This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft File: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft (raw, json) Hash identifier: Dlm2U1NxFwSiZbIoxQjE2g/F5/RIncAoEed5TfK4o54= Subject key identifier: 75:77:A1:E9:31:F5:94:4D:9F:89:EA:20:72:89:50:76:CD:4A:77:8A Authority key identifier: 1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB Certificate issuer: /CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Certificate serial: 4BB8D9B9210FA76CE3BC314B24279A56AE34227B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft Manifest number: 0132 Signing time: Mon 01 Dec 2025 14:11:45 +0000 Manifest this update: Mon 01 Dec 2025 14:06:45 +0000 Manifest next update: Thu 04 Dec 2025 20:06:45 +0000 Files and hashes: 1: 3130332e37362e3130342e302f32342d3234203d3e20313531353839.roa (hash: y5O1Ppu2ytn4g8GvvxC2f7T0LX+os0fh9M12M0RIzb8=) 2: 1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl (hash: ODnwCMCzrIpBeB+UvAMYxLeHnWyc4xIVfJ4TjWfs7pM=) 3: 3130332e37362e3130352e302f32342d3234203d3e20313531353839.roa (hash: qDLyTdPWSG6q8vGu/DnC4p5fkC9xQVIbSAKqWF4GTxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 20:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b8:d9:b9:21:0f:a7:6c:e3:bc:31:4b:24:27:9a:56:ae:34:22:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F4C46E18F21AFBE4D8AC9846090B63AA98782BB Validity Not Before: Dec 1 14:06:45 2025 GMT Not After : Dec 4 20:06:45 2025 GMT Subject: CN=7577A1E931F5944D9F89EA2072895076CD4A778A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:67:9a:dc:a1:9b:43:0f:e7:8f:28:80:6b: 13:1f:97:7d:84:c4:40:f1:59:b9:8d:44:27:7c:cd: 8d:43:50:34:7c:8f:f4:66:f4:44:72:64:01:c2:f4: c5:5a:45:b8:a9:37:f2:f4:77:5e:20:d0:86:1b:66: 26:fd:18:9b:d6:72:59:c3:33:c3:7c:44:56:99:2c: e2:98:62:3a:5d:00:36:69:c0:7c:41:0c:22:6b:50: c1:f6:fb:5e:2e:71:11:75:5d:a6:52:85:1e:34:ab: 23:b5:10:78:8e:a4:9e:33:d0:1c:50:11:4f:a3:75: 63:09:f1:f3:dd:68:e3:5a:0b:25:1a:95:28:63:24: c8:58:99:ce:45:4f:39:2c:be:44:51:c2:f0:45:37: 7d:c2:f9:50:11:cf:e3:b8:7e:b4:f2:98:85:04:be: 60:24:1e:b7:95:cd:0f:0e:a9:9f:ad:c9:cb:26:c4: b5:eb:16:1b:c3:28:3c:b2:69:45:35:9c:75:da:bb: 4b:e6:4f:05:30:15:c4:5b:4a:17:65:74:1c:5b:dd: 52:db:32:0e:c5:26:48:d2:1b:42:f2:36:90:9f:f4: ef:4b:51:7d:88:29:0c:b7:9f:e4:a3:3b:8f:d3:39: a6:b1:4c:91:d7:a8:b3:68:a8:1d:a5:de:9c:a8:ce: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:77:A1:E9:31:F5:94:4D:9F:89:EA:20:72:89:50:76:CD:4A:77:8A X509v3 Authority Key Identifier: