This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft (raw, json) Hash identifier: I1o0pukQr3KsV4XgoPIVn3VrvGrQSeWbIzX5BYQOd8M= Subject key identifier: A0:9B:5F:07:75:08:D1:05:57:8A:D7:52:55:7B:80:80:B3:F6:ED:76 Authority key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Certificate issuer: /CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Certificate serial: 708FEA0D159F60F92EF4B7555A1C71600B2238D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft Manifest number: 01FC Signing time: Wed 03 Dec 2025 07:02:32 +0000 Manifest this update: Wed 03 Dec 2025 06:57:32 +0000 Manifest next update: Sat 06 Dec 2025 18:54:32 +0000 Files and hashes: 1: 3130332e3138322e38312e302f32342d3234203d3e20313439343031.roa (hash: 6p5qEvuAFNeoYDRPFKQKTOGL6GjveSFUo5E7i4B+rcc=) 2: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl (hash: /IgbB0zL4e2F7oAjF211FOFYU4nYFmOmq2PUUC4QbIg=) 3: 3130332e3138322e38302e302f32342d3234203d3e20313439343031.roa (hash: SlnYn1Xsxz6QRJgIfCp87Ss/ufwey8RAQnlq8kkPrh4=) 4: 3130332e3138322e38302e302f32332d3234203d3e20313439343031.roa (hash: 2JoB7mbv9tAYmXcRzCwfmfmXedXdKD7pozAzOc8mk0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 18:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8f:ea:0d:15:9f:60:f9:2e:f4:b7:55:5a:1c:71:60:0b:22:38:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Validity Not Before: Dec 3 06:57:32 2025 GMT Not After : Dec 6 18:54:32 2025 GMT Subject: CN=A09B5F077508D105578AD752557B8080B3F6ED76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:6b:a3:ee:b0:49:1e:d5:e8:fd:b3:41:25: 40:31:b0:66:01:64:ca:91:10:ed:7c:60:84:4c:d3: a9:c6:d4:dd:3a:cd:8d:42:37:53:f9:f2:21:e3:5b: 8f:99:46:2e:d9:53:5b:f1:b4:4e:75:df:42:ca:79: 4f:8e:d8:96:9f:c7:e4:18:6c:a8:96:f9:5f:39:52: 11:96:ad:51:4f:81:5b:12:fb:6c:01:fb:6b:4d:02: b1:19:f8:22:3c:9b:28:dc:1c:b4:08:a3:89:ec:82: 3d:ba:62:93:40:91:e0:34:33:35:51:c6:7f:8a:b6: 98:00:42:98:71:2a:50:b8:1a:2b:59:fc:75:e9:80: f9:8d:2e:23:2f:d1:63:95:5f:0f:fc:a5:d1:13:69: 31:26:25:18:f5:5c:2c:5d:e7:54:ce:0f:d5:39:e6: 46:70:ea:8d:98:48:b3:ef:6b:f4:86:20:c5:60:3b: e6:7e:e8:be:2b:85:dc:2a:f4:8a:95:5c:9b:a3:f8: 36:8e:84:07:6e:b2:15:26:ea:12:4a:57:ca:b7:ba: 44:ed:6d:04:d1:27:1a:49:62:0e:83:9d:a1:a6:5b: 8b:1f:e4:dc:22:87:c5:4d:53:b6:0a:67:3b:dc:4f: 2b:a4:7f:c7:5b:80:11:4a:fc:65:d4:69:df:1e:b6: 77:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9B:5F:07:75:08:D1:05:57:8A:D7:52:55:7B:80:80:B3:F6:ED:76 X509v3 Authority Key