This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft File: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft (raw, json) Hash identifier: iRW24bople6wQLdnFBzCZ9+MtE11tZPDIpAN3oPJF3o= Subject key identifier: 2C:4B:46:9D:F8:A9:6B:6D:6F:57:BE:67:B3:EA:45:2B:49:44:34:00 Authority key identifier: 0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD Certificate issuer: /CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Certificate serial: 679CF89C6DC38757B2B2F907F7768C940D66BDC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft Manifest number: 01F6 Signing time: Mon 22 Dec 2025 23:41:40 +0000 Manifest this update: Mon 22 Dec 2025 23:36:40 +0000 Manifest next update: Thu 25 Dec 2025 23:46:40 +0000 Files and hashes: 1: 0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl (hash: 0bsYswN6gtazwKiaHhN4ala0zTFxab+bN5ZOtR/3h5s=) 2: 3130332e3134372e3134342e302f32332d3234203d3e203137373639.roa (hash: 3VGbyCH6ddrGoq0lsoWNFafYhbKrpzTV4l4RHWPBamI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 23:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:9c:f8:9c:6d:c3:87:57:b2:b2:f9:07:f7:76:8c:94:0d:66:bd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DFCB4A43861E4A71BCD645792005485BFADFD Validity Not Before: Dec 22 23:36:40 2025 GMT Not After : Dec 25 23:46:40 2025 GMT Subject: CN=2C4B469DF8A96B6D6F57BE67B3EA452B49443400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d5:12:7e:ef:13:e4:d5:e4:f2:e1:92:1c:ce: 1b:50:5b:fc:61:8d:ae:ff:8d:c3:36:39:34:02:84: b9:32:d3:0c:35:c8:e1:e6:e7:76:34:0c:47:4f:3a: a0:22:b4:d9:63:76:1a:53:95:10:1d:b0:5c:c8:cd: 29:33:c0:7b:56:ab:c1:35:0f:dc:98:12:16:2f:ba: b1:8c:51:b6:a0:eb:5b:84:5b:c9:f2:df:17:1b:cd: 66:7e:9c:e3:6d:c2:8b:56:9c:cc:25:b8:4b:4c:df: e4:ea:10:27:06:24:2d:d1:73:a7:dc:29:4d:30:c2: da:b8:fd:91:8f:a2:99:85:82:07:04:06:ff:2b:85: d0:4a:48:fa:02:c2:32:53:33:c5:da:8e:5a:3a:04: 5d:66:6b:f4:5a:73:6f:ff:35:d4:2b:75:b8:8d:bb: e1:83:bb:ea:85:82:79:ea:06:56:ab:e2:2c:ec:35: cf:97:4d:7f:08:a0:a3:12:bf:9f:14:f2:d8:39:86: c9:5b:40:50:09:b6:a1:ad:b5:36:0e:c6:eb:b3:f9: f6:e0:58:0a:fa:b4:59:16:f3:68:0d:14:ac:c5:46: 77:8c:32:90:4a:5f:38:05:c8:4e:3d:5a:9d:a8:da: 1e:50:7a:ff:05:f2:5d:3f:a8:3e:c7:20:7a:de:2e: 20:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4B:46:9D:F8:A9:6B:6D:6F:57:BE:67:B3:EA:45:2B:49:44:34:00 X509v3 Authority Key Identifier: keyid:0A:1D:FC:B4:A4:38:61:E4:A7:1B:CD:64:57:92:00:54:85:BF:AD:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DFCB4A43861E4A71BCD645792005485BFADFD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c85cbd95-574f-405b-8bde-0ddb9c9bddba/0/0A1DFCB4A43861E4A71BCD645792005485BFADFD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d0:ab:59:6e:92:01:88:34:f7:cd:29:07:70:f4:47:49:0a: