This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json) Hash identifier: yKQzw7a2lo7cnuRLhcgo18F4oPBNDWYx95b9aEgH7zA= Subject key identifier: 2F:49:13:24:58:08:7C:53:57:3A:3F:DE:AE:B9:5D:B3:BA:AD:5F:39 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 139918103AEDEBB24BAF50DA79F9B4321FBB167A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft Manifest number: 01F5 Signing time: Mon 01 Dec 2025 09:12:05 +0000 Manifest this update: Mon 01 Dec 2025 09:07:05 +0000 Manifest next update: Thu 04 Dec 2025 15:28:05 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=) 2: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=) 3: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=) 4: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: B7gL94L3mlRvf3NWrk6XO9HgL7tKBzHoGnLnpVLO/Zo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 15:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:99:18:10:3a:ed:eb:b2:4b:af:50:da:79:f9:b4:32:1f:bb:16:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Dec 1 09:07:05 2025 GMT Not After : Dec 4 15:28:05 2025 GMT Subject: CN=2F49132458087C53573A3FDEAEB95DB3BAAD5F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:16:ea:c4:27:21:a3:36:13:f4:a4:77:57: 8d:b5:ec:6e:9d:0e:32:1b:60:ac:8a:d8:7b:d9:d9: 96:ef:32:c3:ee:0d:29:59:97:6d:ad:ca:69:2e:0f: fc:c7:35:41:11:ab:2e:17:ca:5f:2a:9e:83:44:6d: 3f:d1:2c:e8:a9:7f:34:03:88:b3:4f:eb:8b:8f:80: a9:6b:e3:58:69:eb:e8:17:01:00:16:32:ac:d6:47: 34:54:b3:c7:8e:24:ac:c6:ab:37:c7:6d:de:58:c8: 22:22:15:a3:d8:8a:27:28:4c:46:8f:fc:3d:66:0e: 6d:db:6f:4c:1d:ce:a4:85:10:9b:87:e7:b3:16:e5: 92:c6:31:d5:a8:77:f3:82:66:69:ae:bd:26:7f:3a: 4b:ac:c2:88:fe:91:66:25:dd:c5:39:8c:b4:28:4c: 81:8b:27:a6:50:a1:a4:df:e3:13:9e:41:6e:a8:4b: 72:bf:e5:e2:2f:91:44:dd:84:d7:bc:85:20:5d:92: 8f:68:24:48:14:05:6f:6b:9f:aa:ae:84:1b:4a:fe: e1:3f:5b:5a:bc:b2:f7:45:3e:a9:7a:fd:96:fb:62: 81:72:b9:be:f3:68:a4:58:27:5b:b4:ad:19:0c:6e: 7f:4d:b2:b2:cb:fd:18:d0:76:da:64:1f:dd:97:03: 66:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:49:13:24:58:08:7C:53:57:3A:3F:DE:AE:B9:5D:B3:BA:AD:5F:39 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:06:c4:a7:b6:c7:a3:37:fa:02:6c:5a:d4:d8:ea:52:c9: b2:a4:54:af:a7:d7:9f:28:58:23:8e:04:16:e9:8c:b8:b3:4b: bc:6f:ee:a5:64:39:5f:76:bb:27:51:e1:b6:f5:0a:6c:2d:ba: 6f:27:df:8b:12:67:6e:6c:c5:8d:5d:78:8b:83:36:ea:c4:a7: e8:e8:31:48:aa:f6:de:f5:ff:fb:a7:57:97:98:e2:83:90:75: 76:ab:41:20:a2:0c:e2:ed:17:3f:0a:75:c1:31:9b:36:87:4e: 63:9d:e3:bf:f9:f3:32:34:f1:ae:7e:40:0a:98:99:68:ce:35: a3:de:83:93:90:f6:29:b3:47:aa:ce:4b:ed:25:aa:2a:b5:c0: 03:31:68:9a:5a:29:20:b6:2e:da:bf:75:bf:20:75:d5:7c:0a: 3a:6c:59:af:ec:85:4e:b2:00:27:18:23:58:72:56:e8:92:d8: f1:67:31:7e:ca:ea:af:c3:df:ee:5d:a7:0b:2c:88:f8:32:b7: 44:e3:37:0a:43:9d:1b:32:02:86:4f:f6:80:8d:be:92:9b:10: ac:22:be:fc:f8:ac:3c:71:04:89:2a:dd:0c:8d:3e:72:3c:9c: 42:4e:61:ee:fa:14:45:bc:56:b0:60:0c:e4:87:8a:1c:d0:c3: a9:d9:01:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5kYEDrt67JLr1Daefm0Mh+7FnowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNTEyMDEwOTA3MDVaFw0yNTEyMDQxNTI4MDVaMDMxMTAvBgNV BAMTKDJGNDkxMzI0NTgwODdDNTM1NzNBM0ZERUFFQjk1REIzQkFBRDVGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChdRbqxCchozYT9KR3V4217G6d DjIbYKyK2HvZ2ZbvMsPuDSlZl22tymkuD/zHNUERqy4Xyl8qnoNEbT/RLOipfzQD iLNP64uPgKlr41hp6+gXAQAWMqzWRzRUs8eOJKzGqzfHbd5YyCIiFaPYiicoTEaP /D1mDm3bb0wdzqSFEJuH57MW5ZLGMdWod/OCZmmuvSZ/Okuswoj+kWYl3cU5jLQo TIGLJ6ZQoaTf4xOeQW6oS3K/5eIvkUTdhNe8hSBdko9oJEgUBW9rn6quhBtK/uE/ W1q8svdFPql6/Zb7YoFyub7zaKRYJ1u0rRkMbn9NsrLL/RjQdtpkH92XA2aRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL0kTJFgIfFNXOj/errlds7qtXzkwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERHBsSntsejN/oCbFrU2OpSybKkVK+n158o WCOOBBbpjLizS7xv7qVkOV92uydR4bb1Cmwtum8n34sSZ25sxY1deIuDNurEp+jo MUiq9t71//unV5eY4oOQdXarQSCiDOLtFz8KdcExmzaHTmOd47/58zI08a5+QAqY mWjONaPeg5OQ9imzR6rOS+0lqiq1wAMxaJpaKSC2Ltq/db8gddV8CjpsWa/shU6y ACcYI1hyVuiS2PFnMX7K6q/D3+5dpwssiPgyt0TjNwpDnRsyAoZP9oCNvpKbEKwi vvz4rDxxBIkq3QyNPnI8nEJOYe76FEW8VrBgDOSHihzQw6nZAUs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:45 2025 by rpki-client