This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: +mNhpybGrDiA5JEpl1WMDwVvJHU3QiXxXj5IXG4Yg7o= Subject key identifier: 39:81:F9:D5:92:40:84:F5:7C:41:31:B0:1D:86:36:C2:61:DB:44:BF Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 1C77BDC50F7BD448F7E0FFA47CCCB3D3FDC9EF7D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 01BA Signing time: Wed 03 Dec 2025 07:21:22 +0000 Manifest this update: Wed 03 Dec 2025 07:16:22 +0000 Manifest next update: Sat 06 Dec 2025 16:15:22 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: BffdL0xKitvxF+n5DIFwc3meIV1XU+P2BJOh3472GOA=) 2: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: ja3IpRMbJ39xL9dCXnsQKYTFFR+b+ZemcabWb42o+iQ=) 3: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: jLdTwnwuZ2oNm7k6y9AMJvKWkqS7oKk99hplqsfZVHE=) 4: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: OuFrd/xpahGebP2wuN/hTx08fGMh9gbAYP88lYD7UbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:77:bd:c5:0f:7b:d4:48:f7:e0:ff:a4:7c:cc:b3:d3:fd:c9:ef:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Dec 3 07:16:22 2025 GMT Not After : Dec 6 16:15:22 2025 GMT Subject: CN=3981F9D5924084F57C4131B01D8636C261DB44BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9f:75:78:ef:ed:3e:55:20:46:58:6a:2f:29: db:2a:5a:c8:1f:31:e3:84:4c:4c:7c:a6:ba:87:5f: 6e:7f:19:4f:1d:9a:f3:b2:c7:8b:2c:e7:cb:22:1d: 02:b8:66:bb:3f:04:f2:8e:1b:b4:22:28:83:69:e5: 6a:19:95:7b:94:a6:82:44:1d:28:61:65:dd:32:fe: 16:99:eb:93:55:44:a5:72:87:36:e6:ec:64:40:ad: c2:c6:99:a9:2c:40:ee:37:34:06:c9:84:9e:3b:dc: 92:79:5d:e4:e7:67:2b:37:6e:d2:44:00:64:81:f7: 7b:ae:b8:b7:ae:11:0a:bf:bd:b9:80:1b:c3:6f:c5: e6:7a:fe:80:c3:8b:4e:bc:e5:09:d3:64:6c:5d:8b: d8:d3:b0:cf:db:9d:ff:a0:de:8c:ce:df:63:da:79: 3b:38:f6:9d:3f:b6:1b:1d:e2:3d:46:c2:93:e0:f0: d8:66:98:09:ec:9e:a4:e3:91:57:68:f7:41:94:f2: 4e:64:2e:48:fd:2d:c0:19:c7:cb:ab:d2:4e:b4:3d: d6:bd:a9:e7:3c:d3:38:29:46:8c:ce:3e:6a:77:ed: 76:04:6a:a8:06:a2:99:9c:75:77:4b:a8:a8:f5:32: 94:52:79:d5:08:3c:1d:ab:63:15:54:d8:65:5a:c9: 1d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:81:F9:D5:92:40:84:F5:7C:41:31:B0:1D:86:36:C2:61:DB:44:BF X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f4:26:21:f3:1a:9a:70:2d:a7:8f:7e:b0:a9:99:23:6b:8c:cb: 28:de:ff:41:d4:13:11:ac:56:39:ff:68:ed:94:cd:1d:50:d3: 07:68:b4:25:a1:d7:c0:7c:11:15:41:52:b8:92:82:87:51:95: 72:25:07:71:8f:61:ca:47:85:83:a8:8d:6e:87:6b:fe:75:3f: a8:f0:76:cd:25:25:d0:26:b9:b5:81:16:c6:de:1a:e0:cf:a9: 0d:b0:7e:0a:cd:93:2d:4f:31:82:6d:b0:81:3c:91:d2:94:9c: 1e:6f:64:ab:42:70:eb:f3:e0:a3:5b:80:ae:79:c7:59:8c:df: cb:22:c9:3d:ba:74:51:12:7e:c7:e3:be:80:a3:51:93:b0:67: a9:88:46:1c:d1:8f:b4:f6:73:2b:13:5b:86:34:c0:a6:9e:57: d0:79:98:dc:53:ef:6c:7e:79:ab:a2:fd:58:57:e5:3b:13:a7: f3:6e:a4:f0:59:9a:26:55:aa:b8:e5:38:1a:fe:e6:fe:44:34: f5:e0:97:ac:30:ba:fd:e2:d3:35:83:e2:b5:ed:27:a4:eb:d9: 42:61:03:19:47:aa:f0:3a:86:cf:51:d5:a5:bf:ef:76:cf:56: aa:47:56:61:ea:7d:29:02:d2:04:eb:6b:f5:ff:e1:81:51:01: b4:31:ac:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHe9xQ971Ej34P+kfMyz0/3J730wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNTEyMDMwNzE2MjJaFw0yNTEyMDYxNjE1MjJaMDMxMTAvBgNV BAMTKDM5ODFGOUQ1OTI0MDg0RjU3QzQxMzFCMDFEODYzNkMyNjFEQjQ0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/n3V47+0+VSBGWGovKdsqWsgf MeOETEx8prqHX25/GU8dmvOyx4ss58siHQK4Zrs/BPKOG7QiKINp5WoZlXuUpoJE HShhZd0y/haZ65NVRKVyhzbm7GRArcLGmaksQO43NAbJhJ473JJ5XeTnZys3btJE AGSB93uuuLeuEQq/vbmAG8NvxeZ6/oDDi0685QnTZGxdi9jTsM/bnf+g3ozO32Pa eTs49p0/thsd4j1GwpPg8NhmmAnsnqTjkVdo90GU8k5kLkj9LcAZx8ur0k60Pda9 qec80zgpRozOPmp37XYEaqgGopmcdXdLqKj1MpRSedUIPB2rYxVU2GVayR1BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYH51ZJAhPV8QTGwHYY2wmHbRL8wHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPQmIfMamnAtp49+sKmZI2uMyyje/0HUExGs Vjn/aO2UzR1Q0wdotCWh18B8ERVBUriSgodRlXIlB3GPYcpHhYOojW6Ha/51P6jw ds0lJdAmubWBFsbeGuDPqQ2wfgrNky1PMYJtsIE8kdKUnB5vZKtCcOvz4KNbgK55 x1mM38siyT26dFESfsfjvoCjUZOwZ6mIRhzRj7T2cysTW4Y0wKaeV9B5mNxT72x+ eaui/VhX5TsTp/NupPBZmiZVqrjlOBr+5v5ENPXgl6wwuv3i0zWD4rXtJ6Tr2UJh AxlHqvA6hs9R1aW/73bPVqpHVmHqfSkC0gTra/X/4YFRAbQxrLs= -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:31 2025 by rpki-client