This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft File: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft (raw, json) Hash identifier: HVRe9E7hjHy0mYRZi2DPNPJi+mPY+/oJdGWm+6UCzZ4= Subject key identifier: 25:E5:D4:3B:9F:46:C4:99:A5:F5:C2:46:B3:F8:38:6D:57:2A:BF:05 Authority key identifier: 81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 Certificate issuer: /CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Certificate serial: 2E35D8950609D42933CEC204A1527EE9767E7E3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft Manifest number: 01D0 Signing time: Tue 02 Dec 2025 02:32:12 +0000 Manifest this update: Tue 02 Dec 2025 02:27:12 +0000 Manifest next update: Fri 05 Dec 2025 07:51:12 +0000 Files and hashes: 1: 819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl (hash: +RL8hsUpt+a3D9FlcVQ34IM83lSTDiJtPofH6Bw4l9c=) 2: 3130332e3132392e35382e302f32332d3234203d3e20313335343738.roa (hash: YeGR8oOh1UfyEQoGwDtsTMZrPfaKasaF2ECFyYxm2Hg=) 3: 3130332e3132392e35362e302f32332d3234203d3e20313335343738.roa (hash: tGutfHYLd+1w5afOstLzep3nkeXsmFCSKPGKSJYYWl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 07:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:35:d8:95:06:09:d4:29:33:ce:c2:04:a1:52:7e:e9:76:7e:7e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819AD043A7A2F8424ABC9E6CFD9C518670507FC3 Validity Not Before: Dec 2 02:27:12 2025 GMT Not After : Dec 5 07:51:12 2025 GMT Subject: CN=25E5D43B9F46C499A5F5C246B3F8386D572ABF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:34:1c:15:58:54:fc:8c:22:89:4f:3c:28:60: 74:a8:be:10:46:13:1c:7f:12:ba:7a:cb:3a:fd:18: 1c:df:c4:01:7c:38:3f:d0:0c:8f:eb:d3:b6:50:4d: 2c:52:6c:f0:c8:14:a5:56:3a:3a:09:25:80:ec:74: e2:2a:3d:d5:c6:40:f4:f2:fb:8f:a6:1e:16:c2:fa: 17:64:fd:fd:e6:ba:96:3b:43:46:4f:45:17:92:26: ac:c9:38:ac:73:7c:fb:e3:38:0a:fc:78:f2:40:42: 89:1c:ea:f6:27:04:bb:de:e9:5e:51:75:d4:2a:a6: d4:dd:25:7a:31:37:62:f0:d9:bf:61:55:94:32:85: cd:73:50:7b:e4:50:e2:ab:ef:a8:c5:a1:8c:a8:b6: bf:c4:05:a0:2b:56:1a:82:ae:22:3a:b5:96:9b:68: e3:80:9a:cb:90:65:11:1f:1c:d8:e0:aa:82:9b:56: d0:a2:b4:55:4e:99:29:44:d3:9a:86:29:81:0a:ca: 67:3c:bc:9d:a7:48:25:cf:d2:c6:2a:bd:95:12:86: d2:df:28:8f:4b:0b:4b:2d:88:5a:4e:01:34:d2:dc: cf:fd:79:21:0c:00:95:cf:49:c5:b1:55:78:9a:11: 8c:fb:7b:e8:66:ae:06:cc:37:05:e5:04:53:75:43: 67:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E5:D4:3B:9F:46:C4:99:A5:F5:C2:46:B3:F8:38:6D:57:2A:BF:05 X509v3 Authority Key Identifier: keyid:81:9A:D0:43:A7:A2:F8:42:4A:BC:9E:6C:FD:9C:51:86:70:50:7F:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc8d4ee2-549e-4160-8d6f-87730e8ae5e2/0/819AD043A7A2F8424ABC9E6CFD9C518670507FC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5a:b5:3d:03:de:81:f3:b0:80:48:a5:02:db:ec:a1:da:64: 21:3e:7d:cf:79:cc:b7:c9:3b:eb:7d:ae:17:e8:ab:a8:e1:12: 60:cc:0d:e6:e8:44:a2:c2:b6:43:0e:93:bc:c2:c8:3b:79:c8: 30:cb:81:1b:a8:8c:ea:64:5c:76:d5:70:32:99:90:8e:dd:67: dc:eb:d5:d8:d4:c9:9d:a3:e8:51:12:7f:4d:eb:be:8e:e0:22: a2:b7:a1:5d:59:c2:ec:8f:b6:64:c0:a2:3e:f9:a0:b4:12:2a: f7:7f:36:53:8b:8f:b3:48:89:2a:41:11:d3:d3:60:48:fd:26: e8:2b:f0:ce:42:42:48:b9:21:0d:8e:66:36:28:84:95:c5:a1: 1e:a6:6f:57:27:9b:7c:ef:5b:42:2c:43:0c:c9:1e:52:3f:0b: 9e:79:12:9b:32:c4:68:1e:ac:11:b9:2a:5f:12:68:62:1f:2a: 68:33:e7:74:2a:ee:44:f2:c5:fa:15:cb:0c:35:46:e9:39:25: a2:17:e1:c2:27:e5:50:64:32:17:2a:dc:13:08:bd:e1:c9:44: 88:ce:3b:eb:81:bf:3b:95:fa:3a:51:3b:d5:df:15:f6:09:63: 86:96:d6:66:14:38:22:ee:45:09:e2:be:b9:af:46:c1:fb:f0: c4:b8:8c:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjXYlQYJ1CkzzsIEoVJ+6XZ+fjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3 MDUwN0ZDMzAeFw0yNTEyMDIwMjI3MTJaFw0yNTEyMDUwNzUxMTJaMDMxMTAvBgNV BAMTKDI1RTVENDNCOUY0NkM0OTlBNUY1QzI0NkIzRjgzODZENTcyQUJGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfNBwVWFT8jCKJTzwoYHSovhBG Exx/Erp6yzr9GBzfxAF8OD/QDI/r07ZQTSxSbPDIFKVWOjoJJYDsdOIqPdXGQPTy +4+mHhbC+hdk/f3mupY7Q0ZPRReSJqzJOKxzfPvjOAr8ePJAQokc6vYnBLve6V5R ddQqptTdJXoxN2Lw2b9hVZQyhc1zUHvkUOKr76jFoYyotr/EBaArVhqCriI6tZab aOOAmsuQZREfHNjgqoKbVtCitFVOmSlE05qGKYEKymc8vJ2nSCXP0sYqvZUShtLf KI9LC0stiFpOATTS3M/9eSEMAJXPScWxVXiaEYz7e+hmrgbMNwXlBFN1Q2eTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJeXUO59GxJml9cJGs/g4bVcqvwUwHwYDVR0j BBgwFoAUgZrQQ6ei+EJKvJ5s/ZxRhnBQf8MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzhkNGVlMi01NDllLTQxNjAtOGQ2Zi04NzczMGU4YWU1ZTIvMC84MTlBRDA0M0E3 QTJGODQyNEFCQzlFNkNGRDlDNTE4NjcwNTA3RkMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUxODY3MDUw N0ZDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2M4ZDRlZTItNTQ5ZS00MTYwLThk NmYtODc3MzBlOGFlNWUyLzAvODE5QUQwNDNBN0EyRjg0MjRBQkM5RTZDRkQ5QzUx ODY3MDUwN0ZDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRatT0D3oHzsIBIpQLb7KHaZCE+fc95zLfJ O+t9rhfoq6jhEmDMDeboRKLCtkMOk7zCyDt5yDDLgRuojOpkXHbVcDKZkI7dZ9zr 1djUyZ2j6FESf03rvo7gIqK3oV1ZwuyPtmTAoj75oLQSKvd/NlOLj7NIiSpBEdPT YEj9Jugr8M5CQki5IQ2OZjYohJXFoR6mb1cnm3zvW0IsQwzJHlI/C555EpsyxGge rBG5Kl8SaGIfKmgz53Qq7kTyxfoVyww1Ruk5JaIX4cIn5VBkMhcq3BMIveHJRIjO O+uBvzuV+jpRO9XfFfYJY4aW1mYUOCLuRQnivrmvRsH78MS4jPE= -----END CERTIFICATE-----Generated at Wed Dec 3 12:45:03 2025 by rpki-client