This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft File: 179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft (raw, json) Hash identifier: Do6pJ0g2IVyE56ipPAUQ0P+Fv9o1z113CAPpPd90CUA= Subject key identifier: 63:E6:5D:7B:99:13:EB:69:31:10:FD:35:34:D1:91:1C:A2:24:2E:34 Authority key identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F Certificate issuer: /CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F Certificate serial: 60113EAC0C49C55B5D499CC6114AA6A07A3FCEAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft Manifest number: 021A Signing time: Wed 03 Dec 2025 01:11:30 +0000 Manifest this update: Wed 03 Dec 2025 01:06:30 +0000 Manifest next update: Sat 06 Dec 2025 11:36:30 +0000 Files and hashes: 1: 323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa (hash: v6PyG0ZfaK8mElZDMBdGhOWu4eBXE60+RohYgBBjOeQ=) 2: 3130332e3134392e3134302e302f32332d3234203d3e20313331373133.roa (hash: K2fIlKFX85sJnEGjOMrjt29RukBDvMWsg0CxSB5ZaiE=) 3: 179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl (hash: Cr63QQp9F0eqtR+o2iViWiIHn9yZ7788X/rN6sZ/LxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 11:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:11:3e:ac:0c:49:c5:5b:5d:49:9c:c6:11:4a:a6:a0:7a:3f:ce:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F Validity Not Before: Dec 3 01:06:30 2025 GMT Not After : Dec 6 11:36:30 2025 GMT Subject: CN=63E65D7B9913EB693110FD3534D1911CA2242E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5d:df:fd:e6:11:7a:1d:51:c1:44:27:5c:49: bd:91:2f:1c:17:73:d0:a2:82:85:0a:a0:47:5c:db: 95:ad:7b:40:49:3a:5d:cd:45:f7:f7:02:b4:80:48: 20:34:db:38:ac:85:2d:3b:2a:27:7f:ae:32:d7:43: b1:ec:02:d6:22:be:5f:0d:be:9d:c7:0c:48:00:b8: 69:dc:33:05:19:28:2c:34:1a:44:cd:7a:00:f4:c8: c0:59:ba:49:0d:25:b5:5e:db:1f:54:4d:ef:0f:8e: fa:f1:ee:a7:bc:85:75:97:47:96:b7:1b:2b:05:6b: f6:1f:64:86:d2:3a:8a:c2:85:da:0a:14:3a:f7:75: 14:7e:ec:5d:5d:6e:51:5d:73:99:75:ba:95:53:ec: 20:23:13:09:fe:49:07:ec:c7:10:a1:bb:a1:d4:2e: 89:65:97:9b:47:75:09:a8:cc:26:6b:7d:66:6c:5e: 71:48:3a:c2:b3:d4:36:41:88:4f:96:01:79:21:10: 06:28:64:6b:e6:2a:29:bf:9f:1b:19:69:75:bd:3c: 8d:e1:68:e9:9e:92:0f:9e:34:50:9a:98:50:a8:34: 65:30:19:8c:c9:ed:81:0e:79:4a:ee:9c:f6:8c:74: 1f:54:d3:9c:7b:ba:62:de:ac:e6:95:31:08:12:cc: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E6:5D:7B:99:13:EB:69:31:10:FD:35:34:D1:91:1C:A2:24:2E:34 X509v3 Authority Key Identifier: keyid:17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d8:a8:df:ba:57:6b:c4:43:c0:ed:0b:2b:f9:1b:19:0b:1f: da:c4:f8:2e:bd:cc:8b:2b:07:57:0d:b6:eb:3c:cb:3a:28:d0: de:27:22:c5:d3:8f:bc:45:db:9f:56:f6:29:f0:c5:13:91:50: e3:0e:39:0a:cb:27:d5:03:56:fe:f6:29:d4:b9:b1:61:44:cc: ca:0e:e4:5e:e4:82:71:cd:ce:d8:03:98:ac:a5:13:39:51:df: 62:9b:ae:66:58:69:8f:e9:d2:6e:e0:8a:28:2f:cd:71:87:2c: 30:18:c7:ec:0b:50:34:58:03:f0:39:e7:41:d6:da:89:57:52: 92:e9:7d:40:68:e6:89:6e:11:c8:46:dd:ed:db:a7:02:9c:04: 17:fb:70:5f:54:11:6a:ff:28:57:ed:fc:c2:02:31:15:63:90: 14:04:65:08:91:1b:61:35:72:e6:2f:92:fb:5a:af:42:f0:4b: be:fb:99:2f:33:f1:13:de:38:d1:2e:13:46:7e:ef:15:51:cc: b9:86:97:06:5a:d7:d9:4c:fa:5a:f6:b1:fe:55:89:9e:92:fa: 7b:4b:63:6a:f2:5c:09:f0:4e:35:ff:16:4d:0e:19:b6:43:fa: c8:fe:54:e4:31:fe:0b:c0:fe:c8:50:3c:d6:2c:3e:c4:d6:e7: c7:e6:47:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBE+rAxJxVtdSZzGEUqmoHo/zqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4MjU0RDhGOEJEREQx Q0NCNkU3RjAeFw0yNTEyMDMwMTA2MzBaFw0yNTEyMDYxMTM2MzBaMDMxMTAvBgNV BAMTKDYzRTY1RDdCOTkxM0VCNjkzMTEwRkQzNTM0RDE5MTFDQTIyNDJFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXd/95hF6HVHBRCdcSb2RLxwX c9CigoUKoEdc25Wte0BJOl3NRff3ArSASCA02zishS07Kid/rjLXQ7HsAtYivl8N vp3HDEgAuGncMwUZKCw0GkTNegD0yMBZukkNJbVe2x9UTe8Pjvrx7qe8hXWXR5a3 GysFa/YfZIbSOorChdoKFDr3dRR+7F1dblFdc5l1upVT7CAjEwn+SQfsxxChu6HU Lolll5tHdQmozCZrfWZsXnFIOsKz1DZBiE+WAXkhEAYoZGvmKim/nxsZaXW9PI3h aOmekg+eNFCamFCoNGUwGYzJ7YEOeUrunPaMdB9U05x7umLerOaVMQgSzKgXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY+Zde5kT62kxEP01NNGRHKIkLjQwHwYDVR0j BBgwFoAUF5tOsjMOJuzXfIJU2Pi93RzLbn8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTdmMGU2Yy0xNDVhLTRjZjMtYjI4My00MmM0YWY4MTkxODgvMC8xNzlCNEVCMjMz MEUyNkVDRDc3QzgyNTREOEY4QkRERDFDQ0I2RTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4MjU0RDhGOEJEREQxQ0NC NkU3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU3ZjBlNmMtMTQ1YS00Y2YzLWIy ODMtNDJjNGFmODE5MTg4LzAvMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4MjU0RDhGOEJE REQxQ0NCNkU3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzYqN+6V2vEQ8DtCyv5GxkLH9rE+C69zIsr B1cNtus8yzoo0N4nIsXTj7xF259W9inwxRORUOMOOQrLJ9UDVv72KdS5sWFEzMoO 5F7kgnHNztgDmKylEzlR32KbrmZYaY/p0m7giigvzXGHLDAYx+wLUDRYA/A550HW 2olXUpLpfUBo5oluEchG3e3bpwKcBBf7cF9UEWr/KFft/MICMRVjkBQEZQiRG2E1 cuYvkvtar0LwS777mS8z8RPeONEuE0Z+7xVRzLmGlwZa19lM+lr2sf5ViZ6S+ntL Y2ryXAnwTjX/Fk0OGbZD+sj+VOQx/gvA/shQPNYsPsTW58fmR0I= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:59 2025 by rpki-client