This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: s38dG4HC9y45v3hHUba6IB6YE9vxu+2Jf4YpeNQyxm0= Subject key identifier: 4B:D6:93:40:5C:6B:CD:85:5C:CB:63:21:31:31:D2:2A:04:0B:46:15 Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 4EB9CD85B1C6686409B2D7E6A48822C3E0189B88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 0233 Signing time: Thu 25 Dec 2025 23:11:49 +0000 Manifest this update: Thu 25 Dec 2025 23:06:49 +0000 Manifest next update: Mon 29 Dec 2025 08:57:49 +0000 Files and hashes: 1: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: GTgFhHhwJ0FD9o5CwVXOwwG6LgZZ85W4bdQEQgQeS6I=) 2: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: +Y8f9IKZhXyPRNzOP8gLDO5FItamxPZwT5YuJiQ+z+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 08:57:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b9:cd:85:b1:c6:68:64:09:b2:d7:e6:a4:88:22:c3:e0:18:9b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Dec 25 23:06:49 2025 GMT Not After : Dec 29 08:57:49 2025 GMT Subject: CN=4BD693405C6BCD855CCB63213131D22A040B4615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:16:b3:d1:22:7f:76:05:64:a4:c1:28:c6:45: 07:47:fd:17:09:48:85:ae:ad:ff:55:41:d8:5c:48: 7b:c6:04:95:da:a5:33:1f:8b:38:21:27:66:e7:86: 97:a4:30:50:25:c0:8a:a0:b1:df:60:19:5c:91:01: 16:9c:cb:3d:07:76:2f:d3:30:dd:e8:ba:80:3a:22: 53:03:7c:d3:76:d1:16:14:50:01:6e:2e:d7:d3:02: d2:69:26:39:3a:42:58:04:af:de:91:c8:68:12:4e: 57:85:77:aa:a0:30:0f:ec:17:eb:31:b5:e5:aa:d6: 2d:46:b1:d6:06:a6:ac:17:57:49:b0:b9:f4:4d:ce: 34:d9:e5:17:ed:e0:2b:6b:2c:ed:86:48:b6:8b:16: c2:a8:ce:94:c6:f1:28:69:41:1f:7e:ec:f2:c0:1f: b6:13:ca:a7:28:e6:1b:13:d1:3f:79:2c:a6:5a:4b: 04:f2:d2:51:7c:aa:40:ba:e6:4e:28:9a:6b:75:d3: d3:fb:1a:68:aa:93:2f:55:91:4e:30:f7:c6:83:3a: 12:4c:ac:39:99:d7:60:04:1e:f6:ed:b2:75:81:df: 4f:a7:5d:68:6d:68:63:a1:2b:37:90:bd:9f:b5:01: 81:34:c6:3c:bd:2f:75:71:f6:98:c8:31:c8:48:a5: f4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D6:93:40:5C:6B:CD:85:5C:CB:63:21:31:31:D2:2A:04:0B:46:15 X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:0a:59:e4:01:57:50:fa:d6:70:29:90:12:7f:d7:15:61:19: fc:ac:8c:ec:1c:75:c1:e7:5c:aa:80:5b:0f:79:0c:47:53:dc: 9d:b9:10:2a:95:b4:76:5a:ec:ea:d3:7b:0e:f4:7c:21:fc:5f: 60:38:c1:f0:ab:36:37:75:0e:4f:4c:df:82:3b:74:e8:54:a0: 4e:50:87:b4:ca:2a:87:aa:5a:f5:73:10:ee:7b:9b:05:93:14: 7b:c8:70:9e:e5:1b:69:74:d6:f3:c3:81:58:ae:cb:96:42:b5: 21:02:18:93:79:ff:fa:9a:41:41:49:4b:05:df:4e:46:f6:14: 94:8b:bc:a7:53:ab:4f:10:e1:c2:20:06:57:63:da:20:46:91: cc:c7:e1:8e:c8:4b:da:8f:48:bf:24:24:c4:b7:92:eb:cb:bb: 54:b8:4a:01:89:ce:1d:95:ad:a0:56:e3:05:a8:e4:38:a0:3b: a7:03:96:32:d4:cb:bc:ba:96:95:f7:8f:41:3e:ef:b7:32:3e: b1:e2:78:a8:3f:41:f7:a4:6c:c7:a6:e3:5d:a2:7c:13:a0:7d: 9b:ce:a7:6c:15:b1:d9:d3:4c:a1:82:2d:6a:27:80:59:3e:8e: 59:3f:4f:e3:d7:a7:99:50:61:9a:0f:d1:ca:8f:1d:37:e5:fd: 50:2d:19:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrnNhbHGaGQJstfmpIgiw+AYm4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNTEyMjUyMzA2NDlaFw0yNTEyMjkwODU3NDlaMDMxMTAvBgNV BAMTKDRCRDY5MzQwNUM2QkNEODU1Q0NCNjMyMTMxMzFEMjJBMDQwQjQ2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYFrPRIn92BWSkwSjGRQdH/RcJ SIWurf9VQdhcSHvGBJXapTMfizghJ2bnhpekMFAlwIqgsd9gGVyRARacyz0Hdi/T MN3ouoA6IlMDfNN20RYUUAFuLtfTAtJpJjk6QlgEr96RyGgSTleFd6qgMA/sF+sx teWq1i1GsdYGpqwXV0mwufRNzjTZ5Rft4CtrLO2GSLaLFsKozpTG8ShpQR9+7PLA H7YTyqco5hsT0T95LKZaSwTy0lF8qkC65k4ommt109P7Gmiqky9VkU4w98aDOhJM rDmZ12AEHvbtsnWB30+nXWhtaGOhKzeQvZ+1AYE0xjy9L3Vx9pjIMchIpfSDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS9aTQFxrzYVcy2MhMTHSKgQLRhUwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0KWeQBV1D61nApkBJ/1xVhGfysjOwcdcHn XKqAWw95DEdT3J25ECqVtHZa7OrTew70fCH8X2A4wfCrNjd1Dk9M34I7dOhUoE5Q h7TKKoeqWvVzEO57mwWTFHvIcJ7lG2l01vPDgViuy5ZCtSECGJN5//qaQUFJSwXf Tkb2FJSLvKdTq08Q4cIgBldj2iBGkczH4Y7IS9qPSL8kJMS3kuvLu1S4SgGJzh2V raBW4wWo5DigO6cDljLUy7y6lpX3j0E+77cyPrHieKg/QfekbMem412ifBOgfZvO p2wVsdnTTKGCLWongFk+jlk/T+PXp5lQYZoP0cqPHTfl/VAtGZM= -----END CERTIFICATE-----Generated at Fri Dec 26 11:34:41 2025 by rpki-client