A:2B X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:a5:af:8f:bd:5e:97:52:41:4e:41:72:e6:78:39:86:5a: 22:3e:bf:80:4f:61:98:09:43:7a:5e:2e:21:94:8a:85:b7:c0: 2f:8f:0f:b5:8a:15:59:92:76:af:bd:55:42:00:e8:ce:a6:b5: c5:4d:1c:0d:61:0d:07:36:d1:5a:46:da:01:a9:5e:10:45:9b: f9:88:e1:7b:c5:70:1e:34:54:cb:eb:ef:61:b4:a4:9b:03:4a: 2d:0d:78:f2:16:3b:a0:b2:49:10:f6:3b:48:59:a2:90:7c:65: f3:e1:f1:26:29:51:20:be:be:8a:e1:61:f7:95:b7:8b:df:a5: f0:20:5b:0f:d6:14:ba:3b:1b:24:3b:39:60:8d:7d:e5:ad:99: b6:cb:0f:3a:61:3f:36:a1:90:6e:3e:ce:94:39:72:37:43:99: 37:35:49:5f:3f:ca:39:1e:81:f6:4c:97:a4:cc:c3:6c:be:d5: dd:1a:a8:ee:9a:98:a8:90:f5:ab:61:2a:87:5b:a8:c6:97:b6: 51:f6:59:e5:08:12:b6:4b:f6:a6:a9:3e:ae:b9:14:70:63:9a: 69:18:6a:1c:a8:18:52:d3:e3:3e:c8:81:32:7d:96:3e:49:96: fa:8c:91:b4:ec:7f:df:b3:11:b1:78:8c:c7:80:09:b4:b2:06: 3c:80:1f:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxKPrV6/4/Dy6bN3ncs2Jg7Dc/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNTEyMjExOTE4NDVaFw0yNTEyMjQyMzUxNDVaMDMxMTAvBgNV BAMTKEUwQkY1Q0RENzlCRTNCOEFGRDgyMDQ0ODQ3NTA1MjMwNTMyNDRBMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GGQitDlE/LmBW94ErrwmzH77 bHVwFsfrj9NgjxdRHuUUQ+Z0TyxJzQW3X647+/c0bJMCHFICd0wcOm/bFH33sJY/ 26/QaglYb19hMJQ0Cd2SeE65GztnoIycwDxUuHF13Z0Jh+TqcIXZnBZniG3UmScf 8zO1v0j2cb2Wl3W2JcxvtFei7na75DMiXf5/8ytk1aL0KViT0A9mha4MbadGLtc0 aGSlbpoJDVoU9Wq4ZW8NaIWZNZHvR0M54zPykDLEDmL+cmrHSY2zys2U5sv8zMe6 0CZCylFfmzdc3uTflRb5BUdR4ifIk9g9cxgXENwYoalcfr2yBikGFU1UMMQ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4L9c3Xm+O4r9ggRIR1BSMFMkSiswHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK8pa+PvV6XUkFOQXLmeDmGWiI+v4BPYZgJ Q3peLiGUioW3wC+PD7WKFVmSdq+9VUIA6M6mtcVNHA1hDQc20VpG2gGpXhBFm/mI 4XvFcB40VMvr72G0pJsDSi0NePIWO6CySRD2O0hZopB8ZfPh8SYpUSC+vorhYfeV t4vfpfAgWw/WFLo7GyQ7OWCNfeWtmbbLDzphPzahkG4+zpQ5cjdDmTc1SV8/yjke gfZMl6TMw2y+1d0aqO6amKiQ9athKodbqMaXtlH2WeUIErZL9qapPq65FHBjmmkY ahyoGFLT4z7IgTJ9lj5JlvqMkbTsf9+zEbF4jMeACbSyBjyAH24= -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:10 2025 by rpki-client