This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: 3HYnTfbh8G40508ZQgdV9t9upUsOSEQevgKqgR1ZYnU= Subject key identifier: C8:D8:D8:19:1E:7A:47:A2:01:46:53:34:21:6A:1C:26:14:1E:A1:53 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 34FB4BFAD1490AE7F65F72F17C8C231C29A4390F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 01D0 Signing time: Tue 02 Dec 2025 21:31:22 +0000 Manifest this update: Tue 02 Dec 2025 21:26:22 +0000 Manifest next update: Sat 06 Dec 2025 00:59:22 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: XZWP2OW/hTCxm32ALzKPSbrZNzE3BiWu4aJirCquUpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:fb:4b:fa:d1:49:0a:e7:f6:5f:72:f1:7c:8c:23:1c:29:a4:39:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Dec 2 21:26:22 2025 GMT Not After : Dec 6 00:59:22 2025 GMT Subject: CN=C8D8D8191E7A47A201465334216A1C26141EA153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:b5:c5:5c:18:f1:29:72:26:28:74:63:30: 2d:fa:51:bb:6a:d1:3e:d7:84:74:a4:4b:94:0d:57: ef:50:41:10:89:d4:c0:9d:a6:37:3e:a9:65:af:65: f5:2b:9c:b7:c3:0b:73:cf:12:16:6e:0d:ea:08:80: c5:88:24:b3:f7:6a:9a:70:27:04:06:e8:98:3e:92: 31:08:80:31:9b:5f:6c:ff:b8:fb:93:18:a4:b4:55: 3d:79:4b:89:2d:a2:60:fb:1a:01:73:c5:0a:58:4a: ba:d0:40:ec:bd:56:fb:c6:ca:6a:fc:9b:68:16:74: 62:f7:e5:a3:63:b1:e9:7b:71:75:87:33:0a:e4:5e: 1b:72:92:58:65:cb:b8:73:aa:49:8c:84:3f:97:5b: 97:7e:0f:7b:e6:a6:34:14:80:8f:b2:7a:96:18:34: 47:13:b4:fb:81:21:88:49:82:5d:9b:9a:f2:09:bc: 5d:f4:17:33:57:86:d1:fb:14:81:41:42:2b:e4:be: 7b:2b:c5:c5:9f:04:73:68:b8:f3:be:3e:a3:63:a1: e1:92:51:50:9c:ad:1c:61:fd:23:55:12:8d:ac:c1: 2c:fa:d9:34:1a:e5:b4:09:06:80:32:d4:22:09:87: b1:9b:16:b1:b8:c7:ac:a7:06:62:48:73:47:4c:12: 7c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D8:D8:19:1E:7A:47:A2:01:46:53:34:21:6A:1C:26:14:1E:A1:53 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:4e:9e:bd:25:87:a7:e6:9b:eb:50:65:7f:d6:81:b8:70:1f: f3:1e:58:51:1a:f3:fe:e5:e0:4f:93:f3:7b:46:5f:1c:43:ae: 9f:e5:8c:5e:99:94:87:62:89:84:4d:50:13:2a:31:00:d8:e0: 4f:94:d9:f3:07:9d:a4:63:70:d3:9c:a2:94:f9:69:3b:64:b3: 3c:7d:2e:11:75:7a:4f:a1:d8:4c:ba:9e:64:d0:9c:02:e2:86: ef:a5:49:c2:a6:65:c9:43:c0:c9:dc:16:c0:f5:35:6c:b1:ef: ba:93:bc:3f:9d:e5:96:42:bf:04:1a:4d:b6:12:1e:de:b4:cc: 24:77:16:71:4f:38:64:71:e4:6a:52:1c:53:71:92:a3:0f:0c: 6a:af:a7:d5:34:94:18:b3:a1:ef:f4:c3:45:f8:60:76:97:2b: b1:0e:bd:44:c9:8d:7e:93:ce:41:e2:31:93:07:07:8d:9e:c6: 0b:47:d3:47:69:66:10:5f:95:7d:ff:4e:b2:e1:76:21:8e:6d: e4:af:5e:aa:b7:3c:83:6e:75:34:16:2f:3e:b7:c3:ff:ee:54: fa:e3:52:bc:3b:26:8f:58:e5:a0:24:fb:c4:40:3a:10:c7:09: 16:b4:d3:85:96:90:3c:c9:03:6d:af:e2:43:cb:08:30:79:9a: fb:94:3d:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNPtL+tFJCuf2X3LxfIwjHCmkOQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNTEyMDIyMTI2MjJaFw0yNTEyMDYwMDU5MjJaMDMxMTAvBgNV BAMTKEM4RDhEODE5MUU3QTQ3QTIwMTQ2NTMzNDIxNkExQzI2MTQxRUExNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QLXFXBjxKXImKHRjMC36Ubtq 0T7XhHSkS5QNV+9QQRCJ1MCdpjc+qWWvZfUrnLfDC3PPEhZuDeoIgMWIJLP3appw JwQG6Jg+kjEIgDGbX2z/uPuTGKS0VT15S4ktomD7GgFzxQpYSrrQQOy9VvvGymr8 m2gWdGL35aNjsel7cXWHMwrkXhtyklhly7hzqkmMhD+XW5d+D3vmpjQUgI+yepYY NEcTtPuBIYhJgl2bmvIJvF30FzNXhtH7FIFBQivkvnsrxcWfBHNouPO+PqNjoeGS UVCcrRxh/SNVEo2swSz62TQa5bQJBoAy1CIJh7GbFrG4x6ynBmJIc0dMEnwvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyNjYGR56R6IBRlM0IWocJhQeoVMwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFOnr0lh6fmm+tQZX/WgbhwH/MeWFEa8/7l 4E+T83tGXxxDrp/ljF6ZlIdiiYRNUBMqMQDY4E+U2fMHnaRjcNOcopT5aTtkszx9 LhF1ek+h2Ey6nmTQnALihu+lScKmZclDwMncFsD1NWyx77qTvD+d5ZZCvwQaTbYS Ht60zCR3FnFPOGRx5GpSHFNxkqMPDGqvp9U0lBizoe/0w0X4YHaXK7EOvUTJjX6T zkHiMZMHB42exgtH00dpZhBflX3/TrLhdiGObeSvXqq3PINudTQWLz63w//uVPrj Urw7Jo9Y5aAk+8RAOhDHCRa004WWkDzJA22v4kPLCDB5mvuUPRo= -----END CERTIFICATE-----Generated at Wed Dec 3 16:44:18 2025 by rpki-client