This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: QxD4nlqtByukYjET7jIcVuc/g5EG00yEATlqx5SISkk= Subject key identifier: 5C:EF:4B:A8:1B:C3:90:6E:4A:39:02:BD:2C:48:E0:E0:E5:9E:5C:61 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 427AB60CD732147670E7475A9C5E1C55F4011139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: 01A2 Signing time: Tue 02 Dec 2025 15:11:08 +0000 Manifest this update: Tue 02 Dec 2025 15:06:08 +0000 Manifest next update: Sat 06 Dec 2025 01:46:08 +0000 Files and hashes: 1: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=) 2: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: x8GA7f+9To0zJWTPLU22XKkbJl3cpNPeZ955m1OcAKM=) 3: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: u1CS6H1BPuPnJXvCLpWE5x40ei2JIZ6P8HZAQFq35/Q=) 4: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=) 5: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=) 6: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: ibJZHZEEwuIaueWUBS974XsPSfaJnljHAhKebn2nItk=) 7: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=) 8: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=) 9: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: OfppjjTpXFLmh5Aj/BiOiyknKtfPtzPHg2/eqJ5W1oI=) 10: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: n2kJmjfaGbSRfn1pQASrz7hUspqtdNSxVZot/XzEk0w=) 11: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=) 12: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=) 13: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=) 14: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: B1+mJ2NWxCErJO3eSkTT+IRh+1v8gS/UXtodN0rllAY=) 15: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: hqbmI1+UoUPoz5aHKEefU2aqzgzzxdPZgTYT+n6aATQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 01:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7a:b6:0c:d7:32:14:76:70:e7:47:5a:9c:5e:1c:55:f4:01:11:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Dec 2 15:06:08 2025 GMT Not After : Dec 6 01:46:08 2025 GMT Subject: CN=5CEF4BA81BC3906E4A3902BD2C48E0E0E59E5C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:4e:aa:6b:15:38:8d:2e:b7:26:05:1e:32: f0:d4:a5:4d:01:48:b7:37:cf:7b:08:58:1c:6c:6a: d8:71:7f:5f:1d:c5:c5:8c:db:2c:71:73:dc:83:30: 1d:03:2a:50:8f:d2:35:77:c4:fc:fa:a2:dd:e3:cc: 71:89:4e:c5:d4:7f:be:d5:68:09:07:f3:47:70:e0: f5:49:7a:5e:13:aa:3e:25:81:4f:68:1a:70:9b:a3: 60:e6:b2:ed:4a:b4:ba:a4:c0:d8:60:bf:ac:d4:0b: 37:ca:1b:e5:7f:47:e2:05:e3:26:2f:4f:6d:12:ab: 1b:20:77:6e:9b:db:2e:41:c1:e1:2e:02:1a:58:9d: 92:eb:78:5e:31:65:4b:2c:cd:36:fd:36:14:73:e7: e5:b0:f2:89:c2:17:aa:dd:7b:fd:25:70:f1:32:fc: 9c:60:e9:67:f8:76:e5:4f:44:7d:63:6d:35:13:8c: fe:0c:2e:ab:fd:43:65:cb:73:2e:70:33:8c:47:36: ea:03:67:48:29:08:d5:3f:ae:c9:f6:59:2c:87:a7: 28:7a:15:35:ca:99:ba:b4:dc:80:19:c8:f1:46:64: ba:36:55:43:7d:55:c6:82:77:ee:e8:01:32:b8:e3: ad:fc:06:49:bd:7f:8c:62:cb:70:1f:bd:92:8b:de: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:EF:4B:A8:1B:C3:90:6E:4A:39:02:BD:2C:48:E0:E0:E5:9E:5C:61 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c0:23:6a:99:cd:6f:eb:e2:3a:ec:84:77:65:98:ce:0f:b3: 9f:84:cb:53:8f:1c:b2:73:59:f6:83:fc:62:19:c4:ee:66:bc: 9c:81:b8:45:29:53:4d:a6:2d:a7:1f:86:3b:c8:1d:b7:0a:0e: 01:e6:2c:4d:9e:b5:54:97:f1:59:ca:82:93:03:6b:e4:d1:f6: 4d:d8:0c:9f:94:eb:13:da:29:2b:57:42:5e:38:a6:99:ef:2e: b6:dd:59:1e:63:2f:ce:bc:17:cd:4e:84:b7:0b:6c:a5:4a:72: 18:ce:91:80:cb:43:40:15:84:97:90:48:df:a2:50:71:f3:d8: 85:91:dc:3d:9c:95:c6:79:c4:3c:95:15:15:01:2b:b6:2d:97: 42:82:dd:0c:c5:a1:87:3a:2f:61:b6:88:9d:94:52:a0:87:b1: db:69:2a:5b:a6:b8:1b:2f:f9:f4:a0:08:48:f1:cf:76:71:90: 81:c6:df:61:fe:9a:24:d7:2b:d9:91:ef:57:29:00:5c:be:80: 4e:1d:66:f0:af:ab:b5:d8:4c:02:56:10:4d:5a:21:0f:d0:05: be:df:3b:87:8b:0c:3b:6d:61:7b:8f:e3:bc:44:26:b9:0c:df: 24:b9:8d:70:bd:a8:bc:01:38:a3:d2:ac:44:45:35:fa:bb:4f: 06:5b:c1:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnq2DNcyFHZw50danF4cVfQBETkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTEyMDIxNTA2MDhaFw0yNTEyMDYwMTQ2MDhaMDMxMTAvBgNV BAMTKDVDRUY0QkE4MUJDMzkwNkU0QTM5MDJCRDJDNDhFMEUwRTU5RTVDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1906qaxU4jS63JgUeMvDUpU0B SLc3z3sIWBxsathxf18dxcWM2yxxc9yDMB0DKlCP0jV3xPz6ot3jzHGJTsXUf77V aAkH80dw4PVJel4Tqj4lgU9oGnCbo2Dmsu1KtLqkwNhgv6zUCzfKG+V/R+IF4yYv T20Sqxsgd26b2y5BweEuAhpYnZLreF4xZUsszTb9NhRz5+Ww8onCF6rde/0lcPEy /Jxg6Wf4duVPRH1jbTUTjP4MLqv9Q2XLcy5wM4xHNuoDZ0gpCNU/rsn2WSyHpyh6 FTXKmbq03IAZyPFGZLo2VUN9VcaCd+7oATK44638Bkm9f4xiy3AfvZKL3t9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXO9LqBvDkG5KOQK9LEjg4OWeXGEwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXAI2qZzW/r4jrshHdlmM4Ps5+Ey1OPHLJz WfaD/GIZxO5mvJyBuEUpU02mLacfhjvIHbcKDgHmLE2etVSX8VnKgpMDa+TR9k3Y DJ+U6xPaKStXQl44ppnvLrbdWR5jL868F81OhLcLbKVKchjOkYDLQ0AVhJeQSN+i UHHz2IWR3D2clcZ5xDyVFRUBK7Ytl0KC3QzFoYc6L2G2iJ2UUqCHsdtpKlumuBsv +fSgCEjxz3ZxkIHG32H+miTXK9mR71cpAFy+gE4dZvCvq7XYTAJWEE1aIQ/QBb7f O4eLDDttYXuP47xEJrkM3yS5jXC9qLwBOKPSrERFNfq7TwZbwaE= -----END CERTIFICATE-----Generated at Wed Dec 3 16:11:31 2025 by rpki-client