This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft File: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft (raw, json) Hash identifier: O0AdxptGm78F1QSWQfGjIbDJlACeRp1NckE8FOrudvQ= Subject key identifier: F2:15:34:91:95:49:19:B0:87:53:F7:61:EF:97:F6:C3:CC:98:00:5A Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Certificate serial: 3C3EF634E2618A57F756361180E9F3DB9F2C21AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft Manifest number: 0398 Signing time: Tue 02 Dec 2025 15:20:57 +0000 Manifest this update: Tue 02 Dec 2025 15:15:57 +0000 Manifest next update: Sat 06 Dec 2025 00:47:57 +0000 Files and hashes: 1: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl (hash: N099A375QqK1IFwnJhJ9tCqMcvjozQJM6G45Y2IHfzM=) 2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: P8qheu64b1l5b4rB30UV/NbiZ7Eie1YYkFGoi6rHg2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:47:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:3e:f6:34:e2:61:8a:57:f7:56:36:11:80:e9:f3:db:9f:2c:21:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Validity Not Before: Dec 2 15:15:57 2025 GMT Not After : Dec 6 00:47:57 2025 GMT Subject: CN=F2153491954919B08753F761EF97F6C3CC98005A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:a2:52:41:93:ee:27:12:b4:c6:03:92:5b: d2:86:db:0e:e6:80:ba:bd:46:10:0b:cd:96:50:48: b9:c9:e3:c2:16:fe:95:c2:2a:01:3d:a3:08:78:d3: c3:ab:7d:68:b6:7d:4c:57:7d:da:46:1b:8f:f3:92: c7:89:b6:58:96:28:b3:42:d4:0c:c9:74:12:e5:33: c2:fd:fa:37:76:f3:c8:b4:b9:ad:ef:fd:c3:82:f2: f8:fd:49:b6:88:5a:91:e5:5e:d8:21:41:6f:b1:91: 83:0a:12:e1:7c:09:54:38:5c:df:9b:6b:28:1f:c8: 90:21:4b:8d:ad:27:bc:91:d9:9a:09:93:d0:50:b6: 71:e8:29:49:55:ab:8f:3e:bc:73:fe:1f:3f:dd:df: 6a:8f:00:58:0c:3a:c1:87:12:64:e4:f8:48:34:25: 88:4a:b3:12:f4:f6:2d:c0:f5:66:67:e3:eb:56:49: 1f:1f:30:da:db:95:6a:cc:5d:73:a0:ba:1a:d7:09: 68:01:ba:78:48:3e:88:10:f2:6b:18:44:b0:00:8d: aa:c9:7e:02:5d:6a:6c:35:72:f2:0b:a0:d4:67:68: 2b:6c:bf:98:79:f6:e5:e9:92:bb:7f:76:0a:c4:50: 00:86:8d:13:71:65:51:2f:ee:57:a3:cc:8b:a8:40: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:34:91:95:49:19:B0:87:53:F7:61:EF:97:F6:C3:CC:98:00:5A X509v3 Authority Key Identifier: keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ef:f1:98:54:36:e2:da:03:5a:9a:d4:f8:93:a9:42:03:94: a0:21:df:2c:6c:39:f0:7a:7c:06:6e:a9:23:1d:64:28:0f:7f: 91:ad:2d:8e:5f:00:e5:02:89:33:b9:6e:c7:2a:03:8f:12:ec: 36:8c:c3:e3:ad:4a:ae:4e:f5:85:88:cb:28:d9:b9:6e:93:16: 5f:22:47:50:a9:f0:9b:c2:cc:c0:cd:1e:f4:5b:11:61:9e:d8: 7b:22:af:c2:1d:fd:f4:d0:c6:35:db:25:ad:fa:1d:2e:0b:bb: b5:ea:34:c2:50:3f:9d:87:9f:e0:b8:85:d1:75:0a:0b:ea:af: ee:65:3d:e8:80:50:f7:a8:e2:ba:7b:dd:54:c3:a2:93:8f:07: 67:94:2d:13:b6:c3:05:f7:37:b1:3d:ba:6f:30:48:d3:b8:22: 70:b0:43:3d:97:8d:f6:72:2f:76:12:7f:1e:f8:5a:2f:7f:ca: 46:64:13:00:03:91:b8:9d:48:c3:e3:d4:58:10:06:76:a1:cf: 94:14:0c:3c:61:29:a5:3b:75:e6:49:55:95:f3:a4:f3:18:c9: a3:9f:6c:e2:cf:e9:03:9c:31:3b:9c:8d:02:d3:80:64:d4:33: 30:89:49:ca:e7:7c:89:99:96:54:53:c9:88:af:29:a0:85:72: 73:9c:4d:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPD72NOJhilf3VjYRgOnz258sIa8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUw QUNGRTc5QjAeFw0yNTEyMDIxNTE1NTdaFw0yNTEyMDYwMDQ3NTdaMDMxMTAvBgNV BAMTKEYyMTUzNDkxOTU0OTE5QjA4NzUzRjc2MUVGOTdGNkMzQ0M5ODAwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/BqJSQZPuJxK0xgOSW9KG2w7m gLq9RhALzZZQSLnJ48IW/pXCKgE9owh408OrfWi2fUxXfdpGG4/zkseJtliWKLNC 1AzJdBLlM8L9+jd288i0ua3v/cOC8vj9SbaIWpHlXtghQW+xkYMKEuF8CVQ4XN+b aygfyJAhS42tJ7yR2ZoJk9BQtnHoKUlVq48+vHP+Hz/d32qPAFgMOsGHEmTk+Eg0 JYhKsxL09i3A9WZn4+tWSR8fMNrblWrMXXOguhrXCWgBunhIPogQ8msYRLAAjarJ fgJdamw1cvILoNRnaCtsv5h59uXpkrt/dgrEUACGjRNxZVEv7lejzIuoQHibAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8hU0kZVJGbCHU/dh75f2w8yYAFowHwYDVR0j BBgwFoAUGIeupaLZ20eeYYFnsv5HJQrP55swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWI5M2UxYy01ZjJhLTQzYTktOTlmMS1mZGQwNDAyZjk0NmUvMC8xODg3QUVBNUEy RDlEQjQ3OUU2MTgxNjdCMkZFNDcyNTBBQ0ZFNzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUwQUNG RTc5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3 MjUwQUNGRTc5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnv8ZhUNuLaA1qa1PiTqUIDlKAh3yxsOfB6 fAZuqSMdZCgPf5GtLY5fAOUCiTO5bscqA48S7DaMw+OtSq5O9YWIyyjZuW6TFl8i R1Cp8JvCzMDNHvRbEWGe2Hsir8Id/fTQxjXbJa36HS4Lu7XqNMJQP52Hn+C4hdF1 Cgvqr+5lPeiAUPeo4rp73VTDopOPB2eULRO2wwX3N7E9um8wSNO4InCwQz2XjfZy L3YSfx74Wi9/ykZkEwADkbidSMPj1FgQBnahz5QUDDxhKaU7deZJVZXzpPMYyaOf bOLP6QOcMTucjQLTgGTUMzCJScrnfImZllRTyYivKaCFcnOcTSE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:18 2025 by rpki-client