This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft File: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft (raw, json) Hash identifier: wBc0Feu5Hy0gpjxtycTCPbM519ukdLMHJnpqJwmw2Kg= Subject key identifier: 74:DB:1A:EE:60:95:FE:95:80:21:1B:8E:AA:A2:0D:E9:39:B7:FB:BC Authority key identifier: 19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE Certificate issuer: /CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Certificate serial: 7C3FDCEB148812CBA998FC1B92F590B857493688 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft Manifest number: 01C7 Signing time: Tue 02 Dec 2025 13:32:02 +0000 Manifest this update: Tue 02 Dec 2025 13:27:02 +0000 Manifest next update: Fri 05 Dec 2025 20:19:02 +0000 Files and hashes: 1: 19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl (hash: AwEmF0i+Oi1y7Oiae6YEsWyh8ZCOjDEywO3S+TOks0U=) 2: 3130332e36382e3231342e302f32332d3234203d3e20313530353137.roa (hash: 5eHMmSOXqcaio0G7mCeIUfZJCaBBOr7GrZWeXm+wBUE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 20:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3f:dc:eb:14:88:12:cb:a9:98:fc:1b:92:f5:90:b8:57:49:36:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19280B8F5AA4FBDEC679C351EB040D284CF791BE Validity Not Before: Dec 2 13:27:02 2025 GMT Not After : Dec 5 20:19:02 2025 GMT Subject: CN=74DB1AEE6095FE9580211B8EAAA20DE939B7FBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3f:2c:97:77:00:96:e2:36:56:93:6d:a4:b3: 84:89:9b:28:30:d8:ee:34:8f:00:27:0b:ad:d9:f4: 8c:e0:a9:c7:ee:e0:d7:52:0e:0f:eb:1c:be:ac:5c: aa:fe:49:55:1c:66:f7:45:f5:b9:9b:ab:90:49:f2: 6c:76:b5:7f:5a:6c:18:5e:e9:7c:79:af:af:31:35: a9:67:77:41:5b:f8:bb:c5:61:49:f7:df:b8:ac:cf: e8:cf:42:bc:9a:c3:01:db:58:5e:a4:ee:8f:7b:5f: ef:f0:78:6b:73:6a:95:1a:65:b9:8b:a0:83:f8:42: b4:a6:bf:93:90:41:c2:92:e8:3b:ba:a9:35:1d:47: 4c:d4:11:6f:bb:1a:11:7e:8e:56:f2:f4:67:e2:b4: a3:c5:24:2e:4f:a1:ab:c2:6d:38:3e:b9:59:81:f2: 49:f6:5a:19:70:7e:9c:e6:ed:15:df:b7:32:0b:0a: 9e:a3:c7:09:86:b6:87:60:b2:28:ef:f3:0d:e2:f5: 14:0e:79:d7:5f:65:30:58:7c:4a:6c:eb:a0:53:2d: 2a:b6:2d:90:e7:c4:36:8f:3b:0b:20:34:f5:85:bf: 87:43:00:fe:f8:d9:6e:54:d4:85:b2:70:1f:65:d1: 47:16:0c:ca:aa:82:f6:7b:1c:f6:d9:e3:db:aa:cc: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DB:1A:EE:60:95:FE:95:80:21:1B:8E:AA:A2:0D:E9:39:B7:FB:BC X509v3 Authority Key Identifier: keyid:19:28:0B:8F:5A:A4:FB:DE:C6:79:C3:51:EB:04:0D:28:4C:F7:91:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19280B8F5AA4FBDEC679C351EB040D284CF791BE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4ebf63ed-d450-477e-b31b-af92b1726d2e/0/19280B8F5AA4FBDEC679C351EB040D284CF791BE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:22:50:5c:ff:c0:d6:12:3c:33:ed:5f:d6:e1:22:2e:1e:f1: 