This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: 1WL9sgogKsB1vog4iWYAW6oM7BW1K2cIQFuCgr9dQFA= Subject key identifier: E3:1D:B9:63:A4:7C:15:AB:97:B5:58:9A:4E:C1:73:62:24:AE:AD:E9 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 30F0EE70D4C9945A0537FD13FDBADDEABA0439AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 01C5 Signing time: Wed 24 Dec 2025 17:31:22 +0000 Manifest this update: Wed 24 Dec 2025 17:26:22 +0000 Manifest next update: Sun 28 Dec 2025 04:37:22 +0000 Files and hashes: 1: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: 4LNzIiiVAjfAPDaN3C6qI+UuH36Wsb+t94eV+et+GFs=) 2: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: ivyyVhx1HQviEUlyUq0kPwQcx4s6BErm99k/mJo/3cw=) 3: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: vGWib/ZMzGPAxY4ZeXyIPjhvX8AUDKQVTzcT6lw1mtE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f0:ee:70:d4:c9:94:5a:05:37:fd:13:fd:ba:dd:ea:ba:04:39:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Dec 24 17:26:22 2025 GMT Not After : Dec 28 04:37:22 2025 GMT Subject: CN=E31DB963A47C15AB97B5589A4EC1736224AEADE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:9d:aa:0c:f6:06:45:9d:95:e7:dc:38:e3: 71:a2:41:ea:56:a2:b6:40:3e:27:60:0a:f5:9f:9a: 28:50:da:9e:9d:fd:7c:63:22:df:e4:4e:b9:b0:22: bf:50:a2:8d:d5:f2:86:0d:41:6e:4b:fe:ba:3a:2e: 13:d0:fe:96:aa:1c:34:08:26:59:b4:b4:20:7b:d9: a8:a1:2b:ee:07:c8:ec:8a:58:da:aa:45:74:ca:4b: db:73:c7:14:42:8e:db:32:20:07:7c:64:ed:4b:80: a4:78:01:26:ab:81:1b:2d:35:b4:8c:a1:a7:68:41: cf:c9:73:69:c7:88:4d:2b:07:3d:a9:9e:3f:46:9a: 4c:b9:0c:ca:80:e2:d5:4b:c3:61:0c:33:01:31:dc: 22:43:36:c1:2c:88:a0:ad:07:0f:d5:4d:19:e2:05: 0b:70:75:e5:a3:cd:60:75:71:35:f1:5a:cb:e9:05: 21:74:b2:0f:cb:4b:b7:4c:a3:55:2a:2f:51:5f:92: 76:2b:f0:66:e3:23:8e:ab:2a:c1:f9:99:81:09:40: 49:63:78:1d:76:b8:9d:b1:2d:cc:13:61:62:d3:19: 42:1c:6d:3c:5f:ef:e4:37:1e:a2:88:82:e6:82:22: cd:47:b9:3e:99:9e:77:46:41:9e:fd:f8:37:eb:7a: ee:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1D:B9:63:A4:7C:15:AB:97:B5:58:9A:4E:C1:73:62:24:AE:AD:E9 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e5:7d:41:59:1e:21:8b:c1:35:17:57:72:14:f1:21:91:12: 82:c5:ba:fa:ae:24:bd:03:f4:c7:ca:10:2b:87:7c:f3:b1:a4: dc:1e:a6:04:65:0d:d3:6e:24:ae:42:2b:b3:19:fc:36:56:12: 7e:99:c7:fa:be:a2:39:d5:14:71:34:da:74:ab:13:23:2a:79: db:14:5c:d9:29:e4:20:13:10:fa:52:86:8a:f9:26:05:d0:66: 22:b6:86:df:9c:eb:d4:b0:e4:b6:62:db:c1:79:f2:6f:f0:4e: 8a:4e:8c:a8:37:b6:b8:27:1f:67:5b:f7:79:53:28:7c:67:6c: 4a:e3:00:91:d0:ee:51:41:bf:29:c8:bf:49:7e:33:20:21:fd: af:4b:29:40:52:cc:d9:da:db:b4:b6:ab:00:bc:11:85:67:0a: 06:bb:52:7a:b5:db:74:29:75:ef:d2:09:22:ce:79:4e:c1:60: 29:71:6b:c8:f5:ed:5f:c2:c5:ac:2a:2a:ef:b0:57:62:c2:e4: 49:3e:9c:57:8e:5b:d6:4d:48:72:2a:47:24:26:14:93:33:8b: 03:0b:bf:92:8e:37:ad:28:c0:32:21:fd:fd:b7:d6:3a:31:29: 93:cd:ff:bf:f2:65:e3:f2:46:1c:c8:a0:d8:5c:24:72:ac:0f: 65:f7:4b:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPDucNTJlFoFN/0T/brd6roEOa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNTEyMjQxNzI2MjJaFw0yNTEyMjgwNDM3MjJaMDMxMTAvBgNV BAMTKEUzMURCOTYzQTQ3QzE1QUI5N0I1NTg5QTRFQzE3MzYyMjRBRUFERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8nZ2qDPYGRZ2V59w443GiQepW orZAPidgCvWfmihQ2p6d/XxjIt/kTrmwIr9Qoo3V8oYNQW5L/ro6LhPQ/paqHDQI Jlm0tCB72aihK+4HyOyKWNqqRXTKS9tzxxRCjtsyIAd8ZO1LgKR4ASargRstNbSM oadoQc/Jc2nHiE0rBz2pnj9Gmky5DMqA4tVLw2EMMwEx3CJDNsEsiKCtBw/VTRni BQtwdeWjzWB1cTXxWsvpBSF0sg/LS7dMo1UqL1FfknYr8GbjI46rKsH5mYEJQElj eB12uJ2xLcwTYWLTGUIcbTxf7+Q3HqKIguaCIs1HuT6ZnndGQZ79+Dfreu4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4x25Y6R8FauXtViaTsFzYiSurekwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXlfUFZHiGLwTUXV3IU8SGREoLFuvquJL0D 9MfKECuHfPOxpNwepgRlDdNuJK5CK7MZ/DZWEn6Zx/q+ojnVFHE02nSrEyMqedsU XNkp5CATEPpShor5JgXQZiK2ht+c69Sw5LZi28F58m/wTopOjKg3trgnH2db93lT KHxnbErjAJHQ7lFBvynIv0l+MyAh/a9LKUBSzNna27S2qwC8EYVnCga7Unq123Qp de/SCSLOeU7BYClxa8j17V/CxawqKu+wV2LC5Ek+nFeOW9ZNSHIqRyQmFJMziwML v5KON60owDIh/f231joxKZPN/7/yZePyRhzIoNhcJHKsD2X3S/M= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:42 2025 by rpki-client