This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: R8qV8HLq7q7xxkaYrUsUYhqpMyQwgvmtI621Tv5dWeI= Subject key identifier: 18:66:B1:C8:98:4E:19:21:CA:7C:3E:15:EF:24:10:99:C7:33:62:88 Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 11D3B1F68A461BE60763F6AEDE4C4267C45B5FB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 02D9 Signing time: Mon 01 Dec 2025 11:51:38 +0000 Manifest this update: Mon 01 Dec 2025 11:46:38 +0000 Manifest next update: Thu 04 Dec 2025 20:18:38 +0000 Files and hashes: 1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: R8DzxeI2FttLMbF8r5RjhdwR92p2tR1cbNm0DjAcmlQ=) 2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: 0HKqUWxZbI9n+PEVKoTLIbRadeKyFkIWvHvlRbtvAq0=) 3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: fmmesiS1WcI4ovgUB3oEnMzQaroROS18Jh1l+/FK5Mw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d3:b1:f6:8a:46:1b:e6:07:63:f6:ae:de:4c:42:67:c4:5b:5f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Dec 1 11:46:38 2025 GMT Not After : Dec 4 20:18:38 2025 GMT Subject: CN=1866B1C8984E1921CA7C3E15EF241099C7336288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:3a:8f:eb:87:69:5f:bb:6d:e3:d9:b6:94: 83:e4:60:9b:c9:fd:3f:36:31:70:ee:ce:1d:85:7a: 90:d0:ee:2d:17:f3:48:95:07:dc:c3:70:62:4d:73: 7e:65:19:a3:d4:b9:70:2e:ec:60:4b:e5:ab:2d:51: ca:cd:89:80:9a:d3:dd:db:6b:70:d0:09:12:94:14: 0f:f9:d4:54:cd:97:f4:57:93:16:8d:b2:a9:39:9e: 46:0d:a1:47:16:e4:60:83:d8:d4:d9:0d:da:7f:1c: 08:2b:ab:ba:c5:ef:f6:4d:f4:a2:94:d3:2b:63:b0: cb:7e:8b:ab:13:16:2c:f1:fa:66:26:bc:9a:35:b3: 4d:2f:9c:bc:1c:f3:e2:7c:5c:01:cd:69:e0:09:c3: 7b:fd:fa:ea:fe:09:f4:a5:cf:eb:25:5a:64:dc:90: 17:c9:ae:0d:80:cd:48:5b:de:0a:da:96:d1:b5:8e: fc:7a:13:36:48:c0:11:5b:c4:0b:2d:99:78:b7:e3: 6b:bc:3f:6b:af:37:d5:2e:69:9c:dc:bc:69:df:ba: 2a:c2:e0:38:0a:fe:c9:c7:d0:e5:3f:ff:81:70:c9: 4e:e0:c2:2b:19:4e:f7:ef:d1:55:04:77:9b:d8:7c: 27:dd:14:04:60:b5:0b:d2:db:91:9a:c2:92:71:18: 24:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:B1:C8:98:4E:19:21:CA:7C:3E:15:EF:24:10:99:C7:33:62:88 X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6f:35:ee:7d:84:37:9d:8c:8f:86:fa:74:35:cf:2f:99:cd: ed:80:58:62:81:cc:88:18:f9:53:a7:1a:f3:a0:e7:9a:4f:f6: af:a6:ed:01:30:4b:98:4d:dc:db:51:0e:99:f3:f5:e6:94:2b: ef:da:3e:44:59:0e:a5:c3:1a:48:ef:90:a9:2a:29:7b:5c:fe: e1:65:97:55:f7:bd:5d:d3:02:7d:f9:9c:27:5a:89:27:2f:c9: 4c:e0:d3:61:6d:20:3d:9f:4d:9a:0e:26:5a:d9:5a:7b:49:89: 05:d8:04:5c:f8:df:9b:95:15:c6:27:57:7b:36:ec:00:0e:99: 5f:d1:6a:0f:0b:46:cd:4f:2a:7c:6b:5c:cc:1c:cf:17:0c:b6: aa:ea:0f:8a:b8:3f:33:7b:2c:29:a8:a4:7e:94:b4:70:07:8d: 62:fa:64:46:3d:de:d7:3e:c4:67:38:14:75:69:cb:3a:d3:a7: 9c:19:15:50:65:36:ce:04:24:3d:03:e8:94:e0:a4:38:1f:70: ec:ce:a8:cd:95:fb:8b:67:45:80:cd:4b:ff:6a:ba:ad:d2:c3: d0:a2:8b:4c:3d:c9:43:65:41:e7:2c:59:3a:0e:06:f5:2d:39: 3a:a9:61:cd:a4:b8:a2:51:4c:c3:1e:28:71:db:a7:56:68:23: 65:39:12:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEdOx9opGG+YHY/au3kxCZ8RbX7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNTEyMDExMTQ2MzhaFw0yNTEyMDQyMDE4MzhaMDMxMTAvBgNV BAMTKDE4NjZCMUM4OTg0RTE5MjFDQTdDM0UxNUVGMjQxMDk5QzczMzYyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavjqP64dpX7tt49m2lIPkYJvJ /T82MXDuzh2FepDQ7i0X80iVB9zDcGJNc35lGaPUuXAu7GBL5astUcrNiYCa093b a3DQCRKUFA/51FTNl/RXkxaNsqk5nkYNoUcW5GCD2NTZDdp/HAgrq7rF7/ZN9KKU 0ytjsMt+i6sTFizx+mYmvJo1s00vnLwc8+J8XAHNaeAJw3v9+ur+CfSlz+slWmTc kBfJrg2AzUhb3graltG1jvx6EzZIwBFbxAstmXi342u8P2uvN9UuaZzcvGnfuirC 4DgK/snH0OU//4FwyU7gwisZTvfv0VUEd5vYfCfdFARgtQvS25GawpJxGCQFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGGaxyJhOGSHKfD4V7yQQmcczYogwHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5vNe59hDedjI+G+nQ1zy+Zze2AWGKBzIgY +VOnGvOg55pP9q+m7QEwS5hN3NtRDpnz9eaUK+/aPkRZDqXDGkjvkKkqKXtc/uFl l1X3vV3TAn35nCdaiScvyUzg02FtID2fTZoOJlrZWntJiQXYBFz435uVFcYnV3s2 7AAOmV/Rag8LRs1PKnxrXMwczxcMtqrqD4q4PzN7LCmopH6UtHAHjWL6ZEY93tc+ xGc4FHVpyzrTp5wZFVBlNs4EJD0D6JTgpDgfcOzOqM2V+4tnRYDNS/9quq3Sw9Ci i0w9yUNlQecsWToOBvUtOTqpYc2kuKJRTMMeKHHbp1ZoI2U5Eq8= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:16 2025 by rpki-client