This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: roeFB9d8K+kp4eJZ+awFvURMByRZ0v8yFOQu6gcOEM4= Subject key identifier: 63:F2:31:F5:8D:C7:BE:D2:E1:5A:9C:CF:16:4E:B5:3D:85:D0:B0:E7 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 383A4ABC76202B032D95F9D5769EF215AF4C9D9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0157 Signing time: Sun 28 Dec 2025 20:51:27 +0000 Manifest this update: Sun 28 Dec 2025 20:46:27 +0000 Manifest next update: Wed 31 Dec 2025 22:07:27 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 2: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: 7X6hi/Z5qtq6tAo2GvH4FQAsTjzkUyexYXOAOul8khU=) 3: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 4: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 5: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 22:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3a:4a:bc:76:20:2b:03:2d:95:f9:d5:76:9e:f2:15:af:4c:9d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Dec 28 20:46:27 2025 GMT Not After : Dec 31 22:07:27 2025 GMT Subject: CN=63F231F58DC7BED2E15A9CCF164EB53D85D0B0E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:17:86:4d:de:b6:c0:06:de:1a:f8:34:89: 84:f6:7e:bc:4b:41:c7:0c:cd:a3:78:f6:c8:29:93: 26:10:fe:2b:70:ab:10:a4:81:5d:09:5f:1d:8f:5e: fb:d7:d6:61:ce:22:12:47:1a:a3:77:15:d5:6f:5b: 8b:e7:5b:21:17:cd:f2:11:99:10:f1:fa:33:e2:9e: 8e:6c:3f:49:60:8f:77:0b:6a:89:db:7f:84:be:71: 74:b2:45:6f:65:a5:d1:a2:d7:cd:57:b3:df:87:19: 6e:03:2e:49:2b:6b:d7:ba:b7:21:74:02:12:49:b3: ba:b6:50:17:dc:d8:d6:eb:23:a2:ec:77:db:46:03: 36:c6:d2:d0:6b:13:63:d3:1b:cb:ad:ca:7b:1d:7f: 8d:fa:b7:ac:42:e3:93:85:cb:72:fa:e9:4a:d6:7f: 30:0a:85:35:da:18:d1:b3:68:b7:4d:e2:0b:26:cb: de:da:5c:c3:ea:f4:32:0f:df:ef:77:1e:e8:d5:f1: 72:84:55:10:30:6c:dd:ab:e7:91:33:39:fa:2f:e9: 16:1e:63:81:b2:80:9f:69:4b:1b:1f:ff:50:75:6e: 31:f9:df:bc:0b:15:37:5f:98:43:be:15:11:f4:c3: 50:f9:e6:0b:fe:49:78:23:7a:77:12:b6:26:51:a3: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F2:31:F5:8D:C7:BE:D2:E1:5A:9C:CF:16:4E:B5:3D:85:D0:B0:E7 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a8:1f:59:46:19:1b:3d:49:3c:11:bf:a0:71:d0:0a:a7:ff: 74:83:85:61:5d:83:e5:c1:18:87:2c:e8:2b:3f:65:3d:7a:9f: ae:fb:cc:89:c8:00:9e:f5:ed:64:c2:1d:a5:f1:7a:0d:41:06: e7:aa:8b:93:6d:ea:88:a7:e2:4d:80:bd:46:6c:ac:5f:08:e1: 73:35:6c:a1:b7:e8:24:a5:de:49:54:a4:09:b1:83:55:59:8a: 54:a8:8d:55:b4:6b:71:81:0e:4f:a9:bc:c7:10:d5:7b:d5:63: e0:69:06:66:c3:36:d1:01:86:dc:61:57:70:48:21:92:91:44: 9d:b3:c7:49:ae:44:37:40:ea:54:d0:56:80:d0:bf:d2:08:e6: 3d:c9:b9:ae:94:22:3a:cc:a5:12:9a:2b:0e:bd:26:bc:02:28: a6:07:8d:22:e2:93:46:e4:78:7e:01:03:10:ac:16:49:5f:10: 68:a4:9c:32:3e:5f:55:fa:3b:f8:15:35:b5:6d:c4:b6:03:b5: 30:d7:65:c7:12:7c:78:e1:e2:c2:d1:8c:f3:c7:8f:0c:0c:58: 6b:65:e7:69:8a:32:82:76:10:af:00:66:33:59:70:3a:3e:3f: d2:e4:b1:64:b5:fd:03:ed:e2:d0:4e:48:f1:87:12:9d:39:6a: 3e:38:1f:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODpKvHYgKwMtlfnVdp7yFa9MnZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNTEyMjgyMDQ2MjdaFw0yNTEyMzEyMjA3MjdaMDMxMTAvBgNV BAMTKDYzRjIzMUY1OERDN0JFRDJFMTVBOUNDRjE2NEVCNTNEODVEMEIwRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWBeGTd62wAbeGvg0iYT2frxL QccMzaN49sgpkyYQ/itwqxCkgV0JXx2PXvvX1mHOIhJHGqN3FdVvW4vnWyEXzfIR mRDx+jPino5sP0lgj3cLaonbf4S+cXSyRW9lpdGi181Xs9+HGW4DLkkra9e6tyF0 AhJJs7q2UBfc2NbrI6Lsd9tGAzbG0tBrE2PTG8utynsdf436t6xC45OFy3L66UrW fzAKhTXaGNGzaLdN4gsmy97aXMPq9DIP3+93HujV8XKEVRAwbN2r55EzOfov6RYe Y4GygJ9pSxsf/1B1bjH537wLFTdfmEO+FRH0w1D55gv+SXgjencStiZRo9RfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/Ix9Y3HvtLhWpzPFk61PYXQsOcwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+oH1lGGRs9STwRv6Bx0Aqn/3SDhWFdg+XB GIcs6Cs/ZT16n677zInIAJ717WTCHaXxeg1BBueqi5Nt6oin4k2AvUZsrF8I4XM1 bKG36CSl3klUpAmxg1VZilSojVW0a3GBDk+pvMcQ1XvVY+BpBmbDNtEBhtxhV3BI IZKRRJ2zx0muRDdA6lTQVoDQv9II5j3Jua6UIjrMpRKaKw69JrwCKKYHjSLik0bk eH4BAxCsFklfEGiknDI+X1X6O/gVNbVtxLYDtTDXZccSfHjh4sLRjPPHjwwMWGtl 52mKMoJ2EK8AZjNZcDo+P9LksWS1/QPt4tBOSPGHEp05aj44H70= -----END CERTIFICATE-----Generated at Mon Dec 29 22:49:09 2025 by rpki-client