a2:44:d5:f1:9c:b8:0b:3b:76:a9:e0:e4:4c:30:ae:ff:1d:8c: 30:d9:e0:01:62:d4:1e:cc:e5:e7:66:c7:12:4e:21:51:c8:cd: 62:d6:23:d2:e9:29:30:2a:03:06:ce:93:48:38:7e:d7:17:da: ba:0a:50:6a:2a:27:44:4d:02:ab:8d:e7:2a:aa:58:40:00:56: a0:44:51:81:ee:ad:96:e5:32:48:2b:08:c1:56:e4:fa:01:11: 85:00:23:e3:5a:d3:f0:f3:6f:7d:24:3c:34:d4:48:b2:a2:81: a2:cc:3e:61:23:9f:9d:42:77:70:5e:f9:23:a2:99:df:57:af: f9:88:7e:70:26:18:d9:28:48:63:6b:72:ab:e1:ee:4c:13:2f: 94:7d:2c:b7:09:ab:9a:37:4c:17:1d:fd:d7:ff:07:e8:44:6a: c9:f5:a3:a1:63:32:0a:47:93:72:53:45:b6:60:6e:85:58:c4: de:73:59:f5:9d:1c:9d:b4:9e:87:3e:d1:61:a0:02:e8:08:21: de:ee:2c:32:01:06:ba:af:59:ec:53:38:26:ba:dd:ba:ff:22: 94:7e:c9:45:5f:2e:a0:a3:e2:53:c9:78:c2:a0:38:80:c4:ee: d6:69:01:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5z4nG3Dh1eysvkH93aMlA1mvccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4 NUJGQURGRDAeFw0yNTEyMjIyMzM2NDBaFw0yNTEyMjUyMzQ2NDBaMDMxMTAvBgNV BAMTKDJDNEI0NjlERjhBOTZCNkQ2RjU3QkU2N0IzRUE0NTJCNDk0NDM0MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl1RJ+7xPk1eTy4ZIczhtQW/xh ja7/jcM2OTQChLky0ww1yOHm53Y0DEdPOqAitNljdhpTlRAdsFzIzSkzwHtWq8E1 D9yYEhYvurGMUbag61uEW8ny3xcbzWZ+nONtwotWnMwluEtM3+TqECcGJC3Rc6fc KU0wwtq4/ZGPopmFggcEBv8rhdBKSPoCwjJTM8Xajlo6BF1ma/Rac2//NdQrdbiN u+GDu+qFgnnqBlar4izsNc+XTX8IoKMSv58U8tg5hslbQFAJtqGttTYOxuuz+fbg WAr6tFkW82gNFKzFRneMMpBKXzgFyE49Wp2o2h5Qev8F8l0/qD7HIHreLiD7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULEtGnfipa21vV75ns+pFK0lENAAwHwYDVR0j BBgwFoAUCh38tKQ4YeSnG81kV5IAVIW/rf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODVjYmQ5NS01NzRmLTQwNWItOGJkZS0wZGRiOWM5YmRkYmEvMC8wQTFERkNCNEE0 Mzg2MUU0QTcxQkNENjQ1NzkyMDA1NDg1QkZBREZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAwNTQ4NUJG QURGRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzg1Y2JkOTUtNTc0Zi00MDViLThi ZGUtMGRkYjljOWJkZGJhLzAvMEExREZDQjRBNDM4NjFFNEE3MUJDRDY0NTc5MjAw NTQ4NUJGQURGRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7Qq1lukgGINPfNKQdw9EdJCqJE1fGcuAs7 dqng5Ewwrv8djDDZ4AFi1B7M5edmxxJOIVHIzWLWI9LpKTAqAwbOk0g4ftcX2roK UGoqJ0RNAquN5yqqWEAAVqBEUYHurZblMkgrCMFW5PoBEYUAI+Na0/Dzb30kPDTU SLKigaLMPmEjn51Cd3Be+SOimd9Xr/mIfnAmGNkoSGNrcqvh7kwTL5R9LLcJq5o3 TBcd/df/B+hEasn1o6FjMgpHk3JTRbZgboVYxN5zWfWdHJ20noc+0WGgAugIId7u LDIBBrqvWexTOCa63br/IpR+yUVfLqCj4lPJeMKgOIDE7tZpARw= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:18 2025 by rpki-client