This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: K7GPPmt1KzaCDUjx6pT64kA06QDaPBeT62TGyGMrKEU= Subject key identifier: F2:72:CF:53:10:8E:E5:D4:30:25:70:E1:6F:05:5A:75:06:CD:6F:B7 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 6F006521C0E6B8748E862962080F0393B610B237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 0535 Signing time: Wed 24 Dec 2025 16:10:38 +0000 Manifest this update: Wed 24 Dec 2025 16:05:38 +0000 Manifest next update: Sat 27 Dec 2025 19:45:38 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 3: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: Y29mkN2+ybqlkbhJnHpt0p1BDibGVBPsi61PNl+q5JU=) 4: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:00:65:21:c0:e6:b8:74:8e:86:29:62:08:0f:03:93:b6:10:b2:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Dec 24 16:05:38 2025 GMT Not After : Dec 27 19:45:38 2025 GMT Subject: CN=F272CF53108EE5D4302570E16F055A7506CD6FB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ba:58:de:71:89:1c:ed:a4:d4:02:86:d0:e7: 32:88:31:9e:81:ab:2d:e5:a2:d6:aa:12:6b:2d:13: 70:02:55:f5:2f:1d:ee:1d:9d:81:fc:ef:f0:70:3f: 65:3b:84:0b:ea:b4:f6:f4:10:d8:12:0b:f5:52:e6: de:a5:87:74:90:02:0b:ce:bc:c8:fb:71:9f:22:70: 5b:8e:a9:ac:a9:bf:6a:9f:94:77:01:15:39:50:82: 64:9f:10:60:fb:8c:fc:19:56:fb:cf:2a:e7:52:66: 97:f5:5f:dc:ef:3b:6e:44:27:ca:c4:d8:af:27:68: f2:45:e8:22:9b:22:de:36:2e:c5:46:d6:f5:7c:f6: 48:da:40:2f:e6:f1:42:c8:bb:27:2c:86:54:d7:a4: ec:a7:2a:87:26:cb:c7:1a:d9:e6:5f:a2:ca:b1:39: 7b:01:ad:db:e1:90:8b:94:4e:b7:8f:30:f3:e7:6e: fd:22:5d:9a:a5:09:73:33:b9:e8:7f:4e:ae:66:39: 68:48:ac:52:ac:8c:86:3d:17:98:ef:57:e6:6d:37: 1a:86:9f:f2:f8:83:40:58:dc:f3:70:d1:1f:e1:ef: ea:8a:33:44:2f:85:c3:1b:eb:8c:a7:76:cd:09:65: 7e:fd:e8:ef:7e:c2:fd:64:6e:17:10:2f:f9:2c:3b: 6e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:72:CF:53:10:8E:E5:D4:30:25:70:E1:6F:05:5A:75:06:CD:6F:B7 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d8:76:83:26:1a:3d:19:d3:55:e9:86:d2:a9:18:b2:77:4e: 02:41:9f:bc:5c:53:88:1c:71:b7:5b:4d:2c:40:34:d7:41:08: 4a:ae:a0:44:08:26:ae:52:2e:a6:16:1b:55:0c:cc:87:5e:9c: 29:ef:6f:a9:5a:5f:a3:4a:67:40:f7:fe:8f:cf:b6:b3:dc:56: fc:18:b9:a5:1a:98:77:9e:81:4b:d8:4a:a8:38:c7:6f:f9:5b: 5a:c3:9b:da:6f:72:ce:b1:81:1f:0e:f8:61:b4:5d:47:f4:3d: c8:20:9e:9a:39:0a:95:0c:37:84:3e:f7:c0:72:12:9d:47:be: eb:08:4f:cf:25:dc:e2:92:87:8f:76:e2:9c:32:b1:db:b6:60: c9:39:5c:74:34:9e:a2:f6:7c:d9:4f:11:9b:bc:54:15:28:99: ba:c2:56:2a:fc:52:46:2e:58:cf:40:5c:d6:9a:ae:3f:20:70: 1e:34:ab:26:b2:58:e8:32:e7:e4:c3:6f:52:11:1f:d3:36:00: 8b:d5:42:f8:2e:cd:04:1d:bf:cc:75:ec:d9:32:b8:4c:31:49: c9:e1:e9:65:e4:7f:74:92:97:a3:34:da:48:d7:35:b6:91:04: 09:5a:3d:d0:7c:30:f9:c8:a0:a6:ff:05:e9:e2:98:bb:06:b6: ad:ef:b4:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwBlIcDmuHSOhiliCA8Dk7YQsjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTEyMjQxNjA1MzhaFw0yNTEyMjcxOTQ1MzhaMDMxMTAvBgNV BAMTKEYyNzJDRjUzMTA4RUU1RDQzMDI1NzBFMTZGMDU1QTc1MDZDRDZGQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuljecYkc7aTUAobQ5zKIMZ6B qy3lotaqEmstE3ACVfUvHe4dnYH87/BwP2U7hAvqtPb0ENgSC/VS5t6lh3SQAgvO vMj7cZ8icFuOqaypv2qflHcBFTlQgmSfEGD7jPwZVvvPKudSZpf1X9zvO25EJ8rE 2K8naPJF6CKbIt42LsVG1vV89kjaQC/m8ULIuycshlTXpOynKocmy8ca2eZfosqx OXsBrdvhkIuUTrePMPPnbv0iXZqlCXMzueh/Tq5mOWhIrFKsjIY9F5jvV+ZtNxqG n/L4g0BY3PNw0R/h7+qKM0QvhcMb64ynds0JZX796O9+wv1kbhcQL/ksO271AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8nLPUxCO5dQwJXDhbwVadQbNb7cwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnYdoMmGj0Z01XphtKpGLJ3TgJBn7xcU4gc cbdbTSxANNdBCEquoEQIJq5SLqYWG1UMzIdenCnvb6laX6NKZ0D3/o/PtrPcVvwY uaUamHeegUvYSqg4x2/5W1rDm9pvcs6xgR8O+GG0XUf0Pcggnpo5CpUMN4Q+98By Ep1HvusIT88l3OKSh4924pwysdu2YMk5XHQ0nqL2fNlPEZu8VBUombrCVir8UkYu WM9AXNaarj8gcB40qyayWOgy5+TDb1IRH9M2AIvVQvguzQQdv8x17NkyuEwxScnh 6WXkf3SSl6M02kjXNbaRBAlaPdB8MPnIoKb/BenimLsGtq3vtOk= -----END CERTIFICATE-----Generated at Wed Dec 24 20:23:39 2025 by rpki-client