This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: 0cKzXTYCFTfNZQYOiiPsYHjHYH2BnizwshDZg0aku8I= Subject key identifier: D8:80:60:42:82:C2:B9:A3:ED:6C:52:69:31:34:3A:12:D4:80:C0:D0 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 23444F7AE4BD52E4446816747121314891BAC755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01F5 Signing time: Tue 02 Dec 2025 23:12:26 +0000 Manifest this update: Tue 02 Dec 2025 23:07:26 +0000 Manifest next update: Sat 06 Dec 2025 10:58:26 +0000 Files and hashes: 1: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: Akb8dm1c3wpZ53b++n3I+7hCxtDuvKCNzeRicdm4cXs=) 2: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) 3: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:44:4f:7a:e4:bd:52:e4:44:68:16:74:71:21:31:48:91:ba:c7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Dec 2 23:07:26 2025 GMT Not After : Dec 6 10:58:26 2025 GMT Subject: CN=D880604282C2B9A3ED6C526931343A12D480C0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:ac:9b:1d:52:15:0f:f8:f3:22:d1:ee:7c: a1:95:53:ae:9f:5e:c8:3d:77:dc:67:a4:07:e4:9e: 12:2e:48:ee:39:5a:90:66:42:2a:1f:01:b3:73:cb: b8:f4:94:ee:b6:53:6d:a0:7c:bf:6b:df:a2:0a:ca: 1d:a8:4a:08:1f:f0:69:50:14:b0:6a:ca:60:9d:7f: ce:23:a9:86:62:15:0d:83:8b:06:c7:3d:a6:58:3b: dc:21:fd:3b:ec:91:89:e6:75:c4:fb:b9:a7:e2:a2: c3:5d:64:c0:fe:ae:0f:ec:bf:be:4e:00:80:4d:19: 0e:3a:a9:2e:58:fb:c6:03:35:73:23:32:27:d0:69: 5a:81:a5:47:52:03:5d:57:31:a9:51:d6:7a:7f:08: 12:24:9f:c8:cd:64:b4:74:c7:52:2f:63:ca:27:84: 8b:5b:56:6e:eb:2e:86:46:dd:98:b1:bd:dd:5a:00: a0:7b:17:73:49:f1:f1:5a:dd:53:12:3d:94:3c:d5: 07:d2:09:3a:07:2e:c7:43:87:68:98:48:85:87:c2: f2:94:46:b8:52:a6:ca:9b:f6:e0:51:91:17:db:61: 91:9e:45:b9:a7:04:f2:3f:6e:e8:74:a8:4d:05:7f: 95:53:84:fc:37:50:da:f0:d4:59:59:cf:82:8d:56: c0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:80:60:42:82:C2:B9:A3:ED:6C:52:69:31:34:3A:12:D4:80:C0:D0 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:59:ea:c3:d2:48:7a:da:e6:84:ba:15:e6:b9:2e:96:02:88: 97:e4:7c:8c:dc:ec:d7:64:35:b5:1f:74:87:46:27:ba:95:d7: 6e:f3:f3:45:d1:23:16:23:5f:a1:96:36:de:eb:d0:15:30:6f: 38:95:6d:f1:d3:3c:01:41:a1:42:e1:6f:19:43:d1:03:05:a3: 9c:3a:40:28:67:c3:ac:1c:35:71:69:66:59:d7:ed:3f:0f:35: 3c:ad:7d:06:28:9f:1c:c7:13:9f:0e:bf:dc:2e:d1:12:95:58: 1f:67:07:0d:63:86:85:78:f8:49:2f:04:f6:df:43:cc:fc:88: bc:85:98:5b:77:1b:eb:6a:6f:f0:a2:04:c8:e2:13:1e:99:fa: 06:13:c9:6e:de:3c:a5:18:b1:0d:ce:2d:2e:5f:b6:39:ac:56: f8:58:ee:e0:ac:9f:15:79:e1:62:e5:e3:09:14:6e:ed:67:5d: ad:cf:e2:25:50:dc:cc:33:26:29:5e:2a:99:a4:28:1a:01:32: 32:cb:e3:f2:43:06:8f:55:c2:a7:86:13:eb:42:38:08:89:1f: 0a:ab:14:ab:b0:a8:26:99:d7:4a:f5:cc:50:4d:b4:5b:12:24: 05:e2:8e:b0:ce:e4:70:2f:57:8b:03:cd:fd:eb:85:03:a6:a0: 4b:8e:44:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0RPeuS9UuREaBZ0cSExSJG6x1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTEyMDIyMzA3MjZaFw0yNTEyMDYxMDU4MjZaMDMxMTAvBgNV BAMTKEQ4ODA2MDQyODJDMkI5QTNFRDZDNTI2OTMxMzQzQTEyRDQ4MEMwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHKybHVIVD/jzItHufKGVU66f Xsg9d9xnpAfknhIuSO45WpBmQiofAbNzy7j0lO62U22gfL9r36IKyh2oSggf8GlQ FLBqymCdf84jqYZiFQ2DiwbHPaZYO9wh/TvskYnmdcT7uafiosNdZMD+rg/sv75O AIBNGQ46qS5Y+8YDNXMjMifQaVqBpUdSA11XMalR1np/CBIkn8jNZLR0x1IvY8on hItbVm7rLoZG3Zixvd1aAKB7F3NJ8fFa3VMSPZQ81QfSCToHLsdDh2iYSIWHwvKU RrhSpsqb9uBRkRfbYZGeRbmnBPI/buh0qE0Ff5VThPw3UNrw1FlZz4KNVsCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2IBgQoLCuaPtbFJpMTQ6EtSAwNAwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9Z6sPSSHra5oS6Fea5LpYCiJfkfIzc7Ndk NbUfdIdGJ7qV127z80XRIxYjX6GWNt7r0BUwbziVbfHTPAFBoULhbxlD0QMFo5w6 QChnw6wcNXFpZlnX7T8PNTytfQYonxzHE58Ov9wu0RKVWB9nBw1jhoV4+EkvBPbf Q8z8iLyFmFt3G+tqb/CiBMjiEx6Z+gYTyW7ePKUYsQ3OLS5ftjmsVvhY7uCsnxV5 4WLl4wkUbu1nXa3P4iVQ3MwzJileKpmkKBoBMjLL4/JDBo9VwqeGE+tCOAiJHwqr FKuwqCaZ10r1zFBNtFsSJAXijrDO5HAvV4sDzf3rhQOmoEuORBQ= -----END CERTIFICATE-----Generated at Wed Dec 3 14:55:44 2025 by rpki-client