This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: bCWtp5GgNNATIPORKxEBO0F3KuMfbYNot0m8FmZbsnU= Subject key identifier: 73:A6:1B:D7:7A:06:FF:41:56:76:02:73:6F:51:AC:C0:8A:14:5F:DA Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 766DABC62AA75FCA8E538E51B8B6A7D060F3947F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0152 Signing time: Wed 17 Dec 2025 11:41:30 +0000 Manifest this update: Wed 17 Dec 2025 11:36:30 +0000 Manifest next update: Sat 20 Dec 2025 12:24:30 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 2: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 3: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 4: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: 4u/KDsM+5kUSQj5K6hlt7mT2/WDRMJRfZZWZNariMr4=) 5: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 12:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6d:ab:c6:2a:a7:5f:ca:8e:53:8e:51:b8:b6:a7:d0:60:f3:94:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Dec 17 11:36:30 2025 GMT Not After : Dec 20 12:24:30 2025 GMT Subject: CN=73A61BD77A06FF41567602736F51ACC08A145FDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:24:48:d6:0e:95:5f:c3:e3:af:d9:9f:a7:16: ea:ff:65:fc:89:10:b5:2f:11:22:e6:18:e3:48:5f: 26:b1:19:a6:a7:83:ac:5f:df:ed:5f:36:d3:fe:ba: 10:e0:b1:3e:1e:90:f2:f3:96:3f:18:d2:c1:a7:64: da:89:36:34:a0:0f:af:73:86:14:7c:0a:e6:f4:db: 2a:88:55:9c:01:36:d9:58:84:b7:87:78:1a:0d:81: 7c:91:26:f8:d9:d8:a8:7c:e8:56:f8:d0:c9:55:94: ba:ce:82:93:07:e0:95:3d:9c:51:05:7a:2d:f7:41: fc:ae:f6:77:9f:50:ce:07:3b:99:59:24:cf:03:2a: b0:25:fd:9c:d7:be:9a:05:d1:ba:7c:34:ae:a1:48: f4:4d:52:b0:3f:ae:e3:d9:65:fb:95:ed:f3:4b:75: 17:17:ba:75:6c:35:f4:ea:b0:ca:03:9f:44:3b:38: c7:5f:1e:2b:f4:c6:18:fa:61:5d:a1:23:3b:bc:4d: fb:cc:f1:70:df:bd:95:f1:6c:09:a7:10:5e:95:c6: dc:31:eb:b9:ca:12:49:1b:0a:f9:66:5f:d5:b0:c5: 7a:61:25:9c:aa:3e:bb:79:39:3c:15:78:25:18:79: 18:46:c1:f2:c0:f2:3d:f4:7e:da:2b:70:02:ae:c2: b9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A6:1B:D7:7A:06:FF:41:56:76:02:73:6F:51:AC:C0:8A:14:5F:DA X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1c:50:81:f1:33:06:5a:98:79:05:75:b2:8d:64:d7:34:df: 1c:84:0e:23:ae:5c:6e:dc:20:17:ac:20:65:50:ae:b0:b0:a0: 15:b2:db:e2:6d:ea:44:2e:7c:41:10:04:0d:4e:01:5f:a2:e2: 32:13:ce:7f:38:5d:69:5b:17:0c:ce:d0:a4:d0:f6:be:d8:7b: 02:3b:e1:40:3f:84:43:b1:bc:4e:04:2f:63:e5:59:1a:41:ca: d8:e8:21:d4:70:3c:09:d0:e5:ed:b9:67:52:e2:2f:7a:de:bb: 11:75:f7:d9:5c:31:cb:52:e0:bc:24:96:16:00:13:92:6d:ed: 1d:f7:3d:88:c8:5b:dd:8c:a9:24:49:63:5d:c5:3d:67:e9:6c: ce:ea:be:0f:30:53:3f:e0:ca:48:4e:ab:74:11:2c:51:28:bb: 55:38:06:a4:16:ad:6e:22:42:90:33:6a:47:25:90:e0:c2:d4: 67:dd:56:c0:0b:c7:34:d9:0b:8a:61:23:7b:46:61:09:45:81: a6:38:98:00:f0:a4:ed:9a:8b:3f:a1:ba:29:74:35:02:eb:2f: 2a:ba:99:63:af:e3:87:40:39:68:07:7f:cc:79:f8:c0:cf:56: 75:98:78:4c:97:0a:f8:b9:5e:8d:d2:77:d4:34:1c:9e:eb:17: d0:fd:25:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm2rxiqnX8qOU45RuLan0GDzlH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTEyMTcxMTM2MzBaFw0yNTEyMjAxMjI0MzBaMDMxMTAvBgNV BAMTKDczQTYxQkQ3N0EwNkZGNDE1Njc2MDI3MzZGNTFBQ0MwOEExNDVGREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbJEjWDpVfw+Ov2Z+nFur/ZfyJ ELUvESLmGONIXyaxGaang6xf3+1fNtP+uhDgsT4ekPLzlj8Y0sGnZNqJNjSgD69z hhR8Cub02yqIVZwBNtlYhLeHeBoNgXyRJvjZ2Kh86Fb40MlVlLrOgpMH4JU9nFEF ei33Qfyu9nefUM4HO5lZJM8DKrAl/ZzXvpoF0bp8NK6hSPRNUrA/ruPZZfuV7fNL dRcXunVsNfTqsMoDn0Q7OMdfHiv0xhj6YV2hIzu8TfvM8XDfvZXxbAmnEF6Vxtwx 67nKEkkbCvlmX9WwxXphJZyqPrt5OTwVeCUYeRhGwfLA8j30ftorcAKuwrk7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc6Yb13oG/0FWdgJzb1GswIoUX9owHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0cUIHxMwZamHkFdbKNZNc03xyEDiOuXG7c IBesIGVQrrCwoBWy2+Jt6kQufEEQBA1OAV+i4jITzn84XWlbFwzO0KTQ9r7YewI7 4UA/hEOxvE4EL2PlWRpBytjoIdRwPAnQ5e25Z1LiL3reuxF199lcMctS4LwklhYA E5Jt7R33PYjIW92MqSRJY13FPWfpbM7qvg8wUz/gykhOq3QRLFEou1U4BqQWrW4i QpAzakclkODC1GfdVsALxzTZC4phI3tGYQlFgaY4mADwpO2aiz+huil0NQLrLyq6 mWOv44dAOWgHf8x5+MDPVnWYeEyXCvi5Xo3Sd9Q0HJ7rF9D9Jak= -----END CERTIFICATE-----Generated at Fri Dec 19 14:20:46 2025 by rpki-client