This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: qI1eVvb0hpuP/jjvjapm00Z2UNXb9CPTn5nsyjYuEVA= Subject key identifier: 98:57:0A:9A:62:A6:3A:2D:E0:3D:15:9C:92:55:1F:7E:11:31:81:0A Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 2AE95F54656A643D66B2EC6D889102B005BCB374 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 07:40:44 +0000 Manifest this update: Tue 02 Dec 2025 07:35:44 +0000 Manifest next update: Fri 05 Dec 2025 11:02:44 +0000 Files and hashes: 1: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: BPm6SdLa3w6CysXodSOILed7SGxT+nErlNA/+ViCbOU=) 2: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 11:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e9:5f:54:65:6a:64:3d:66:b2:ec:6d:88:91:02:b0:05:bc:b3:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Dec 2 07:35:44 2025 GMT Not After : Dec 5 11:02:44 2025 GMT Subject: CN=98570A9A62A63A2DE03D159C92551F7E1131810A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:11:9f:cf:60:43:21:1e:2b:a5:21:e9:fc:9a: a8:79:f2:84:11:b8:f1:a2:de:87:3e:3b:97:2d:82: 7f:c8:41:cf:a2:bb:97:76:bc:d9:85:af:fb:18:ca: 38:3e:69:19:eb:34:5d:0e:e8:82:81:d0:fe:cc:fb: 65:85:97:34:3a:d7:9d:15:4f:c8:3f:ab:7d:1b:72: 55:1f:41:26:bd:c6:25:39:1e:40:cf:0b:52:3b:39: 04:fa:e8:05:c3:e9:d9:c1:2e:51:a0:10:ec:13:01: 49:3f:c1:35:f9:a4:4d:fe:08:87:a2:7c:31:36:d6: 1e:0e:e5:ea:0e:ac:75:18:7c:45:87:3c:e4:44:2c: 2d:c8:03:76:39:7e:7e:51:e7:d0:3f:53:dd:e2:34: 30:5a:49:41:b8:f0:af:e3:4a:5f:0c:c7:5d:40:5b: 51:df:90:af:c1:7f:7b:3d:7c:ca:4d:1e:59:db:47: 89:37:6d:6a:50:69:87:dd:af:ae:fd:06:14:ad:32: 73:b4:4b:75:c4:f3:f6:f9:a1:52:fd:4d:e1:32:57: c7:43:40:3f:6b:27:4d:e8:5e:76:e7:09:0d:ea:c1: b7:53:be:f2:c2:93:f0:80:a5:c3:33:e4:26:fc:35: e9:bb:27:69:62:b6:23:b8:a9:dc:57:d5:5f:3f:da: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:57:0A:9A:62:A6:3A:2D:E0:3D:15:9C:92:55:1F:7E:11:31:81:0A X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2a:42:73:d0:5b:08:91:39:e3:cf:e0:8c:24:4b:08:b6:e9: 6e:e0:77:86:44:cc:46:34:00:b4:4e:a1:f3:44:54:c1:35:5d: 92:8e:d3:cc:b6:7a:74:8e:22:16:7d:3d:a3:42:73:3c:49:43: 4b:9b:89:ce:e8:87:4b:f9:11:10:21:0b:7e:7d:17:1b:c4:e5: 7a:9a:59:6e:b5:53:7c:3e:5a:76:65:3a:d3:53:a6:e8:7a:0a: 0c:8d:ae:92:28:f6:cb:60:0a:56:ff:bc:e0:20:68:3b:1a:02: 45:0c:e6:b7:26:24:be:b2:48:eb:85:4c:df:10:34:52:cd:47: 41:eb:3d:13:b2:85:28:47:11:33:9f:cd:d6:3b:11:00:36:81: 4c:73:9e:1e:c3:b7:08:26:bd:26:21:87:ec:1c:0c:5f:55:50: b5:ec:ab:59:52:f9:89:70:c6:81:56:4d:9d:b2:0a:46:29:d4: f0:0e:69:f7:cb:28:11:49:cf:88:1b:53:2d:26:4c:83:cf:1c: ff:54:a5:81:73:73:b7:07:dd:b0:25:06:23:63:35:ca:2b:7e: d2:c3:86:2b:da:7d:4d:db:d5:40:5b:f2:a0:bc:f9:c9:86:c2: f0:52:43:c3:14:68:28:90:68:40:a5:42:f9:32:cd:19:d1:a8: e3:b5:6a:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKulfVGVqZD1msuxtiJECsAW8s3QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNTEyMDIwNzM1NDRaFw0yNTEyMDUxMTAyNDRaMDMxMTAvBgNV BAMTKDk4NTcwQTlBNjJBNjNBMkRFMDNEMTU5QzkyNTUxRjdFMTEzMTgxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEZ/PYEMhHiulIen8mqh58oQR uPGi3oc+O5ctgn/IQc+iu5d2vNmFr/sYyjg+aRnrNF0O6IKB0P7M+2WFlzQ6150V T8g/q30bclUfQSa9xiU5HkDPC1I7OQT66AXD6dnBLlGgEOwTAUk/wTX5pE3+CIei fDE21h4O5eoOrHUYfEWHPORELC3IA3Y5fn5R59A/U93iNDBaSUG48K/jSl8Mx11A W1HfkK/Bf3s9fMpNHlnbR4k3bWpQaYfdr679BhStMnO0S3XE8/b5oVL9TeEyV8dD QD9rJ03oXnbnCQ3qwbdTvvLCk/CApcMz5Cb8Nem7J2litiO4qdxX1V8/2j0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFcKmmKmOi3gPRWcklUffhExgQowHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgqQnPQWwiROePP4IwkSwi26W7gd4ZEzEY0 ALROofNEVME1XZKO08y2enSOIhZ9PaNCczxJQ0ubic7oh0v5ERAhC359FxvE5Xqa WW61U3w+WnZlOtNTpuh6CgyNrpIo9stgClb/vOAgaDsaAkUM5rcmJL6ySOuFTN8Q NFLNR0HrPROyhShHETOfzdY7EQA2gUxznh7DtwgmvSYhh+wcDF9VULXsq1lS+Ylw xoFWTZ2yCkYp1PAOaffLKBFJz4gbUy0mTIPPHP9UpYFzc7cH3bAlBiNjNcorftLD hivafU3b1UBb8qC8+cmGwvBSQ8MUaCiQaEClQvkyzRnRqOO1avk= -----END CERTIFICATE-----Generated at Wed Dec 3 14:58:33 2025 by rpki-client