This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: ZrHBSfZfYrBvpR3LCz8/dkvUpIXHA8XXMvYXp3rDQas= Subject key identifier: 7F:8D:F6:62:4A:48:08:6F:E3:E8:CA:D2:44:1B:04:B6:CD:32:AF:C4 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 4B3E3639075B06C49A94BBF4A5E12F5E0E61FDBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 04A2 Signing time: Sun 14 Dec 2025 06:42:23 +0000 Manifest this update: Sun 14 Dec 2025 06:37:23 +0000 Manifest next update: Wed 17 Dec 2025 15:58:23 +0000 Files and hashes: 1: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: qCpGJECuqhZ9S84mt0NH9hTG34z0RGR+JLZd5S4l6NU=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 4: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 15:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:3e:36:39:07:5b:06:c4:9a:94:bb:f4:a5:e1:2f:5e:0e:61:fd:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Dec 14 06:37:23 2025 GMT Not After : Dec 17 15:58:23 2025 GMT Subject: CN=7F8DF6624A48086FE3E8CAD2441B04B6CD32AFC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4b:c6:a2:5d:c3:97:15:cf:04:2f:18:39:89: f3:13:eb:2b:fa:4e:56:a2:fb:a7:b9:6a:a2:02:8f: f4:3d:fa:2a:a6:f1:28:f5:3e:2b:ec:1b:67:a5:d8: 00:ac:ba:fe:97:05:03:97:6b:a5:e3:ac:db:0f:f8: 45:3a:94:9e:5f:be:ca:73:92:8b:6d:29:b5:c7:08: bf:f2:68:a0:30:51:86:f1:85:75:ad:a6:f8:b3:c8: c1:dd:29:b7:c3:92:f5:5d:29:7b:62:1d:45:fa:72: 6c:e7:06:a3:85:c8:91:f4:62:44:e9:dd:44:13:95: c5:26:be:72:62:46:39:80:12:de:68:7d:c4:e3:4b: 43:fc:d0:e9:99:06:89:1d:95:2c:32:51:5d:ce:f3: 1c:d5:f3:82:5e:5a:bf:f2:57:01:fd:79:64:07:cc: 3d:0c:25:88:3f:01:82:7a:07:e1:5a:24:12:6b:05: 94:fd:93:61:02:79:1c:02:d8:38:06:2a:53:d0:f4: be:81:d5:27:b1:ce:c4:d2:fc:3d:74:e9:8b:ad:f6: aa:8f:86:e3:2d:c2:e0:0f:f6:1f:2a:d0:c9:55:91: 15:fe:f5:36:6e:c7:ad:67:f8:46:1d:f3:78:f8:f5: 85:13:26:02:4c:15:7a:30:85:8e:db:8f:03:80:f0: 8a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8D:F6:62:4A:48:08:6F:E3:E8:CA:D2:44:1B:04:B6:CD:32:AF:C4 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:0a:1b:be:96:02:f4:e2:41:bf:90:a0:ef:68:2d:16:89:22: 1e:f3:7d:9f:b7:48:74:2f:bb:44:bb:83:5a:22:be:94:0f:01: 3c:17:79:57:a8:4a:65:be:38:ee:a2:fe:e0:73:5b:66:ce:aa: ce:09:74:30:bc:c7:09:49:9f:60:7e:4f:78:52:2c:f6:6d:2e: 80:fd:26:5c:68:57:e8:c2:2d:93:61:58:9c:4c:85:9f:64:be: 44:d1:eb:90:3d:7d:49:54:88:e7:20:3b:51:ac:f4:24:8c:db: bc:2c:9a:58:a8:91:36:c5:54:07:a7:71:0b:66:ee:0f:c7:99: 19:a7:7c:8b:e0:c9:8c:ce:db:3e:0a:1d:4c:7a:ed:56:36:ed: 7f:d5:29:1c:11:ab:87:90:8e:4a:d8:fd:6e:c4:b9:d6:ff:c9: 37:a5:33:0d:9f:eb:63:66:9e:51:ae:0a:53:9a:ae:d3:a2:d5: a6:41:a1:9f:e1:2d:6a:fc:75:81:9a:e6:cc:d1:d6:ff:9a:7f: 66:db:01:03:ba:44:c1:5e:8e:0e:ae:54:f1:10:87:23:17:af: 55:27:48:1e:47:67:39:f6:4d:18:63:eb:96:ce:96:40:79:c4: 34:4d:51:8b:27:15:90:69:1c:41:cd:81:1c:05:74:01:c5:6b: eb:f7:d5:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSz42OQdbBsSalLv0peEvXg5h/bswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTEyMTQwNjM3MjNaFw0yNTEyMTcxNTU4MjNaMDMxMTAvBgNV BAMTKDdGOERGNjYyNEE0ODA4NkZFM0U4Q0FEMjQ0MUIwNEI2Q0QzMkFGQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0S8aiXcOXFc8ELxg5ifMT6yv6 Tlai+6e5aqICj/Q9+iqm8Sj1PivsG2el2ACsuv6XBQOXa6XjrNsP+EU6lJ5fvspz kottKbXHCL/yaKAwUYbxhXWtpvizyMHdKbfDkvVdKXtiHUX6cmznBqOFyJH0YkTp 3UQTlcUmvnJiRjmAEt5ofcTjS0P80OmZBokdlSwyUV3O8xzV84JeWr/yVwH9eWQH zD0MJYg/AYJ6B+FaJBJrBZT9k2ECeRwC2DgGKlPQ9L6B1SexzsTS/D106Yut9qqP huMtwuAP9h8q0MlVkRX+9TZux61n+EYd83j49YUTJgJMFXowhY7bjwOA8IrnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf432YkpICG/j6MrSRBsEts0yr8QwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMKG76WAvTiQb+QoO9oLRaJIh7zfZ+3SHQv u0S7g1oivpQPATwXeVeoSmW+OO6i/uBzW2bOqs4JdDC8xwlJn2B+T3hSLPZtLoD9 JlxoV+jCLZNhWJxMhZ9kvkTR65A9fUlUiOcgO1Gs9CSM27wsmliokTbFVAencQtm 7g/HmRmnfIvgyYzO2z4KHUx67VY27X/VKRwRq4eQjkrY/W7Eudb/yTelMw2f62Nm nlGuClOartOi1aZBoZ/hLWr8dYGa5szR1v+af2bbAQO6RMFejg6uVPEQhyMXr1Un SB5HZzn2TRhj65bOlkB5xDRNUYsnFZBpHEHNgRwFdAHFa+v31YY= -----END CERTIFICATE-----Generated at Tue Dec 16 13:42:02 2025 by rpki-client