This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft File: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft (raw, json) Hash identifier: w3RYoMXn7eyMFvj9ytLJeE6G0hwTYRaOeRpDtLL3RkA= Subject key identifier: 89:5D:C9:CA:F4:79:55:88:7C:6F:DC:06:D2:35:8F:7F:E9:D8:15:E5 Authority key identifier: 18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B Certificate issuer: /CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Certificate serial: 4E9364BDFF52BEDF9DD79AC7B44D65CE49DBB005 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft Manifest number: 0399 Signing time: Fri 05 Dec 2025 00:50:52 +0000 Manifest this update: Fri 05 Dec 2025 00:45:52 +0000 Manifest next update: Mon 08 Dec 2025 05:58:52 +0000 Files and hashes: 1: 1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl (hash: gJwFi6hcIuVfSFxBsRJ9v+2yo6x0CfOfTNKHHfy/5h0=) 2: 3130332e3137312e32322e302f32332d3234203d3e20313338383535.roa (hash: P8qheu64b1l5b4rB30UV/NbiZ7Eie1YYkFGoi6rHg2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:93:64:bd:ff:52:be:df:9d:d7:9a:c7:b4:4d:65:ce:49:db:b0:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1887AEA5A2D9DB479E618167B2FE47250ACFE79B Validity Not Before: Dec 5 00:45:52 2025 GMT Not After : Dec 8 05:58:52 2025 GMT Subject: CN=895DC9CAF47955887C6FDC06D2358F7FE9D815E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:2f:6e:84:3a:c7:42:6b:05:36:71:0c:10: c1:bc:d1:73:73:a6:eb:e5:8d:23:01:d1:a4:25:4a: 02:52:a3:50:7d:18:4b:2b:37:65:dd:6c:ef:6d:6d: 98:6c:52:13:35:96:7f:c5:10:c7:6c:bb:a8:7d:7e: cd:29:50:11:99:46:99:3a:53:7e:66:58:2c:a4:2e: 81:bd:9c:5b:5c:84:ce:0b:a1:54:75:7a:05:e5:e0: ac:f7:83:4a:36:fb:6a:1b:68:a5:db:8a:7d:a2:07: 62:77:3d:a4:29:02:72:da:36:a8:2f:f9:98:5e:a8: 4c:9a:aa:9c:b3:22:56:24:2a:f4:32:32:a9:e8:37: 47:b2:66:a5:49:6e:90:63:a8:36:79:9d:7b:7f:ef: 7a:6a:02:f7:fa:e5:cf:c2:54:fb:39:b3:71:5b:cd: d5:85:24:3d:37:39:f4:bc:5e:45:74:99:5e:0f:18: 7c:0c:6b:61:47:58:0e:ab:f0:cb:fd:8c:02:b3:bd: d3:ba:cc:10:fd:69:2e:25:04:8f:6c:44:3f:83:c8: 9a:35:43:e4:b0:c1:d1:5c:cc:f4:7b:ae:4f:3f:59: e1:e5:37:22:d5:10:66:6c:ff:75:e1:b6:e7:ed:a4: 3a:b6:84:32:a3:9a:d9:f7:a2:0d:06:df:c6:7c:44: 1a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:5D:C9:CA:F4:79:55:88:7C:6F:DC:06:D2:35:8F:7F:E9:D8:15:E5 X509v3 Authority Key Identifier: keyid:18:87:AE:A5:A2:D9:DB:47:9E:61:81:67:B2:FE:47:25:0A:CF:E7:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19b93e1c-5f2a-43a9-99f1-fdd0402f946e/0/1887AEA5A2D9DB479E618167B2FE47250ACFE79B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:0b:85:d0:7a:c6:26:c5:93:c2:1a:11:60:71:ee:8d:75:ce: