This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: dDpXiMncLchWDZNwWtVLGSvDvczk7ts4Y1FhOPF9zJc= Subject key identifier: EB:FE:90:A4:99:E1:92:20:AA:DA:A5:5F:D6:0A:DE:DA:EB:7E:9C:64 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 6C60022D1D046A754A9367D9259057FD972A84A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0246 Signing time: Wed 17 Dec 2025 23:41:09 +0000 Manifest this update: Wed 17 Dec 2025 23:36:09 +0000 Manifest next update: Sun 21 Dec 2025 10:29:09 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) 2: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: QUsEHE/XPAsFhjb9UyRFTADrE0GW/monIE+DF/beFY8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:60:02:2d:1d:04:6a:75:4a:93:67:d9:25:90:57:fd:97:2a:84:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Dec 17 23:36:09 2025 GMT Not After : Dec 21 10:29:09 2025 GMT Subject: CN=EBFE90A499E19220AADAA55FD60ADEDAEB7E9C64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:5b:0e:1c:e5:30:98:a4:aa:be:1a:08:ba: 2e:cc:a3:41:76:f2:d4:e0:19:74:2b:7c:2a:25:82: 23:18:43:f2:5c:56:a5:58:63:7a:dc:94:d1:9c:53: c0:aa:6d:2d:9c:b0:4e:d6:27:e0:31:87:d0:72:da: f6:60:14:b8:43:05:17:64:2f:21:9a:a7:8b:58:8b: 02:ba:3f:b8:6e:fb:3e:67:73:c7:e3:3c:33:b0:99: 6b:45:8c:e1:62:98:3c:db:d8:24:1f:81:ca:8c:81: d2:aa:ac:2e:d2:75:89:db:28:90:16:d1:8b:56:91: 64:3b:a2:dd:4f:3a:3d:8c:05:28:bc:2a:3c:48:6c: 72:c5:ac:78:c1:6c:3f:2f:80:64:0a:4c:e3:fa:1f: 60:2a:98:f1:e3:e1:3c:ee:b8:19:69:55:7e:0b:45: 34:87:f9:26:6b:90:5d:47:06:b2:9d:29:3e:54:3f: ba:86:57:d1:11:0f:60:1b:3c:b6:be:31:55:52:5b: 74:d1:a3:30:3e:be:42:35:8b:5a:be:5f:5e:8c:7d: 0d:00:69:72:f8:5f:53:e5:03:82:f6:b7:9a:aa:06: 04:61:59:be:0d:7c:ec:36:a9:6f:5c:77:11:bd:83: d7:71:19:fb:3b:37:8f:5f:25:5c:5b:b1:42:54:a1: 30:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FE:90:A4:99:E1:92:20:AA:DA:A5:5F:D6:0A:DE:DA:EB:7E:9C:64 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:9a:81:39:e6:15:3e:c2:cf:db:62:ee:6f:aa:89:d6:e0:c5: 8f:ad:c8:40:7e:d5:63:9e:ff:13:2c:8f:c5:d9:41:93:e4:c7: 3c:47:a0:c0:56:d1:90:4f:fd:78:cf:dd:c7:26:e4:2b:a2:c4: f8:0c:9e:ba:80:e3:52:b9:13:12:46:99:f5:60:e1:3d:ea:5c: 2e:1b:a7:6a:8e:7b:2e:8c:97:89:1c:55:63:32:f6:d7:21:d5: 6f:e0:8d:d7:1f:71:3a:40:91:59:d9:59:51:3f:06:98:95:6f: 6c:ac:a8:b7:dc:10:fb:d0:0d:e2:df:21:07:6b:ca:81:26:3c: 9b:f8:e9:31:03:9b:c9:e9:d1:df:84:ef:a1:40:86:2a:a9:d3: 8c:a9:43:de:e6:1e:e7:f6:fc:79:04:b3:4f:e5:f3:6f:6c:59: d7:cc:fc:98:ef:05:ae:63:8c:b1:6c:5b:b8:0b:83:95:e0:52: 1f:81:e8:64:c0:a6:82:6c:cb:34:b3:a7:58:ff:8c:69:15:b1: 50:e8:ca:a8:db:75:f4:9d:f6:d7:16:71:ff:38:a2:62:17:f7: 36:e2:f2:55:d5:0c:72:36:d1:04:a9:71:e5:76:be:ad:7b:74: 74:5a:a6:5c:ae:26:98:3a:33:85:63:34:fa:de:7b:4d:b7:08: d8:fc:8e:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGACLR0EanVKk2fZJZBX/ZcqhKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTEyMTcyMzM2MDlaFw0yNTEyMjExMDI5MDlaMDMxMTAvBgNV BAMTKEVCRkU5MEE0OTlFMTkyMjBBQURBQTU1RkQ2MEFERURBRUI3RTlDNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2VsOHOUwmKSqvhoIui7Mo0F2 8tTgGXQrfColgiMYQ/JcVqVYY3rclNGcU8CqbS2csE7WJ+Axh9By2vZgFLhDBRdk LyGap4tYiwK6P7hu+z5nc8fjPDOwmWtFjOFimDzb2CQfgcqMgdKqrC7SdYnbKJAW 0YtWkWQ7ot1POj2MBSi8KjxIbHLFrHjBbD8vgGQKTOP6H2AqmPHj4TzuuBlpVX4L RTSH+SZrkF1HBrKdKT5UP7qGV9ERD2AbPLa+MVVSW3TRozA+vkI1i1q+X16MfQ0A aXL4X1PlA4L2t5qqBgRhWb4NfOw2qW9cdxG9g9dxGfs7N49fJVxbsUJUoTCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/6QpJnhkiCq2qVf1gre2ut+nGQwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuagTnmFT7Cz9ti7m+qidbgxY+tyEB+1WOe /xMsj8XZQZPkxzxHoMBW0ZBP/XjP3ccm5CuixPgMnrqA41K5ExJGmfVg4T3qXC4b p2qOey6Ml4kcVWMy9tch1W/gjdcfcTpAkVnZWVE/BpiVb2ysqLfcEPvQDeLfIQdr yoEmPJv46TEDm8np0d+E76FAhiqp04ypQ97mHuf2/HkEs0/l829sWdfM/JjvBa5j jLFsW7gLg5XgUh+B6GTApoJsyzSzp1j/jGkVsVDoyqjbdfSd9tcWcf84omIX9zbi 8lXVDHI20QSpceV2vq17dHRaplyuJpg6M4VjNPree023CNj8jtY= -----END CERTIFICATE-----Generated at Fri Dec 19 23:05:31 2025 by rpki-client