This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: G4G0mATeilJchNTewlkJeCCOuYVKk9hx0c4X+7703CU= Subject key identifier: F4:6A:B7:36:01:3D:8B:0D:1E:A3:2D:B1:91:34:E1:61:12:3E:7E:4D Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 6216450CC08CC3AB734702228E4A1A905EB911BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 0151 Signing time: Mon 01 Dec 2025 19:00:04 +0000 Manifest this update: Mon 01 Dec 2025 18:55:04 +0000 Manifest next update: Fri 05 Dec 2025 05:06:04 +0000 Files and hashes: 1: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: FLmB4vfMdqpC4EcoxkS716Zp9MVIxgT1SGoLBq+URfs=) 2: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 05:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:16:45:0c:c0:8c:c3:ab:73:47:02:22:8e:4a:1a:90:5e:b9:11:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Dec 1 18:55:04 2025 GMT Not After : Dec 5 05:06:04 2025 GMT Subject: CN=F46AB736013D8B0D1EA32DB19134E161123E7E4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:eb:b3:f7:63:31:a9:d8:f2:8b:df:d5:0a: 07:f7:ee:08:57:fb:6e:fb:1e:87:c5:65:e5:99:bb: 94:a1:d0:cc:7c:b4:b4:53:3f:e2:69:1a:35:38:b8: 90:5b:87:e6:00:92:f0:d3:be:b5:c6:bf:4a:a2:d9: e1:98:f1:f6:1a:65:9a:6f:8c:c7:7e:97:9b:f8:dd: bd:53:62:7a:e6:04:f2:ff:44:6f:1a:51:a2:cb:0d: 25:af:e5:96:ce:eb:6d:50:ef:c5:3a:09:5d:5c:a2: 0a:24:17:32:0c:b3:7e:85:37:a8:20:33:41:c4:30: 87:f0:74:b1:ee:11:d4:42:e7:d0:7e:26:12:bb:4b: 5f:51:26:6e:cc:d0:1f:5e:ac:3b:c9:29:a5:cb:05: 38:3c:41:27:3e:c5:a5:07:5a:e9:b3:51:36:9a:0d: 79:81:cf:a5:e8:dc:9b:6b:b0:eb:04:5f:2e:71:23: d5:50:06:e8:f9:8a:9e:98:73:1e:3f:ab:7c:19:0d: a1:43:79:d4:d0:81:42:3a:7d:63:06:91:22:02:15: bb:40:8f:09:e2:63:76:61:5a:c6:ce:4c:34:8d:9a: 33:d2:9d:de:c4:66:08:c2:05:d2:2a:fc:19:1f:2c: 70:c3:ef:9b:30:cd:f7:76:44:39:60:a4:c0:bc:cd: 1d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:6A:B7:36:01:3D:8B:0D:1E:A3:2D:B1:91:34:E1:61:12:3E:7E:4D X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:58:38:83:0b:d5:57:ae:9e:84:b3:1b:c3:49:f4:8c:d9:75: 43:4c:89:01:27:2f:3a:f8:2e:08:a5:81:d3:4a:a9:e6:0e:16: 46:3f:bc:80:20:dc:d9:db:b5:ab:04:7e:b8:18:72:c3:46:6c: 55:63:6b:bf:62:1a:31:09:8f:82:c1:eb:fc:bd:26:fc:2e:8b: db:88:e7:d6:ed:6f:6d:11:36:5b:62:3e:61:a5:5b:73:3e:9e: 8e:d5:65:ec:58:ad:89:a3:78:b6:88:0c:1c:cb:63:18:35:ef: e2:90:e7:fc:ac:8c:6b:fc:d5:00:2d:f3:95:20:46:42:5b:63: 68:02:fb:64:90:0d:5b:12:19:5f:0d:38:68:37:4d:23:a9:e8: 93:0a:bd:06:23:fd:5d:26:89:d4:9c:da:74:ee:7a:17:33:49: fe:4d:87:22:1e:fd:af:41:55:c0:e0:e0:0a:35:4f:ce:07:1e: 75:50:8d:ea:b0:95:4c:fb:b5:7d:9c:b9:93:19:a1:2e:20:1c: 74:d5:b1:59:b6:68:11:14:ba:0c:48:58:c0:f4:58:09:18:1b: 06:5e:87:9f:23:15:56:c3:8e:c3:20:b0:76:01:f6:5b:7a:7b: 26:2d:54:9a:31:67:99:1e:96:4d:43:bc:00:3e:5c:e0:a3:7a: 96:41:46:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYhZFDMCMw6tzRwIijkoakF65EbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTEyMDExODU1MDRaFw0yNTEyMDUwNTA2MDRaMDMxMTAvBgNV BAMTKEY0NkFCNzM2MDEzRDhCMEQxRUEzMkRCMTkxMzRFMTYxMTIzRTdFNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWyOuz92Mxqdjyi9/VCgf37ghX +277HofFZeWZu5Sh0Mx8tLRTP+JpGjU4uJBbh+YAkvDTvrXGv0qi2eGY8fYaZZpv jMd+l5v43b1TYnrmBPL/RG8aUaLLDSWv5ZbO621Q78U6CV1cogokFzIMs36FN6gg M0HEMIfwdLHuEdRC59B+JhK7S19RJm7M0B9erDvJKaXLBTg8QSc+xaUHWumzUTaa DXmBz6Xo3JtrsOsEXy5xI9VQBuj5ip6Ycx4/q3wZDaFDedTQgUI6fWMGkSICFbtA jwniY3ZhWsbOTDSNmjPSnd7EZgjCBdIq/BkfLHDD75swzfd2RDlgpMC8zR0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Gq3NgE9iw0eoy2xkTThYRI+fk0wHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFYOIML1VeunoSzG8NJ9IzZdUNMiQEnLzr4 LgilgdNKqeYOFkY/vIAg3NnbtasEfrgYcsNGbFVja79iGjEJj4LB6/y9Jvwui9uI 59btb20RNltiPmGlW3M+no7VZexYrYmjeLaIDBzLYxg17+KQ5/ysjGv81QAt85Ug RkJbY2gC+2SQDVsSGV8NOGg3TSOp6JMKvQYj/V0midSc2nTuehczSf5NhyIe/a9B VcDg4Ao1T84HHnVQjeqwlUz7tX2cuZMZoS4gHHTVsVm2aBEUugxIWMD0WAkYGwZe h58jFVbDjsMgsHYB9lt6eyYtVJoxZ5kelk1DvAA+XOCjepZBRlE= -----END CERTIFICATE-----Generated at Wed Dec 3 14:43:41 2025 by rpki-client