This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: GM9IjlFUIMWq3VMIpI3ZOTBBghJVInpFYJ1F+4h/Jjw= Subject key identifier: D5:87:98:A0:3E:1A:C4:9A:2E:13:2E:8D:CD:D1:C2:B7:A8:46:28:0E Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 1A95CD0D196892FD34B21658DC1D5CBFA2BF4AEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: AD Signing time: Wed 03 Dec 2025 06:01:16 +0000 Manifest this update: Wed 03 Dec 2025 05:56:16 +0000 Manifest next update: Sat 06 Dec 2025 15:13:16 +0000 Files and hashes: 1: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: YXf1DZTJ3ffQFGP3phY+1hCO4yhH+4gjFRh5Z22McIY=) 2: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: Q7G/cO+mdHwEtFeO3AaAW+h1sCR4ojICSfcSL5zARmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:95:cd:0d:19:68:92:fd:34:b2:16:58:dc:1d:5c:bf:a2:bf:4a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Dec 3 05:56:16 2025 GMT Not After : Dec 6 15:13:16 2025 GMT Subject: CN=D58798A03E1AC49A2E132E8DCDD1C2B7A846280E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:df:e1:da:63:11:4a:ce:ef:f0:81:50:ad:80: a9:c7:ee:ac:e8:9e:ef:33:0a:84:4f:b9:69:4a:68: 10:a2:88:f1:a8:a0:12:8d:25:d1:5c:1b:7c:ee:8b: 00:46:11:4e:41:66:2e:42:67:f7:a5:0d:56:ea:84: 74:d9:df:3e:be:9f:22:b3:e3:65:bf:05:49:08:88: a5:1c:70:56:30:b7:4f:12:32:1c:b2:fe:39:be:55: 0e:df:83:d0:64:40:16:21:36:b3:95:5b:10:fa:d9: 5c:c6:5e:5c:6b:7b:12:fa:7d:e8:4d:bf:b7:51:9a: 99:7d:6c:05:7c:43:8b:5a:cd:e3:bb:36:a5:58:3b: d4:4e:17:42:a5:41:43:f9:27:18:75:fd:40:4b:ab: ac:3c:0a:10:d1:4b:85:01:c8:2e:2a:b6:47:38:29: 9a:56:f5:2b:d9:bc:c1:fc:d2:a4:92:74:82:01:24: 72:40:23:6e:ce:4c:b2:52:a5:d8:ef:cb:76:5f:e6: ca:37:7b:bc:89:99:47:c6:bc:e6:c1:fb:b2:09:b6: d0:05:53:5a:33:f7:6e:ef:ee:b5:19:c7:c7:79:45: 58:de:e8:85:bf:60:99:3a:56:89:22:0c:10:2d:96: 8e:7d:db:c9:26:db:e0:b0:1f:f8:a2:b5:21:29:0b: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:87:98:A0:3E:1A:C4:9A:2E:13:2E:8D:CD:D1:C2:B7:A8:46:28:0E X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:49:f6:47:fb:22:4c:e3:d6:7d:1c:03:99:dc:56:96:c7:0f: 7a:7f:90:69:cd:5d:90:6b:7b:82:7e:f9:63:94:7e:ae:ae:dc: c8:ed:31:0c:c3:25:35:b0:0e:20:6e:7a:1d:31:5f:c1:56:39: 45:5b:4b:20:a2:02:f4:8c:08:f3:11:b6:75:1e:42:00:30:fe: 7f:7b:fd:d2:d6:48:33:c8:43:7e:ab:d2:af:7a:cc:cc:76:56: fe:78:e3:61:d7:02:f7:c6:ae:e9:23:e4:e4:ab:e6:e2:8a:25: d3:3f:cb:33:9f:29:c6:73:00:05:0d:76:3f:34:3b:60:70:4c: 3e:fc:e1:cf:d8:6e:0e:15:e6:ad:f0:e0:7c:31:b9:1d:3d:0b: ac:9e:15:1a:81:ca:83:c3:62:6b:0f:03:a7:d6:96:37:83:14: 75:23:1d:c0:92:10:f5:de:c4:d9:73:38:29:8e:27:b5:d4:16: 83:ea:5d:11:65:98:d0:4a:e2:0d:65:61:6d:52:3b:b2:11:4b: 94:5c:e7:55:eb:e5:1f:ac:4d:80:40:d4:09:c3:cd:e2:70:68: 3f:84:a0:e0:e4:bf:c4:55:0e:d9:69:cf:05:4d:19:ea:e8:87: 35:29:b8:7d:e5:8d:b9:9c:cd:a8:aa:5c:7a:1c:cd:ae:85:67: ef:4f:d9:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGpXNDRlokv00shZY3B1cv6K/Su4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNTEyMDMwNTU2MTZaFw0yNTEyMDYxNTEzMTZaMDMxMTAvBgNV BAMTKEQ1ODc5OEEwM0UxQUM0OUEyRTEzMkU4RENERDFDMkI3QTg0NjI4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3+HaYxFKzu/wgVCtgKnH7qzo nu8zCoRPuWlKaBCiiPGooBKNJdFcG3zuiwBGEU5BZi5CZ/elDVbqhHTZ3z6+nyKz 42W/BUkIiKUccFYwt08SMhyy/jm+VQ7fg9BkQBYhNrOVWxD62VzGXlxrexL6fehN v7dRmpl9bAV8Q4tazeO7NqVYO9ROF0KlQUP5Jxh1/UBLq6w8ChDRS4UByC4qtkc4 KZpW9SvZvMH80qSSdIIBJHJAI27OTLJSpdjvy3Zf5so3e7yJmUfGvObB+7IJttAF U1oz927v7rUZx8d5RVje6IW/YJk6VokiDBAtlo5928km2+CwH/iitSEpCy+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1YeYoD4axJouEy6NzdHCt6hGKA4wHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5J9kf7Ikzj1n0cA5ncVpbHD3p/kGnNXZBr e4J++WOUfq6u3MjtMQzDJTWwDiBueh0xX8FWOUVbSyCiAvSMCPMRtnUeQgAw/n97 /dLWSDPIQ36r0q96zMx2Vv5442HXAvfGrukj5OSr5uKKJdM/yzOfKcZzAAUNdj80 O2BwTD784c/Ybg4V5q3w4HwxuR09C6yeFRqByoPDYmsPA6fWljeDFHUjHcCSEPXe xNlzOCmOJ7XUFoPqXRFlmNBK4g1lYW1SO7IRS5Rc51Xr5R+sTYBA1AnDzeJwaD+E oODkv8RVDtlpzwVNGerohzUpuH3ljbmczaiqXHocza6FZ+9P2bo= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:28 2025 by rpki-client