This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: fUdR8MgvXFd0I5LFqoTY2CQEjJYOpBi53Gq2gY0nLHI= Subject key identifier: 5F:DC:D4:D2:79:AD:D5:67:3E:AF:3D:2C:25:48:00:C3:5B:A7:8D:DD Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 7AB6183BB0C1105581B647AB9E5B1183F8FD7607 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 014D Signing time: Sat 27 Dec 2025 13:30:00 +0000 Manifest this update: Sat 27 Dec 2025 13:25:00 +0000 Manifest next update: Tue 30 Dec 2025 20:19:00 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) 2: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: 3SOLzey3Cs8/QWyLTjoQNj4DVLGMewF+5jpWn7/aNkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 20:19:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b6:18:3b:b0:c1:10:55:81:b6:47:ab:9e:5b:11:83:f8:fd:76:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Dec 27 13:25:00 2025 GMT Not After : Dec 30 20:19:00 2025 GMT Subject: CN=5FDCD4D279ADD5673EAF3D2C254800C35BA78DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:5a:78:9c:27:a5:61:40:84:43:e3:80:73: 20:6c:75:30:20:a2:0d:d5:11:1a:50:14:d5:d4:8b: d5:5c:cb:b6:17:69:33:ad:38:8d:e5:ac:b2:92:5e: c9:5e:44:06:de:8e:5e:d6:cd:83:e5:bc:d9:64:4d: 0a:25:1b:40:6c:1f:3f:8d:9b:39:ba:6d:f9:7e:19: 83:f6:80:29:86:9b:d0:52:d0:41:dc:ae:4b:96:16: d9:d8:69:26:5c:10:21:b5:a5:df:89:20:5f:72:67: f5:a4:ad:67:fb:53:c0:88:37:58:cb:37:ec:a7:60: 6a:cf:c5:f8:95:17:b8:a7:2c:14:62:39:17:a2:82: db:c6:b9:84:67:66:8a:c9:29:c9:f1:f3:9f:fa:aa: 1a:f1:9f:7f:21:d9:f6:d2:78:59:45:df:28:36:27: 5c:97:1e:df:08:8f:34:9b:c2:0a:e0:ac:e2:f4:79: 8f:80:bb:a2:aa:a8:8d:4a:4d:34:c0:27:a0:83:aa: 3b:4b:54:43:e2:2c:45:05:f4:66:06:5c:9d:b8:9c: da:d8:6e:b6:fd:d0:d0:d3:07:00:31:61:69:6a:51: 80:c2:74:09:d1:3a:8e:26:e8:58:b2:ad:23:36:f3: 33:d2:b2:94:33:71:fe:b2:3f:a6:e4:c5:9e:a5:b6: 06:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:D4:D2:79:AD:D5:67:3E:AF:3D:2C:25:48:00:C3:5B:A7:8D:DD X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3b:0f:1f:61:7d:fe:c5:9f:c7:aa:a2:53:af:94:47:d8:f4: 8d:69:fb:e5:b7:c9:25:33:bf:a9:f6:51:b6:c7:76:fa:0a:dc: cd:92:bf:ab:0b:31:66:19:ad:c9:72:0e:87:d9:40:2b:47:fb: fc:e2:a2:ba:e2:bc:ee:94:46:2c:5e:e4:4f:ff:2f:9a:89:be: 95:9a:f0:ae:3c:8c:d1:c5:57:f9:c3:a0:cc:47:07:1e:58:71: dc:e1:66:30:1c:38:21:1e:e9:e0:b1:4e:4c:40:23:e8:af:fe: 34:c7:c8:aa:51:f0:51:ac:87:6a:a7:eb:ea:c0:d1:31:54:c1: 32:09:01:f0:0b:fc:d2:3e:2c:85:a7:db:06:f1:d3:ee:97:35: aa:0d:57:f3:a2:34:3d:8a:e2:c0:75:20:bf:ff:cf:35:ca:cd: 4e:96:b2:b7:27:a5:42:7c:9f:85:04:33:ec:c9:5f:12:cb:f9: 0e:2c:31:68:3c:ec:4c:b3:1d:8d:a3:9b:ce:11:d9:24:48:8e: 46:41:8d:6b:5b:74:cc:1e:00:12:3c:7f:20:a8:a1:13:17:5f: fc:6a:63:aa:6f:47:85:a2:53:db:63:25:b5:c6:53:e8:91:a1: 11:77:68:d7:34:37:d1:bd:f5:e7:59:22:73:dc:ab:26:a8:3c: 10:e8:97:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUerYYO7DBEFWBtkernlsRg/j9dgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNTEyMjcxMzI1MDBaFw0yNTEyMzAyMDE5MDBaMDMxMTAvBgNV BAMTKDVGRENENEQyNzlBREQ1NjczRUFGM0QyQzI1NDgwMEMzNUJBNzhEREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYVp4nCelYUCEQ+OAcyBsdTAg og3VERpQFNXUi9Vcy7YXaTOtOI3lrLKSXsleRAbejl7WzYPlvNlkTQolG0BsHz+N mzm6bfl+GYP2gCmGm9BS0EHcrkuWFtnYaSZcECG1pd+JIF9yZ/WkrWf7U8CIN1jL N+ynYGrPxfiVF7inLBRiOReigtvGuYRnZorJKcnx85/6qhrxn38h2fbSeFlF3yg2 J1yXHt8IjzSbwgrgrOL0eY+Au6KqqI1KTTTAJ6CDqjtLVEPiLEUF9GYGXJ24nNrY brb90NDTBwAxYWlqUYDCdAnROo4m6FiyrSM28zPSspQzcf6yP6bkxZ6ltga/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9zU0nmt1Wc+rz0sJUgAw1unjd0wHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJs7Dx9hff7Fn8eqolOvlEfY9I1p++W3ySUz v6n2UbbHdvoK3M2Sv6sLMWYZrclyDofZQCtH+/ziorrivO6URixe5E//L5qJvpWa 8K48jNHFV/nDoMxHBx5YcdzhZjAcOCEe6eCxTkxAI+iv/jTHyKpR8FGsh2qn6+rA 0TFUwTIJAfAL/NI+LIWn2wbx0+6XNaoNV/OiND2K4sB1IL//zzXKzU6WsrcnpUJ8 n4UEM+zJXxLL+Q4sMWg87EyzHY2jm84R2SRIjkZBjWtbdMweABI8fyCooRMXX/xq Y6pvR4WiU9tjJbXGU+iRoRF3aNc0N9G99edZInPcqyaoPBDolw0= -----END CERTIFICATE-----Generated at Sun Dec 28 23:26:27 2025 by rpki-client