This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: Vzsrl2r9QGm0eb8ALO6SnjSHWInEEN78J6eX600tOH0= Subject key identifier: CF:04:FC:38:C4:5C:39:A7:B7:65:21:08:64:04:06:CB:80:CD:53:1B Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 24DCE085B8DFB0E2C0FAFA8FE3DF1EFF0FC9E2F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0250 Signing time: Fri 05 Dec 2025 10:11:32 +0000 Manifest this update: Fri 05 Dec 2025 10:06:32 +0000 Manifest next update: Mon 08 Dec 2025 13:48:32 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: hhTVQUb5j0iZfKyFZvoX00FMUSdPJtc5uSV8Gd9llao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 13:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:dc:e0:85:b8:df:b0:e2:c0:fa:fa:8f:e3:df:1e:ff:0f:c9:e2:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Dec 5 10:06:32 2025 GMT Not After : Dec 8 13:48:32 2025 GMT Subject: CN=CF04FC38C45C39A7B7652108640406CB80CD531B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:70:6c:c5:a8:2a:67:17:ab:4f:19:0b:95:fd: 3a:6a:2a:84:e2:bd:93:dc:5c:9f:b7:94:8a:82:16: 76:4c:ce:46:ec:d7:3c:06:19:74:12:01:4a:87:4d: 16:76:b2:3a:4a:d6:4c:62:c2:7d:96:88:16:79:20: ba:b0:25:74:43:88:ef:d2:a5:a8:74:b3:68:20:29: 2a:22:4b:64:48:96:34:e2:63:94:16:7d:ee:58:29: 6e:62:51:14:be:9b:a1:dc:07:7f:6d:09:e5:c9:8d: 32:68:74:8c:c3:65:26:87:d9:d8:ef:1c:0a:ef:03: 5d:e5:5e:72:8f:74:af:ba:53:ba:c4:9c:bb:dd:01: 3b:16:2e:b6:e8:91:ce:17:56:a9:a4:90:37:d7:23: 43:cd:16:ae:3d:4d:5a:7f:d2:b5:d2:60:9b:2d:c0: b9:90:96:cb:f0:9e:32:56:53:10:9a:1c:97:29:cd: 89:2c:6b:3b:08:60:9b:c7:67:66:51:6f:36:a9:1e: 42:26:11:47:c2:f2:fc:24:00:89:d6:ba:e3:21:c3: 76:16:6b:c4:e0:73:3a:ad:4e:61:d4:88:34:2c:ba: 78:67:b5:99:68:61:5b:15:02:7f:1a:6d:b4:91:e2: ee:b1:00:a9:65:5e:a1:c6:92:5f:05:9e:eb:43:72: 4a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:04:FC:38:C4:5C:39:A7:B7:65:21:08:64:04:06:CB:80:CD:53:1B X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:60:4a:b5:51:3d:78:57:8a:cb:03:74:d1:96:b0:d1:91:b1: c9:12:e6:b6:37:7d:87:4f:43:47:5a:25:85:26:8c:5e:8a:5f: 09:72:b6:55:fa:85:16:da:85:58:29:e6:86:b6:ff:d8:07:1f: ad:98:09:39:c6:4c:2e:40:df:b9:95:28:75:2b:06:e9:43:1a: 8f:04:9b:a6:0a:6c:6e:63:d8:05:05:96:a4:88:d2:3e:a6:4d: bf:12:6e:ae:3d:e7:97:49:d1:e9:1a:9c:4d:65:46:d4:d4:93: 0a:c1:0d:eb:56:ad:af:a8:aa:f0:60:db:67:6f:cc:c3:96:26: c7:14:36:02:8e:54:9b:2b:b9:2a:79:5f:66:f2:4e:19:bd:db: 84:88:41:b8:6e:d1:c0:03:56:9f:77:d5:98:09:13:6c:37:f2: f4:59:90:bb:af:9b:19:58:98:1a:c0:b5:14:49:72:da:5c:3b: 3e:fd:f9:63:84:f6:08:56:30:0c:53:73:51:61:b0:51:e2:f2: 49:46:6a:71:5a:0b:83:08:6f:2b:63:e2:4d:37:a6:61:5c:65: 05:06:da:52:18:a0:73:78:99:7f:59:b1:b3:7c:b5:80:16:fe: e9:2e:3e:0e:ae:70:71:48:2f:c5:39:49:c4:a5:cd:27:25:3a: 14:a3:4e:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJNzghbjfsOLA+vqP498e/w/J4vIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNTEyMDUxMDA2MzJaFw0yNTEyMDgxMzQ4MzJaMDMxMTAvBgNV BAMTKENGMDRGQzM4QzQ1QzM5QTdCNzY1MjEwODY0MDQwNkNCODBDRDUzMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcGzFqCpnF6tPGQuV/TpqKoTi vZPcXJ+3lIqCFnZMzkbs1zwGGXQSAUqHTRZ2sjpK1kxiwn2WiBZ5ILqwJXRDiO/S pah0s2ggKSoiS2RIljTiY5QWfe5YKW5iURS+m6HcB39tCeXJjTJodIzDZSaH2djv HArvA13lXnKPdK+6U7rEnLvdATsWLrbokc4XVqmkkDfXI0PNFq49TVp/0rXSYJst wLmQlsvwnjJWUxCaHJcpzYksazsIYJvHZ2ZRbzapHkImEUfC8vwkAInWuuMhw3YW a8TgczqtTmHUiDQsunhntZloYVsVAn8abbSR4u6xAKllXqHGkl8FnutDckprAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzwT8OMRcOae3ZSEIZAQGy4DNUxswHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9gSrVRPXhXissDdNGWsNGRsckS5rY3fYdP Q0daJYUmjF6KXwlytlX6hRbahVgp5oa2/9gHH62YCTnGTC5A37mVKHUrBulDGo8E m6YKbG5j2AUFlqSI0j6mTb8Sbq4955dJ0ekanE1lRtTUkwrBDetWra+oqvBg22dv zMOWJscUNgKOVJsruSp5X2byThm924SIQbhu0cADVp931ZgJE2w38vRZkLuvmxlY mBrAtRRJctpcOz79+WOE9ghWMAxTc1FhsFHi8klGanFaC4MIbytj4k03pmFcZQUG 2lIYoHN4mX9ZsbN8tYAW/ukuPg6ucHFIL8U5ScSlzSclOhSjTtE= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:27 2025 by rpki-client