This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: 4TTpCHdIpCRbgNI7C6LOFj/DSqjHalSKUXF8OxBV6sc= Subject key identifier: 81:8A:5C:13:4F:09:60:BF:46:E7:92:A3:9D:51:1C:42:14:56:8C:FF Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 0697C4384B414DB9D48B5D89EC24C2148AC2EFCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 03AA Signing time: Tue 23 Dec 2025 06:11:39 +0000 Manifest this update: Tue 23 Dec 2025 06:06:39 +0000 Manifest next update: Fri 26 Dec 2025 08:30:39 +0000 Files and hashes: 1: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: D3IFwC+agUDfefnTI4Rr2XGP2SiD66JV5F/CoQ1sgto=) 2: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: pkDHu24c8syDvZPlWDuzu3bL6e+ONGP4QB0D2zjlaDk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 08:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:97:c4:38:4b:41:4d:b9:d4:8b:5d:89:ec:24:c2:14:8a:c2:ef:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Dec 23 06:06:39 2025 GMT Not After : Dec 26 08:30:39 2025 GMT Subject: CN=818A5C134F0960BF46E792A39D511C4214568CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:70:81:51:f1:e6:7b:b7:9c:69:36:dd:84:27: c9:0e:54:87:d2:9d:e9:02:ca:4f:d2:76:72:e1:be: 6e:fe:87:68:4e:9e:1b:eb:e5:c9:45:32:50:2a:67: 92:e8:81:d2:a7:fd:c3:ad:e4:16:35:06:5a:5a:5a: 97:2b:d8:e0:24:30:a7:94:40:9c:59:03:70:a0:26: a1:40:64:b4:fb:63:ee:5a:3b:b6:89:f0:3a:d4:16: c7:7f:77:0b:7e:ad:47:df:1a:b5:1a:b5:d7:a2:bd: 26:c9:e2:30:b2:33:0a:0d:a6:a6:6b:07:95:c9:28: cb:b1:ec:5b:83:9c:59:3a:dd:89:cf:75:f4:57:07: 5e:06:42:6f:88:89:e7:3f:97:54:fe:6d:3a:28:be: 35:b7:2e:4a:29:e4:fa:f2:1d:2f:55:72:33:28:00: 8c:84:74:57:4f:a1:79:91:2f:f3:a3:31:c7:96:c6: b3:86:f2:af:6b:61:b0:f9:72:06:f0:92:0f:39:30: 14:5d:ba:09:48:9c:40:e6:e4:5a:9b:c1:65:bc:f1: 86:c4:37:e5:7d:fa:0b:15:e0:45:b1:20:b7:96:69: 28:0e:95:d7:85:db:ba:08:a8:e0:cf:3c:cc:cf:c3: b0:f7:7b:f4:61:e8:78:56:53:d2:31:7e:c1:67:f4: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:8A:5C:13:4F:09:60:BF:46:E7:92:A3:9D:51:1C:42:14:56:8C:FF X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8f:36:4b:79:8c:dd:12:a1:6e:e4:ba:96:0d:69:28:64:21: 63:bd:e1:35:09:a7:20:f0:3d:e0:60:1b:e0:5c:c0:18:e2:8d: 7e:b7:b6:70:b6:80:10:06:fd:a3:d3:ba:2e:d2:4f:09:d3:2b: b6:0e:ae:ad:9c:a8:79:d8:e3:76:29:ee:6a:d2:e0:26:48:09: db:10:b0:cf:01:eb:0d:10:f4:53:f5:4d:50:19:5f:cc:f0:3a: a0:1d:51:f0:a4:e8:63:8e:1a:d5:33:01:62:66:58:d3:f1:d5: fd:2f:69:32:b4:64:ec:84:ad:62:df:1c:f3:2d:80:9a:87:03: 25:b3:66:78:12:a3:e9:28:8f:be:f6:fe:0a:e6:3d:46:2e:b7: 29:9f:e8:4f:2f:b6:f9:3a:73:b2:cd:c7:e4:9a:d4:43:9e:34: 31:68:8d:da:63:53:3d:59:dc:b6:ca:91:a7:f4:44:96:1c:b5: 4c:43:f7:3d:76:60:d0:f4:8e:58:8d:5c:8a:d6:7e:67:3f:05: 54:87:d4:eb:35:ec:97:9c:70:f3:81:fb:6d:48:33:1c:4e:48: da:5f:e2:f0:c0:66:37:f6:e3:89:10:df:36:0b:95:53:99:5b: ad:b4:2a:b7:9c:6e:50:4e:05:6e:59:98:60:69:2e:62:b2:0d: 44:58:94:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBpfEOEtBTbnUi12J7CTCFIrC784wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNTEyMjMwNjA2MzlaFw0yNTEyMjYwODMwMzlaMDMxMTAvBgNV BAMTKDgxOEE1QzEzNEYwOTYwQkY0NkU3OTJBMzlENTExQzQyMTQ1NjhDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDacIFR8eZ7t5xpNt2EJ8kOVIfS nekCyk/SdnLhvm7+h2hOnhvr5clFMlAqZ5LogdKn/cOt5BY1BlpaWpcr2OAkMKeU QJxZA3CgJqFAZLT7Y+5aO7aJ8DrUFsd/dwt+rUffGrUatdeivSbJ4jCyMwoNpqZr B5XJKMux7FuDnFk63YnPdfRXB14GQm+Iiec/l1T+bToovjW3Lkop5PryHS9VcjMo AIyEdFdPoXmRL/OjMceWxrOG8q9rYbD5cgbwkg85MBRduglInEDm5FqbwWW88YbE N+V9+gsV4EWxILeWaSgOldeF27oIqODPPMzPw7D3e/Rh6HhWU9IxfsFn9LvZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgYpcE08JYL9G55KjnVEcQhRWjP8wHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaPNkt5jN0SoW7kupYNaShkIWO94TUJpyDw PeBgG+BcwBjijX63tnC2gBAG/aPTui7STwnTK7YOrq2cqHnY43Yp7mrS4CZICdsQ sM8B6w0Q9FP1TVAZX8zwOqAdUfCk6GOOGtUzAWJmWNPx1f0vaTK0ZOyErWLfHPMt gJqHAyWzZngSo+koj772/grmPUYutymf6E8vtvk6c7LNx+Sa1EOeNDFojdpjUz1Z 3LbKkaf0RJYctUxD9z12YND0jliNXIrWfmc/BVSH1Os17JeccPOB+21IMxxOSNpf 4vDAZjf244kQ3zYLlVOZW620KrecblBOBW5ZmGBpLmKyDURYlB0= -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:55 2025 by rpki-client