keyid:1F:4C:46:E1:8F:21:AF:BE:4D:8A:C9:84:60:90:B6:3A:A9:87:82:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/347b0264-9a0a-4ce4-93cb-2cdd840b8534/0/1F4C46E18F21AFBE4D8AC9846090B63AA98782BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:51:90:9d:66:63:e6:d4:2d:54:d4:3a:7c:d5:e7:6a:57:e7: 53:17:8c:4c:46:e3:5c:1f:69:6b:d9:76:3e:c6:4e:24:68:5d: ca:e1:2c:56:0e:2a:b7:73:b0:4b:79:ec:3e:3f:f2:ef:08:77: d4:a1:2a:52:5c:99:87:66:ac:41:96:1f:ee:fe:dd:80:4c:af: ce:4e:0d:a5:79:ba:06:20:44:a9:65:22:86:2a:e7:5c:a4:5d: 11:75:a2:b8:39:ed:4d:e4:b1:69:93:ae:dd:dd:45:03:13:04: 34:c8:56:49:ab:dd:3a:c5:0d:00:68:63:14:18:f7:d4:9d:16: 1b:68:a1:19:a6:55:2c:39:f4:a3:44:48:3a:99:18:aa:88:a7: cb:a3:de:66:78:a3:c2:bb:1c:59:4d:9c:1a:96:e5:7c:a6:59: 89:c8:7c:5b:02:9b:00:17:a9:5e:46:ae:c1:a2:d2:a6:2c:cd: b5:8c:67:65:a6:a4:73:25:68:bf:bf:6f:5e:ad:84:4b:bd:80: 6a:14:dc:37:c6:63:e4:7e:c6:90:4f:da:33:ab:fa:aa:7a:80: ad:69:2a:45:88:f8:3e:83:f8:f3:0c:dc:50:c8:44:4f:46:a0: 45:4f:07:f6:b5:f5:83:2a:58:fd:6c:a0:ed:c4:91:7a:42:15: da:23:ad:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7jZuSEPp2zjvDFLJCeaVq40InswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FB OTg3ODJCQjAeFw0yNTEyMDExNDA2NDVaFw0yNTEyMDQyMDA2NDVaMDMxMTAvBgNV BAMTKDc1NzdBMUU5MzFGNTk0NEQ5Rjg5RUEyMDcyODk1MDc2Q0Q0QTc3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1Wea3KGbQw/njyiAaxMfl32E xEDxWbmNRCd8zY1DUDR8j/Rm9ERyZAHC9MVaRbipN/L0d14g0IYbZib9GJvWclnD M8N8RFaZLOKYYjpdADZpwHxBDCJrUMH2+14ucRF1XaZShR40qyO1EHiOpJ4z0BxQ EU+jdWMJ8fPdaONaCyUalShjJMhYmc5FTzksvkRRwvBFN33C+VARz+O4frTymIUE vmAkHreVzQ8OqZ+tycsmxLXrFhvDKDyyaUU1nHXau0vmTwUwFcRbShdldBxb3VLb Mg7FJkjSG0LyNpCf9O9LUX2IKQy3n+SjO4/TOaaxTJHXqLNoqB2l3pyozo5rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdXeh6TH1lE2fieogcolQds1Kd4owHwYDVR0j BBgwFoAUH0xG4Y8hr75NismEYJC2OqmHgrswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NDdiMDI2NC05YTBhLTRjZTQtOTNjYi0yY2RkODQwYjg1MzQvMC8xRjRDNDZFMThG MjFBRkJFNEQ4QUM5ODQ2MDkwQjYzQUE5ODc4MkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2M0FBOTg3 ODJCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzQ3YjAyNjQtOWEwYS00Y2U0LTkz Y2ItMmNkZDg0MGI4NTM0LzAvMUY0QzQ2RTE4RjIxQUZCRTREOEFDOTg0NjA5MEI2 M0FBOTg3ODJCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZRkJ1mY+bULVTUOnzV52pX51MXjExG41wf aWvZdj7GTiRoXcrhLFYOKrdzsEt57D4/8u8Id9ShKlJcmYdmrEGWH+7+3YBMr85O DaV5ugYgRKllIoYq51ykXRF1org57U3ksWmTrt3dRQMTBDTIVkmr3TrFDQBoYxQY 99SdFhtooRmmVSw59KNESDqZGKqIp8uj3mZ4o8K7HFlNnBqW5XymWYnIfFsCmwAX qV5GrsGi0qYszbWMZ2WmpHMlaL+/b16thEu9gGoU3DfGY+R+xpBP2jOr+qp6gK1p KkWI+D6D+PMM3FDIRE9GoEVPB/a19YMqWP1soO3EkXpCFdojrRY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:25 2025 by rpki-client