This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: V2qzYhfnCl3B2g3qlQdaFgSH6PvUwJgDKFUV8juC4aE= Subject key identifier: 30:23:D5:A9:49:13:A5:D4:14:CD:F9:C0:65:D0:42:FB:0C:9E:56:28 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 66F8E6C34969F0AE1BC50AF3CE3D668F9B60E05A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 010E Signing time: Wed 03 Dec 2025 13:11:48 +0000 Manifest this update: Wed 03 Dec 2025 13:06:48 +0000 Manifest next update: Sun 07 Dec 2025 00:56:48 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: kvcqYK4ZC6jk2yILJtvR49XBc6on42N21w+G2hy9b5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Dec 2025 00:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f8:e6:c3:49:69:f0:ae:1b:c5:0a:f3:ce:3d:66:8f:9b:60:e0:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Dec 3 13:06:48 2025 GMT Not After : Dec 7 00:56:48 2025 GMT Subject: CN=3023D5A94913A5D414CDF9C065D042FB0C9E5628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7d:f7:83:53:4f:66:30:bc:e4:47:24:ef:b0: d5:15:f5:80:7c:46:e2:06:f7:0d:74:7c:eb:e4:5c: c7:72:57:40:30:d1:8b:55:d8:e0:c1:d2:8e:98:46: 47:9c:a9:a6:72:31:e1:ac:09:a4:90:ef:27:4f:9c: 15:ef:b2:b4:69:50:51:f7:55:72:85:67:07:5f:3c: f1:0f:06:a1:f5:8e:99:70:52:cf:d0:fd:6f:94:84: 68:58:7d:4f:10:0e:c6:6c:ff:3e:ad:27:9e:e9:38: 60:ac:a4:27:76:ef:60:e3:14:d7:e2:ae:1c:55:ec: 0f:87:b7:22:71:bc:74:81:78:ef:68:8f:ae:34:58: 9e:30:5e:b3:55:47:39:aa:44:d4:e7:aa:47:41:42: 39:fb:7e:77:c2:2c:03:a8:6e:98:86:57:85:9a:67: 81:a0:0e:25:0a:57:ba:8c:88:11:89:7a:ab:d5:4c: c2:58:0d:29:7c:ca:76:2e:9b:33:6a:84:23:d6:f0: 96:7b:d5:15:c5:eb:15:9a:7d:15:e3:f4:7e:bc:08: dd:b3:f9:29:d9:db:5b:ae:d9:2a:0b:f5:c3:a8:1f: 2f:85:e6:01:57:4b:0c:0f:bc:40:64:8e:7b:a2:7b: 0b:64:8e:33:33:05:d9:08:9e:3d:6c:08:ab:a3:c0: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:23:D5:A9:49:13:A5:D4:14:CD:F9:C0:65:D0:42:FB:0C:9E:56:28 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e2:11:10:b3:28:b6:4b:c8:65:65:83:73:2d:9f:a3:15:d7: 92:9c:f7:58:43:f6:3f:cc:e3:ae:40:65:7e:64:8b:12:cb:18: ad:f2:a8:de:8e:35:9d:83:40:d9:b9:e0:0a:04:f2:2b:a8:42: 16:72:43:19:66:b3:d9:ef:fd:e8:58:8d:1c:18:c2:69:ef:6b: bb:db:e5:94:df:96:01:bf:0c:6a:89:ec:e2:ea:a1:1d:1f:3e: 2b:38:38:2c:b6:23:81:f0:27:50:89:96:63:7e:f9:ae:18:07: 21:2d:66:b0:f7:71:29:58:4b:d6:97:d3:54:57:69:76:bd:c7: a8:6f:69:d1:78:14:75:33:6e:2e:75:13:13:48:29:bf:15:a2: ee:07:85:d1:4e:9b:37:6e:b0:15:28:24:42:d0:13:cf:6e:41: c3:43:f2:9b:9c:d0:a4:ea:24:62:bc:bf:04:96:56:14:87:01: c9:f8:13:71:b6:64:c0:8a:58:1f:42:02:7f:13:e2:31:82:a8: b8:60:a2:d3:14:03:be:6c:ce:57:92:1e:ee:86:7d:24:35:7d: df:ca:cb:8b:92:58:1c:b4:39:de:a5:54:57:16:36:30:13:75: 9c:1c:e7:45:cb:c1:02:94:9c:16:73:6d:ae:33:a1:3a:50:67: f2:e9:b2:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZvjmw0lp8K4bxQrzzj1mj5tg4FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNTEyMDMxMzA2NDhaFw0yNTEyMDcwMDU2NDhaMDMxMTAvBgNV BAMTKDMwMjNENUE5NDkxM0E1RDQxNENERjlDMDY1RDA0MkZCMEM5RTU2MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZffeDU09mMLzkRyTvsNUV9YB8 RuIG9w10fOvkXMdyV0Aw0YtV2ODB0o6YRkecqaZyMeGsCaSQ7ydPnBXvsrRpUFH3 VXKFZwdfPPEPBqH1jplwUs/Q/W+UhGhYfU8QDsZs/z6tJ57pOGCspCd272DjFNfi rhxV7A+HtyJxvHSBeO9oj640WJ4wXrNVRzmqRNTnqkdBQjn7fnfCLAOobpiGV4Wa Z4GgDiUKV7qMiBGJeqvVTMJYDSl8ynYumzNqhCPW8JZ71RXF6xWafRXj9H68CN2z +SnZ21uu2SoL9cOoHy+F5gFXSwwPvEBkjnuiewtkjjMzBdkInj1sCKujwFLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMCPVqUkTpdQUzfnAZdBC+wyeVigwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbiERCzKLZLyGVlg3Mtn6MV15Kc91hD9j/M 465AZX5kixLLGK3yqN6ONZ2DQNm54AoE8iuoQhZyQxlms9nv/ehYjRwYwmnva7vb 5ZTflgG/DGqJ7OLqoR0fPis4OCy2I4HwJ1CJlmN++a4YByEtZrD3cSlYS9aX01RX aXa9x6hvadF4FHUzbi51ExNIKb8Vou4HhdFOmzdusBUoJELQE89uQcND8puc0KTq JGK8vwSWVhSHAcn4E3G2ZMCKWB9CAn8T4jGCqLhgotMUA75szleSHu6GfSQ1fd/K y4uSWBy0Od6lVFcWNjATdZwc50XLwQKUnBZzba4zoTpQZ/Lpsro= -----END CERTIFICATE-----Generated at Wed Dec 3 16:20:53 2025 by rpki-client