This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft File: 18501FBD8586A1409C33F07377587F8C015DAFF4.mft (raw, json) Hash identifier: pwxVJ3DyOOxcRlkqBgbWbPRuor4FP25JdqQQj64IiZo= Subject key identifier: CF:5A:97:A1:A9:FC:7C:C9:3B:16:7E:89:83:EE:6A:3E:65:00:54:AF Authority key identifier: 18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 Certificate issuer: /CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Certificate serial: 5D93287E5BC4DC38DE5069058902BF05D34538C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft Manifest number: 0194 Signing time: Thu 18 Dec 2025 05:12:15 +0000 Manifest this update: Thu 18 Dec 2025 05:07:15 +0000 Manifest next update: Sun 21 Dec 2025 15:41:15 +0000 Files and hashes: 1: 3130332e3132322e3231322e302f32332d3234203d3e20313530393630.roa (hash: S91vKZLLe/dNTIpbo6cZEhpzP1zxZDRgjEKwwjEVMQo=) 2: 18501FBD8586A1409C33F07377587F8C015DAFF4.crl (hash: fAq5INtsXaSgb2rATLKS9uNVJCKjSHmPnVmYWMnL+L4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 15:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:93:28:7e:5b:c4:dc:38:de:50:69:05:89:02:bf:05:d3:45:38:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18501FBD8586A1409C33F07377587F8C015DAFF4 Validity Not Before: Dec 18 05:07:15 2025 GMT Not After : Dec 21 15:41:15 2025 GMT Subject: CN=CF5A97A1A9FC7CC93B167E8983EE6A3E650054AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:28:a7:82:53:e3:d7:ef:98:e4:3c:30:cb:41: 36:97:45:7c:78:f0:ab:d6:de:7b:0b:19:3b:65:a8: c6:52:c1:68:c6:3d:5b:40:f1:02:c0:18:17:d1:4c: 8b:34:58:26:fa:d5:59:0f:9b:0c:84:4e:13:d3:c1: 9b:e9:4b:76:bb:0e:39:97:36:1a:d9:f3:8c:61:84: 73:8a:e2:13:73:bd:ca:a4:b0:a2:8f:0e:60:e2:f8: 1b:5a:87:f5:21:c8:ce:61:93:e1:09:39:2b:ff:31: 41:51:24:c6:a8:09:23:cf:77:00:a4:58:6b:7d:d7: 12:0a:b4:fb:b0:d1:25:9d:7f:36:66:50:c4:75:d6: 45:93:6d:a3:76:7c:33:7c:86:c8:3b:42:81:e3:8b: 6b:9e:6e:06:da:fd:fd:89:69:11:4e:53:50:76:2f: e3:8a:3c:54:7f:f7:5f:c8:aa:a8:69:69:fc:45:33: 8c:46:1e:6c:e6:11:7a:5c:ec:4a:bb:b2:b8:bd:6f: ad:9d:f4:4d:58:82:55:77:16:e2:15:d0:76:9a:54: 21:98:91:b2:a1:c9:d5:ee:c7:a7:fb:2a:84:69:1b: a8:07:ad:b3:b6:92:da:66:25:ba:48:e4:d2:3b:23: fc:d2:fe:84:da:36:b0:9c:e2:8b:a8:63:3b:ca:87: 3b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:5A:97:A1:A9:FC:7C:C9:3B:16:7E:89:83:EE:6A:3E:65:00:54:AF X509v3 Authority Key Identifier: keyid:18:50:1F:BD:85:86:A1:40:9C:33:F0:73:77:58:7F:8C:01:5D:AF:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18501FBD8586A1409C33F07377587F8C015DAFF4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aabddbf-d119-4c80-8827-7a888a93ce03/0/18501FBD8586A1409C33F07377587F8C015DAFF4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:36:d7:79:d4:c9:7d:52:6d:71:68:3c:96:6a:2f:e8:ed:d0: