This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: e87fbR9So4cKeSFNK2xdI+mkCdwUk+9WMRJe3YPd5CY= Subject key identifier: 5A:25:D6:D6:C4:3F:94:92:05:97:4D:F9:3C:4E:67:55:7D:D9:B5:17 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 75BC1054B07602C50A09D1D9BF2D0BF60FF8A96E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 0218 Signing time: Tue 02 Dec 2025 06:42:06 +0000 Manifest this update: Tue 02 Dec 2025 06:37:06 +0000 Manifest next update: Fri 05 Dec 2025 15:12:06 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: spnIe6yjV+hSsQ6FIdA91GQ1j7hjBal99MACD89Y/Pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 15:12:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:bc:10:54:b0:76:02:c5:0a:09:d1:d9:bf:2d:0b:f6:0f:f8:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Dec 2 06:37:06 2025 GMT Not After : Dec 5 15:12:06 2025 GMT Subject: CN=5A25D6D6C43F949205974DF93C4E67557DD9B517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a2:56:60:c6:5b:bf:75:ee:1d:fa:84:ad:77: b3:59:c9:d8:d3:d9:c8:68:5d:e5:67:19:14:74:96: 01:65:a9:5a:9a:79:fa:55:4d:7e:24:79:bf:dc:9a: ac:28:cd:b6:69:b1:b1:c6:56:e5:d1:2b:11:6b:76: 03:9a:9d:ce:65:96:8a:d1:5d:fa:94:0d:59:1b:cd: 40:c9:2a:8d:35:cf:15:4e:99:96:3b:33:11:82:b9: eb:61:a0:18:9c:b7:8f:f2:40:16:1b:fe:9c:55:0b: 90:06:12:e7:36:a1:13:1f:50:66:75:cc:12:ba:85: a5:49:59:f5:3c:7e:83:ce:eb:f2:2f:c9:30:5c:5b: 7c:f0:1e:e8:c3:00:45:0a:cb:ab:ff:8e:06:38:f4: 15:81:94:ad:0d:79:58:f8:e0:ec:4d:6e:62:88:63: 63:ab:d5:33:04:e2:6c:16:67:aa:e2:5e:b2:25:a3: 6e:7a:26:5f:80:2d:cb:12:bd:09:3a:74:79:5f:ea: 92:78:14:2a:d1:23:61:16:69:5a:7c:76:60:d3:fb: e4:9d:29:a6:44:55:18:79:38:6f:96:6c:aa:83:72: 2c:5f:b9:a2:1d:91:8d:d5:19:cc:af:50:88:12:a5: 19:56:1c:2c:3c:0e:b1:19:59:b4:1e:4f:8f:c2:30: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:D6:D6:C4:3F:94:92:05:97:4D:F9:3C:4E:67:55:7D:D9:B5:17 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:75:bd:c0:ba:2f:0b:c6:5b:6a:7c:18:d9:c7:7e:ec:fd:96: 2a:76:9d:c9:2b:d6:22:61:a1:5d:1a:a8:ee:8a:96:0e:51:5e: 40:d5:9c:46:2a:d3:c0:fd:1f:31:85:70:6b:08:4d:b5:84:0a: b2:b8:67:7e:f0:7e:96:e4:18:69:7a:9d:bf:a0:5b:ec:3e:cc: 62:5b:54:c5:99:f2:f7:12:4f:98:16:1c:7b:ee:d3:72:7a:b9: ab:ef:88:a1:b8:64:6c:2d:06:65:d2:09:b5:53:06:8c:3b:95: ad:e7:b3:60:d2:47:d1:f7:7c:b9:ec:7f:d6:14:31:c8:01:e5: 08:7f:a2:9d:39:e7:42:47:9d:10:19:ad:5f:c1:b6:13:bd:2b: a0:25:d2:84:a2:15:af:1f:85:9f:54:7e:26:54:bc:f2:c8:fd: 41:aa:3d:91:78:f3:79:80:7c:44:9c:ae:d1:40:68:e1:35:10: 8c:0c:03:36:8c:0e:87:12:dd:3a:ea:79:97:c7:52:7c:ef:e5: 2e:41:0e:e6:fe:2a:da:d6:e0:22:b8:bd:0c:ac:ed:ba:cb:1e: 28:19:d7:bd:0d:2b:21:99:f1:79:33:6e:5d:be:a0:68:9a:66: 09:3d:13:41:38:fa:c6:d6:f4:23:73:b8:95:10:5f:05:1c:4c: 83:44:a7:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdbwQVLB2AsUKCdHZvy0L9g/4qW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTEyMDIwNjM3MDZaFw0yNTEyMDUxNTEyMDZaMDMxMTAvBgNV BAMTKDVBMjVENkQ2QzQzRjk0OTIwNTk3NERGOTNDNEU2NzU1N0REOUI1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqolZgxlu/de4d+oStd7NZydjT 2choXeVnGRR0lgFlqVqaefpVTX4keb/cmqwozbZpsbHGVuXRKxFrdgOanc5llorR XfqUDVkbzUDJKo01zxVOmZY7MxGCuethoBict4/yQBYb/pxVC5AGEuc2oRMfUGZ1 zBK6haVJWfU8foPO6/IvyTBcW3zwHujDAEUKy6v/jgY49BWBlK0NeVj44OxNbmKI Y2Or1TME4mwWZ6riXrIlo256Jl+ALcsSvQk6dHlf6pJ4FCrRI2EWaVp8dmDT++Sd KaZEVRh5OG+WbKqDcixfuaIdkY3VGcyvUIgSpRlWHCw8DrEZWbQeT4/CMPodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWiXW1sQ/lJIFl035PE5nVX3ZtRcwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHx1vcC6LwvGW2p8GNnHfuz9lip2nckr1iJh oV0aqO6Klg5RXkDVnEYq08D9HzGFcGsITbWECrK4Z37wfpbkGGl6nb+gW+w+zGJb VMWZ8vcST5gWHHvu03J6uavviKG4ZGwtBmXSCbVTBow7la3ns2DSR9H3fLnsf9YU McgB5Qh/op0550JHnRAZrV/BthO9K6Al0oSiFa8fhZ9UfiZUvPLI/UGqPZF483mA fEScrtFAaOE1EIwMAzaMDocS3TrqeZfHUnzv5S5BDub+KtrW4CK4vQys7brLHigZ 170NKyGZ8Xkzbl2+oGiaZgk9E0E4+sbW9CNzuJUQXwUcTINEp9A= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:11 2025 by rpki-client