This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: 5+rArUTFnBpK7bq+Lh903AHWBaKdPR4wexAbKi4dREc= Subject key identifier: EF:4C:30:52:49:14:08:DF:29:25:80:02:B9:EB:12:19:9C:B4:33:30 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 2964D2B2A3597288385373E92C1755115F52B7A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: FF Signing time: Tue 02 Dec 2025 10:01:08 +0000 Manifest this update: Tue 02 Dec 2025 09:56:08 +0000 Manifest next update: Fri 05 Dec 2025 19:18:08 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: 87W6ObznOkhQaFwxojM1GNRKTBwKr0h6cukVksvPcic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:18:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:64:d2:b2:a3:59:72:88:38:53:73:e9:2c:17:55:11:5f:52:b7:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Dec 2 09:56:08 2025 GMT Not After : Dec 5 19:18:08 2025 GMT Subject: CN=EF4C3052491408DF29258002B9EB12199CB43330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:10:96:a3:db:73:fc:16:8c:8e:41:2b:c4: d5:c2:49:8c:0b:6c:d4:b4:10:69:7d:90:e4:26:20: 74:25:9b:a6:3a:93:cd:09:71:26:73:bb:b9:40:3d: 30:a7:99:62:41:dd:23:71:41:88:5f:88:98:06:3d: 9e:d0:03:f0:b6:e4:26:c8:9b:a9:13:58:c2:1e:06: 7b:25:f2:13:f1:f8:d0:da:40:20:ab:a1:ad:85:e1: 8b:10:dd:61:fa:13:d6:16:06:f1:f6:71:6e:5b:7a: 2f:d0:d5:72:4e:d3:ad:b9:d2:74:d9:3e:43:0d:21: 93:f7:07:38:33:aa:7f:2c:24:8b:7b:78:fb:8f:c4: dc:c9:51:93:6e:30:78:1a:1c:97:31:05:3e:e4:c5: 3e:94:62:06:cf:fa:7c:3f:e6:e9:73:fa:c5:9b:d5: 89:78:6f:60:d0:90:1c:cd:94:0a:9f:62:68:1b:f5: 6b:f4:fb:c2:9e:47:a1:2e:27:9e:b5:fd:ff:26:27: 4c:fa:4c:74:b3:5b:b4:24:ff:d1:b5:2d:98:13:ec: 54:79:40:5f:90:ab:8b:d2:b7:6a:6b:da:b2:17:ce: fa:5f:8e:f1:b4:7d:22:37:e2:04:6a:08:4a:75:24: 54:bb:d6:3d:7d:31:45:ad:2e:5b:4d:4f:47:3e:13: 26:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4C:30:52:49:14:08:DF:29:25:80:02:B9:EB:12:19:9C:B4:33:30 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:05:f4:f0:0c:c5:54:f1:c2:d3:1d:66:9a:47:10:ae:01:c4: 64:c6:e5:68:41:fa:c9:51:47:47:29:4f:4e:2a:70:19:a2:28: 92:4b:02:99:66:d7:54:07:26:9c:c8:16:fe:f8:bd:bb:12:dd: db:40:c3:e2:d1:c5:0a:bd:8f:c4:27:fc:dc:ad:0a:b1:3e:97: 2b:2e:98:c5:fc:4d:8a:0c:0e:35:fd:c9:b3:e4:c5:f3:a2:de: 67:4a:cd:a6:82:d3:22:b6:a5:d0:5c:e2:58:cd:35:ac:c6:5e: 94:5f:1f:d1:c3:34:b7:3b:ec:0b:19:ae:e7:02:66:6d:3e:49: 60:a8:01:22:43:f5:61:8c:01:1d:49:21:a4:3a:88:4a:07:42: a8:a1:3e:45:2a:59:21:20:52:80:6d:45:4d:6d:39:60:51:ab: 33:8e:43:bd:d8:17:13:89:f2:26:16:23:4e:04:9a:05:a6:41: 04:ef:38:f7:42:c3:b0:0c:d7:17:84:a0:57:be:56:3a:5d:1f: be:6b:71:38:56:7e:90:05:6e:ef:64:2d:12:de:05:fe:48:92: 5d:d9:a6:d8:61:58:3d:9c:14:08:d5:bc:f8:8e:1c:d0:5f:d6: c0:3c:c2:1d:05:23:c4:bc:35:a4:eb:29:b0:95:b7:8d:b9:1d: ae:0a:f0:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWTSsqNZcog4U3PpLBdVEV9St6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNTEyMDIwOTU2MDhaFw0yNTEyMDUxOTE4MDhaMDMxMTAvBgNV BAMTKEVGNEMzMDUyNDkxNDA4REYyOTI1ODAwMkI5RUIxMjE5OUNCNDMzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGxCWo9tz/BaMjkErxNXCSYwL bNS0EGl9kOQmIHQlm6Y6k80JcSZzu7lAPTCnmWJB3SNxQYhfiJgGPZ7QA/C25CbI m6kTWMIeBnsl8hPx+NDaQCCroa2F4YsQ3WH6E9YWBvH2cW5bei/Q1XJO06250nTZ PkMNIZP3Bzgzqn8sJIt7ePuPxNzJUZNuMHgaHJcxBT7kxT6UYgbP+nw/5ulz+sWb 1Yl4b2DQkBzNlAqfYmgb9Wv0+8KeR6EuJ561/f8mJ0z6THSzW7Qk/9G1LZgT7FR5 QF+Qq4vSt2pr2rIXzvpfjvG0fSI34gRqCEp1JFS71j19MUWtLltNT0c+EyazAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70wwUkkUCN8pJYACuesSGZy0MzAwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkF9PAMxVTxwtMdZppHEK4BxGTG5WhB+slR R0cpT04qcBmiKJJLAplm11QHJpzIFv74vbsS3dtAw+LRxQq9j8Qn/NytCrE+lysu mMX8TYoMDjX9ybPkxfOi3mdKzaaC0yK2pdBc4ljNNazGXpRfH9HDNLc77AsZrucC Zm0+SWCoASJD9WGMAR1JIaQ6iEoHQqihPkUqWSEgUoBtRU1tOWBRqzOOQ73YFxOJ 8iYWI04EmgWmQQTvOPdCw7AM1xeEoFe+VjpdH75rcThWfpAFbu9kLRLeBf5Ikl3Z pthhWD2cFAjVvPiOHNBf1sA8wh0FI8S8NaTrKbCVt425Ha4K8Bk= -----END CERTIFICATE-----Generated at Wed Dec 3 13:55:12 2025 by rpki-client