This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: utsWofAnqkpxtQFTs5ok9rBt/NBoC5sAnuKtElScjuY= Subject key identifier: 2E:04:29:A4:B3:46:3A:83:FB:B0:DF:83:45:31:5D:85:4A:AF:81:39 Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 7DF38A5C9AE569273BC4AB80011D4545790AE3FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 018D Signing time: Tue 02 Dec 2025 19:02:14 +0000 Manifest this update: Tue 02 Dec 2025 18:57:14 +0000 Manifest next update: Sat 06 Dec 2025 02:36:14 +0000 Files and hashes: 1: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: uNmo+cP/qKF2zxj9DBegdKz6ZhmUS2FohKOn6O9g4sw=) 2: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f3:8a:5c:9a:e5:69:27:3b:c4:ab:80:01:1d:45:45:79:0a:e3:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Dec 2 18:57:14 2025 GMT Not After : Dec 6 02:36:14 2025 GMT Subject: CN=2E0429A4B3463A83FBB0DF8345315D854AAF8139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ba:32:5e:7e:7d:db:eb:ab:57:9a:46:e2:f7: 4f:85:b0:86:e1:b7:a1:63:ee:a4:42:e8:41:0e:d7: cb:33:d0:20:c2:55:d3:0b:7a:e1:5c:67:d4:53:c4: 91:90:d8:cc:f2:bb:a4:57:81:01:fc:84:fb:05:56: a9:e0:92:d2:1b:68:10:2e:ac:c2:f5:89:20:98:78: 7e:69:88:6b:16:07:db:e6:86:b4:73:b8:75:d4:28: 99:10:0f:91:85:b3:c8:0e:4a:65:b6:70:1b:65:ae: 6b:68:e5:b6:8e:32:d1:43:b5:c1:c8:56:9d:59:35: 00:bd:12:1a:13:f8:15:33:de:2d:93:1c:2c:5c:53: 00:f2:11:97:42:dc:e0:0b:a7:49:b1:84:04:ba:0d: 14:9b:82:b1:d3:ca:ec:3e:db:58:87:c2:8e:95:e8: 5c:e7:47:59:7e:df:59:c7:1a:f7:63:59:29:72:3b: 95:5e:4e:07:82:b5:a3:d6:6a:04:0f:88:17:49:a5: ad:99:93:28:32:59:10:1c:b7:f3:6e:95:c8:d1:3f: dc:66:fc:56:cb:e0:f1:3e:ca:22:31:c1:c7:81:4b: 19:5c:b6:10:16:4a:45:f9:79:39:21:de:dc:40:1a: b8:8c:11:80:b3:f0:6f:36:c2:9e:98:90:ca:26:30: a1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:04:29:A4:B3:46:3A:83:FB:B0:DF:83:45:31:5D:85:4A:AF:81:39 X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a3:2a:aa:ce:b8:af:d0:44:31:12:cd:d9:41:22:33:df:73: f0:8d:2a:ac:8e:92:31:ef:ac:14:ef:cb:5b:27:59:a6:f0:b5: 34:11:97:98:c4:18:99:07:a1:33:2d:06:ca:ad:eb:20:57:51: dc:13:2d:fc:72:85:98:01:fa:a8:a4:f7:1b:a5:30:82:76:2d: ae:39:39:79:50:1a:20:6d:9b:03:03:f5:45:a5:42:d7:cc:e4: 7b:7c:c8:fc:89:45:68:00:6f:85:49:eb:72:0e:f8:c5:40:21: f4:b7:80:82:14:d5:8a:16:bb:48:d0:69:10:04:5b:4a:7b:d9: b5:70:cf:82:d6:c1:70:d0:5a:fe:95:e0:4d:cb:4b:e1:13:11: f4:9d:dc:cc:fd:33:eb:49:4c:13:f0:0d:32:2e:19:80:05:5e: c1:69:d9:cd:91:25:c4:a5:5f:df:30:93:eb:f9:a8:68:21:2c: eb:3f:dd:90:e2:6a:0d:32:5c:b7:8c:02:cf:ee:9d:d3:cf:58: 67:ca:8d:0b:d9:19:07:7b:00:da:17:5f:31:a1:c8:6d:51:bf: 16:b2:0b:9b:b6:32:02:01:21:95:57:46:b1:e8:21:27:b6:f5: c9:5b:36:b7:4a:58:38:ee:4b:79:58:f4:b7:20:f3:9b:d1:71: 66:5d:2f:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffOKXJrlaSc7xKuAAR1FRXkK4/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTEyMDIxODU3MTRaFw0yNTEyMDYwMjM2MTRaMDMxMTAvBgNV BAMTKDJFMDQyOUE0QjM0NjNBODNGQkIwREY4MzQ1MzE1RDg1NEFBRjgxMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdujJefn3b66tXmkbi90+FsIbh t6Fj7qRC6EEO18sz0CDCVdMLeuFcZ9RTxJGQ2Mzyu6RXgQH8hPsFVqngktIbaBAu rML1iSCYeH5piGsWB9vmhrRzuHXUKJkQD5GFs8gOSmW2cBtlrmto5baOMtFDtcHI Vp1ZNQC9EhoT+BUz3i2THCxcUwDyEZdC3OALp0mxhAS6DRSbgrHTyuw+21iHwo6V 6FznR1l+31nHGvdjWSlyO5VeTgeCtaPWagQPiBdJpa2ZkygyWRAct/NulcjRP9xm /FbL4PE+yiIxwceBSxlcthAWSkX5eTkh3txAGriMEYCz8G82wp6YkMomMKH5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgQppLNGOoP7sN+DRTFdhUqvgTkwHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGjKqrOuK/QRDESzdlBIjPfc/CNKqyOkjHv rBTvy1snWabwtTQRl5jEGJkHoTMtBsqt6yBXUdwTLfxyhZgB+qik9xulMIJ2La45 OXlQGiBtmwMD9UWlQtfM5Ht8yPyJRWgAb4VJ63IO+MVAIfS3gIIU1YoWu0jQaRAE W0p72bVwz4LWwXDQWv6V4E3LS+ETEfSd3Mz9M+tJTBPwDTIuGYAFXsFp2c2RJcSl X98wk+v5qGghLOs/3ZDiag0yXLeMAs/undPPWGfKjQvZGQd7ANoXXzGhyG1Rvxay C5u2MgIBIZVXRrHoISe29clbNrdKWDjuS3lY9Lcg85vRcWZdL2Y= -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:31 2025 by rpki-client