This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft File: A75550C54400A670523A712A4C8782FA740B4F07.mft (raw, json) Hash identifier: 6+GIh9boNwfWN9Tfz2J2F6xJk8iK9WIKIjW9bDKSCAY= Subject key identifier: A8:A5:CB:93:3B:E8:CA:46:52:97:2F:AE:1A:0A:8B:4A:F0:8C:F4:A6 Authority key identifier: A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07 Certificate issuer: /CN=A75550C54400A670523A712A4C8782FA740B4F07 Certificate serial: 24FFA406BEFC681D9410A0CCA2044B6C488C820D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft Manifest number: 0537 Signing time: Wed 31 Dec 2025 09:02:33 +0000 Manifest this update: Wed 31 Dec 2025 08:57:33 +0000 Manifest next update: Sat 03 Jan 2026 18:57:33 +0000 Files and hashes: 1: A75550C54400A670523A712A4C8782FA740B4F07.crl (hash: LzXhMkw0SmPnfGkB+y9kMSQpuPpVcFRaOejqpFMF2pU=) 2: 323430363a656230303a3a2f33322d3438203d3e20313332363533.roa (hash: Gl8RPqW8PrXHdW+ycPmmKea6eNkUVcurFhY7MyX2sVk=) 3: 3130332e32352e3230382e302f32322d3234203d3e20313332363533.roa (hash: 7MRblACKzVlLmDvNl3fN+c0aidnB5bJjx48vVv4G66g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 18:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:ff:a4:06:be:fc:68:1d:94:10:a0:cc:a2:04:4b:6c:48:8c:82:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A75550C54400A670523A712A4C8782FA740B4F07 Validity Not Before: Dec 31 08:57:33 2025 GMT Not After : Jan 3 18:57:33 2026 GMT Subject: CN=A8A5CB933BE8CA4652972FAE1A0A8B4AF08CF4A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:d8:69:ca:77:1d:34:89:19:d6:92:41:81: 75:f3:06:d9:ec:c2:8e:0a:72:89:55:2a:0d:77:e2: 66:34:bd:f6:ab:ba:f2:9b:a6:20:ee:25:6e:0e:ed: ed:ec:6a:7b:bb:99:ab:34:a5:d6:f9:17:87:05:4a: c2:37:62:b4:91:d2:02:38:bb:ac:df:04:e1:e3:ea: f1:0c:3c:bf:6d:c9:cd:5e:b0:90:a9:2b:2c:9e:ca: c7:bc:21:8f:e6:a3:b9:6c:88:8b:08:ca:d2:ac:43: 93:e4:51:76:54:36:52:c1:26:73:51:fa:41:6a:5b: 98:e9:d8:0d:af:80:f6:78:00:33:60:55:62:fe:0b: 78:1b:da:f1:e5:4d:a2:be:4a:37:87:5f:5e:42:81: b6:9e:73:b7:09:b6:5c:0b:a0:0e:29:48:b4:94:88: 7a:50:df:e8:32:e8:2e:f1:e0:ad:49:a6:89:21:d3: 96:68:c1:9f:d2:45:2b:22:14:6d:b2:c7:23:37:40: 81:ae:54:77:b6:07:08:90:5f:7e:eb:b1:d5:4e:46: f5:c0:47:68:44:00:52:cf:3c:28:5b:42:96:32:f7: 4a:34:dc:23:0a:fb:e2:9c:39:d0:4b:c3:b7:23:f2: 66:66:b0:91:59:1b:f4:6b:a1:67:b7:61:d6:65:66: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A5:CB:93:3B:E8:CA:46:52:97:2F:AE:1A:0A:8B:4A:F0:8C:F4:A6 X509v3 Authority Key Identifier: keyid:A7:55:50:C5:44:00:A6:70:52:3A:71:2A:4C:87:82:FA:74:0B:4F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A75550C54400A670523A712A4C8782FA740B4F07.