This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: 63uutZ5KGGvp43638LcqX90JEQi6/g+Yacjtl24Ry9I= Subject key identifier: 30:D9:3C:9E:64:67:2B:47:26:5C:46:E6:2C:28:DA:4E:C5:AB:B4:A5 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 0E56B86F840D1BEB12BD183C32C9A47B1331FBDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: F3 Signing time: Thu 18 Dec 2025 06:53:03 +0000 Manifest this update: Thu 18 Dec 2025 06:48:03 +0000 Manifest next update: Sun 21 Dec 2025 10:46:03 +0000 Files and hashes: 1: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) 2: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: c+5TItNmffMTFSYw3MbMZlNrDF8LbGIpD7pYN7OEOsk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:56:b8:6f:84:0d:1b:eb:12:bd:18:3c:32:c9:a4:7b:13:31:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Dec 18 06:48:03 2025 GMT Not After : Dec 21 10:46:03 2025 GMT Subject: CN=30D93C9E64672B47265C46E62C28DA4EC5ABB4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:9e:5a:30:fd:fc:cc:bd:04:93:66:fe:25: 4c:19:d5:cd:2e:eb:fc:42:4b:f7:9d:8a:17:61:ae: 31:33:4f:68:83:58:51:4c:ab:5c:89:db:d5:69:47: f9:9c:81:61:af:50:96:6f:28:fe:43:07:a9:ed:d1: d1:24:63:e3:f1:d6:50:07:f9:48:73:f0:fa:22:12: 44:87:c7:8f:d2:96:c0:2d:08:5f:13:4c:ab:c9:be: 28:20:77:7b:42:8d:b8:3b:6f:64:d8:03:fb:1b:73: de:db:5b:3f:f4:e3:a2:12:4b:d6:0f:49:1f:43:82: 22:4e:46:61:fd:13:ad:13:68:27:09:67:b9:0e:7b: 53:2f:e3:56:b5:05:5b:2a:28:73:3f:d4:d3:f4:87: 8a:fe:7c:70:b8:9f:d8:6b:f2:52:03:59:48:49:4a: 33:7f:69:a8:26:21:af:9d:01:05:49:3d:1b:93:97: c7:0c:af:11:6e:b6:e1:f5:f3:4b:29:6a:c2:e7:06: 83:e2:f4:53:cf:a2:f2:a4:6e:33:9d:24:60:ff:3f: be:71:33:44:da:54:4e:08:d2:57:ec:98:d7:cd:8e: 63:91:2e:c3:88:3b:4c:51:90:8e:9e:3d:ab:35:1f: f6:a1:3a:f0:40:a2:6f:ee:5a:0a:a4:3f:7c:4a:e8: 2c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D9:3C:9E:64:67:2B:47:26:5C:46:E6:2C:28:DA:4E:C5:AB:B4:A5 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:87:34:5b:cd:c6:e4:39:6d:4d:c4:35:da:01:49:39:2c:5d: 80:e4:ea:60:56:57:31:d7:3a:47:0d:9b:f2:59:36:34:cc:e7: 9f:ba:84:32:1a:bf:82:4d:ab:53:3f:ce:a4:d9:6d:62:6e:ac: d0:6c:c3:52:23:4c:d4:1f:1d:af:a6:f7:1a:60:f3:53:c1:1f: 6e:79:77:d4:23:4d:43:75:e0:0f:57:83:e8:88:d9:6f:48:09: 02:b4:e8:f0:a7:ef:16:4b:79:97:f0:93:a6:7c:95:da:51:ae: 74:44:5f:8e:63:c4:d2:da:99:ba:ec:99:22:a2:04:72:5e:1c: 20:3d:44:b9:85:a6:6d:9a:e0:7d:13:53:fa:c4:67:32:9f:d9: 4f:4c:29:4e:e4:70:4f:12:42:04:71:55:58:1c:5a:27:47:1d: 8d:92:dc:02:f0:c7:59:5e:d4:8c:b2:6c:90:4a:60:6f:af:03: f7:e3:ad:e4:71:0d:af:26:a6:2a:68:c4:7c:69:e6:33:23:fd: e9:9e:85:00:d4:20:3e:9b:ab:bf:28:aa:a4:4f:a2:75:97:75: e8:52:5a:79:2d:4c:16:f1:15:67:46:81:98:53:72:a5:56:a1: 0c:4a:39:77:bb:36:f4:9d:a8:47:05:41:3b:03:25:1f:72:d5: ba:01:db:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDla4b4QNG+sSvRg8MsmkexMx+9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNTEyMTgwNjQ4MDNaFw0yNTEyMjExMDQ2MDNaMDMxMTAvBgNV BAMTKDMwRDkzQzlFNjQ2NzJCNDcyNjVDNDZFNjJDMjhEQTRFQzVBQkI0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0kJ5aMP38zL0Ek2b+JUwZ1c0u 6/xCS/edihdhrjEzT2iDWFFMq1yJ29VpR/mcgWGvUJZvKP5DB6nt0dEkY+Px1lAH +Uhz8PoiEkSHx4/SlsAtCF8TTKvJviggd3tCjbg7b2TYA/sbc97bWz/046ISS9YP SR9DgiJORmH9E60TaCcJZ7kOe1Mv41a1BVsqKHM/1NP0h4r+fHC4n9hr8lIDWUhJ SjN/aagmIa+dAQVJPRuTl8cMrxFutuH180spasLnBoPi9FPPovKkbjOdJGD/P75x M0TaVE4I0lfsmNfNjmORLsOIO0xRkI6ePas1H/ahOvBAom/uWgqkP3xK6Cw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMNk8nmRnK0cmXEbmLCjaTsWrtKUwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaHNFvNxuQ5bU3ENdoBSTksXYDk6mBWVzHX OkcNm/JZNjTM55+6hDIav4JNq1M/zqTZbWJurNBsw1IjTNQfHa+m9xpg81PBH255 d9QjTUN14A9Xg+iI2W9ICQK06PCn7xZLeZfwk6Z8ldpRrnREX45jxNLambrsmSKi BHJeHCA9RLmFpm2a4H0TU/rEZzKf2U9MKU7kcE8SQgRxVVgcWidHHY2S3ALwx1le 1IyybJBKYG+vA/fjreRxDa8mpipoxHxp5jMj/emehQDUID6bq78oqqRPonWXdehS WnktTBbxFWdGgZhTcqVWoQxKOXe7NvSdqEcFQTsDJR9y1boB2zo= -----END CERTIFICATE-----Generated at Sat Dec 20 10:27:18 2025 by rpki-client