This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: YYmZdhIE1ZVlT0B9X6EemaUtKzc/DeRsZ1S+UHBRW4E= Subject key identifier: F1:69:C4:2D:25:F8:F1:B8:A1:B6:20:98:0F:A6:19:E5:5E:13:5B:D4 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 2F24D036C07B54DB563AED0AA02F9C020E01EBD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04CF Signing time: Wed 17 Dec 2025 19:01:27 +0000 Manifest this update: Wed 17 Dec 2025 18:56:27 +0000 Manifest next update: Sun 21 Dec 2025 06:57:27 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 2: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 3: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: 3W/I48LqQHCmpAE43ZL0mBadcr+hXLjoXYH4LJJ8rJc=) 4: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) 5: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: K39s3wS3Vh4TYLX9M09o/p8vacYQJwPBuPPh6URO38M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 06:57:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:24:d0:36:c0:7b:54:db:56:3a:ed:0a:a0:2f:9c:02:0e:01:eb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Dec 17 18:56:27 2025 GMT Not After : Dec 21 06:57:27 2025 GMT Subject: CN=F169C42D25F8F1B8A1B620980FA619E55E135BD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:c7:a3:98:67:23:90:d9:f1:ee:15:68:f3: d9:10:2d:2d:57:e3:69:80:7d:3b:64:c1:b4:52:01: ea:ff:e4:7e:db:a7:be:1f:c1:1a:06:89:33:d3:2d: 33:37:9e:c8:f5:0c:d6:06:43:93:ec:d4:2a:dc:cb: fd:b1:cd:e1:8b:b5:e5:f0:36:7c:0f:8c:2a:ce:4d: 4b:7a:f5:8c:a2:11:cd:cd:e9:c5:0f:c8:d6:2a:f8: 16:dd:a6:ee:b9:bb:d9:85:91:17:2c:cd:08:80:db: 63:23:d8:dc:6c:14:5d:32:8d:cc:cc:55:c7:eb:39: 1d:5a:19:f4:7e:10:d0:00:b8:ed:bf:77:88:a7:7e: 54:d2:35:95:d5:d1:8e:66:e1:cd:21:40:e3:9b:0a: 47:f9:2e:84:25:b8:41:5d:f1:f0:85:b4:da:2e:fd: f6:1e:46:2c:40:82:77:d7:5f:c2:12:ae:70:a3:75: 5b:d3:14:a2:54:ba:f0:d6:80:0f:52:bd:d3:81:50: da:07:e2:01:4c:2f:0f:32:19:8a:f3:2a:72:f4:cd: e5:ba:d2:d2:21:3b:d3:6a:51:84:a6:92:a5:08:bf: fd:74:5b:20:6d:87:2a:60:ab:f3:19:d0:25:71:83: e4:a0:6e:28:90:f5:11:cb:58:b8:81:59:57:f5:b3: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:69:C4:2D:25:F8:F1:B8:A1:B6:20:98:0F:A6:19:E5:5E:13:5B:D4 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ee:74:c6:12:a5:5a:70:00:87:00:c8:ba:46:b0:e9:ac:3c:f1: 33:04:84:30:32:55:56:e3:cc:9b:51:72:45:0d:31:d5:22:1a: ab:ce:1b:2b:2f:64:ef:47:9d:ba:15:7c:27:4b:2d:b9:74:0c: 5d:51:57:ba:ba:15:97:31:66:51:68:50:24:ed:71:ea:68:53: e7:2c:dd:a5:5b:85:3e:dd:24:b0:6a:79:c5:6a:89:34:40:9a: 27:12:20:6a:03:fa:d8:61:92:06:86:42:25:1d:93:eb:f1:7e: fa:ae:b7:ea:a0:a6:1f:f6:0c:d0:1c:1c:a3:52:60:1d:17:8c: 0e:18:39:74:41:2f:63:b7:9a:68:6c:2d:a0:03:5b:ed:72:f2: 04:54:e3:52:c6:ee:25:46:f1:fc:08:e7:1b:07:f4:be:38:51: d9:df:ff:2f:50:6c:d3:e8:9a:16:48:f1:65:f7:08:6e:ae:1b: ae:69:18:02:46:b4:65:7b:2e:a9:32:b9:59:2f:f1:86:90:90: f5:89:8e:b2:ee:0c:24:21:69:63:07:0e:6d:94:8f:71:4a:3b: df:e6:f1:5a:42:1f:27:bf:cf:03:27:b8:17:f5:13:17:bb:57: 37:7b:03:3f:6c:7d:4c:47:d7:51:16:14:2b:b3:b8:17:08:4f: 13:61:03:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyTQNsB7VNtWOu0KoC+cAg4B69UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNTEyMTcxODU2MjdaFw0yNTEyMjEwNjU3MjdaMDMxMTAvBgNV BAMTKEYxNjlDNDJEMjVGOEYxQjhBMUI2MjA5ODBGQTYxOUU1NUUxMzVCRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/1MejmGcjkNnx7hVo89kQLS1X 42mAfTtkwbRSAer/5H7bp74fwRoGiTPTLTM3nsj1DNYGQ5Ps1Crcy/2xzeGLteXw NnwPjCrOTUt69YyiEc3N6cUPyNYq+Bbdpu65u9mFkRcszQiA22Mj2NxsFF0yjczM VcfrOR1aGfR+ENAAuO2/d4inflTSNZXV0Y5m4c0hQOObCkf5LoQluEFd8fCFtNou /fYeRixAgnfXX8ISrnCjdVvTFKJUuvDWgA9SvdOBUNoH4gFMLw8yGYrzKnL0zeW6 0tIhO9NqUYSmkqUIv/10WyBthypgq/MZ0CVxg+SgbiiQ9RHLWLiBWVf1syJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8WnELSX48bihtiCYD6YZ5V4TW9QwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO50xhKlWnAAhwDIukaw6aw88TMEhDAyVVbj zJtRckUNMdUiGqvOGysvZO9HnboVfCdLLbl0DF1RV7q6FZcxZlFoUCTtcepoU+cs 3aVbhT7dJLBqecVqiTRAmicSIGoD+thhkgaGQiUdk+vxfvqut+qgph/2DNAcHKNS YB0XjA4YOXRBL2O3mmhsLaADW+1y8gRU41LG7iVG8fwI5xsH9L44Udnf/y9QbNPo mhZI8WX3CG6uG65pGAJGtGV7LqkyuVkv8YaQkPWJjrLuDCQhaWMHDm2Uj3FKO9/m 8VpCHye/zwMnuBf1Exe7Vzd7Az9sfUxH11EWFCuzuBcITxNhA3A= -----END CERTIFICATE-----Generated at Fri Dec 19 11:16:56 2025 by rpki-client