This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft File: A3969B26389933D7D21F3A8D757CB9C5687740E4.mft (raw, json) Hash identifier: y31bfgQTQz7JboSjTKN91zRromo5BqVItnFx3UF1gS4= Subject key identifier: A1:20:8A:59:FE:13:AB:61:59:0D:68:48:B3:1B:85:6A:C4:42:12:62 Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 Certificate issuer: /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Certificate serial: 5900731B8F4338F048A4E90EA3FB8A0156669951 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft Manifest number: 0242 Signing time: Wed 17 Dec 2025 15:00:03 +0000 Manifest this update: Wed 17 Dec 2025 14:55:03 +0000 Manifest next update: Sun 21 Dec 2025 01:42:03 +0000 Files and hashes: 1: A3969B26389933D7D21F3A8D757CB9C5687740E4.crl (hash: 3VxGLaeunjIHmW6RA2gombyr2KNnj4ncJM1TiMzmxT0=) 2: 3130332e3138392e39372e302f32342d3234203d3e203435333035.roa (hash: NSGM9TUDBLgn7kcSNJpmMZxpHG9VLSqJuwmSL+bAMEQ=) 3: 3130332e3138392e39362e302f32332d3234203d3e203435333035.roa (hash: wVefZUkFDr2RBqD4UPWhwrEjzDTX8ZVDe5YAYTdiEdo=) 4: 3130332e3138392e39362e302f32342d3234203d3e203435333035.roa (hash: 4MEAYppP3Kf6rajqc79fnAA8c3MS4YwlbMABho8ytVM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:42:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:00:73:1b:8f:43:38:f0:48:a4:e9:0e:a3:fb:8a:01:56:66:99:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4 Validity Not Before: Dec 17 14:55:03 2025 GMT Not After : Dec 21 01:42:03 2025 GMT Subject: CN=A1208A59FE13AB61590D6848B31B856AC4421262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:14:c6:3d:ea:34:26:06:5b:71:46:ee:c8:2b: f8:fd:0a:fa:8c:8a:e9:d0:23:0d:a4:7d:a5:99:62: 8c:6a:1b:09:62:86:6b:aa:5a:10:e3:15:21:8b:a2: fe:d2:54:f6:a0:14:af:56:54:18:a2:88:2f:c5:83: 8e:93:41:0b:3b:52:2d:18:b6:8d:11:2d:62:a6:a3: 5e:55:4c:c3:53:c4:55:31:8f:3a:84:3b:4e:1c:20: cd:4c:31:e4:5e:05:d3:19:94:e7:fb:2d:71:00:17: c6:72:94:ba:15:26:de:79:76:6a:d7:f2:10:1f:99: a7:73:31:54:9f:ad:63:58:8b:47:d1:47:90:a9:71: 14:29:cb:5e:b5:3d:9c:a7:a5:be:d4:54:0d:db:dd: df:63:f3:6c:af:3b:c1:57:0a:4c:92:f4:10:c0:6c: 61:f6:b4:34:04:4e:39:26:c6:c7:34:f6:07:40:bd: 59:af:b3:e7:6e:20:f9:c9:1f:e1:33:95:f7:26:c0: c9:e6:f2:a9:78:41:93:0b:65:2f:4a:3d:f8:75:84: 64:7a:d7:7f:19:21:3c:e8:f8:a9:4f:fc:c4:17:c8: 43:82:99:a8:2b:fc:58:34:34:1c:8b:a9:f0:3a:9a: 57:cb:42:fc:ab:bb:2d:36:da:16:5f:4c:77:61:c7: de:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:20:8A:59:FE:13:AB:61:59:0D:68:48:B3:1B:85:6A:C4:42:12:62 X509v3 Authority Key