This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: 9GIEScPJ/boW3qJ6YFKdojWcvX0R0zmuhP+MeDHEEyg= Subject key identifier: 8C:EE:26:CF:D4:69:FF:3D:9F:44:A1:CA:07:30:C3:77:55:EE:DD:C3 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 59BF18D4AE7FE2222E78C5941F36FC9D245C94D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 014B Signing time: Tue 23 Dec 2025 05:30:28 +0000 Manifest this update: Tue 23 Dec 2025 05:25:28 +0000 Manifest next update: Fri 26 Dec 2025 12:59:28 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: 509NYcoHAROJQCgXgn31Lclf9TQNrxG/MygV/cfEXEI=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 12:59:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:bf:18:d4:ae:7f:e2:22:2e:78:c5:94:1f:36:fc:9d:24:5c:94:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Dec 23 05:25:28 2025 GMT Not After : Dec 26 12:59:28 2025 GMT Subject: CN=8CEE26CFD469FF3D9F44A1CA0730C37755EEDDC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:5a:8a:97:eb:79:ec:c5:19:1a:5f:23:31: d2:48:05:21:2a:8d:68:5d:2c:26:9a:e1:d0:f8:76: 1d:e1:ab:4f:1c:a7:d8:86:65:96:78:22:e8:59:1b: b5:a1:9c:9d:68:05:fa:1c:75:d4:49:aa:46:17:a0: f0:03:92:7f:cc:81:48:c0:d1:ad:a9:49:ba:14:05: 3c:ba:0f:84:8a:5b:17:36:00:db:0b:b3:55:9c:f8: a3:4a:8f:fc:6e:1f:94:f9:00:59:90:89:6a:fe:90: 72:bc:82:05:87:ec:9d:98:10:93:09:c6:e4:7c:06: c9:65:31:41:44:f6:39:de:37:a7:72:4a:4b:a3:9c: 8f:5f:f8:b5:20:39:e7:76:72:35:2c:65:58:cb:d6: 5b:d4:31:bb:09:65:41:5f:c7:a3:d6:bf:85:aa:14: e8:49:fb:98:d5:db:87:6d:76:af:73:a9:ef:8e:b1: 52:47:3e:a5:e1:db:33:32:3e:e6:57:a0:01:54:bf: 30:f5:8b:75:8b:29:e3:4b:7a:dc:de:5e:70:ae:f5: b3:c2:d4:c4:01:74:41:a0:93:88:c0:9b:b8:8f:90: 30:a7:07:3b:f4:f8:82:5e:69:3a:f4:19:1a:20:de: 16:98:a4:17:e0:91:01:8c:ad:52:c6:1a:64:ee:e0: 56:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EE:26:CF:D4:69:FF:3D:9F:44:A1:CA:07:30:C3:77:55:EE:DD:C3 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f4:39:e7:6d:96:4a:66:10:fd:ea:7e:57:a2:94:af:c6:bc: 2f:f8:02:b3:fb:f4:8d:64:d0:c6:3b:f5:fb:a8:c7:0d:f2:4b: 30:de:b1:46:42:0e:c6:b7:69:a9:17:91:f8:24:d8:9a:0d:73: d3:15:c5:5d:44:d6:70:54:d3:0a:c4:0b:15:a5:ca:ad:e1:a9: 21:3d:8f:9e:5e:c9:64:ae:18:87:3d:dc:bd:52:e9:4d:68:d0: 40:fe:cd:1f:2a:ee:5a:b6:d5:f6:38:3e:5b:11:f3:91:22:11: 2a:7e:97:d7:3c:e3:af:66:9d:2c:5f:f9:2e:f2:50:25:d3:81: e3:1f:91:c9:3e:e2:19:f0:e8:93:c5:37:43:41:0d:e9:c3:96: c2:0e:c0:a3:4c:94:be:49:50:f1:48:c6:1c:2a:d9:cc:bf:b2: 56:7b:4a:73:df:69:01:50:cf:7b:d3:d6:d5:76:ab:c5:b3:c6: 24:d0:bc:5f:97:6b:81:8f:8a:a5:e3:dd:93:70:a0:30:7c:17: 93:ad:16:a1:27:1e:95:b8:cf:3c:ec:e0:d1:3b:5c:d9:4c:4b: f3:7f:ae:64:22:31:68:93:90:b6:24:6b:d6:f8:50:2d:e3:49: 92:41:8f:a9:b2:b7:36:9e:b1:ea:35:83:eb:0e:4a:30:33:19: f1:60:97:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWb8Y1K5/4iIueMWUHzb8nSRclNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTEyMjMwNTI1MjhaFw0yNTEyMjYxMjU5MjhaMDMxMTAvBgNV BAMTKDhDRUUyNkNGRDQ2OUZGM0Q5RjQ0QTFDQTA3MzBDMzc3NTVFRUREQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6i1qKl+t57MUZGl8jMdJIBSEq jWhdLCaa4dD4dh3hq08cp9iGZZZ4IuhZG7WhnJ1oBfocddRJqkYXoPADkn/MgUjA 0a2pSboUBTy6D4SKWxc2ANsLs1Wc+KNKj/xuH5T5AFmQiWr+kHK8ggWH7J2YEJMJ xuR8BsllMUFE9jneN6dySkujnI9f+LUgOed2cjUsZVjL1lvUMbsJZUFfx6PWv4Wq FOhJ+5jV24dtdq9zqe+OsVJHPqXh2zMyPuZXoAFUvzD1i3WLKeNLetzeXnCu9bPC 1MQBdEGgk4jAm7iPkDCnBzv0+IJeaTr0GRog3haYpBfgkQGMrVLGGmTu4Fa9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjO4mz9Rp/z2fRKHKBzDDd1Xu3cMwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACz0OedtlkpmEP3qfleilK/GvC/4ArP79I1k 0MY79fuoxw3ySzDesUZCDsa3aakXkfgk2JoNc9MVxV1E1nBU0wrECxWlyq3hqSE9 j55eyWSuGIc93L1S6U1o0ED+zR8q7lq21fY4PlsR85EiESp+l9c8469mnSxf+S7y UCXTgeMfkck+4hnw6JPFN0NBDenDlsIOwKNMlL5JUPFIxhwq2cy/slZ7SnPfaQFQ z3vT1tV2q8WzxiTQvF+Xa4GPiqXj3ZNwoDB8F5OtFqEnHpW4zzzs4NE7XNlMS/N/ rmQiMWiTkLYka9b4UC3jSZJBj6mytzaeseo1g+sOSjAzGfFgl3Q= -----END CERTIFICATE-----Generated at Wed Dec 24 20:25:14 2025 by rpki-client