81:6d:bf:0a:97:ea:27:df:af:d1:91:92:23:59:5f:26:43:40: d8:32:80:3c:b3:7b:85:d1:c8:6d:f6:74:62:66:64:73:99:c3: c4:34:cd:83:d0:c8:69:5e:cf:78:1e:b3:66:4b:c9:a9:b5:08: 81:1a:59:e4:66:13:57:96:51:3d:bd:bc:6c:bb:2c:66:6e:b2: 77:15:70:3f:9c:d8:b4:d0:ba:d8:f4:b9:7c:da:37:73:2c:17: 21:85:45:61:3e:98:bd:d9:a1:be:18:21:6f:9f:24:e8:21:59: ba:3d:ef:db:80:0a:39:35:92:bb:fc:19:e6:63:94:fc:74:11: 05:49:85:4a:88:87:e0:46:db:f9:34:9d:6d:bb:81:e1:15:a7: 5b:19:54:c2:22:82:09:e8:fc:3a:41:30:76:03:5e:e1:e9:72: 18:a8:6a:cb:e8:4e:d7:12:84:ea:0d:c7:49:d1:30:bc:67:fa: 5d:52:f8:4e:9f:12:34:3b:64:9a:07:05:4c:ff:2a:3f:f0:eb: db:1a:29:44:13:33:a7:56:7a:e5:d9:c0:27:2f:0d:a8:b4:9f: 28:42:00:2a:f4:60:80:a4:33:43:0b:02:59:81:f6:d9:8c:a4: db:e8:7d:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfD/c6xSIEsupmPwbkvWQuFdJNogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0 Q0Y3OTFCRTAeFw0yNTEyMDIxMzI3MDJaFw0yNTEyMDUyMDE5MDJaMDMxMTAvBgNV BAMTKDc0REIxQUVFNjA5NUZFOTU4MDIxMUI4RUFBQTIwREU5MzlCN0ZCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPyyXdwCW4jZWk22ks4SJmygw 2O40jwAnC63Z9Izgqcfu4NdSDg/rHL6sXKr+SVUcZvdF9bmbq5BJ8mx2tX9abBhe 6Xx5r68xNalnd0Fb+LvFYUn337isz+jPQryawwHbWF6k7o97X+/weGtzapUaZbmL oIP4QrSmv5OQQcKS6Du6qTUdR0zUEW+7GhF+jlby9GfitKPFJC5PoavCbTg+uVmB 8kn2Whlwfpzm7RXftzILCp6jxwmGtodgsijv8w3i9RQOeddfZTBYfEps66BTLSq2 LZDnxDaPOwsgNPWFv4dDAP742W5U1IWycB9l0UcWDMqqgvZ7HPbZ49uqzJsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdNsa7mCV/pWAIRuOqqIN6Tm3+7wwHwYDVR0j BBgwFoAUGSgLj1qk+97GecNR6wQNKEz3kb4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZWJmNjNlZC1kNDUwLTQ3N2UtYjMxYi1hZjkyYjE3MjZkMmUvMC8xOTI4MEI4RjVB QTRGQkRFQzY3OUMzNTFFQjA0MEQyODRDRjc5MUJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBEMjg0Q0Y3 OTFCRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGViZjYzZWQtZDQ1MC00NzdlLWIz MWItYWY5MmIxNzI2ZDJlLzAvMTkyODBCOEY1QUE0RkJERUM2NzlDMzUxRUIwNDBE Mjg0Q0Y3OTFCRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMiUFz/wNYSPDPtX9bhIi4e8YFtvwqX6iff r9GRkiNZXyZDQNgygDyze4XRyG32dGJmZHOZw8Q0zYPQyGlez3ges2ZLyam1CIEa WeRmE1eWUT29vGy7LGZusncVcD+c2LTQutj0uXzaN3MsFyGFRWE+mL3Zob4YIW+f JOghWbo979uACjk1krv8GeZjlPx0EQVJhUqIh+BG2/k0nW27geEVp1sZVMIiggno /DpBMHYDXuHpchioasvoTtcShOoNx0nRMLxn+l1S+E6fEjQ7ZJoHBUz/Kj/w69sa KUQTM6dWeuXZwCcvDai0nyhCACr0YICkM0MLAlmB9tmMpNvofXI= -----END CERTIFICATE-----Generated at Wed Dec 3 16:37:19 2025 by rpki-client