This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: Uzawc0RsR9s9OBtsbyqbbFOOoOZq4bDrihuWyVkbeZg= Subject key identifier: 7B:3F:A1:3E:23:F7:D2:BD:D8:11:D9:67:4C:C8:9C:6B:90:3B:33:84 Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 7F04F4A5FFEA19DB4EB27541F1D0F66665471761 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 022D Signing time: Mon 01 Dec 2025 10:51:15 +0000 Manifest this update: Mon 01 Dec 2025 10:46:15 +0000 Manifest next update: Thu 04 Dec 2025 16:30:15 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: OGVn8mNjv5jF5kMqaVT1b9d7ll/IH8zfIEvoCeUAVaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 16:30:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:04:f4:a5:ff:ea:19:db:4e:b2:75:41:f1:d0:f6:66:65:47:17:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Dec 1 10:46:15 2025 GMT Not After : Dec 4 16:30:15 2025 GMT Subject: CN=7B3FA13E23F7D2BDD811D9674CC89C6B903B3384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:6f:ed:3c:8a:b5:b8:34:ca:b7:db:01:61: cc:18:ee:59:50:86:eb:85:63:dc:b9:98:b0:20:9a: 78:4f:7a:24:e6:1f:8b:97:80:b0:b9:27:b7:84:0c: d0:89:2b:60:4f:58:54:4d:a3:81:23:ad:50:d0:29: a7:9f:56:19:ca:4f:9a:bd:f8:88:f0:d9:f2:4d:fd: 59:4a:2d:32:6a:32:51:dd:89:a7:4b:c8:2e:59:7e: 5b:3e:c8:0a:47:1b:ff:49:e3:a2:1b:6a:49:f5:72: 10:66:99:ee:02:1a:ea:01:2c:68:59:de:4b:55:e9: 57:c5:74:83:43:58:db:66:0a:11:20:bf:18:4c:e0: 2c:6d:72:a6:a3:5f:69:ef:d9:c3:d8:62:29:02:34: bb:36:bf:3d:0a:97:7d:a0:37:62:30:d1:38:c6:63: e8:b0:f6:0e:cb:45:5a:37:5c:96:27:64:8d:e9:f2: f0:a5:d1:e8:b4:c7:3b:d9:ed:33:c9:d6:43:6e:ea: 2f:a9:5f:21:2e:8e:35:58:a1:e9:3e:2a:77:b7:c1: 37:a5:1d:1d:a6:b5:d7:f8:1f:d2:d5:c6:ab:9a:23: 01:0e:4c:54:27:d6:59:a7:5d:88:e2:0b:23:b7:a4: 12:29:78:3c:f5:d2:c2:f8:a1:73:5f:53:8a:78:03: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3F:A1:3E:23:F7:D2:BD:D8:11:D9:67:4C:C8:9C:6B:90:3B:33:84 X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:37:56:84:7e:be:71:87:8e:66:80:34:06:eb:ff:e0:78:68: 3c:d3:ed:33:71:19:fc:88:e5:aa:4d:a6:aa:56:47:03:b2:7f: 0f:d7:5d:8e:3c:3a:f5:82:c4:d2:8b:12:71:90:f5:20:00:c8: 95:b0:8a:25:35:34:f6:66:77:2d:35:1d:e3:43:86:89:b8:a7: 18:41:51:90:81:53:2a:8e:ca:e4:62:81:2c:15:3d:3d:ef:35: ba:7a:da:01:e6:89:1b:c8:12:e9:bc:6a:5e:28:00:7e:53:9b: 43:b1:cc:af:5c:9c:be:eb:5e:e0:a2:81:cd:48:50:ee:28:f9: 5d:26:3b:82:f1:3d:38:77:48:39:36:1c:e6:79:f1:fa:56:3d: bc:74:68:e1:87:3e:52:41:59:4a:78:97:0e:9f:33:55:2c:3e: ba:0d:b8:ee:c6:41:2b:a2:98:14:27:a8:44:5d:bb:ac:7e:28: f6:56:25:5a:71:53:46:60:0e:e0:c9:aa:bd:c9:c9:d0:a7:36: 21:0f:09:81:e7:ab:95:2b:42:2a:28:4a:51:f2:13:d0:f7:23: 7c:77:37:a8:c0:6d:fc:72:4a:74:2b:a7:10:a8:25:d3:3c:e8: f1:cd:fa:fb:c9:77:ee:b8:95:af:a8:20:45:4a:04:9e:92:e0: 7c:13:35:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwT0pf/qGdtOsnVB8dD2ZmVHF2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTEyMDExMDQ2MTVaFw0yNTEyMDQxNjMwMTVaMDMxMTAvBgNV BAMTKDdCM0ZBMTNFMjNGN0QyQkREODExRDk2NzRDQzg5QzZCOTAzQjMzODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB5W/tPIq1uDTKt9sBYcwY7llQ huuFY9y5mLAgmnhPeiTmH4uXgLC5J7eEDNCJK2BPWFRNo4EjrVDQKaefVhnKT5q9 +Ijw2fJN/VlKLTJqMlHdiadLyC5Zfls+yApHG/9J46Ibakn1chBmme4CGuoBLGhZ 3ktV6VfFdINDWNtmChEgvxhM4CxtcqajX2nv2cPYYikCNLs2vz0Kl32gN2Iw0TjG Y+iw9g7LRVo3XJYnZI3p8vCl0ei0xzvZ7TPJ1kNu6i+pXyEujjVYoek+Kne3wTel HR2mtdf4H9LVxquaIwEOTFQn1lmnXYjiCyO3pBIpeDz10sL4oXNfU4p4A9+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUez+hPiP30r3YEdlnTMica5A7M4QwHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAo3VoR+vnGHjmaANAbr/+B4aDzT7TNxGfyI 5apNpqpWRwOyfw/XXY48OvWCxNKLEnGQ9SAAyJWwiiU1NPZmdy01HeNDhom4pxhB UZCBUyqOyuRigSwVPT3vNbp62gHmiRvIEum8al4oAH5Tm0OxzK9cnL7rXuCigc1I UO4o+V0mO4LxPTh3SDk2HOZ58fpWPbx0aOGHPlJBWUp4lw6fM1UsProNuO7GQSui mBQnqERdu6x+KPZWJVpxU0ZgDuDJqr3JydCnNiEPCYHnq5UrQiooSlHyE9D3I3x3 N6jAbfxySnQrpxCoJdM86PHN+vvJd+64la+oIEVKBJ6S4HwTNdU= -----END CERTIFICATE-----Generated at Wed Dec 3 16:08:21 2025 by rpki-client