f0:56:b8:ca:51:20:7a:20:25:91:ad:49:1c:d6:3b:e4:db:f5: d2:e0:2b:d5:93:76:a2:9d:5f:a6:d2:ce:37:e4:e3:02:0c:e3: ec:85:62:21:f6:54:c3:c6:c9:fb:bf:60:70:6d:b7:c8:0b:92: 70:77:06:7d:7a:5f:b9:21:b2:70:79:ef:54:a9:55:94:56:49: e3:81:c5:71:da:d9:2d:cc:76:1d:fa:0f:1d:a7:ad:76:df:9b: 5c:ce:75:de:da:73:8b:6a:ec:53:f4:c0:63:46:7a:33:cd:29: 3c:29:e3:32:ed:86:03:0a:1e:6a:65:03:62:9d:00:4e:85:3e: ed:e8:c9:e0:3c:b6:dc:55:c3:78:73:e3:c7:40:87:be:b4:cd: 7a:3c:14:df:e5:78:fd:ad:ef:b8:d2:be:9a:83:30:9c:53:bb: 53:31:c6:ab:40:12:67:70:49:88:2d:62:89:1f:76:e9:ce:65: e5:95:34:59:7e:53:2a:01:54:2e:7e:18:f9:17:43:55:cb:8b: c2:bb:7d:52:9d:c9:41:a5:e1:d3:14:a8:fc:78:ef:dc:99:94: 05:c8:d8:03:0a:8d:51:24:30:18:47:25:44:aa:a8:8f:dd:93: c1:28:6b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZMoflvE3DjeUGkFiQK/BdNFOMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMw MTVEQUZGNDAeFw0yNTEyMTgwNTA3MTVaFw0yNTEyMjExNTQxMTVaMDMxMTAvBgNV BAMTKENGNUE5N0ExQTlGQzdDQzkzQjE2N0U4OTgzRUU2QTNFNjUwMDU0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKKeCU+PX75jkPDDLQTaXRXx4 8KvW3nsLGTtlqMZSwWjGPVtA8QLAGBfRTIs0WCb61VkPmwyEThPTwZvpS3a7DjmX NhrZ84xhhHOK4hNzvcqksKKPDmDi+Btah/UhyM5hk+EJOSv/MUFRJMaoCSPPdwCk WGt91xIKtPuw0SWdfzZmUMR11kWTbaN2fDN8hsg7QoHji2uebgba/f2JaRFOU1B2 L+OKPFR/91/IqqhpafxFM4xGHmzmEXpc7Eq7sri9b62d9E1YglV3FuIV0HaaVCGY kbKhydXux6f7KoRpG6gHrbO2ktpmJbpI5NI7I/zS/oTaNrCc4ouoYzvKhzt1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz1qXoan8fMk7Fn6Jg+5qPmUAVK8wHwYDVR0j BBgwFoAUGFAfvYWGoUCcM/Bzd1h/jAFdr/QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YWFiZGRiZi1kMTE5LTRjODAtODgyNy03YTg4OGE5M2NlMDMvMC8xODUwMUZCRDg1 ODZBMTQwOUMzM0YwNzM3NzU4N0Y4QzAxNURBRkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdGOEMwMTVE QUZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWFhYmRkYmYtZDExOS00YzgwLTg4 MjctN2E4ODhhOTNjZTAzLzAvMTg1MDFGQkQ4NTg2QTE0MDlDMzNGMDczNzc1ODdG OEMwMTVEQUZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk213nUyX1SbXFoPJZqL+jt0PBWuMpRIHog JZGtSRzWO+Tb9dLgK9WTdqKdX6bSzjfk4wIM4+yFYiH2VMPGyfu/YHBtt8gLknB3 Bn16X7khsnB571SpVZRWSeOBxXHa2S3Mdh36Dx2nrXbfm1zOdd7ac4tq7FP0wGNG ejPNKTwp4zLthgMKHmplA2KdAE6FPu3oyeA8ttxVw3hz48dAh760zXo8FN/leP2t 77jSvpqDMJxTu1MxxqtAEmdwSYgtYokfdunOZeWVNFl+UyoBVC5+GPkXQ1XLi8K7 fVKdyUGl4dMUqPx479yZlAXI2AMKjVEkMBhHJUSqqI/dk8Eoa14= -----END CERTIFICATE-----Generated at Sat Dec 20 20:50:07 2025 by rpki-client