ae:87:4a:74:90:7a:bf:1b:02:ac:b0:8c:2e:9d:05:fc:ca:2c: 84:56:4e:1a:e9:a4:2b:7d:d5:83:b8:ad:a9:e6:70:78:07:e3: 29:3d:1e:09:87:96:12:17:e4:88:26:94:f0:c3:25:c7:ef:f6: cc:cd:a2:10:5b:f8:69:a4:4d:ad:89:ac:aa:8b:15:85:9a:74: a0:ea:5a:5b:9f:89:69:32:d1:41:35:9a:23:44:8f:63:a6:67: fa:ae:0f:40:d5:ad:b5:2b:86:99:50:f8:dc:98:83:3c:07:d2: 7e:61:43:e2:57:05:0f:78:f5:1e:54:ae:5e:24:bc:a6:04:e2: 64:5e:57:f1:0f:4d:37:d6:23:df:9d:5c:4b:65:a1:05:d3:a0: 38:42:de:07:3d:cc:1f:5d:f1:9e:95:3d:6f:dc:b1:7b:e1:00: be:7e:88:b5:a8:c4:1c:9e:04:7d:b8:41:db:f4:35:e3:27:92: 6f:6a:8a:b6:a7:87:3e:43:9b:ef:89:93:2c:05:55:75:7c:90: dd:29:a6:1b:b5:33:11:92:94:f3:6a:29:c0:40:49:f3:bc:77: 94:e3:a8:d9:ec:2c:11:51:ab:be:ac:45:6a:f5:f2:2c:b2:48: dc:56:d9:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTpNkvf9Svt+d15rHtE1lzknbsAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUw QUNGRTc5QjAeFw0yNTEyMDUwMDQ1NTJaFw0yNTEyMDgwNTU4NTJaMDMxMTAvBgNV BAMTKDg5NURDOUNBRjQ3OTU1ODg3QzZGREMwNkQyMzU4RjdGRTlEODE1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEC9uhDrHQmsFNnEMEMG80XNz puvljSMB0aQlSgJSo1B9GEsrN2XdbO9tbZhsUhM1ln/FEMdsu6h9fs0pUBGZRpk6 U35mWCykLoG9nFtchM4LoVR1egXl4Kz3g0o2+2obaKXbin2iB2J3PaQpAnLaNqgv +ZheqEyaqpyzIlYkKvQyMqnoN0eyZqVJbpBjqDZ5nXt/73pqAvf65c/CVPs5s3Fb zdWFJD03OfS8XkV0mV4PGHwMa2FHWA6r8Mv9jAKzvdO6zBD9aS4lBI9sRD+DyJo1 Q+SwwdFczPR7rk8/WeHlNyLVEGZs/3XhtuftpDq2hDKjmtn3og0G38Z8RBo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiV3JyvR5VYh8b9wG0jWPf+nYFeUwHwYDVR0j BBgwFoAUGIeupaLZ20eeYYFnsv5HJQrP55swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OWI5M2UxYy01ZjJhLTQzYTktOTlmMS1mZGQwNDAyZjk0NmUvMC8xODg3QUVBNUEy RDlEQjQ3OUU2MTgxNjdCMkZFNDcyNTBBQ0ZFNzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3MjUwQUNG RTc5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTliOTNlMWMtNWYyYS00M2E5LTk5 ZjEtZmRkMDQwMmY5NDZlLzAvMTg4N0FFQTVBMkQ5REI0NzlFNjE4MTY3QjJGRTQ3 MjUwQUNGRTc5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQLhdB6xibFk8IaEWBx7o11zq6HSnSQer8b AqywjC6dBfzKLIRWThrppCt91YO4ranmcHgH4yk9HgmHlhIX5IgmlPDDJcfv9szN ohBb+GmkTa2JrKqLFYWadKDqWlufiWky0UE1miNEj2OmZ/quD0DVrbUrhplQ+NyY gzwH0n5hQ+JXBQ949R5Url4kvKYE4mReV/EPTTfWI9+dXEtloQXToDhC3gc9zB9d 8Z6VPW/csXvhAL5+iLWoxByeBH24Qdv0NeMnkm9qiranhz5Dm++JkywFVXV8kN0p phu1MxGSlPNqKcBASfO8d5TjqNnsLBFRq76sRWr18iyySNxW2XA= -----END CERTIFICATE-----Generated at Sun Dec 7 03:05:45 2025 by rpki-client