This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: I9K6p1PmLqciU/tsY698YpLG5huah7pgWWHlajEg/iU= Subject key identifier: 3C:55:17:D2:59:EE:1A:CF:C8:2C:0F:AD:EA:C4:52:E2:23:BE:A6:6B Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 3A5330483590E13ED8C507DCD86B8848C90A5F65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 0191 Signing time: Tue 02 Dec 2025 09:21:50 +0000 Manifest this update: Tue 02 Dec 2025 09:16:50 +0000 Manifest next update: Fri 05 Dec 2025 10:56:50 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: LcrsvbozQCKWcQas81PGLGF3QGR7SJx1L7xvGaU44nA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 10:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:53:30:48:35:90:e1:3e:d8:c5:07:dc:d8:6b:88:48:c9:0a:5f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Dec 2 09:16:50 2025 GMT Not After : Dec 5 10:56:50 2025 GMT Subject: CN=3C5517D259EE1ACFC82C0FADEAC452E223BEA66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d1:6d:d0:74:c2:07:e0:e2:7e:13:43:5a:c5: b1:99:6a:28:ca:a7:4b:1a:48:9c:df:49:36:3f:c9: 08:30:47:a9:bd:1c:06:a7:27:80:18:23:c4:6b:86: ff:5f:c1:28:59:7f:cb:97:0d:a6:a8:4f:61:7d:41: 49:1a:32:49:0a:d4:7d:26:6f:55:c0:83:2b:96:14: f1:82:e4:8a:69:50:30:40:79:c8:45:f3:ae:79:b0: 3c:41:b4:9d:40:78:f9:e4:6d:2d:b8:06:cf:15:15: 2f:0c:c2:09:b5:a4:bc:71:8b:9a:4e:50:f7:9b:0e: 69:c4:5b:50:3f:72:5f:21:63:c9:47:bd:86:af:d6: 1c:2e:a5:92:c2:a2:f3:ad:32:b7:a0:47:d9:02:22: cf:a8:20:94:cd:2e:e8:d7:46:22:5d:69:88:dd:d9: 51:65:c1:67:18:6d:1f:6a:f7:72:aa:51:a5:85:3a: f8:01:27:80:f2:e2:8e:da:b8:54:c5:cd:dc:04:8a: 5c:4a:eb:57:99:60:43:d4:7b:13:20:da:50:d7:23: bc:82:88:e2:78:09:5d:15:94:a1:03:30:7b:3d:93: 9c:fc:e6:ae:24:a3:b7:e3:c1:5e:13:86:79:6c:66: 80:3c:18:75:a6:f7:f5:46:5e:8c:2b:21:53:49:7e: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:55:17:D2:59:EE:1A:CF:C8:2C:0F:AD:EA:C4:52:E2:23:BE:A6:6B X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:54:9f:59:1c:4c:72:dc:f0:89:33:6e:07:a5:b2:3c:05:2e: ee:03:e6:fb:7a:8c:00:da:aa:c1:9d:0f:59:0d:7a:30:e7:fd: 2d:d5:4f:16:5a:17:3c:8f:2a:e1:74:35:1a:15:dc:98:3e:2f: d7:9f:97:ce:8e:81:9e:2e:33:d7:fe:3f:b4:e0:62:c7:7d:d6: 3e:6b:f3:3d:bc:8b:3b:11:0f:46:18:9e:c8:73:c0:4c:2f:88: 4c:44:28:57:83:f5:f9:4d:88:56:fb:a4:8e:be:c5:e4:55:ff: a3:9d:aa:08:f8:c0:34:63:91:e4:34:4f:8f:67:6c:ad:54:38: 1f:cd:d9:b1:7e:dd:13:bd:03:f7:85:3c:64:1e:d2:52:6a:1b: f6:d5:3b:20:bb:65:2d:4a:fe:c8:08:80:97:6b:23:cf:98:a3: 79:b6:a2:75:ff:e6:ec:9e:26:a8:60:30:2f:61:96:f9:45:87: ee:3d:70:50:9c:8e:78:1f:41:f7:48:ba:36:76:ac:b9:0d:eb: 56:14:47:26:70:9f:14:af:f0:1b:96:08:de:c5:9c:ed:0d:68: a1:b8:e7:38:9a:7f:c0:f3:10:6f:64:30:f4:81:37:5b:35:6e: 02:30:7c:01:69:35:88:cc:c7:6f:a1:50:83:b6:b4:19:d2:fd: 67:80:12:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlMwSDWQ4T7YxQfc2GuISMkKX2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNTEyMDIwOTE2NTBaFw0yNTEyMDUxMDU2NTBaMDMxMTAvBgNV BAMTKDNDNTUxN0QyNTlFRTFBQ0ZDODJDMEZBREVBQzQ1MkUyMjNCRUE2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0W3QdMIH4OJ+E0NaxbGZaijK p0saSJzfSTY/yQgwR6m9HAanJ4AYI8Rrhv9fwShZf8uXDaaoT2F9QUkaMkkK1H0m b1XAgyuWFPGC5IppUDBAechF8655sDxBtJ1AePnkbS24Bs8VFS8Mwgm1pLxxi5pO UPebDmnEW1A/cl8hY8lHvYav1hwupZLCovOtMregR9kCIs+oIJTNLujXRiJdaYjd 2VFlwWcYbR9q93KqUaWFOvgBJ4Dy4o7auFTFzdwEilxK61eZYEPUexMg2lDXI7yC iOJ4CV0VlKEDMHs9k5z85q4ko7fjwV4ThnlsZoA8GHWm9/VGXowrIVNJfh/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFUX0lnuGs/ILA+t6sRS4iO+pmswHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdUn1kcTHLc8IkzbgelsjwFLu4D5vt6jADa qsGdD1kNejDn/S3VTxZaFzyPKuF0NRoV3Jg+L9efl86OgZ4uM9f+P7TgYsd91j5r 8z28izsRD0YYnshzwEwviExEKFeD9flNiFb7pI6+xeRV/6Odqgj4wDRjkeQ0T49n bK1UOB/N2bF+3RO9A/eFPGQe0lJqG/bVOyC7ZS1K/sgIgJdrI8+Yo3m2onX/5uye JqhgMC9hlvlFh+49cFCcjngfQfdIujZ2rLkN61YURyZwnxSv8BuWCN7FnO0NaKG4 5ziaf8DzEG9kMPSBN1s1bgIwfAFpNYjMx2+hUIO2tBnS/WeAEhg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:03 2025 by rpki-client