This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: 0DnbB0KN4uJqzPMUcv4LJM6hZI9+NemsQL13D3S/+Iw= Subject key identifier: B1:93:4D:12:66:1B:9F:E0:66:97:FB:FF:8F:E4:C8:7D:2B:E5:ED:8B Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 664F1D347E805FECCBA85006D98A2C2097F9C902 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 021A Signing time: Tue 02 Dec 2025 17:11:39 +0000 Manifest this update: Tue 02 Dec 2025 17:06:39 +0000 Manifest next update: Sat 06 Dec 2025 02:55:39 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) 2: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: uTqlLdMFioIfxkVyCTD/1kYn9QpRSJluc3CQ0Cz+Rsk=) 3: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 4: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 02:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:1d:34:7e:80:5f:ec:cb:a8:50:06:d9:8a:2c:20:97:f9:c9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Dec 2 17:06:39 2025 GMT Not After : Dec 6 02:55:39 2025 GMT Subject: CN=B1934D12661B9FE06697FBFF8FE4C87D2BE5ED8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:bb:5a:22:00:c4:68:35:c8:06:68:c5:b7: 7b:5d:66:9b:1b:cc:62:98:58:d3:8a:1e:b7:0c:20: f8:5a:bb:d2:46:0e:9e:d9:e3:58:60:7e:47:87:ca: 4a:df:6b:25:9e:aa:26:c2:d3:a3:69:f4:76:ee:32: b3:c8:60:77:d6:66:d3:9b:75:8e:aa:20:4a:ed:bd: 8d:1c:16:f5:de:5a:6d:80:8b:0d:84:06:48:b6:f5: c0:75:64:77:89:35:c4:da:ef:d3:71:18:97:b7:6c: 81:8c:02:f6:0c:11:6d:62:a6:a9:5a:dc:04:0b:77: 00:38:e3:fb:f6:59:b4:27:ae:08:ac:5b:b4:cb:82: 7c:48:61:3d:19:92:d7:f6:d6:5e:5b:18:22:96:63: 4e:b3:95:c3:89:34:d5:fe:12:b3:f0:ac:37:d5:06: b1:3a:36:ef:9a:0a:98:07:27:44:ea:6f:21:59:89: c0:63:e0:53:58:62:a7:da:e2:1e:0f:9d:5d:da:c6: 48:0b:ed:e5:de:70:25:9a:08:c3:6f:a4:3c:83:8d: 89:f1:46:99:35:bc:04:2f:1f:f4:af:78:e6:fe:fa: 35:5e:5d:aa:3b:a2:cd:8e:29:2e:b3:20:a7:41:39: fe:c5:2f:93:c4:de:9f:a0:9a:97:50:fd:d6:37:8a: cf:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:4D:12:66:1B:9F:E0:66:97:FB:FF:8F:E4:C8:7D:2B:E5:ED:8B X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d6:b1:2f:08:71:a2:c5:c4:11:1d:80:58:db:6b:c5:13:9d: 5e:43:f1:dd:42:02:1f:d8:39:9d:69:04:43:0e:d8:4f:4e:3d: 5a:b7:44:86:88:80:fd:c4:02:64:eb:b0:75:a2:60:28:d4:8a: 96:25:42:3a:8d:d8:b3:da:8e:64:9e:8a:2a:d8:9c:4d:2b:05: 8b:e7:3b:a4:9d:3a:7e:22:83:b1:83:71:30:cf:49:84:df:57: 8d:89:11:61:61:ee:d6:0c:1f:6f:d2:60:b0:4e:c0:b0:4e:75: e2:1e:50:d3:eb:f7:dd:b0:8b:32:be:19:78:76:57:8c:6f:81: 7b:c9:6d:34:ae:0c:94:3d:7d:5a:40:bf:23:5d:35:71:0b:ad: ed:aa:60:df:9b:2f:03:8d:b0:91:ee:27:52:10:81:a9:33:76: ba:25:8a:c9:f5:26:c3:fa:98:54:26:3a:2a:e6:c3:0c:17:b9: b4:53:9f:44:fb:b3:6c:52:3e:87:4d:bb:53:e3:b7:38:f2:e0: 42:19:fe:b9:00:62:42:b5:89:6c:4b:04:99:8c:c0:59:b1:42: e7:72:7b:fa:aa:25:3e:9b:47:d9:c4:c8:c6:3b:6f:d7:ac:07: 5b:d8:57:63:a7:b9:df:c9:8f:df:02:f2:6b:59:b8:4e:1f:b6: 4f:a0:91:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZk8dNH6AX+zLqFAG2YosIJf5yQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTEyMDIxNzA2MzlaFw0yNTEyMDYwMjU1MzlaMDMxMTAvBgNV BAMTKEIxOTM0RDEyNjYxQjlGRTA2Njk3RkJGRjhGRTRDODdEMkJFNUVEOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZbtaIgDEaDXIBmjFt3tdZpsb zGKYWNOKHrcMIPhau9JGDp7Z41hgfkeHykrfayWeqibC06Np9HbuMrPIYHfWZtOb dY6qIErtvY0cFvXeWm2Aiw2EBki29cB1ZHeJNcTa79NxGJe3bIGMAvYMEW1ipqla 3AQLdwA44/v2WbQnrgisW7TLgnxIYT0Zktf21l5bGCKWY06zlcOJNNX+ErPwrDfV BrE6Nu+aCpgHJ0TqbyFZicBj4FNYYqfa4h4PnV3axkgL7eXecCWaCMNvpDyDjYnx Rpk1vAQvH/SveOb++jVeXao7os2OKS6zIKdBOf7FL5PE3p+gmpdQ/dY3is+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsZNNEmYbn+Bml/v/j+TIfSvl7YswHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErWsS8IcaLFxBEdgFjba8UTnV5D8d1CAh/Y OZ1pBEMO2E9OPVq3RIaIgP3EAmTrsHWiYCjUipYlQjqN2LPajmSeiirYnE0rBYvn O6SdOn4ig7GDcTDPSYTfV42JEWFh7tYMH2/SYLBOwLBOdeIeUNPr992wizK+GXh2 V4xvgXvJbTSuDJQ9fVpAvyNdNXELre2qYN+bLwONsJHuJ1IQgakzdrolisn1JsP6 mFQmOirmwwwXubRTn0T7s2xSPodNu1Pjtzjy4EIZ/rkAYkK1iWxLBJmMwFmxQudy e/qqJT6bR9nEyMY7b9esB1vYV2Onud/Jj98C8mtZuE4ftk+gkVw= -----END CERTIFICATE-----Generated at Wed Dec 3 14:45:58 2025 by rpki-client