This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: D7Lwjp/k9URsvbNWAErhimX8tIuNaYOD8omNJTO5Las= Subject key identifier: CE:44:6F:2D:1E:B3:11:68:04:A4:52:77:09:8F:8F:F6:49:01:DF:C7 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 765E84A693B4AE58F7772794E777FEE9D480C159 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 024D Signing time: Tue 02 Dec 2025 06:31:34 +0000 Manifest this update: Tue 02 Dec 2025 06:26:33 +0000 Manifest next update: Fri 05 Dec 2025 08:57:33 +0000 Files and hashes: 1: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 3: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: rw3bFEZ9tMRSvsvf4que1TpqG/d0rTV5ANfyXy9n15k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 08:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:5e:84:a6:93:b4:ae:58:f7:77:27:94:e7:77:fe:e9:d4:80:c1:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Dec 2 06:26:33 2025 GMT Not After : Dec 5 08:57:33 2025 GMT Subject: CN=CE446F2D1EB3116804A45277098F8FF64901DFC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ce:8a:37:9b:d7:68:33:55:b3:bf:d7:66:e7: d6:bb:0c:0f:9f:79:88:36:c9:1c:8f:b9:af:0a:84: f9:3d:2a:50:dc:25:c5:cc:29:c9:8d:1a:1b:f6:51: 3b:54:2a:93:76:17:d5:90:fd:2e:7e:15:d7:fa:3f: 09:36:1f:c6:76:e2:3d:78:2d:cb:f3:77:5f:91:8e: 92:2b:e1:9c:2e:9c:5f:9e:ae:ef:37:3e:57:c9:79: 85:0f:d2:3b:41:ea:a0:af:48:b9:ee:05:46:22:b0: 59:78:e0:0c:3f:60:dc:80:38:70:2e:43:ae:20:85: 4f:76:9c:96:12:34:15:23:0f:4a:96:a5:ff:ed:9e: 1f:cd:bb:53:a2:8c:35:4c:ec:33:c7:84:a7:b8:6b: 9c:79:22:58:4e:05:17:33:21:0d:f2:69:26:2f:f5: 2c:d6:e6:e8:54:f9:96:87:7d:b9:24:21:50:ff:8e: 83:a6:fa:8b:9f:6f:b1:74:f3:7d:f2:0e:77:c4:fe: 58:76:aa:06:cf:da:a5:32:79:cc:4c:a8:05:6a:5b: 97:fd:1b:9d:01:60:60:03:e4:b7:21:69:23:5f:3c: 41:33:6b:f0:79:07:ec:66:e2:a9:36:62:a0:97:89: 7f:cd:c6:f0:74:3f:ee:27:9a:86:89:d0:4b:1a:f7: 6c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:6F:2D:1E:B3:11:68:04:A4:52:77:09:8F:8F:F6:49:01:DF:C7 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:71:74:1c:93:99:56:17:f3:e5:73:7f:ca:fe:91:1d:62:9c: 57:e3:a1:36:10:f5:47:14:9a:ee:1b:97:8d:8a:26:d1:b7:6a: 3f:39:db:34:11:69:8a:3c:5c:bf:ee:a7:50:dd:2e:d2:8f:31: 3c:a3:46:b7:2b:5b:c2:29:f6:ea:3b:e3:8b:3b:4d:4b:72:a7: 27:d6:b3:ed:d7:6f:32:3b:91:cb:b5:51:af:45:9b:06:9e:87: af:5c:de:65:58:80:68:64:c1:3a:fe:a8:b5:4d:70:9e:b3:eb: 5e:cb:9e:32:24:bb:9e:fe:33:3a:2b:25:da:a4:4a:30:13:13: 08:a9:38:63:25:ce:92:f7:3a:a9:13:bc:30:08:4f:f9:d6:84: 8e:f3:05:08:40:1f:82:01:0a:06:5a:b3:08:8b:da:dd:9a:05: 15:8f:c9:76:4e:19:f0:b6:ab:b3:72:c4:f3:b9:51:e1:c1:e6: 35:62:9a:d7:85:6c:60:8d:e3:f8:1c:17:6a:0c:54:98:3c:6f: 57:9d:43:c0:40:4b:1d:0e:0e:1c:64:95:2b:41:1b:58:f7:fa: 9f:45:f2:88:06:c9:89:67:f4:77:20:63:69:c7:24:b1:da:4b: 53:36:17:26:0b:c3:68:55:18:7e:73:0f:5c:64:01:84:70:0f: e4:3a:f1:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdl6EppO0rlj3dyeU53f+6dSAwVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTEyMDIwNjI2MzNaFw0yNTEyMDUwODU3MzNaMDMxMTAvBgNV BAMTKENFNDQ2RjJEMUVCMzExNjgwNEE0NTI3NzA5OEY4RkY2NDkwMURGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzoo3m9doM1Wzv9dm59a7DA+f eYg2yRyPua8KhPk9KlDcJcXMKcmNGhv2UTtUKpN2F9WQ/S5+Fdf6Pwk2H8Z24j14 Lcvzd1+RjpIr4ZwunF+eru83PlfJeYUP0jtB6qCvSLnuBUYisFl44Aw/YNyAOHAu Q64ghU92nJYSNBUjD0qWpf/tnh/Nu1OijDVM7DPHhKe4a5x5IlhOBRczIQ3yaSYv 9SzW5uhU+ZaHfbkkIVD/joOm+oufb7F0833yDnfE/lh2qgbP2qUyecxMqAVqW5f9 G50BYGAD5LchaSNfPEEza/B5B+xm4qk2YqCXiX/NxvB0P+4nmoaJ0Esa92w1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzkRvLR6zEWgEpFJ3CY+P9kkB38cwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRxdByTmVYX8+Vzf8r+kR1inFfjoTYQ9UcU mu4bl42KJtG3aj852zQRaYo8XL/up1DdLtKPMTyjRrcrW8Ip9uo744s7TUtypyfW s+3XbzI7kcu1Ua9Fmwaeh69c3mVYgGhkwTr+qLVNcJ6z617LnjIku57+MzorJdqk SjATEwipOGMlzpL3OqkTvDAIT/nWhI7zBQhAH4IBCgZaswiL2t2aBRWPyXZOGfC2 q7NyxPO5UeHB5jVimteFbGCN4/gcF2oMVJg8b1edQ8BASx0ODhxklStBG1j3+p9F 8ogGyYln9HcgY2nHJLHaS1M2FyYLw2hVGH5zD1xkAYRwD+Q68fQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:42:39 2025 by rpki-client