This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: N+yrmjS031rhWjafYtfjPb0S4wFDLmTGa876mFkJZjU= Subject key identifier: EB:37:38:A2:13:5B:A7:2C:66:02:08:D8:F1:8D:C6:26:0D:4C:27:DD Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 0CE65D5BF27AAEC3F2F74A84DA427200B22D6383 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0531 Signing time: Wed 03 Dec 2025 13:20:02 +0000 Manifest this update: Wed 03 Dec 2025 13:15:02 +0000 Manifest next update: Sat 06 Dec 2025 15:06:02 +0000 Files and hashes: 1: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: lCR7Zu/Eq4mdYRvCb1wF3ov5WGRp/spJ+rEGW+iObnE=) 2: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: cke05Fz1pU7ph5quQU6BQAXvAK/qW0tlFEcIja5SVaM=) 4: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: 1Qj+0yJlnyRAkhJQW7JxleOTtApsG7fPmAlVCQ6z7p8=) 5: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) 6: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: g2I091o7xGYF01O50CUZMPsQctw2lflU2v4s2FAorWY=) 7: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: Yh/X3wf3xgSBLANEs82b75GugxHKann/OAKH3YrZy2U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 12:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e6:5d:5b:f2:7a:ae:c3:f2:f7:4a:84:da:42:72:00:b2:2d:63:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Dec 3 13:15:02 2025 GMT Not After : Dec 6 15:06:02 2025 GMT Subject: CN=EB3738A2135BA72C660208D8F18DC6260D4C27DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:1f:fe:31:4e:1d:76:5f:5e:c2:12:e5:04: a9:0c:20:aa:bb:21:d4:3b:d8:72:3e:d2:27:28:d7: 2e:3f:67:10:32:62:de:85:6f:5a:65:11:7a:b9:e1: 12:fe:21:12:fb:9b:bd:19:7d:15:91:a9:4b:9b:29: c3:fd:fe:4f:7e:c4:b1:22:b5:59:5d:53:42:de:04: aa:ff:86:b5:61:ff:32:60:1a:c5:60:cc:59:c8:16: 07:4f:f1:4b:22:ba:85:8e:54:f5:a4:a2:f0:41:14: 05:4c:27:0b:17:45:0e:fe:57:5a:2d:56:1b:c9:c4: 9d:33:41:9b:60:65:45:86:85:2d:ea:34:0a:1a:40: 7d:0e:fe:24:c7:83:39:30:c3:e7:d7:59:59:95:b1: ce:07:0c:60:16:82:e2:70:05:77:b4:99:b1:62:68: e5:0b:c3:20:8f:e7:4a:7d:32:e9:5e:1a:ad:6e:3a: a8:95:53:c2:47:14:a9:df:a0:45:e6:f1:b5:b6:fd: 50:a2:cd:2a:bc:ce:9b:9d:88:9d:15:9f:f4:93:ad: 98:eb:b0:81:98:2b:c7:82:82:e4:60:eb:24:c3:cd: 47:39:24:a9:8b:6b:18:f5:13:f9:17:40:b7:67:a1: 44:09:c6:a7:cd:6a:4f:4a:39:04:15:8d:7c:7f:1b: 1f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:37:38:A2:13:5B:A7:2C:66:02:08:D8:F1:8D:C6:26:0D:4C:27:DD X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:2c:b1:9c:7d:3e:8a:0f:dd:c1:18:3f:90:64:16:d2:f3:de: 6c:41:7c:72:65:ab:74:ca:e6:b1:2a:34:fa:be:90:10:d6:72: ef:12:50:15:86:7b:d9:12:60:80:be:be:9b:34:91:b6:19:66: 50:65:97:fe:b5:0b:74:28:b8:73:45:d6:1e:66:e4:f9:cc:1e: 58:85:c0:ad:cb:05:00:69:10:3c:16:c1:3b:05:cc:0f:b1:0c: 37:bd:05:4b:be:ec:62:b0:3d:7c:96:27:6c:10:37:ff:bd:82: 6c:96:dd:db:e2:15:b0:62:67:04:77:1a:5f:9e:5c:ff:53:67: d4:65:d0:87:6f:d1:69:83:dc:75:12:47:ba:43:d6:ad:a8:d1: 59:46:8c:a1:89:dd:d7:19:b8:7b:71:62:da:d6:76:6e:84:3d: 9e:3e:85:98:94:84:c7:5b:e8:b3:be:1e:69:29:2e:af:14:5e: d7:cc:e5:a1:fb:6e:3a:5f:93:af:e1:47:8d:ed:55:17:2a:6f: 0a:0e:6e:cc:64:74:4a:ab:84:be:27:17:ba:ca:2c:a6:78:16: dc:10:ec:b3:e2:ea:8b:e5:04:c8:ee:ac:b6:f4:be:ff:e4:e6: 3c:cd:95:ba:d1:9f:d7:92:b3:48:8f:14:7e:5e:58:cd:31:87: 1c:d2:e7:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOZdW/J6rsPy90qE2kJyALItY4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNTEyMDMxMzE1MDJaFw0yNTEyMDYxNTA2MDJaMDMxMTAvBgNV BAMTKEVCMzczOEEyMTM1QkE3MkM2NjAyMDhEOEYxOERDNjI2MEQ0QzI3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxXR/+MU4ddl9ewhLlBKkMIKq7 IdQ72HI+0ico1y4/ZxAyYt6Fb1plEXq54RL+IRL7m70ZfRWRqUubKcP9/k9+xLEi tVldU0LeBKr/hrVh/zJgGsVgzFnIFgdP8UsiuoWOVPWkovBBFAVMJwsXRQ7+V1ot VhvJxJ0zQZtgZUWGhS3qNAoaQH0O/iTHgzkww+fXWVmVsc4HDGAWguJwBXe0mbFi aOULwyCP50p9MuleGq1uOqiVU8JHFKnfoEXm8bW2/VCizSq8zpudiJ0Vn/STrZjr sIGYK8eCguRg6yTDzUc5JKmLaxj1E/kXQLdnoUQJxqfNak9KOQQVjXx/Gx9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6zc4ohNbpyxmAgjY8Y3GJg1MJ90wHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgssZx9PooP3cEYP5BkFtLz3mxBfHJlq3TK 5rEqNPq+kBDWcu8SUBWGe9kSYIC+vps0kbYZZlBll/61C3QouHNF1h5m5PnMHliF wK3LBQBpEDwWwTsFzA+xDDe9BUu+7GKwPXyWJ2wQN/+9gmyW3dviFbBiZwR3Gl+e XP9TZ9Rl0Idv0WmD3HUSR7pD1q2o0VlGjKGJ3dcZuHtxYtrWdm6EPZ4+hZiUhMdb 6LO+HmkpLq8UXtfM5aH7bjpfk6/hR43tVRcqbwoObsxkdEqrhL4nF7rKLKZ4FtwQ 7LPi6ovlBMjurLb0vv/k5jzNlbrRn9eSs0iPFH5eWM0xhxzS5xU= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:25 2025 by rpki-client