This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: tuDSl8yGP6+XF8ellr5Ni80HBdXyV0fw+3AIbhBWfzs= Subject key identifier: 0A:63:12:B8:63:57:09:6B:4E:76:75:85:00:B2:9C:D4:7E:AE:F9:9D Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 0B7D0F3FA120BE93C8168FE339AE3158A9D4ACEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: 0116 Signing time: Mon 01 Dec 2025 12:30:43 +0000 Manifest this update: Mon 01 Dec 2025 12:25:43 +0000 Manifest next update: Thu 04 Dec 2025 23:02:43 +0000 Files and hashes: 1: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 2lAjycdxeSaqDarXvJpjbjwFWksBTkypcj159AzhKmk=) 2: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: vGa7d9OQ0LAS3zudMUXRNy8EtCBk1CCNzZiI+S3j1rc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 23:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7d:0f:3f:a1:20:be:93:c8:16:8f:e3:39:ae:31:58:a9:d4:ac:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Dec 1 12:25:43 2025 GMT Not After : Dec 4 23:02:43 2025 GMT Subject: CN=0A6312B86357096B4E76758500B29CD47EAEF99D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:52:de:60:da:4a:d2:fe:75:df:9b:b3:07:ef: d2:d3:1d:6b:96:ae:8d:fd:3d:88:40:44:1c:d5:d4: 73:80:1b:de:e2:dd:cf:ca:91:01:5b:74:aa:6b:76: 48:c6:ca:24:e3:ea:e9:d0:21:0d:56:91:68:d9:7c: 75:67:d3:6c:9a:07:5c:9e:09:93:e0:b9:fd:c8:37: d4:1f:34:46:34:11:78:ab:39:c1:94:54:ad:84:49: 64:71:21:d7:7a:dc:af:59:3d:74:a3:0f:26:eb:d1: 29:a8:96:74:06:c9:b7:8d:e5:7e:0c:8f:21:ce:3a: 1b:3c:53:2e:16:d6:29:6b:1b:64:a8:5d:0d:ba:d8: d3:0b:d4:a8:66:c1:69:c2:02:0c:59:d0:56:08:69: 3c:c5:9c:4f:43:4a:2f:88:70:2d:9e:9f:eb:98:49: c8:2e:66:77:d1:9a:d1:cc:5d:e9:5a:3c:e5:d4:10: 0a:96:49:fe:98:65:7f:bc:23:1a:f2:f5:f7:ad:a7: 85:ee:65:6b:d3:18:df:5f:67:56:96:df:a9:1c:18: 00:b1:58:b6:c6:dc:49:de:d5:1e:ff:e0:88:ed:19: c4:23:49:1a:0b:33:0d:34:6f:37:f8:0b:1a:2c:2c: 96:99:c1:55:77:2d:93:e8:48:d7:19:51:df:e4:00: f8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:63:12:B8:63:57:09:6B:4E:76:75:85:00:B2:9C:D4:7E:AE:F9:9D X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:06:36:1f:87:27:85:23:e4:29:fb:fb:f8:24:f3:b1:ea:cb: f7:58:e7:aa:19:f7:cd:d6:94:60:ad:80:4a:98:e7:14:28:2b: 9f:3a:98:2b:ba:e5:24:a6:f5:0b:2b:b7:53:da:a5:8c:df:4f: 3e:f5:72:06:fb:7d:b4:31:73:42:6e:fd:e5:54:60:2a:7c:4c: 76:60:4b:e7:eb:9b:90:4b:e6:ce:b2:d9:99:9a:6e:ae:9e:d4: 17:f3:a5:85:ac:0d:4f:dd:84:45:8f:d7:53:a6:53:ae:c5:a6: 89:93:6a:98:d8:d7:23:74:24:44:09:8c:40:0a:28:75:7b:25: 53:3e:26:20:27:39:70:27:2f:3c:1a:ad:ce:d6:54:5b:47:26: 59:9b:81:8c:d4:88:99:41:94:b1:de:79:5e:d2:6e:27:84:f4: ba:ad:2b:65:76:b3:2f:35:ff:51:2b:81:1d:87:f9:39:54:6b: d3:70:08:e6:9c:0a:70:c6:d6:83:3c:8a:c5:df:6b:e0:1e:22: 23:2b:3c:42:a9:2e:fb:88:3e:48:3a:de:a2:cc:50:9b:7d:9c: 8f:44:53:51:e0:f3:81:96:e6:2c:4f:53:78:6b:a7:12:42:80: 55:2c:03:cd:a7:76:90:23:41:b0:d6:86:06:05:01:fc:04:50: a0:59:e3:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC30PP6EgvpPIFo/jOa4xWKnUrOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNTEyMDExMjI1NDNaFw0yNTEyMDQyMzAyNDNaMDMxMTAvBgNV BAMTKDBBNjMxMkI4NjM1NzA5NkI0RTc2NzU4NTAwQjI5Q0Q0N0VBRUY5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUt5g2krS/nXfm7MH79LTHWuW ro39PYhARBzV1HOAG97i3c/KkQFbdKprdkjGyiTj6unQIQ1WkWjZfHVn02yaB1ye CZPguf3IN9QfNEY0EXirOcGUVK2ESWRxIdd63K9ZPXSjDybr0SmolnQGybeN5X4M jyHOOhs8Uy4W1ilrG2SoXQ262NML1KhmwWnCAgxZ0FYIaTzFnE9DSi+IcC2en+uY ScguZnfRmtHMXelaPOXUEAqWSf6YZX+8Ixry9fetp4XuZWvTGN9fZ1aW36kcGACx WLbG3Ene1R7/4IjtGcQjSRoLMw00bzf4CxosLJaZwVV3LZPoSNcZUd/kAPjRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCmMSuGNXCWtOdnWFALKc1H6u+Z0wHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEGNh+HJ4Uj5Cn7+/gk87Hqy/dY56oZ983W lGCtgEqY5xQoK586mCu65SSm9Qsrt1PapYzfTz71cgb7fbQxc0Ju/eVUYCp8THZg S+frm5BL5s6y2Zmabq6e1BfzpYWsDU/dhEWP11OmU67FpomTapjY1yN0JEQJjEAK KHV7JVM+JiAnOXAnLzwarc7WVFtHJlmbgYzUiJlBlLHeeV7SbieE9LqtK2V2sy81 /1ErgR2H+TlUa9NwCOacCnDG1oM8isXfa+AeIiMrPEKpLvuIPkg63qLMUJt9nI9E U1Hg84GW5ixPU3hrpxJCgFUsA82ndpAjQbDWhgYFAfwEUKBZ4yg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:01 2025 by rpki-client