This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: Wql4yZRs3sD3Dr1HX6ZPM3rjKs4+MQ/GqdRhmgMxvTk= Subject key identifier: 4F:24:E8:B1:9C:1C:2F:58:C9:5A:FB:49:F2:BA:F1:23:F8:71:CF:7C Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 2FEBD1D1CE1BF136D3F88A51B1FA449ABFCF3C6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0250 Signing time: Wed 03 Dec 2025 13:01:48 +0000 Manifest this update: Wed 03 Dec 2025 12:56:48 +0000 Manifest next update: Sat 06 Dec 2025 13:06:48 +0000 Files and hashes: 1: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 2: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: IF31V7aziYzG44K7rzqojbIQNMdlzBoYeu+wIiZ0/xM=) 3: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 4: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 5: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 6: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:eb:d1:d1:ce:1b:f1:36:d3:f8:8a:51:b1:fa:44:9a:bf:cf:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Dec 3 12:56:48 2025 GMT Not After : Dec 6 13:06:48 2025 GMT Subject: CN=4F24E8B19C1C2F58C95AFB49F2BAF123F871CF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:c4:81:1c:a5:a2:9b:6c:d7:08:4c:f3:72: 2f:e8:ac:8c:a3:af:3d:b1:0b:6b:90:ad:b8:a2:bd: 9d:86:d9:ca:66:c1:ea:3c:cd:06:2a:43:f2:56:b1: c5:79:63:bd:97:56:4b:2a:d9:e1:91:c2:a3:4c:3e: 05:2b:cb:48:d4:ac:93:62:2d:6a:6c:ff:96:8d:b7: 7a:b3:7d:fd:e0:a1:b5:9e:b4:34:79:a1:76:6b:25: 03:4a:ab:47:6c:07:46:44:90:4b:5c:70:16:21:3a: 2b:b3:bf:4c:f8:0d:be:e4:b4:42:82:a0:3b:f7:f8: 94:65:ea:ec:e0:89:6a:a7:80:bf:ec:21:3a:55:04: 52:c1:3b:6f:69:fc:63:c3:41:22:eb:df:5a:0a:79: 80:e8:6c:a0:a4:fd:02:92:7a:c6:ed:06:a8:1e:04: 45:2a:6e:82:cf:46:9c:63:69:0c:c6:4b:8b:3b:3a: c3:b0:40:10:15:84:ee:44:7c:71:b2:f9:3d:03:5d: 67:22:a4:ad:2c:6e:40:5a:6e:78:34:78:3d:42:fe: 7a:50:d6:72:0e:37:4d:2f:a3:d9:1c:c5:fd:23:49: fa:11:38:97:3d:42:bb:31:06:80:65:a6:0d:f1:9a: a5:09:d4:49:b9:65:08:57:d5:5e:66:e1:34:96:66: 8a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:24:E8:B1:9C:1C:2F:58:C9:5A:FB:49:F2:BA:F1:23:F8:71:CF:7C X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1a:ef:31:3b:d3:4f:4d:05:28:bc:fc:48:dc:fd:3a:17:5b: 04:5d:3b:be:71:0b:4d:93:5f:96:97:5a:21:0e:7e:f6:65:c3: 02:ca:eb:73:c4:9d:1e:40:67:c1:98:4b:98:89:c9:e4:1a:93: a8:d4:f0:0b:dc:76:9f:48:11:5d:ad:3b:36:85:11:41:be:b9: 5f:08:bc:a1:c3:dc:49:3e:27:58:35:cf:c0:11:26:26:ef:e6: bc:83:50:5f:11:70:b3:85:47:ad:b8:84:0a:91:03:0b:fa:fb: 21:70:74:98:0f:e4:ca:35:1f:ee:63:e0:9f:3c:b8:22:31:4e: a4:31:80:54:aa:8a:4c:14:94:f2:2b:a7:8a:30:38:8e:6a:9f: 69:cd:c2:c5:62:de:dc:80:68:b9:80:6e:b7:51:63:f9:3c:50: bc:a2:6e:79:d5:de:0c:f5:a8:f6:52:7b:99:e1:a6:c5:b7:05: 6e:87:b6:a7:7f:37:8e:57:8f:15:18:d9:e8:bb:47:34:28:00: e9:4f:08:26:4e:21:ab:24:76:81:6a:b4:79:99:9f:d5:8e:ce: 1f:1b:9d:4f:cd:04:a3:0b:4e:ae:3d:0e:09:2b:f8:5c:a6:bb: 00:6e:6e:a8:5d:c6:95:ba:89:d8:db:b7:1e:a4:25:e8:9c:5e: 98:53:0d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL+vR0c4b8TbT+IpRsfpEmr/PPG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTEyMDMxMjU2NDhaFw0yNTEyMDYxMzA2NDhaMDMxMTAvBgNV BAMTKDRGMjRFOEIxOUMxQzJGNThDOTVBRkI0OUYyQkFGMTIzRjg3MUNGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPxcSBHKWim2zXCEzzci/orIyj rz2xC2uQrbiivZ2G2cpmweo8zQYqQ/JWscV5Y72XVksq2eGRwqNMPgUry0jUrJNi LWps/5aNt3qzff3gobWetDR5oXZrJQNKq0dsB0ZEkEtccBYhOiuzv0z4Db7ktEKC oDv3+JRl6uzgiWqngL/sITpVBFLBO29p/GPDQSLr31oKeYDobKCk/QKSesbtBqge BEUqboLPRpxjaQzGS4s7OsOwQBAVhO5EfHGy+T0DXWcipK0sbkBabng0eD1C/npQ 1nION00vo9kcxf0jSfoROJc9QrsxBoBlpg3xmqUJ1Em5ZQhX1V5m4TSWZop3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTyTosZwcL1jJWvtJ8rrxI/hxz3wwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4a7zE7009NBSi8/Ejc/ToXWwRdO75xC02T X5aXWiEOfvZlwwLK63PEnR5AZ8GYS5iJyeQak6jU8Avcdp9IEV2tOzaFEUG+uV8I vKHD3Ek+J1g1z8ARJibv5ryDUF8RcLOFR624hAqRAwv6+yFwdJgP5Mo1H+5j4J88 uCIxTqQxgFSqikwUlPIrp4owOI5qn2nNwsVi3tyAaLmAbrdRY/k8ULyibnnV3gz1 qPZSe5nhpsW3BW6Htqd/N45XjxUY2ei7RzQoAOlPCCZOIaskdoFqtHmZn9WOzh8b nU/NBKMLTq49Dgkr+FymuwBubqhdxpW6idjbtx6kJeicXphTDcw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:04 2025 by rpki-client