This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: peO3Vu0mJOkVIWElLrlTsbpSuJKwpT3C9CrJpKsBTjo= Subject key identifier: A8:A3:CE:43:A7:EE:EF:2A:C9:51:F0:83:C5:0A:4F:B3:42:AE:5A:0F Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 3014902485AD68122E7631A5CE3134BD6F6D73CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: BA Signing time: Tue 02 Dec 2025 03:05:11 +0000 Manifest this update: Tue 02 Dec 2025 03:00:11 +0000 Manifest next update: Fri 05 Dec 2025 04:23:11 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: yXYQILbH6HGHJgzz8v+dzx92Q/PFSc3Df84wOh/ig+g=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 04:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:14:90:24:85:ad:68:12:2e:76:31:a5:ce:31:34:bd:6f:6d:73:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Dec 2 03:00:11 2025 GMT Not After : Dec 5 04:23:11 2025 GMT Subject: CN=A8A3CE43A7EEEF2AC951F083C50A4FB342AE5A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:08:58:8d:55:b5:cf:ac:79:c0:c7:85:e8:66: 2d:bc:fc:f2:ee:31:c2:54:9f:58:74:ad:c8:06:70: 11:14:2d:81:79:7e:44:9d:8c:99:10:5c:2d:28:ab: 0b:aa:38:fb:0e:10:c0:70:a8:a8:ec:b1:48:2a:55: e2:f2:3f:73:2c:5b:6b:eb:66:dc:10:35:68:12:82: 38:8a:10:c3:e8:a9:8a:de:2a:dd:6c:f7:37:c2:38: 1f:05:ab:39:f7:b5:8f:f4:19:49:c9:cf:bb:23:36: 94:f8:ad:5a:b7:e1:dd:11:b5:50:d5:8a:3a:05:1d: ec:8a:ce:21:2a:c0:e9:fc:4c:a4:5a:3e:42:56:14: 6d:d5:d1:5e:3f:5e:ca:f3:99:86:84:d3:c1:e7:1f: 9d:d2:6e:95:bb:6b:38:fa:b0:56:db:65:11:b6:0a: 56:95:d0:6f:0f:c8:0c:0c:87:de:66:aa:4f:8e:7a: f3:14:22:44:e7:3c:df:4a:09:fd:4f:04:02:7d:1d: 9e:86:89:7c:76:40:9f:7e:cb:d3:10:24:ea:e1:10: 0b:4f:39:c5:e0:ce:1d:93:14:8b:3a:72:48:1a:83: 71:08:c3:07:e8:64:7a:11:e2:fd:b9:55:27:e5:b9: 77:f8:e8:d8:65:e5:c8:a8:94:8e:de:6a:c9:13:aa: 82:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A3:CE:43:A7:EE:EF:2A:C9:51:F0:83:C5:0A:4F:B3:42:AE:5A:0F X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:aa:b5:0f:fd:66:ea:d2:77:77:d0:56:23:5e:30:2b:64:96: 22:0c:d1:41:f8:75:09:65:1b:df:e1:fd:aa:aa:4f:59:2d:04: d6:58:3f:62:e8:ae:b8:84:7d:b7:d6:e1:3e:4d:04:53:ab:6a: 47:36:4a:54:35:1b:da:a0:ca:59:fe:53:0c:ba:85:60:01:3d: 01:9c:cb:41:95:73:37:2b:d4:43:54:32:57:47:7f:c8:1d:a4: 4f:67:13:53:26:f7:79:30:95:71:9b:52:ce:e6:9b:7d:98:a2: ed:a7:17:11:cf:ec:c7:8a:94:7e:46:3f:dc:3f:1f:b5:df:9e: c5:0a:d2:69:87:55:60:35:07:83:9d:b1:49:ac:bd:65:7d:e2: 22:95:00:bb:af:d7:a2:2a:1a:ad:4c:e6:c9:24:65:cc:b8:7c: 81:6b:df:41:64:c0:9b:d3:48:07:6d:75:fa:50:57:36:6a:59: e1:a5:9a:06:3f:b9:05:db:45:46:6c:76:73:7a:33:1f:3b:49: 22:38:a7:d8:fb:e4:9d:fc:5b:98:66:9a:8a:4d:21:8b:4d:c1: e8:43:8f:c8:0e:56:a4:bf:ac:f5:3d:dd:f4:ee:dc:c1:50:7c: 84:1f:7d:9e:9d:89:12:45:0d:ce:91:e2:a9:d2:e4:e9:43:9f: 7d:8a:25:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBSQJIWtaBIudjGlzjE0vW9tc8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTEyMDIwMzAwMTFaFw0yNTEyMDUwNDIzMTFaMDMxMTAvBgNV BAMTKEE4QTNDRTQzQTdFRUVGMkFDOTUxRjA4M0M1MEE0RkIzNDJBRTVBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCFiNVbXPrHnAx4XoZi28/PLu McJUn1h0rcgGcBEULYF5fkSdjJkQXC0oqwuqOPsOEMBwqKjssUgqVeLyP3MsW2vr ZtwQNWgSgjiKEMPoqYreKt1s9zfCOB8Fqzn3tY/0GUnJz7sjNpT4rVq34d0RtVDV ijoFHeyKziEqwOn8TKRaPkJWFG3V0V4/XsrzmYaE08HnH53SbpW7azj6sFbbZRG2 ClaV0G8PyAwMh95mqk+OevMUIkTnPN9KCf1PBAJ9HZ6GiXx2QJ9+y9MQJOrhEAtP OcXgzh2TFIs6ckgag3EIwwfoZHoR4v25VSfluXf46Nhl5ciolI7easkTqoJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqKPOQ6fu7yrJUfCDxQpPs0KuWg8wHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKqtQ/9ZurSd3fQViNeMCtkliIM0UH4dQll G9/h/aqqT1ktBNZYP2LorriEfbfW4T5NBFOrakc2SlQ1G9qgyln+Uwy6hWABPQGc y0GVczcr1ENUMldHf8gdpE9nE1Mm93kwlXGbUs7mm32You2nFxHP7MeKlH5GP9w/ H7XfnsUK0mmHVWA1B4OdsUmsvWV94iKVALuv16IqGq1M5skkZcy4fIFr30FkwJvT SAdtdfpQVzZqWeGlmgY/uQXbRUZsdnN6Mx87SSI4p9j75J38W5hmmopNIYtNwehD j8gOVqS/rPU93fTu3MFQfIQffZ6diRJFDc6R4qnS5OlDn32KJeA= -----END CERTIFICATE-----Generated at Wed Dec 3 16:13:10 2025 by rpki-client