This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft File: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft (raw, json) Hash identifier: JQZ7ZTm12harn6QyGIxYq6mxFCOvaRxoOqXTG4BA8X0= Subject key identifier: 9C:12:AC:D3:16:97:2A:B0:4E:8D:86:B7:B0:11:CE:FB:1C:EB:B4:93 Authority key identifier: 19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 Certificate issuer: /CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Certificate serial: 0CC7445D30EF882031A831771E217FB43681F8D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft Manifest number: CA Signing time: Fri 05 Dec 2025 11:30:52 +0000 Manifest this update: Fri 05 Dec 2025 11:25:52 +0000 Manifest next update: Mon 08 Dec 2025 17:37:52 +0000 Files and hashes: 1: 3136302e33302e3232342e302f32332d3234203d3e20313533313132.roa (hash: UlKfFD3Jx7idatTOHjtFDcw+Wj0A2uPP8QvwywC4jKg=) 2: 19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl (hash: nSBLJ+ssCRywLbebCJ1UuAjgtbqSZ7AElPG+kwwQHF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c7:44:5d:30:ef:88:20:31:a8:31:77:1e:21:7f:b4:36:81:f8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B05C44D9C6EB8026B6C6506589E4C2FBB132D3 Validity Not Before: Dec 5 11:25:52 2025 GMT Not After : Dec 8 17:37:52 2025 GMT Subject: CN=9C12ACD316972AB04E8D86B7B011CEFB1CEBB493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:70:8c:99:ef:45:66:d5:ee:b2:a5:92:0c:a2: 2f:19:c7:16:84:86:a8:9c:eb:0a:3d:a3:a0:7f:e5: 48:52:10:69:48:5d:23:eb:bf:78:0a:fa:f7:5e:10: e7:c4:6f:db:51:06:69:4d:53:35:5e:81:98:77:20: 40:f9:5f:66:63:d2:08:64:43:cf:3b:85:3c:32:30: 78:81:e1:d2:dc:a6:89:5a:74:a5:f5:4f:0c:cb:cb: 7c:13:9d:bf:dd:f3:a0:b5:fd:6f:ac:f4:1b:6a:2a: 6d:3a:3b:0f:5f:c8:3b:e6:d5:d1:9b:8b:3a:3a:74: e1:cb:2f:bb:22:8b:a4:17:ee:07:1a:98:a7:45:30: d7:5b:09:de:01:7f:55:ce:83:9a:7b:c1:13:15:9c: b7:89:bb:a6:32:3d:f4:14:37:3a:6f:71:ec:9e:3b: 7f:fd:62:6c:e9:52:ef:7b:c2:22:d3:dd:08:98:93: 44:73:51:b3:10:a1:02:95:9d:39:37:67:87:e1:91: 36:e5:6e:a1:9e:f6:e5:ce:74:66:d8:f7:e1:53:f4: e6:9b:f6:2e:d5:45:24:21:61:c9:c7:4d:73:75:39: 3b:fd:8a:6e:7a:8d:0f:6a:bc:47:74:21:ad:a5:42: 8a:4a:3b:5d:72:ec:5e:c0:b3:7e:6d:7e:13:d4:f4: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:12:AC:D3:16:97:2A:B0:4E:8D:86:B7:B0:11:CE:FB:1C:EB:B4:93 X509v3 Authority Key Identifier: