This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft File: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft (raw, json) Hash identifier: /UDn92JjhmjQIiNOgq9+BBEcwXy1re41hxk676ADSXo= Subject key identifier: 9D:F7:21:8F:CC:9E:3A:01:C1:AC:C6:B2:F3:94:C2:A0:22:3F:4E:0E Authority key identifier: 0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 Certificate issuer: /CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Certificate serial: 13A16461B81B065F9A26382066169CB2FE41C4F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft Manifest number: 0536 Signing time: Mon 22 Dec 2025 13:32:51 +0000 Manifest this update: Mon 22 Dec 2025 13:27:51 +0000 Manifest next update: Thu 25 Dec 2025 22:54:51 +0000 Files and hashes: 1: 0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl (hash: Vvxjvh6tqHKCIQfiHqjHlvQW1U47YLpL+m0WCNNli0Q=) 2: 323030313a6466343a343938303a3a2f34382d3438203d3e20313430343633.roa (hash: ALvwx2swtpbz8NGxp51wtfjrJRECE+XKLqFSLUrMbz4=) 3: 3130332e3135332e3133312e302f32342d3234203d3e20313430343633.roa (hash: qjM6zOskUgB5aVouJZ8bw8PRtPD9BsEaccD1Oe43xX4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a1:64:61:b8:1b:06:5f:9a:26:38:20:66:16:9c:b2:fe:41:c4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A1DE6FD88BB9EF4E349C1774DA926E423264796 Validity Not Before: Dec 22 13:27:51 2025 GMT Not After : Dec 25 22:54:51 2025 GMT Subject: CN=9DF7218FCC9E3A01C1ACC6B2F394C2A0223F4E0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:b6:b1:db:f8:13:39:67:37:e0:1a:fd:26: 20:63:f2:45:ad:da:f8:0f:b2:87:08:7a:24:0b:1c: ee:c5:6e:24:a3:7f:8a:4e:b1:df:33:f1:70:5d:4f: 64:ae:73:d3:9f:08:ea:f0:5a:a5:71:12:94:7e:a8: 34:80:9e:db:49:ab:96:0d:94:c3:71:02:17:9e:89: ff:dc:cd:dc:a0:b6:87:f2:33:01:ad:a5:f5:d4:cc: 15:cf:3a:d3:3d:f3:c9:97:c0:50:e9:77:58:eb:c8: 2b:2f:01:68:c5:2f:db:e6:c3:99:80:dc:f8:00:67: 8e:7c:7f:e6:12:59:da:5e:73:7a:72:c5:7d:00:68: 41:ab:6b:92:b4:e8:5b:b2:13:85:95:1f:6c:76:0f: 98:27:76:8c:b0:f6:c3:a2:ae:55:50:1f:64:1e:37: ae:eb:41:bb:30:8c:bb:74:83:fc:b5:19:86:8e:65: 08:c3:35:11:38:0e:1d:f1:45:2f:17:b5:06:04:8e: 8a:56:96:5f:ad:c6:d0:f1:01:59:7f:e4:cb:21:d8: 3b:de:c5:44:8b:f4:c9:5b:2a:db:05:0a:be:bb:d1: d3:e2:45:98:a0:55:54:e7:22:24:bd:82:61:bf:54: 67:80:23:34:32:4d:2a:43:36:cb:66:c0:af:71:11: 7c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F7:21:8F:CC:9E:3A:01:C1:AC:C6:B2:F3:94:C2:A0:22:3F:4E:0E X509v3 Authority Key Identifier: keyid:0A:1D:E6:FD:88:BB:9E:F4:E3:49:C1:77:4D:A9:26:E4:23:26:47:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A1DE6FD88BB9EF4E349C1774DA926E423264796.