This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: f26ZPjVPZVND1kwrC+LF76CJagwsw/pofBmA5s1jRlU= Subject key identifier: C8:A1:9F:C3:47:19:0F:10:50:54:89:71:61:88:24:9F:3B:FA:52:87 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 7877B05F244F096868893948668A0970CE52A909 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 0532 Signing time: Tue 02 Dec 2025 00:22:05 +0000 Manifest this update: Tue 02 Dec 2025 00:17:05 +0000 Manifest next update: Fri 05 Dec 2025 09:32:05 +0000 Files and hashes: 1: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) 2: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 3: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 4: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 5: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: xjtnqhqw7x5qDcYaHPCP8yQp8XudeQfCHcDq02aFR2g=) 6: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 09:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:77:b0:5f:24:4f:09:68:68:89:39:48:66:8a:09:70:ce:52:a9:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Dec 2 00:17:05 2025 GMT Not After : Dec 5 09:32:05 2025 GMT Subject: CN=C8A19FC347190F10505489716188249F3BFA5287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:56:d9:42:f1:75:f0:23:43:6e:2d:98:bb: 67:90:2f:6f:c3:09:c7:03:32:f4:dc:5f:16:6b:82: 8e:d7:dd:a9:d7:e5:2b:14:c8:57:b0:32:b7:a9:e4: 91:39:41:b0:7a:8f:71:e6:4c:d9:ea:d0:b8:57:6f: 17:33:c1:ef:9e:89:77:1a:c1:a7:99:ac:57:34:88: 47:5b:75:07:94:98:dd:12:bf:06:fa:94:dc:82:08: 5a:ae:cd:a2:25:77:44:26:65:d2:b6:d0:1a:06:0d: f7:41:5f:f1:21:02:42:9f:4a:71:d8:65:92:89:0b: 69:9e:b4:0e:a7:4f:7f:40:99:07:2e:8f:02:df:24: 71:96:58:df:96:69:b7:d7:7f:a8:28:49:32:b6:5c: 7f:d8:43:2b:3b:d1:da:a3:f1:46:ab:2f:99:26:07: 7f:0c:83:ea:9d:9a:12:78:5f:1c:a8:56:93:51:55: 97:bc:e1:95:13:04:6b:d1:89:fa:a6:16:43:08:e0: 6a:22:37:e7:b4:d8:de:71:af:26:69:91:fd:88:be: cc:11:6e:93:f7:25:29:24:b3:44:38:a0:62:5b:83: be:c6:12:6b:f1:f2:05:ed:16:56:1b:49:90:0e:7f: 0a:15:31:94:65:12:9f:db:9f:60:d6:66:e0:bc:22: 09:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A1:9F:C3:47:19:0F:10:50:54:89:71:61:88:24:9F:3B:FA:52:87 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:81:74:0d:92:e6:a6:1e:4a:15:d7:8e:09:df:4c:47:f0:9c: b5:7f:9f:45:5d:91:ec:c2:ff:a1:ab:e7:b4:b0:f0:20:5d:2d: df:f3:4d:25:54:99:39:4a:e6:58:f2:d3:ca:de:0a:ca:af:0c: 02:61:aa:b7:c2:ba:ec:3d:d0:74:4a:d2:ef:57:d1:16:48:1c: 25:d5:41:f5:2d:92:e7:b9:5f:12:6e:25:ad:ff:7e:6a:45:c6: b1:42:df:3a:9b:9a:8b:af:ce:ef:03:56:5e:74:5c:98:57:74: f5:1e:26:d2:d8:08:4d:41:b1:2f:01:4a:7f:df:e2:4d:cf:89: bd:92:a9:fa:97:76:b7:50:9c:1e:99:ce:cc:6e:c6:4a:eb:7d: ff:a5:38:d8:4f:f7:76:f6:28:c9:1a:a9:c6:45:d7:4f:f4:66: fa:cc:0e:3b:47:20:fd:94:0e:60:57:e0:5c:6a:8a:ea:33:16: 5b:e9:fb:c9:36:55:8e:9f:f3:ec:e6:0e:3f:fd:86:2a:3c:16: 2e:b8:99:7f:7b:04:ce:bd:35:ae:c4:ab:a7:b5:16:88:d9:3a: f2:d3:8a:68:5b:94:7b:dc:30:03:65:14:20:e5:8b:31:02:f3: d1:5c:42:63:df:db:06:f6:3b:4a:9c:fb:4b:47:67:f3:f8:bc: dc:99:4a:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHewXyRPCWhoiTlIZooJcM5SqQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTEyMDIwMDE3MDVaFw0yNTEyMDUwOTMyMDVaMDMxMTAvBgNV BAMTKEM4QTE5RkMzNDcxOTBGMTA1MDU0ODk3MTYxODgyNDlGM0JGQTUyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqQlbZQvF18CNDbi2Yu2eQL2/D CccDMvTcXxZrgo7X3anX5SsUyFewMrep5JE5QbB6j3HmTNnq0LhXbxczwe+eiXca waeZrFc0iEdbdQeUmN0Svwb6lNyCCFquzaIld0QmZdK20BoGDfdBX/EhAkKfSnHY ZZKJC2metA6nT39AmQcujwLfJHGWWN+WabfXf6goSTK2XH/YQys70dqj8UarL5km B38Mg+qdmhJ4XxyoVpNRVZe84ZUTBGvRifqmFkMI4GoiN+e02N5xryZpkf2IvswR bpP3JSkks0Q4oGJbg77GEmvx8gXtFlYbSZAOfwoVMZRlEp/bn2DWZuC8IgmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKGfw0cZDxBQVIlxYYgknzv6UocwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+BdA2S5qYeShXXjgnfTEfwnLV/n0VdkezC /6Gr57Sw8CBdLd/zTSVUmTlK5ljy08reCsqvDAJhqrfCuuw90HRK0u9X0RZIHCXV QfUtkue5XxJuJa3/fmpFxrFC3zqbmouvzu8DVl50XJhXdPUeJtLYCE1BsS8BSn/f 4k3Pib2SqfqXdrdQnB6Zzsxuxkrrff+lONhP93b2KMkaqcZF10/0ZvrMDjtHIP2U DmBX4FxqiuozFlvp+8k2VY6f8+zmDj/9hio8Fi64mX97BM69Na7Eq6e1FojZOvLT imhblHvcMANlFCDlizEC89FcQmPf2wb2O0qc+0tHZ/P4vNyZSuw= -----END CERTIFICATE-----Generated at Wed Dec 3 16:21:21 2025 by rpki-client