This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft File: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json) Hash identifier: KpqIQrfWPmtFj6Fy4DtAVvc4v1RA4dN8vFJLOWWvJis= Subject key identifier: AC:EE:72:58:D7:66:0A:B9:7A:F0:8F:68:50:22:3B:4B:3C:EA:D1:B3 Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC Certificate issuer: /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Certificate serial: 50951F880A43284445D77AA74385547C92D35715 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft Manifest number: 0529 Signing time: Tue 02 Dec 2025 18:00:50 +0000 Manifest this update: Tue 02 Dec 2025 17:55:50 +0000 Manifest next update: Fri 05 Dec 2025 19:30:50 +0000 Files and hashes: 1: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: GbxQFZR+xJQgecU4ZiO2hgqCN3e7llimmwT8o77r2lk=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: PgHEb146XoyGC0/9tuhNMcAsAzVP9MObWQdPhmy9XiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 19:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:95:1f:88:0a:43:28:44:45:d7:7a:a7:43:85:54:7c:92:d3:57:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Validity Not Before: Dec 2 17:55:50 2025 GMT Not After : Dec 5 19:30:50 2025 GMT Subject: CN=ACEE7258D7660AB97AF08F6850223B4B3CEAD1B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:ef:41:e5:65:04:89:7d:d0:dc:7e:90:11: 02:1c:04:7c:80:33:94:2f:30:4c:c8:7f:8d:41:30: 6e:50:62:93:6e:6a:bf:6c:e5:dd:da:a3:8c:40:43: 04:3c:3c:ec:2f:b7:6f:f9:aa:04:4b:a0:8e:73:bd: 7e:bf:22:e2:14:9d:95:68:52:02:9a:99:f2:fe:51: 34:98:01:42:22:82:3f:fa:94:13:66:89:0e:2f:0f: 27:d9:dd:a4:16:4a:aa:49:a0:05:5d:3c:84:ed:14: 24:c2:0f:c3:bf:0c:a2:14:68:b2:34:d0:8f:98:96: 82:dc:43:3e:bf:0c:fa:3f:bb:71:46:39:5d:28:ce: 99:c6:c9:4d:a4:dc:ae:83:73:0d:c2:f1:90:48:83: a9:04:60:e4:ac:e8:8e:5e:ea:fa:48:98:22:49:b7: 32:34:22:09:3e:e8:3f:83:f2:5f:aa:46:2a:d8:9d: f6:3e:ba:51:44:4c:31:ca:88:fb:96:3a:79:41:c1: 73:d0:dc:e4:a8:e2:c7:d2:44:0b:b0:a3:ce:83:28: 75:03:2c:91:9e:ad:ac:93:7d:8b:73:41:02:2a:09: 1c:84:5f:40:c1:4c:57:8f:d0:dc:2e:d2:8a:bc:41: 53:c3:e0:fa:59:58:2d:89:f9:c1:fa:d5:b4:f1:dc: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EE:72:58:D7:66:0A:B9:7A:F0:8F:68:50:22:3B:4B:3C:EA:D1:B3 X509v3 Authority Key Identifier: keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4c:d2:af:d5:5c:5b:2e:44:70:bb:82:bd:67:87:c0:c9:66: 55:80:fe:8c:46:71:a2:6a:ff:2a:30:91:16:73:27:dc:17:94: 24:fa:74:8f:e4:7d:ba:e5:06:ab:14:3e:6c:d6:b4:67:65:39: ab:06:ac:29:1c:32:f0:f2:0c:e3:10:d4:0b:0c:68:4a:3a:68: a5:d1:5f:d8:e6:90:cb:a2:cd:8e:49:c9:8d:09:27:e6:8d:b8: de:a0:b9:96:5b:e2:b5:e2:f9:6b:a4:db:bc:6c:ed:a8:1c:55: da:b3:9c:d6:b0:cb:e2:38:67:cf:39:d3:17:12:0d:91:f1:43: 7a:3d:e7:63:43:d6:7b:23:aa:ba:2e:ca:e6:74:43:b5:4a:21: 25:e3:c8:35:bb:06:5c:20:88:f2:54:35:eb:0e:2a:83:a5:02: a2:ee:21:61:b9:f9:f7:40:c9:e5:57:c7:7e:22:e3:ba:eb:3a: b9:14:d4:c0:be:f5:00:43:df:64:ed:e9:bc:4e:25:98:a9:f9: 12:23:86:41:7a:9b:6b:db:13:71:9e:48:c9:cc:00:c1:39:93: 66:3a:9b:e4:f0:b1:99:b9:93:6c:3d:3b:1e:48:d0:9f:a1:e4: f3:53:ca:00:80:63:0f:67:b7:26:28:4b:2b:7f:44:9b:af:44: 3f:e9:f1:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJUfiApDKERF13qnQ4VUfJLTVxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUx NTk1MEFFQzAeFw0yNTEyMDIxNzU1NTBaFw0yNTEyMDUxOTMwNTBaMDMxMTAvBgNV BAMTKEFDRUU3MjU4RDc2NjBBQjk3QUYwOEY2ODUwMjIzQjRCM0NFQUQxQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjXO9B5WUEiX3Q3H6QEQIcBHyA M5QvMEzIf41BMG5QYpNuar9s5d3ao4xAQwQ8POwvt2/5qgRLoI5zvX6/IuIUnZVo UgKamfL+UTSYAUIigj/6lBNmiQ4vDyfZ3aQWSqpJoAVdPITtFCTCD8O/DKIUaLI0 0I+YloLcQz6/DPo/u3FGOV0ozpnGyU2k3K6Dcw3C8ZBIg6kEYOSs6I5e6vpImCJJ tzI0Igk+6D+D8l+qRirYnfY+ulFETDHKiPuWOnlBwXPQ3OSo4sfSRAuwo86DKHUD LJGerayTfYtzQQIqCRyEX0DBTFeP0Nwu0oq8QVPD4PpZWC2J+cH61bTx3GNxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrO5yWNdmCrl68I9oUCI7Szzq0bMwHwYDVR0j BBgwFoAUGXXwsvJ95K/0PMJGBYornhWVCuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDMzNjJlMi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTc1RjBCMkYy N0RFNEFGRjQzQ0MyNDYwNThBMkI5RTE1OTUwQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUxNTk1 MEFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJC OUUxNTk1MEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJM0q/VXFsuRHC7gr1nh8DJZlWA/oxGcaJq /yowkRZzJ9wXlCT6dI/kfbrlBqsUPmzWtGdlOasGrCkcMvDyDOMQ1AsMaEo6aKXR X9jmkMuizY5JyY0JJ+aNuN6guZZb4rXi+Wuk27xs7agcVdqznNawy+I4Z8850xcS DZHxQ3o952ND1nsjqrouyuZ0Q7VKISXjyDW7BlwgiPJUNesOKoOlAqLuIWG5+fdA yeVXx34i47rrOrkU1MC+9QBD32Tt6bxOJZip+RIjhkF6m2vbE3GeSMnMAME5k2Y6 m+TwsZm5k2w9Ox5I0J+h5PNTygCAYw9ntyYoSyt/RJuvRD/p8So= -----END CERTIFICATE-----Generated at Wed Dec 3 13:56:32 2025 by rpki-client