This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: h+qRsLJsT/tAYr6PMCRfEOqJLZgEh3orBDkpkt6U/Bc= Subject key identifier: D2:35:DA:CD:1F:0D:55:15:B4:15:F2:A1:24:7E:37:AB:D8:A7:60:D0 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 1A88570A0172C945F6279E559D1502E26453829D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 013F Signing time: Wed 03 Dec 2025 03:30:00 +0000 Manifest this update: Wed 03 Dec 2025 03:25:00 +0000 Manifest next update: Sat 06 Dec 2025 08:47:00 +0000 Files and hashes: 1: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) 2: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: JQv42lEQxGiw+bEoOBPc8Na/TddtOzZuIFt2qAOv28I=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 08:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:88:57:0a:01:72:c9:45:f6:27:9e:55:9d:15:02:e2:64:53:82:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Dec 3 03:25:00 2025 GMT Not After : Dec 6 08:47:00 2025 GMT Subject: CN=D235DACD1F0D5515B415F2A1247E37ABD8A760D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:c2:71:aa:9b:cb:54:8e:97:76:fd:eb:22: 2e:25:a5:7f:99:57:87:b9:3d:5b:0b:d3:ee:ce:66: 42:fd:5e:5e:c8:f1:f3:df:8a:df:14:fc:84:69:1e: 1e:5b:cb:d7:68:80:8f:1d:b9:c9:c9:dd:94:11:f6: bd:2c:29:40:d2:8b:6f:fe:09:ef:d1:cf:05:ec:91: 5b:2d:d4:fb:1b:78:5c:e5:ae:0c:bc:59:eb:45:ae: 65:53:99:34:7a:60:58:00:b2:57:f3:6f:21:09:d7: 8e:9e:15:1c:92:fc:64:20:ca:ba:21:51:62:c4:a4: 01:d4:be:13:fb:d6:48:29:b1:65:39:26:71:06:9f: a8:01:c4:41:d8:db:0d:8b:ca:e6:08:33:69:65:d7: 6c:e0:72:2f:1a:22:42:10:a6:9f:f7:dd:c0:70:68: c8:84:e7:3e:85:b9:19:b2:7c:27:f1:eb:e7:7a:ea: f7:58:5e:ec:36:8e:26:b3:87:b2:ed:c6:4d:36:4b: 0a:24:58:58:b7:1c:f7:07:e1:38:fe:7a:b4:b0:94: 76:53:6c:72:98:a3:2e:0a:13:aa:88:0e:3f:7c:fd: 7f:4d:28:7f:c1:22:c2:b7:74:be:dd:67:f1:d5:c7: 0b:63:92:d6:6b:d3:e3:c9:b6:e4:8c:57:46:89:62: 9e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:35:DA:CD:1F:0D:55:15:B4:15:F2:A1:24:7E:37:AB:D8:A7:60:D0 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:77:56:d4:d0:da:6f:f7:53:a7:e3:fe:51:00:ef:d4:9f:23: 88:20:fe:7e:35:7b:dc:2a:68:b1:7d:a6:d3:de:a8:4c:c7:08: b8:46:4c:93:9d:98:27:91:32:ff:fa:ca:bf:e0:6d:e0:91:c9: 11:8f:16:2e:b6:ac:f0:be:31:6f:a6:06:d1:ef:26:1d:c6:58: 04:2c:92:e9:c6:38:1d:46:f1:46:3e:a5:fb:45:0d:b5:76:9d: 3e:f2:8c:e3:0a:ba:30:67:8c:57:cc:15:84:92:c7:f2:d0:2b: 20:74:46:eb:34:92:55:d0:40:95:bd:95:c9:68:97:1d:f5:03: 6d:f4:06:b8:5f:5f:65:17:05:9e:4f:08:3f:c2:e4:b4:e8:31: 40:53:15:be:6f:42:f8:f2:70:85:e5:ed:cf:53:66:7f:51:a6: f9:64:1d:ca:20:7f:b9:3b:07:5b:d1:b8:94:8f:e1:ce:bb:b0: 7b:c4:3a:e4:bf:a8:9e:f9:75:6d:82:2b:07:a3:64:d9:20:64: 7b:d4:0b:a5:d7:a6:3d:8a:27:94:91:bd:36:1c:9f:02:ec:28: 9c:3a:e1:4f:f5:96:d5:87:65:15:f8:b3:db:86:48:a4:1a:4f: 4a:a6:ad:d5:fc:3a:51:11:11:86:5d:23:f0:aa:63:52:6e:9f: fb:c2:6c:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGohXCgFyyUX2J55VnRUC4mRTgp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNTEyMDMwMzI1MDBaFw0yNTEyMDYwODQ3MDBaMDMxMTAvBgNV BAMTKEQyMzVEQUNEMUYwRDU1MTVCNDE1RjJBMTI0N0UzN0FCRDhBNzYwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/6sJxqpvLVI6Xdv3rIi4lpX+Z V4e5PVsL0+7OZkL9Xl7I8fPfit8U/IRpHh5by9dogI8ducnJ3ZQR9r0sKUDSi2/+ Ce/RzwXskVst1PsbeFzlrgy8WetFrmVTmTR6YFgAslfzbyEJ146eFRyS/GQgyroh UWLEpAHUvhP71kgpsWU5JnEGn6gBxEHY2w2LyuYIM2ll12zgci8aIkIQpp/33cBw aMiE5z6FuRmyfCfx6+d66vdYXuw2jiazh7Ltxk02SwokWFi3HPcH4Tj+erSwlHZT bHKYoy4KE6qIDj98/X9NKH/BIsK3dL7dZ/HVxwtjktZr0+PJtuSMV0aJYp4nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0jXazR8NVRW0FfKhJH43q9inYNAwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx3VtTQ2m/3U6fj/lEA79SfI4gg/n41e9wq aLF9ptPeqEzHCLhGTJOdmCeRMv/6yr/gbeCRyRGPFi62rPC+MW+mBtHvJh3GWAQs kunGOB1G8UY+pftFDbV2nT7yjOMKujBnjFfMFYSSx/LQKyB0Rus0klXQQJW9lclo lx31A230BrhfX2UXBZ5PCD/C5LToMUBTFb5vQvjycIXl7c9TZn9RpvlkHcogf7k7 B1vRuJSP4c67sHvEOuS/qJ75dW2CKwejZNkgZHvUC6XXpj2KJ5SRvTYcnwLsKJw6 4U/1ltWHZRX4s9uGSKQaT0qmrdX8OlEREYZdI/CqY1Jun/vCbGM= -----END CERTIFICATE-----Generated at Wed Dec 3 17:39:43 2025 by rpki-client