Identifier: keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:cc:77:10:ba:9d:97:f0:c6:25:1c:58:76:2c:b5:b0:04:a3: 76:1b:1a:0e:c5:14:f0:48:55:33:51:4b:32:1f:e1:0c:51:6c: 9c:eb:70:9e:e4:25:e3:31:c0:25:4b:ba:8c:3b:b3:c9:3b:ff: 40:30:62:6f:22:27:99:f9:a2:c5:34:39:2f:46:c8:e0:17:a7: 8b:3b:57:29:13:b0:99:e7:1e:e9:71:80:b2:de:e6:24:cd:29: 4d:39:53:c2:b8:04:b1:fc:bf:d5:42:d8:ba:d6:f2:5c:56:ba: 2d:ba:fa:d6:ff:0d:c4:19:19:51:0f:e6:20:cf:ba:d6:34:29: b3:3b:bf:48:92:af:1a:a7:b5:10:34:6e:29:1b:60:3e:a4:b1: 92:f7:fd:0a:e2:c6:2c:bc:03:17:54:be:28:09:8e:55:9b:cb: 56:39:ca:20:94:cd:c3:a8:99:2e:19:23:1a:07:e8:8a:d9:f6: d6:c3:08:2a:60:7b:e9:fd:24:98:0c:e3:20:f2:18:ed:83:a0: f0:58:8c:b7:9d:c5:e4:50:e6:f1:45:19:ad:04:70:99:37:67: ae:b5:77:58:2f:d7:35:a1:0b:09:41:a3:ae:44:19:8c:a0:c3: 4c:1c:c7:80:d1:38:24:af:93:3f:1c:88:7e:1a:0e:dc:3d:ab: 27:1f:7b:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQBzG49DOPBIpOkOo/uKAVZmmVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2 ODc3NDBFNDAeFw0yNTEyMTcxNDU1MDNaFw0yNTEyMjEwMTQyMDNaMDMxMTAvBgNV BAMTKEExMjA4QTU5RkUxM0FCNjE1OTBENjg0OEIzMUI4NTZBQzQ0MjEyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFMY96jQmBltxRu7IK/j9CvqM iunQIw2kfaWZYoxqGwlihmuqWhDjFSGLov7SVPagFK9WVBiiiC/Fg46TQQs7Ui0Y to0RLWKmo15VTMNTxFUxjzqEO04cIM1MMeReBdMZlOf7LXEAF8ZylLoVJt55dmrX 8hAfmadzMVSfrWNYi0fRR5CpcRQpy161PZynpb7UVA3b3d9j82yvO8FXCkyS9BDA bGH2tDQETjkmxsc09gdAvVmvs+duIPnJH+EzlfcmwMnm8ql4QZMLZS9KPfh1hGR6 138ZITzo+KlP/MQXyEOCmagr/Fg0NByLqfA6mlfLQvyruy022hZfTHdhx94NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoSCKWf4Tq2FZDWhIsxuFasRCEmIwHwYDVR0j BBgwFoAUo5abJjiZM9fSHzqNdXy5xWh3QOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDMzMzZmOC1lNTQ2LTQ2MmMtODQxMC1iNzczMmI2YzgwMTUvMC9BMzk2OUIyNjM4 OTkzM0Q3RDIxRjNBOEQ3NTdDQjlDNTY4Nzc0MEU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5QzU2ODc3 NDBFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzMzM2ZjgtZTU0Ni00NjJjLTg0 MTAtYjc3MzJiNmM4MDE1LzAvQTM5NjlCMjYzODk5MzNEN0QyMUYzQThENzU3Q0I5 QzU2ODc3NDBFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/MdxC6nZfwxiUcWHYstbAEo3YbGg7FFPBI VTNRSzIf4QxRbJzrcJ7kJeMxwCVLuow7s8k7/0AwYm8iJ5n5osU0OS9GyOAXp4s7 VykTsJnnHulxgLLe5iTNKU05U8K4BLH8v9VC2LrW8lxWui26+tb/DcQZGVEP5iDP utY0KbM7v0iSrxqntRA0bikbYD6ksZL3/Qrixiy8AxdUvigJjlWby1Y5yiCUzcOo mS4ZIxoH6IrZ9tbDCCpge+n9JJgM4yDyGO2DoPBYjLedxeRQ5vFFGa0EcJk3Z661 d1gv1zWhCwlBo65EGYygw0wcx4DROCSvkz8ciH4aDtw9qycfe9g= -----END CERTIFICATE-----Generated at Fri Dec 19 11:23:47 2025 by rpki-client