This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: BAjtA4rH06Nmuf7eHDBcQ2zNdB6Mn9kY31+DI9w7Lvg= Subject key identifier: 92:5D:A9:20:C2:06:9E:FE:4A:3A:0F:D0:46:36:20:AD:8D:8F:04:91 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 7762863CC7914BDE343AFA692E4A31023C110739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 0209 Signing time: Wed 03 Dec 2025 04:20:58 +0000 Manifest this update: Wed 03 Dec 2025 04:15:58 +0000 Manifest next update: Sat 06 Dec 2025 04:59:58 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: A/m8l5PWb50+ns4BfNy2AWdSU2399Vo8vV+ZUHy2bc8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 04:59:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:62:86:3c:c7:91:4b:de:34:3a:fa:69:2e:4a:31:02:3c:11:07:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Dec 3 04:15:58 2025 GMT Not After : Dec 6 04:59:58 2025 GMT Subject: CN=925DA920C2069EFE4A3A0FD0463620AD8D8F0491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:29:ab:76:d2:9c:69:35:65:83:3a:f0:c0: 45:1a:ca:fe:e4:a9:00:2c:45:c8:40:0b:17:0f:f8: e1:ca:68:ae:c7:74:7e:fe:e7:ce:c2:8e:42:a2:d0: e3:18:c3:22:2b:2c:d1:8a:9a:61:44:c1:59:73:a4: 98:81:c6:ce:2f:20:9b:5f:a6:f2:15:f3:16:bb:1e: 7f:a4:84:dc:24:d3:01:0e:94:7d:f4:67:41:a8:1d: de:06:94:96:f3:44:e3:9b:4d:5b:5d:77:80:e1:09: 44:22:f6:a6:d1:04:1d:dc:c0:2f:fd:94:ba:19:ce: b1:77:0f:f1:e1:35:64:99:2b:d7:42:4c:7f:d9:9f: 12:6e:50:71:40:52:0b:31:80:3d:3c:45:77:c2:18: 65:67:7d:81:ef:be:ba:8e:a2:1f:bb:46:d8:78:2c: 0f:27:fa:af:ee:f2:2f:bb:f3:0a:80:65:de:4e:ae: 72:14:7d:fa:72:6f:5a:5f:8f:e7:1c:9b:86:35:e6: e2:40:48:ee:10:2c:3e:88:64:4b:df:c3:3e:94:5b: 2e:97:2c:2d:f3:bb:c9:81:1c:c1:cb:40:71:35:92: 42:84:8c:57:42:f6:2e:e9:be:df:c8:d4:6f:e9:1d: 42:e4:ea:40:8d:b0:59:0f:e1:da:ee:52:95:66:20: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:5D:A9:20:C2:06:9E:FE:4A:3A:0F:D0:46:36:20:AD:8D:8F:04:91 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:c3:42:79:97:d5:82:5c:e0:34:7c:cf:67:a1:9b:8f:6a:84: 67:37:dc:59:a2:92:15:53:26:ab:bc:63:d2:c3:60:a8:66:76: 93:be:93:6d:71:7a:87:7e:d7:ec:f9:cd:29:ed:db:58:12:1e: 49:9c:ed:08:ed:31:cd:db:fe:dc:c7:7a:89:19:24:81:5b:fd: d3:ac:46:22:c8:27:45:ba:f6:30:d4:9a:2e:1b:8a:b6:45:e3: b7:2c:0e:67:6e:a0:6f:78:bc:2a:09:26:e4:60:b6:39:eb:fa: 17:aa:70:bb:ff:6b:8c:a2:ad:1f:8a:1d:af:f3:08:06:9c:3e: 20:eb:d6:31:ba:a5:1a:ae:05:10:03:a9:36:58:47:9a:4f:4c: fe:c0:6d:6f:56:42:29:64:4d:51:14:ad:21:36:2b:51:2b:df: 89:28:e8:21:3c:2f:0d:0d:6a:80:bd:86:f4:f9:b6:c6:a8:4d: 51:e4:ad:0e:26:69:09:bc:92:53:7d:6a:0e:82:0e:9e:b9:a3: 21:91:20:90:b6:ac:1c:ba:77:80:57:7a:16:dc:a4:3b:ec:87: 23:4b:86:8b:9c:6f:20:80:cd:aa:85:31:a5:4f:47:6c:df:23: 4f:29:c7:64:e6:19:a7:96:6f:08:93:b4:0e:d7:dc:f0:05:6a: 7a:24:9f:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd2KGPMeRS940OvppLkoxAjwRBzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTEyMDMwNDE1NThaFw0yNTEyMDYwNDU5NThaMDMxMTAvBgNV BAMTKDkyNURBOTIwQzIwNjlFRkU0QTNBMEZEMDQ2MzYyMEFEOEQ4RjA0OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5aymrdtKcaTVlgzrwwEUayv7k qQAsRchACxcP+OHKaK7HdH7+587CjkKi0OMYwyIrLNGKmmFEwVlzpJiBxs4vIJtf pvIV8xa7Hn+khNwk0wEOlH30Z0GoHd4GlJbzROObTVtdd4DhCUQi9qbRBB3cwC/9 lLoZzrF3D/HhNWSZK9dCTH/ZnxJuUHFAUgsxgD08RXfCGGVnfYHvvrqOoh+7Rth4 LA8n+q/u8i+78wqAZd5OrnIUffpyb1pfj+ccm4Y15uJASO4QLD6IZEvfwz6UWy6X LC3zu8mBHMHLQHE1kkKEjFdC9i7pvt/I1G/pHULk6kCNsFkP4druUpVmIDPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkl2pIMIGnv5KOg/QRjYgrY2PBJEwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHDQnmX1YJc4DR8z2ehm49qhGc33FmikhVT Jqu8Y9LDYKhmdpO+k21xeod+1+z5zSnt21gSHkmc7QjtMc3b/tzHeokZJIFb/dOs RiLIJ0W69jDUmi4birZF47csDmduoG94vCoJJuRgtjnr+heqcLv/a4yirR+KHa/z CAacPiDr1jG6pRquBRADqTZYR5pPTP7AbW9WQilkTVEUrSE2K1Er34ko6CE8Lw0N aoC9hvT5tsaoTVHkrQ4maQm8klN9ag6CDp65oyGRIJC2rBy6d4BXehbcpDvshyNL houcbyCAzaqFMaVPR2zfI08px2TmGaeWbwiTtA7X3PAFanokn8g= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:31 2025 by rpki-client