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea1e0bd7-281a-4eba-b98c-82939327ddd7/0/0A1DE6FD88BB9EF4E349C1774DA926E423264796.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:26:5c:00:fb:e1:19:7c:b0:ac:b1:74:62:91:0f:8a:2c:d2: 2c:2c:8d:c4:15:49:c4:6a:e4:9d:f3:d2:9e:ae:f0:15:45:6a: fd:b6:a0:c2:d4:c5:a2:79:9c:d1:68:d3:30:8b:89:1e:b3:da: 85:04:96:b5:5b:b2:04:d6:69:a8:92:ad:0e:66:2d:ec:ca:d9: b1:de:0d:f9:08:0a:dd:e5:ce:b7:1e:28:7d:0b:94:36:38:f9: 60:e9:f5:e2:1f:6d:5c:75:b2:13:72:1f:2b:04:ba:e1:51:e3: 49:b0:c9:72:71:d2:49:97:01:05:65:4c:79:e4:49:5e:c2:1f: 5b:20:02:f5:21:d4:09:c3:46:1e:47:77:95:99:db:b5:b6:80: b2:54:c9:a9:71:7c:f9:bb:27:e7:04:85:90:6d:ff:5f:e1:a5: 7b:8c:04:2d:b9:84:7d:ab:4a:99:ed:72:37:ba:4b:b5:b3:e2: ba:04:9b:54:09:b5:d7:66:12:23:f8:c2:e0:ea:64:91:52:fd: 2e:a8:f0:aa:10:c3:6b:bd:e8:6d:19:45:9b:07:4d:22:d0:4b: bd:72:25:84:15:ff:bb:70:61:a0:b5:60:26:d1:ea:dc:29:67: 15:ba:2a:e6:ef:0a:3e:bd:f9:ff:01:6c:2e:48:b4:a1:bd:9a: fb:ff:14:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE6FkYbgbBl+aJjggZhacsv5BxPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQy MzI2NDc5NjAeFw0yNTEyMjIxMzI3NTFaFw0yNTEyMjUyMjU0NTFaMDMxMTAvBgNV BAMTKDlERjcyMThGQ0M5RTNBMDFDMUFDQzZCMkYzOTRDMkEwMjIzRjRFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT7bax2/gTOWc34Br9JiBj8kWt 2vgPsocIeiQLHO7FbiSjf4pOsd8z8XBdT2Suc9OfCOrwWqVxEpR+qDSAnttJq5YN lMNxAheeif/czdygtofyMwGtpfXUzBXPOtM988mXwFDpd1jryCsvAWjFL9vmw5mA 3PgAZ458f+YSWdpec3pyxX0AaEGra5K06FuyE4WVH2x2D5gndoyw9sOirlVQH2Qe N67rQbswjLt0g/y1GYaOZQjDNRE4Dh3xRS8XtQYEjopWll+txtDxAVl/5Msh2Dve xUSL9MlbKtsFCr670dPiRZigVVTnIiS9gmG/VGeAIzQyTSpDNstmwK9xEXwhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnfchj8yeOgHBrMay85TCoCI/Tg4wHwYDVR0j BBgwFoAUCh3m/Yi7nvTjScF3Takm5CMmR5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTFlMGJkNy0yODFhLTRlYmEtYjk4Yy04MjkzOTMyN2RkZDcvMC8wQTFERTZGRDg4 QkI5RUY0RTM0OUMxNzc0REE5MjZFNDIzMjY0Nzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2RTQyMzI2 NDc5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWExZTBiZDctMjgxYS00ZWJhLWI5 OGMtODI5MzkzMjdkZGQ3LzAvMEExREU2RkQ4OEJCOUVGNEUzNDlDMTc3NERBOTI2 RTQyMzI2NDc5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkmXAD74Rl8sKyxdGKRD4os0iwsjcQVScRq 5J3z0p6u8BVFav22oMLUxaJ5nNFo0zCLiR6z2oUElrVbsgTWaaiSrQ5mLezK2bHe DfkICt3lzrceKH0LlDY4+WDp9eIfbVx1shNyHysEuuFR40mwyXJx0kmXAQVlTHnk SV7CH1sgAvUh1AnDRh5Hd5WZ27W2gLJUyalxfPm7J+cEhZBt/1/hpXuMBC25hH2r Spntcje6S7Wz4roEm1QJtddmEiP4wuDqZJFS/S6o8KoQw2u96G0ZRZsHTSLQS71y JYQV/7twYaC1YCbR6twpZxW6KubvCj69+f8BbC5ItKG9mvv/FLY= -----END CERTIFICATE-----Generated at Wed Dec 24 22:08:34 2025 by rpki-client