This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: 6fSlCjUbq4NcEAGxwEk/Z/FBZwye6lGCLago6wEWL9I= Subject key identifier: C6:60:AF:81:FB:2D:9D:D4:67:79:F8:2C:3E:7B:7E:EB:BE:53:DD:23 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 4F765A15007798899B1DBDF6CD3C73F2CB06FB3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 020E Signing time: Fri 19 Dec 2025 22:40:44 +0000 Manifest this update: Fri 19 Dec 2025 22:35:44 +0000 Manifest next update: Tue 23 Dec 2025 03:18:44 +0000 Files and hashes: 1: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: o1yLZjkQKELKhOVFlgMiM5pJzmHY6gIci0+kUBQUEO4=) 2: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) 3: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 4: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 5: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Dec 2025 03:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:76:5a:15:00:77:98:89:9b:1d:bd:f6:cd:3c:73:f2:cb:06:fb:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Dec 19 22:35:44 2025 GMT Not After : Dec 23 03:18:44 2025 GMT Subject: CN=C660AF81FB2D9DD46779F82C3E7B7EEBBE53DD23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f3:74:ad:4a:cb:e9:1d:e6:3b:83:e7:d9:2a: 7a:bd:1c:23:44:f8:16:2a:3f:d5:02:96:d4:74:d1: 3f:19:5f:e7:8d:9c:83:ee:ca:cc:5c:ad:2f:f3:fa: 23:d9:92:cf:a4:42:25:1d:e4:27:be:48:01:31:1c: 7b:07:e9:aa:77:28:33:90:b4:89:a1:44:cc:11:b7: c8:0c:33:2d:64:1f:59:b3:30:84:a3:a8:96:4c:0c: ff:47:d2:79:f3:d4:a4:26:a9:39:6a:d7:85:8b:44: 48:5e:d3:a0:b0:50:e6:71:76:5a:e0:62:c8:3c:ba: b1:ed:1e:4c:6d:1a:7e:dc:13:bc:bf:61:81:e9:a3: ab:53:f0:c5:52:d0:81:03:c1:c0:41:80:49:63:87: 26:c6:86:bc:31:0c:4d:09:4d:5e:cd:da:04:76:5b: 1f:77:d7:b1:12:af:cb:5e:9a:44:77:5f:a3:c9:c5: 2e:3a:73:98:e6:5a:7f:36:68:9b:c7:96:3b:e2:c4: 27:dd:6a:66:69:9d:ee:db:9b:73:bc:ef:37:e7:d9: 3a:8e:b5:bd:29:56:9d:e5:e0:55:f6:5b:57:96:64: 7d:78:e4:8a:67:98:4e:1d:98:1f:7f:73:c8:8a:05: b3:f0:8a:1c:57:4c:4f:2e:65:6f:59:a1:b8:8a:3f: 0a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:60:AF:81:FB:2D:9D:D4:67:79:F8:2C:3E:7B:7E:EB:BE:53:DD:23 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:30:53:f3:3b:83:8c:ee:75:8f:e8:2a:0c:44:65:b5:d5:1a: 44:0a:d9:72:e4:25:44:1e:17:b6:47:34:0f:19:9f:87:76:52: 37:de:76:ee:d8:09:21:b6:fa:60:ee:fb:79:f2:a1:5f:53:9a: 43:ba:80:8e:b9:c9:69:fa:1a:39:da:a7:64:63:93:9a:19:bd: 12:ed:6a:94:a4:2a:d4:9f:f5:dc:89:8b:eb:92:4c:83:69:9d: 29:1e:33:c0:93:ed:66:09:a4:a1:6c:7d:a1:cd:23:c4:c6:21: d4:16:89:66:0a:e6:3e:1a:f6:c9:84:14:ed:3e:a1:ad:c3:18: fe:33:70:02:ab:db:e7:21:6a:3e:31:b8:ac:a1:5a:1f:79:9a: 9e:71:78:9f:88:39:0c:20:59:6b:78:78:6b:2a:06:1b:ef:b7: 4e:14:06:f6:3e:82:ac:4a:67:be:0c:0c:ac:45:33:f7:37:32: df:67:b9:f6:fb:76:60:c2:c3:8f:81:21:6f:c7:b4:9c:db:57: 40:14:29:0b:a0:8b:39:b3:7d:70:2b:60:57:3e:cf:1d:c1:40: 82:14:90:00:49:78:56:df:3b:d9:56:ee:cc:b5:31:1b:8d:36: 80:63:14:f2:97:57:10:e0:65:28:51:d8:e1:e3:22:c7:fc:7a: 6a:eb:1b:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3ZaFQB3mImbHb32zTxz8ssG+z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNTEyMTkyMjM1NDRaFw0yNTEyMjMwMzE4NDRaMDMxMTAvBgNV BAMTKEM2NjBBRjgxRkIyRDlERDQ2Nzc5RjgyQzNFN0I3RUVCQkU1M0REMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC283StSsvpHeY7g+fZKnq9HCNE +BYqP9UCltR00T8ZX+eNnIPuysxcrS/z+iPZks+kQiUd5Ce+SAExHHsH6ap3KDOQ tImhRMwRt8gMMy1kH1mzMISjqJZMDP9H0nnz1KQmqTlq14WLREhe06CwUOZxdlrg Ysg8urHtHkxtGn7cE7y/YYHpo6tT8MVS0IEDwcBBgEljhybGhrwxDE0JTV7N2gR2 Wx9317ESr8temkR3X6PJxS46c5jmWn82aJvHljvixCfdamZpne7bm3O87zfn2TqO tb0pVp3l4FX2W1eWZH145IpnmE4dmB9/c8iKBbPwihxXTE8uZW9ZobiKPwoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmCvgfstndRnefgsPnt+675T3SMwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4wU/M7g4zudY/oKgxEZbXVGkQK2XLkJUQe F7ZHNA8Zn4d2Ujfedu7YCSG2+mDu+3nyoV9TmkO6gI65yWn6Gjnap2Rjk5oZvRLt apSkKtSf9dyJi+uSTINpnSkeM8CT7WYJpKFsfaHNI8TGIdQWiWYK5j4a9smEFO0+ oa3DGP4zcAKr2+chaj4xuKyhWh95mp5xeJ+IOQwgWWt4eGsqBhvvt04UBvY+gqxK Z74MDKxFM/c3Mt9nufb7dmDCw4+BIW/HtJzbV0AUKQugizmzfXArYFc+zx3BQIIU kABJeFbfO9lW7sy1MRuNNoBjFPKXVxDgZShR2OHjIsf8emrrG8I= -----END CERTIFICATE-----Generated at Sun Dec 21 05:51:04 2025 by rpki-client