keyid:19:B0:5C:44:D9:C6:EB:80:26:B6:C6:50:65:89:E4:C2:FB:B1:32:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/0/19B05C44D9C6EB8026B6C6506589E4C2FBB132D3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:13:9e:ab:e4:71:7a:16:af:4f:05:cf:80:03:20:04:43:86: 71:41:20:4e:41:f1:10:7d:a2:43:46:7a:8a:6a:57:fc:29:f5: ab:72:69:a5:fe:e2:7a:70:ee:1b:09:12:4c:13:f3:0d:70:97: 85:69:4c:6e:53:b1:60:f2:25:51:d0:44:f5:a5:7b:f2:ea:5f: 50:74:9e:78:a1:cd:84:b9:39:ef:ab:8a:d8:e1:c9:2e:8a:69: 7b:67:10:d2:e3:30:ec:82:a2:a2:ff:37:45:6f:01:c9:32:f9: af:95:27:6a:09:74:32:eb:a5:ae:9e:f0:10:5c:9f:bf:d1:19: ab:0a:db:76:a1:35:f3:98:5f:97:46:13:40:6c:f1:29:ca:a3: c4:65:b9:77:f0:93:8f:c4:16:38:00:fa:cf:46:2f:ae:81:eb: 29:e5:35:7e:a1:61:a0:0c:d8:fe:98:1c:0d:ea:79:42:db:4a: 98:36:99:06:c9:f7:89:f4:d9:78:52:ea:c8:02:93:c2:8c:82: 81:73:4f:7c:06:46:ad:40:a4:bd:30:f9:ff:8f:77:5a:ac:11: d5:e3:b3:0a:26:29:6b:30:ce:d7:65:e4:52:bc:f6:82:08:e7: 0a:0a:a3:f7:44:96:ee:82:02:03:d2:b0:47:e8:08:59:d2:27: 48:b6:60:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMdEXTDviCAxqDF3HiF/tDaB+NMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJG QkIxMzJEMzAeFw0yNTEyMDUxMTI1NTJaFw0yNTEyMDgxNzM3NTJaMDMxMTAvBgNV BAMTKDlDMTJBQ0QzMTY5NzJBQjA0RThEODZCN0IwMTFDRUZCMUNFQkI0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/cIyZ70Vm1e6ypZIMoi8ZxxaE hqic6wo9o6B/5UhSEGlIXSPrv3gK+vdeEOfEb9tRBmlNUzVegZh3IED5X2Zj0ghk Q887hTwyMHiB4dLcpoladKX1TwzLy3wTnb/d86C1/W+s9BtqKm06Ow9fyDvm1dGb izo6dOHLL7sii6QX7gcamKdFMNdbCd4Bf1XOg5p7wRMVnLeJu6YyPfQUNzpvceye O3/9YmzpUu97wiLT3QiYk0RzUbMQoQKVnTk3Z4fhkTblbqGe9uXOdGbY9+FT9Oab 9i7VRSQhYcnHTXN1OTv9im56jQ9qvEd0Ia2lQopKO11y7F7As35tfhPU9AsfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnBKs0xaXKrBOjYa3sBHO+xzrtJMwHwYDVR0j BBgwFoAUGbBcRNnG64AmtsZQZYnkwvuxMtMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMC8xOUIwNUM0NEQ5 QzZFQjgwMjZCNkM2NTA2NTg5RTRDMkZCQjEzMkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0QzJGQkIx MzJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzAvMTlCMDVDNDREOUM2RUI4MDI2QjZDNjUwNjU4OUU0 QzJGQkIxMzJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgTnqvkcXoWr08Fz4ADIARDhnFBIE5B8RB9 okNGeopqV/wp9atyaaX+4npw7hsJEkwT8w1wl4VpTG5TsWDyJVHQRPWle/LqX1B0 nnihzYS5Oe+ritjhyS6KaXtnENLjMOyCoqL/N0VvAcky+a+VJ2oJdDLrpa6e8BBc n7/RGasK23ahNfOYX5dGE0Bs8SnKo8RluXfwk4/EFjgA+s9GL66B6ynlNX6hYaAM 2P6YHA3qeULbSpg2mQbJ94n02XhS6sgCk8KMgoFzT3wGRq1ApL0w+f+Pd1qsEdXj swomKWswztdl5FK89oII5woKo/dElu6CAgPSsEfoCFnSJ0i2YCw= -----END CERTIFICATE-----Generated at Sat Dec 6 16:56:24 2025 by rpki-client