Identifier: keyid:14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f8:a3:59:b9:a4:ea:f0:e1:9a:38:e4:0e:a8:47:5f:f4:ec: 9c:92:f6:e6:d3:f8:d8:ea:41:03:fe:36:d7:4e:e4:a2:ed:01: 0e:8b:22:b1:7c:62:4e:c2:f9:2b:34:7a:65:80:58:85:d9:6f: 55:80:ea:d9:ba:85:b9:86:66:d9:ad:52:11:6a:d0:44:37:cf: 01:1a:44:a0:ee:bb:fb:2f:66:17:7d:8c:0a:ef:5d:eb:47:f9: 7f:ca:6c:12:63:39:94:ac:dc:b0:77:dc:90:c2:06:39:80:15: 73:f5:87:6c:dd:a6:3e:b9:b9:5b:6e:9e:a2:16:f0:a4:15:e2: e5:84:f4:bd:53:f8:d2:1f:b0:ca:10:e2:7a:c9:e4:d8:49:f7: 08:33:18:9a:71:41:28:ac:d2:e0:9e:6b:c3:7a:4b:ec:4d:13: 5f:58:d9:30:1f:20:b7:6a:ab:1c:25:3e:4d:46:da:a0:f5:86: 8c:e6:39:e9:d1:79:aa:60:b0:d5:05:8f:ff:f5:ea:c5:cd:37: f3:e9:da:6f:02:f9:e0:ec:31:a5:bb:b7:f0:f0:cb:b9:9d:41: 28:2f:60:cf:be:7f:c4:3f:21:96:2e:4f:76:48:b6:e1:30:ef: 13:7c:10:45:f6:35:42:ec:4c:bd:77:46:82:9b:fa:d8:68:13: ac:27:82:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcI/qDRWfYPku9LdVWhxxYAsiONUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3 NTc5QUQ1MTAeFw0yNTEyMDMwNjU3MzJaFw0yNTEyMDYxODU0MzJaMDMxMTAvBgNV BAMTKEEwOUI1RjA3NzUwOEQxMDU1NzhBRDc1MjU1N0I4MDgwQjNGNkVENzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVkmuj7rBJHtXo/bNBJUAxsGYB ZMqREO18YIRM06nG1N06zY1CN1P58iHjW4+ZRi7ZU1vxtE5130LKeU+O2Jafx+QY bKiW+V85UhGWrVFPgVsS+2wB+2tNArEZ+CI8myjcHLQIo4nsgj26YpNAkeA0MzVR xn+KtpgAQphxKlC4GitZ/HXpgPmNLiMv0WOVXw/8pdETaTEmJRj1XCxd51TOD9U5 5kZw6o2YSLPva/SGIMVgO+Z+6L4rhdwq9IqVXJuj+DaOhAdushUm6hJKV8q3ukTt bQTRJxpJYg6DnaGmW4sf5Nwih8VNU7YKZzvcTyukf8dbgBFK/GXUad8etnfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoJtfB3UI0QVXitdSVXuAgLP27XYwHwYDVR0j BBgwFoAUFJ3xmRIZiyx5pVx88bfLenV5rVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMC8xNDlERjE5OTEy MTk4QjJDNzlBNTVDN0NGMUI3Q0I3QTc1NzlBRDUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NCN0E3NTc5 QUQ1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI1MGJhYzQtYTZhNy00NTZjLTg1 MGYtNjBkY2RlNjdiNDk5LzAvMTQ5REYxOTkxMjE5OEIyQzc5QTU1QzdDRjFCN0NC N0E3NTc5QUQ1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADX4o1m5pOrw4Zo45A6oR1/07JyS9ubT+Njq QQP+NtdO5KLtAQ6LIrF8Yk7C+Ss0emWAWIXZb1WA6tm6hbmGZtmtUhFq0EQ3zwEa RKDuu/svZhd9jArvXetH+X/KbBJjOZSs3LB33JDCBjmAFXP1h2zdpj65uVtunqIW 8KQV4uWE9L1T+NIfsMoQ4nrJ5NhJ9wgzGJpxQSis0uCea8N6S+xNE19Y2TAfILdq qxwlPk1G2qD1hozmOenReapgsNUFj//16sXNN/Pp2m8C+eDsMaW7t/Dwy7mdQSgv YM++f8Q/IZYuT3ZItuEw7xN8EEX2NULsTL13RoKb+thoE6wnggg= -----END CERTIFICATE-----Generated at Wed Dec 3 15:28:29 2025 by rpki-client