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cbd27c0a-9792-4cbc-9a96-e71050a1dde0/0/A75550C54400A670523A712A4C8782FA740B4F07.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2b:83:d3:83:2f:ce:92:5d:a2:e7:f3:ba:d6:98:39:a9:09: c5:d0:fc:db:7f:33:4b:b3:c2:a8:4d:65:ee:0d:25:f7:10:ed: 73:51:86:17:45:d1:83:e1:17:f1:bd:45:3e:60:9b:9f:b7:37: 1d:d7:cf:3a:cc:6b:a3:64:fb:ec:1c:cd:8f:0d:e2:bd:b9:dd: 1a:75:a6:4e:51:64:2d:eb:19:e3:a0:c3:64:c3:f9:3b:3a:e9: e6:64:85:aa:c3:b0:94:8f:a2:43:54:cd:b9:23:34:30:f2:01: 32:de:59:1d:94:02:66:3d:85:99:a0:0d:e3:4e:be:a1:d4:b0: 46:f7:40:c8:d9:6b:bb:bf:6a:e3:88:db:62:fd:7d:60:66:b3: cd:9e:55:bb:8f:80:11:fa:80:e6:11:ba:a0:75:7e:72:be:d1: a7:9d:c6:83:35:6b:d6:5c:f9:b8:1a:68:ce:c9:c8:a5:65:5a: 97:7f:c9:f7:da:04:f1:f9:4f:6b:02:60:81:29:43:32:ba:c2: d8:b4:30:08:c4:58:d5:45:ad:6f:35:80:87:c2:4d:3d:f5:4c: b4:23:a1:0b:b3:6e:dc:d5:78:91:c1:1f:57:14:bd:f3:39:d6: a2:f1:24:95:91:da:0e:e0:4b:49:fa:91:af:7c:b7:6d:f4:e8: 34:96:63:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJP+kBr78aB2UEKDMogRLbEiMgg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc1NTUwQzU0NDAwQTY3MDUyM0E3MTJBNEM4NzgyRkE3 NDBCNEYwNzAeFw0yNTEyMzEwODU3MzNaFw0yNjAxMDMxODU3MzNaMDMxMTAvBgNV BAMTKEE4QTVDQjkzM0JFOENBNDY1Mjk3MkZBRTFBMEE4QjRBRjA4Q0Y0QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DdhpyncdNIkZ1pJBgXXzBtns wo4KcolVKg134mY0vfaruvKbpiDuJW4O7e3sanu7mas0pdb5F4cFSsI3YrSR0gI4 u6zfBOHj6vEMPL9tyc1esJCpKyyeyse8IY/mo7lsiIsIytKsQ5PkUXZUNlLBJnNR +kFqW5jp2A2vgPZ4ADNgVWL+C3gb2vHlTaK+SjeHX15Cgbaec7cJtlwLoA4pSLSU iHpQ3+gy6C7x4K1Jpokh05ZowZ/SRSsiFG2yxyM3QIGuVHe2BwiQX37rsdVORvXA R2hEAFLPPChbQpYy90o03CMK++KcOdBLw7cj8mZmsJFZG/RroWe3YdZlZqHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKXLkzvoykZSly+uGgqLSvCM9KYwHwYDVR0j BBgwFoAUp1VQxUQApnBSOnEqTIeC+nQLTwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YmQyN2MwYS05NzkyLTRjYmMtOWE5Ni1lNzEwNTBhMWRkZTAvMC9BNzU1NTBDNTQ0 MDBBNjcwNTIzQTcxMkE0Qzg3ODJGQTc0MEI0RjA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc1NTUwQzU0NDAwQTY3MDUyM0E3MTJBNEM4NzgyRkE3NDBC NEYwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2JkMjdjMGEtOTc5Mi00Y2JjLTlh OTYtZTcxMDUwYTFkZGUwLzAvQTc1NTUwQzU0NDAwQTY3MDUyM0E3MTJBNEM4Nzgy RkE3NDBCNEYwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsrg9ODL86SXaLn87rWmDmpCcXQ/Nt/M0uz wqhNZe4NJfcQ7XNRhhdF0YPhF/G9RT5gm5+3Nx3XzzrMa6Nk++wczY8N4r253Rp1 pk5RZC3rGeOgw2TD+Ts66eZkharDsJSPokNUzbkjNDDyATLeWR2UAmY9hZmgDeNO vqHUsEb3QMjZa7u/auOI22L9fWBms82eVbuPgBH6gOYRuqB1fnK+0aedxoM1a9Zc +bgaaM7JyKVlWpd/yffaBPH5T2sCYIEpQzK6wti0MAjEWNVFrW81gIfCTT31TLQj oQuzbtzVeJHBH1cUvfM51qLxJJWR2g7gS0n6ka98t2306DSWY1w= -----END CERTIFICATE-----Generated at Thu Jan 1 18:03:41 2026 by rpki-client