This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: eDVKF8JS5bvdjEApuJwhGOoNNEGHTWJX3Pky6BaNYco= Subject key identifier: E3:BE:14:6D:28:92:CE:00:32:97:FD:14:E1:7B:A0:D2:12:D7:E5:3B Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 789B2752426293760ED9A29163B97DD85DEA052D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02DE Signing time: Tue 16 Dec 2025 17:52:30 +0000 Manifest this update: Tue 16 Dec 2025 17:47:30 +0000 Manifest next update: Fri 19 Dec 2025 22:35:30 +0000 Files and hashes: 1: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) 2: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: m7skBIw1YFhVhvyWFt5b9qVjdw2G9UE2sOrP4yz9zIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 22:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9b:27:52:42:62:93:76:0e:d9:a2:91:63:b9:7d:d8:5d:ea:05:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Dec 16 17:47:30 2025 GMT Not After : Dec 19 22:35:30 2025 GMT Subject: CN=E3BE146D2892CE003297FD14E17BA0D212D7E53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:cb:d7:04:d9:0d:d2:ee:74:94:82:7a:6f: 28:ed:f2:71:b0:2c:9c:61:6d:83:95:4e:cc:9d:59: 16:1e:37:26:15:86:67:36:0a:f7:e9:7d:04:ff:09: 64:b7:74:ed:b2:99:fe:31:17:66:bd:f4:0b:81:ed: 54:db:0f:45:9d:0c:50:54:25:13:7c:e2:03:eb:a3: 04:03:73:bc:c1:27:46:e9:0f:7e:61:f3:48:93:d4: df:c5:9a:39:e5:a1:9f:9a:17:d4:31:0e:f1:15:96: 6c:18:f1:55:1b:27:dc:4d:d0:c2:9f:17:a7:4c:3c: e7:e7:3e:28:be:c7:db:0d:79:d8:45:0f:ee:90:24: e9:b9:a1:16:60:2f:90:20:a8:58:6b:55:35:70:00: f6:1c:c1:a4:08:90:9f:38:2a:2b:bc:3e:8d:16:53: 19:a3:ee:db:a4:6d:e4:4b:5a:51:af:de:c4:16:36: 58:49:5d:79:dc:5b:66:65:61:dd:f7:3e:2e:1e:3e: 13:a8:94:4c:5f:32:94:86:1d:1a:02:fb:11:37:e3: 76:49:82:5f:93:b5:9e:18:cf:97:9b:35:bf:20:d7: 4d:c0:f9:bf:86:9d:78:56:0f:14:e5:39:23:01:ec: fd:0d:9f:72:fb:3f:4a:0e:07:db:6c:60:1c:86:28: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BE:14:6D:28:92:CE:00:32:97:FD:14:E1:7B:A0:D2:12:D7:E5:3B X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:77:38:f1:2e:be:0d:e3:24:47:44:3a:0e:65:8f:49:c0:e7: 9c:5c:af:e5:2a:e7:0f:89:71:78:e9:62:c3:e6:da:88:30:e6: a4:69:c4:7d:63:15:3e:e1:1e:f2:ff:76:2b:81:8f:8b:ea:b6: eb:0c:ab:6f:d7:6e:fa:3a:61:9c:92:8a:5d:8c:02:bf:fb:ff: 65:0e:3b:6b:d9:5a:ed:fa:a9:11:e9:21:ad:58:c6:12:c7:cc: ef:de:a0:56:fd:70:13:9c:6f:d5:b5:30:dc:f6:9e:e2:cb:67: 9c:4b:4b:e8:c8:f2:ef:ad:09:4b:56:21:a5:a6:ed:61:bc:46: fd:8b:c3:0c:a8:3a:52:94:a3:74:70:56:61:70:ec:fb:0f:35: eb:46:3a:c4:67:27:88:61:29:54:d6:b7:e6:a9:cd:71:d3:dc: 91:de:f0:cf:6d:26:06:ab:f3:7f:f4:d2:42:35:a4:1b:ed:ea: d9:65:55:90:2c:ec:ad:68:64:a0:b8:12:8d:97:9e:60:20:7e: 60:a4:28:24:3d:2b:50:10:9a:25:99:d4:42:cc:62:14:a0:37: 20:2e:00:35:fd:a4:05:56:ce:57:6b:72:f1:e8:79:e7:8e:1a: a9:a2:80:73:6b:88:ab:f3:1a:a0:80:72:27:c5:64:df:35:77: 07:aa:68:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJsnUkJik3YO2aKRY7l92F3qBS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNTEyMTYxNzQ3MzBaFw0yNTEyMTkyMjM1MzBaMDMxMTAvBgNV BAMTKEUzQkUxNDZEMjg5MkNFMDAzMjk3RkQxNEUxN0JBMEQyMTJEN0U1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+QMvXBNkN0u50lIJ6byjt8nGw LJxhbYOVTsydWRYeNyYVhmc2CvfpfQT/CWS3dO2ymf4xF2a99AuB7VTbD0WdDFBU JRN84gProwQDc7zBJ0bpD35h80iT1N/FmjnloZ+aF9QxDvEVlmwY8VUbJ9xN0MKf F6dMPOfnPii+x9sNedhFD+6QJOm5oRZgL5AgqFhrVTVwAPYcwaQIkJ84Kiu8Po0W Uxmj7tukbeRLWlGv3sQWNlhJXXncW2ZlYd33Pi4ePhOolExfMpSGHRoC+xE343ZJ gl+TtZ4Yz5ebNb8g103A+b+GnXhWDxTlOSMB7P0Nn3L7P0oOB9tsYByGKEwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU474UbSiSzgAyl/0U4Xug0hLX5TswHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZ3OPEuvg3jJEdEOg5lj0nA55xcr+Uq5w+J cXjpYsPm2ogw5qRpxH1jFT7hHvL/diuBj4vqtusMq2/Xbvo6YZySil2MAr/7/2UO O2vZWu36qRHpIa1YxhLHzO/eoFb9cBOcb9W1MNz2nuLLZ5xLS+jI8u+tCUtWIaWm 7WG8Rv2LwwyoOlKUo3RwVmFw7PsPNetGOsRnJ4hhKVTWt+apzXHT3JHe8M9tJgar 83/00kI1pBvt6tllVZAs7K1oZKC4Eo2XnmAgfmCkKCQ9K1AQmiWZ1ELMYhSgNyAu ADX9pAVWzldrcvHoeeeOGqmigHNriKvzGqCAcifFZN81dweqaFk= -----END CERTIFICATE-----Generated at Thu Dec 18 01:14:17 2025 by rpki-client