This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: jReAZI92HEnHOfddSYux0Ifa1GfBUfZWtHYr8rIgWJw= Subject key identifier: F1:56:B6:78:AE:26:B5:9F:84:5D:9E:48:C1:FE:7A:43:B9:5F:A5:45 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 21600A77C67AD17FA1FE55B456AD51507DEE5164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 0238 Signing time: Tue 02 Dec 2025 00:00:42 +0000 Manifest this update: Mon 01 Dec 2025 23:55:42 +0000 Manifest next update: Fri 05 Dec 2025 05:18:42 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: SC3nnyfsyA5bEyARFBloY8n1qyf6YOcVCdvguQUIDxI=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 4: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: YpDyxMXhbEulqwBhUrw3C1qEtKkQI0kOLHw9Tks2Jy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:18:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:60:0a:77:c6:7a:d1:7f:a1:fe:55:b4:56:ad:51:50:7d:ee:51:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Dec 1 23:55:42 2025 GMT Not After : Dec 5 05:18:42 2025 GMT Subject: CN=F156B678AE26B59F845D9E48C1FE7A43B95FA545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:e0:7a:5a:35:a6:a0:da:44:24:b1:8d:73: 3d:a8:62:3b:df:0b:50:77:79:cc:28:39:6e:75:2d: 08:26:92:ad:cb:5c:07:20:ea:6d:08:aa:ca:db:1f: 67:c1:bd:86:7a:28:95:73:3a:e0:7f:3b:86:a5:c2: a0:9c:55:b6:75:df:0a:52:fc:b9:96:0a:70:f1:fc: b8:7c:6b:c2:a1:bb:08:0a:b7:d7:33:cc:48:f4:b8: 8f:4d:f0:cf:f8:01:aa:02:c0:37:ff:cc:36:6d:be: b5:39:c4:1a:fe:7f:5f:63:e8:95:6d:79:40:73:89: b6:28:7b:62:53:a4:db:b3:62:4d:52:a1:97:6a:ab: e0:dd:d2:10:45:67:df:74:3e:26:3c:0f:2d:f2:b7: 1b:6e:00:94:ba:98:5b:2a:55:be:71:0a:3c:7d:17: 88:4b:f3:fa:a1:34:0a:b5:7e:48:66:47:1b:96:ea: c8:1e:96:0e:55:a3:f4:06:52:86:f0:f0:79:7e:61: 42:e2:15:cc:f9:70:96:d9:b9:d7:3e:01:46:d1:b4: 2a:3b:f0:45:8a:94:76:f6:e2:81:8d:a9:23:87:6d: ae:f9:55:54:15:24:87:e9:b8:38:bc:76:bc:a5:c5: aa:37:a9:f9:79:9d:0e:17:73:28:dd:8d:6a:fe:b4: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:56:B6:78:AE:26:B5:9F:84:5D:9E:48:C1:FE:7A:43:B9:5F:A5:45 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1b:94:67:ff:eb:26:3d:8f:ec:b9:23:6f:75:5c:0b:b8:4f: a6:5c:0a:76:aa:83:ab:f1:9d:68:2b:2a:19:59:88:e0:64:76: 3a:0c:ff:6b:05:12:8e:c8:07:63:43:5b:c7:00:e6:16:b5:c1: 93:7d:f6:6e:f0:05:5a:93:9c:39:df:df:ff:52:ec:8c:b9:68: cd:80:73:39:3c:e8:fc:ce:90:5e:ca:75:c0:30:65:d5:b9:69: be:ea:af:23:7d:10:d6:9c:5d:dc:0e:18:db:9c:46:6f:62:89: 5d:70:51:7d:df:8b:d7:df:2d:49:08:05:99:91:5c:19:15:73: b8:d9:0a:ab:c0:e7:84:2f:26:92:66:8d:5a:5c:19:21:e7:cc: 2c:b9:b9:0f:a8:d9:41:3b:9f:8b:2c:9e:40:70:d4:da:25:1a: fc:89:ff:6f:cc:0a:05:8c:e6:e9:2f:4b:ad:88:82:c4:48:bd: d9:66:e0:d5:a1:38:40:15:68:08:2c:e7:76:b4:a3:de:3e:52: 74:ba:94:72:59:62:86:6b:91:37:df:f8:94:d5:26:63:a3:58: c4:9e:ce:57:e2:26:09:8a:e5:3b:3f:af:d7:b8:60:59:17:e3: d2:08:8b:ae:be:6c:e4:c7:ee:8f:5d:e7:0a:17:8e:b7:aa:a6: 91:71:09:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWAKd8Z60X+h/lW0Vq1RUH3uUWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTEyMDEyMzU1NDJaFw0yNTEyMDUwNTE4NDJaMDMxMTAvBgNV BAMTKEYxNTZCNjc4QUUyNkI1OUY4NDVEOUU0OEMxRkU3QTQzQjk1RkE1NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9eB6WjWmoNpEJLGNcz2oYjvf C1B3ecwoOW51LQgmkq3LXAcg6m0IqsrbH2fBvYZ6KJVzOuB/O4alwqCcVbZ13wpS /LmWCnDx/Lh8a8KhuwgKt9czzEj0uI9N8M/4AaoCwDf/zDZtvrU5xBr+f19j6JVt eUBzibYoe2JTpNuzYk1SoZdqq+Dd0hBFZ990PiY8Dy3ytxtuAJS6mFsqVb5xCjx9 F4hL8/qhNAq1fkhmRxuW6sgelg5Vo/QGUobw8Hl+YULiFcz5cJbZudc+AUbRtCo7 8EWKlHb24oGNqSOHba75VVQVJIfpuDi8drylxao3qfl5nQ4XcyjdjWr+tF3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Va2eK4mtZ+EXZ5Iwf56Q7lfpUUwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcblGf/6yY9j+y5I291XAu4T6ZcCnaqg6vx nWgrKhlZiOBkdjoM/2sFEo7IB2NDW8cA5ha1wZN99m7wBVqTnDnf3/9S7Iy5aM2A czk86PzOkF7KdcAwZdW5ab7qryN9ENacXdwOGNucRm9iiV1wUX3fi9ffLUkIBZmR XBkVc7jZCqvA54QvJpJmjVpcGSHnzCy5uQ+o2UE7n4ssnkBw1NolGvyJ/2/MCgWM 5ukvS62IgsRIvdlm4NWhOEAVaAgs53a0o94+UnS6lHJZYoZrkTff+JTVJmOjWMSe zlfiJgmK5Ts/r9e4YFkX49IIi66+bOTH7o9d5woXjreqppFxCeM= -----END CERTIFICATE-----Generated at Wed Dec 3 14:13:35 2025 by rpki-client