This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: 8ag4yd+ch+3irFpR1TzzsA6oc+Mg8g1lh2ywYTbIQCk= Subject key identifier: 45:81:1D:8D:DA:92:B1:C8:3C:B1:01:03:D3:26:CB:7E:BC:A2:55:2B Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 5A759D9E44719EF997E0C81F1DAB9D4A64009DC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: A4 Signing time: Wed 03 Dec 2025 04:21:23 +0000 Manifest this update: Wed 03 Dec 2025 04:16:23 +0000 Manifest next update: Sat 06 Dec 2025 15:47:23 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: dZdmcq9MCj9rxKSJkRP3QDlxewSrG8lSZvoA/dCH4T4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:75:9d:9e:44:71:9e:f9:97:e0:c8:1f:1d:ab:9d:4a:64:00:9d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Dec 3 04:16:23 2025 GMT Not After : Dec 6 15:47:23 2025 GMT Subject: CN=45811D8DDA92B1C83CB10103D326CB7EBCA2552B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6f:56:82:a8:37:5a:bc:cc:68:6a:d3:ae:f9: cf:e2:4c:2c:10:39:49:8a:bc:01:fc:0a:ef:9c:24: 3f:39:ed:ee:96:7d:87:75:4a:fc:fc:ad:ac:6b:d0: 79:83:29:65:41:e2:c9:a5:32:04:a9:a9:c9:23:b4: 91:37:63:8a:6f:8a:7b:13:1f:22:d0:64:d6:8e:fc: 9e:99:1e:68:d8:89:c7:0f:d6:d1:cc:ed:1e:11:ee: b5:b0:62:1b:bd:42:7a:d6:e3:ea:aa:17:14:db:d2: 29:28:b3:7c:6c:a9:00:be:06:7e:59:5e:16:7f:a6: e2:dd:f5:e0:2b:4d:81:61:29:c8:f6:ba:57:c1:e5: 64:28:ab:95:5c:6e:8f:21:71:d8:65:3c:fa:79:3c: f1:bd:89:a5:d4:a0:69:b9:e2:76:55:bf:f2:4e:f9: b9:11:62:10:00:f1:a1:1c:fd:a9:33:d4:c0:a2:90: df:f9:62:e7:1e:db:0e:c0:b7:a8:8e:35:4c:65:1c: c9:a9:3a:78:11:c8:64:1b:aa:ba:6c:1b:21:7d:95: 95:8d:04:89:c9:54:97:88:8d:04:41:fe:7b:3f:b3: 35:75:01:e9:7d:15:a7:b4:58:7d:c4:9f:3e:db:ae: e2:72:30:7f:cb:6e:73:3e:2a:b9:23:ff:a9:91:ab: 4d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:81:1D:8D:DA:92:B1:C8:3C:B1:01:03:D3:26:CB:7E:BC:A2:55:2B X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:e0:e7:88:cc:1f:1d:09:e6:a9:ba:c9:72:67:5b:71:5e:e7: aa:fc:2f:09:68:ca:81:4a:c1:2c:e2:1d:e2:d7:89:cc:9a:68: 01:6a:e3:e7:a7:49:d2:a2:25:af:54:10:ef:a3:0e:dc:4d:80: 59:a0:c7:cb:a8:a3:24:fd:40:30:bd:64:b1:4d:f0:e4:62:b8: 91:95:75:c0:df:e4:20:01:32:37:e3:9f:2c:6b:18:23:d1:58: 73:5b:4d:d3:f9:e3:aa:1d:50:c5:6f:c8:25:c2:07:c7:8c:e9: b2:8f:06:24:10:a0:d3:9f:e1:fb:2d:9e:71:e6:48:ac:ba:aa: e7:8b:fd:f5:7f:82:b2:b8:55:2c:09:40:f0:62:51:e8:8f:cf: 69:09:0a:16:8a:4e:82:45:41:05:fb:86:d7:63:c6:0d:54:de: f5:b7:6e:33:54:8a:26:4a:c8:64:32:69:f7:8a:da:17:3b:b6: df:50:98:28:e3:20:a6:8c:a8:60:28:02:57:78:ee:1f:29:07: a4:cf:61:a0:f8:d4:ea:a6:7b:3c:4d:66:c4:af:76:7d:be:ba: 8d:cc:3d:ee:67:f6:00:10:b2:f4:59:27:47:59:bf:70:e3:c4: b4:da:e0:d4:00:f0:33:81:17:55:08:d5:00:d1:f5:eb:f7:cf: 4c:9b:ea:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWnWdnkRxnvmX4MgfHaudSmQAncMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTEyMDMwNDE2MjNaFw0yNTEyMDYxNTQ3MjNaMDMxMTAvBgNV BAMTKDQ1ODExRDhEREE5MkIxQzgzQ0IxMDEwM0QzMjZDQjdFQkNBMjU1MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyb1aCqDdavMxoatOu+c/iTCwQ OUmKvAH8Cu+cJD857e6WfYd1Svz8raxr0HmDKWVB4smlMgSpqckjtJE3Y4pvinsT HyLQZNaO/J6ZHmjYiccP1tHM7R4R7rWwYhu9QnrW4+qqFxTb0ikos3xsqQC+Bn5Z XhZ/puLd9eArTYFhKcj2ulfB5WQoq5Vcbo8hcdhlPPp5PPG9iaXUoGm54nZVv/JO +bkRYhAA8aEc/akz1MCikN/5Yuce2w7At6iONUxlHMmpOngRyGQbqrpsGyF9lZWN BInJVJeIjQRB/ns/szV1Ael9Fae0WH3Enz7bruJyMH/LbnM+Krkj/6mRq00lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYEdjdqSscg8sQED0ybLfryiVSswHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOTg54jMHx0J5qm6yXJnW3Fe56r8LwloyoFK wSziHeLXicyaaAFq4+enSdKiJa9UEO+jDtxNgFmgx8uooyT9QDC9ZLFN8ORiuJGV dcDf5CABMjfjnyxrGCPRWHNbTdP546odUMVvyCXCB8eM6bKPBiQQoNOf4fstnnHm SKy6queL/fV/grK4VSwJQPBiUeiPz2kJChaKToJFQQX7htdjxg1U3vW3bjNUiiZK yGQyafeK2hc7tt9QmCjjIKaMqGAoAld47h8pB6TPYaD41OqmezxNZsSvdn2+uo3M Pe5n9gAQsvRZJ0dZv3DjxLTa4NQA8DOBF1UI1QDR9ev3z0yb6rw= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:33 2025 by rpki-client