This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: jM+1m2SEdSrqacT4yVeiIo+n0kfT1cYBiQqifgEjyN8= Subject key identifier: 2E:40:BE:FF:05:B6:5F:95:F9:69:DD:46:79:00:A2:F6:BA:ED:29:6D Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 2A87461DDD712C40053B4EB60FDD4A169B2D82CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 01E8 Signing time: Tue 02 Dec 2025 00:21:25 +0000 Manifest this update: Tue 02 Dec 2025 00:16:25 +0000 Manifest next update: Fri 05 Dec 2025 10:25:25 +0000 Files and hashes: 1: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=) 2: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: 09OVpcikwzmChCJffRGZXE6O6AtTyWPhhNvEe7rcL6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:87:46:1d:dd:71:2c:40:05:3b:4e:b6:0f:dd:4a:16:9b:2d:82:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Dec 2 00:16:25 2025 GMT Not After : Dec 5 10:25:25 2025 GMT Subject: CN=2E40BEFF05B65F95F969DD467900A2F6BAED296D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:be:5e:99:06:ff:43:dc:96:3f:27:5f:06: a3:20:96:35:24:aa:5c:1a:4a:9f:85:e1:d6:a0:b5: 90:62:72:ba:77:ba:23:b4:81:2b:82:12:35:72:39: a9:17:38:30:74:1c:95:3f:0d:49:18:38:93:a8:8e: 40:e0:68:f5:04:0e:f3:27:da:52:16:4d:e3:9f:d3: b1:67:db:bb:9c:5f:26:d2:ed:1e:c4:41:16:e6:d0: 4d:d1:99:7c:01:de:30:fa:bf:98:fe:7e:59:10:de: 9d:15:62:21:b5:f5:62:78:17:1e:b6:4a:f2:3f:4b: ed:3d:e6:34:86:05:0e:9a:b6:32:26:4e:0f:bc:b6: 7e:d1:2d:ce:8d:ff:2d:e9:d6:21:28:e0:a5:46:31: 3d:a8:ea:1b:ed:66:ea:a3:42:2f:86:5f:57:3a:92: e1:2e:fc:fe:ff:2b:65:d5:59:57:6a:02:fa:34:1a: 4e:9c:43:ec:c6:1d:e5:ef:b6:41:ed:67:f2:9d:4a: 0d:0b:bb:93:0a:8c:7c:ab:9d:ce:35:50:be:04:7a: 6a:b8:a0:79:59:4f:ed:7b:86:88:02:a8:0c:e8:bc: 76:45:d8:a1:34:ae:99:cf:c5:d3:41:e7:1b:a4:79: 42:04:73:79:c0:25:46:e2:cd:37:62:66:03:85:2f: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:BE:FF:05:B6:5F:95:F9:69:DD:46:79:00:A2:F6:BA:ED:29:6D X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:0c:9d:28:72:69:8c:98:64:f3:fa:88:94:4d:40:70:55:80: 8b:8f:07:72:28:f1:63:ab:ea:63:b1:9f:8a:97:76:36:79:0d: c2:fd:f8:c4:70:aa:11:03:69:73:a6:09:74:17:22:76:7e:40: e6:16:19:16:e2:9d:71:52:a9:d6:f7:0b:52:b1:5d:86:af:0c: 66:15:9a:ea:1f:c1:fb:ad:e4:ed:13:da:09:3e:38:d7:cc:8d: f7:d6:53:96:67:20:47:67:52:77:24:40:0d:73:3b:f5:9f:f6: d3:5a:5b:f6:e8:e3:c5:ec:5e:e4:a8:ab:da:f8:a7:14:6f:50: 4d:72:f5:63:ed:6e:07:53:5f:a5:d6:f8:36:df:f9:73:a5:e3: f3:5d:fe:99:2a:2c:ab:51:d6:a9:86:0a:bd:cb:b5:3e:93:16: c4:89:6e:4c:55:ab:bb:4a:88:54:d4:37:87:4f:67:d0:de:e4: c4:b1:21:66:32:95:4b:e1:3d:e0:38:8a:b1:74:b0:3e:e0:dc: 94:5f:f9:7c:36:ce:cd:a3:57:7c:b9:1b:db:9c:ad:4e:4b:0e: 24:93:bb:d2:d0:b9:e3:44:87:5a:d3:d7:9c:7f:8f:a5:85:6d: 3f:6e:54:2c:48:4b:0f:37:60:b1:76:28:6a:86:e8:a5:c2:de: 48:d6:08:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKodGHd1xLEAFO062D91KFpstgs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNTEyMDIwMDE2MjVaFw0yNTEyMDUxMDI1MjVaMDMxMTAvBgNV BAMTKDJFNDBCRUZGMDVCNjVGOTVGOTY5REQ0Njc5MDBBMkY2QkFFRDI5NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs6r5emQb/Q9yWPydfBqMgljUk qlwaSp+F4dagtZBicrp3uiO0gSuCEjVyOakXODB0HJU/DUkYOJOojkDgaPUEDvMn 2lIWTeOf07Fn27ucXybS7R7EQRbm0E3RmXwB3jD6v5j+flkQ3p0VYiG19WJ4Fx62 SvI/S+095jSGBQ6atjImTg+8tn7RLc6N/y3p1iEo4KVGMT2o6hvtZuqjQi+GX1c6 kuEu/P7/K2XVWVdqAvo0Gk6cQ+zGHeXvtkHtZ/KdSg0Lu5MKjHyrnc41UL4Eemq4 oHlZT+17hogCqAzovHZF2KE0rpnPxdNB5xukeUIEc3nAJUbizTdiZgOFL/g1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkC+/wW2X5X5ad1GeQCi9rrtKW0wHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE8MnShyaYyYZPP6iJRNQHBVgIuPB3Io8WOr 6mOxn4qXdjZ5DcL9+MRwqhEDaXOmCXQXInZ+QOYWGRbinXFSqdb3C1KxXYavDGYV muofwfut5O0T2gk+ONfMjffWU5ZnIEdnUnckQA1zO/Wf9tNaW/bo48XsXuSoq9r4 pxRvUE1y9WPtbgdTX6XW+Dbf+XOl4/Nd/pkqLKtR1qmGCr3LtT6TFsSJbkxVq7tK iFTUN4dPZ9De5MSxIWYylUvhPeA4irF0sD7g3JRf+Xw2zs2jV3y5G9ucrU5LDiST u9LQueNEh1rT15x/j6WFbT9uVCxISw83YLF2KGqG6KXC3kjWCE0= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:38 2025 by rpki-client