This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: Zk0V7AFKNNLa1HMXtjRf8ZpOByHovDqcQwE54rwY+Aw= Subject key identifier: 92:FF:01:E8:A4:5F:83:AC:2F:BE:05:1C:0D:A8:5E:3C:C6:35:42:8D Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 6ECF5B0AB1CD3A9DC419CD0EC2893CDE13F72F7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0265 Signing time: Thu 04 Dec 2025 21:41:47 +0000 Manifest this update: Thu 04 Dec 2025 21:36:47 +0000 Manifest next update: Mon 08 Dec 2025 08:01:47 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: D3+VPean7D1EYCu/31sceMfjTlNNJfKyOQfz7pihzoU=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=) 4: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 8Nikw643HlJFFxZwi3c9J7ZWdkY+ua240NWfWztoF84=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cf:5b:0a:b1:cd:3a:9d:c4:19:cd:0e:c2:89:3c:de:13:f7:2f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Dec 4 21:36:47 2025 GMT Not After : Dec 8 08:01:47 2025 GMT Subject: CN=92FF01E8A45F83AC2FBE051C0DA85E3CC635428D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:38:a8:99:86:65:07:dc:e9:68:3f:4d:c1: b1:66:f9:e8:4c:8a:96:42:0d:60:60:c1:a5:da:12: ec:5e:67:55:4b:01:4e:e4:3b:52:6b:2b:49:ac:c3: c3:ec:56:f5:68:bc:83:04:08:e6:0c:bf:25:07:ad: 87:5c:07:a4:8b:4c:1e:7b:00:d0:17:43:21:64:f7: 70:52:8f:06:1b:05:c4:3a:1e:d6:84:5b:c6:21:09: 73:c5:cf:81:9c:70:54:a2:4d:b9:a1:bb:7a:82:76: 2e:e4:0c:d3:9c:3b:bb:8b:db:41:05:69:23:d0:6a: 6c:46:30:56:3d:27:31:c8:90:0d:40:e1:e5:7a:4c: b9:b1:b7:46:c1:66:9c:d1:e5:63:8d:b8:fa:2e:98: d9:7e:22:a5:eb:ab:9b:3a:88:d8:50:dd:1c:c3:7c: 2a:37:42:72:ef:d2:f1:83:8b:65:33:1d:5e:03:62: 35:f5:c6:27:22:ad:0c:13:16:05:cd:92:32:72:77: 1c:b6:21:b1:2b:cb:a5:9b:21:77:63:a0:72:b1:c0: 24:91:57:e3:41:3f:b1:9d:f9:2c:b5:e5:82:a7:00: b0:b2:a4:27:66:fe:b3:37:85:fe:98:16:23:c6:6d: 27:45:8d:cb:e3:7a:22:20:5b:24:cf:5a:91:7b:fb: 14:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FF:01:E8:A4:5F:83:AC:2F:BE:05:1C:0D:A8:5E:3C:C6:35:42:8D X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:8e:45:5c:2a:f9:59:09:09:95:07:1f:d7:b0:4d:b1:3a:56: b8:49:e8:8b:64:4b:92:03:ce:96:ea:ad:8e:09:b1:5a:dc:53: 6b:e5:4a:34:e6:35:07:7e:0f:1e:26:a8:37:01:19:d7:be:c3: a6:cc:9b:18:be:e2:f9:db:43:28:09:79:f9:3d:04:82:79:ea: 88:8e:0f:2e:53:87:b5:ef:1e:05:89:58:af:2a:c4:96:9f:99: bf:ae:c3:df:a2:38:a6:8f:48:c4:14:84:65:e7:79:83:34:7b: 8b:b5:1d:70:50:ca:48:7b:d3:4c:21:46:3a:86:e7:a3:07:37: 12:94:f1:48:4d:6a:8d:6b:c9:45:69:fe:6c:69:a6:0d:1b:ac: 2f:4e:fe:73:f9:44:6b:29:b4:7a:be:00:58:cc:54:a1:6d:7d: 61:a5:1f:1a:97:2c:a1:a9:ce:c3:66:b0:f9:ba:be:fe:2b:63: 48:7d:3f:4c:22:73:f9:aa:33:66:39:88:05:31:b4:c5:e2:53: f2:43:f2:8f:49:1e:83:0d:49:ab:4a:64:24:9e:b1:ea:93:b5: fb:8c:03:d2:86:20:da:fa:f0:45:d8:0c:cf:03:d6:e3:cb:2c: e1:bd:23:43:b5:91:ae:c6:1a:e0:5c:3f:0f:6b:d7:2d:43:3e: 4c:f8:51:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbs9bCrHNOp3EGc0Owok83hP3L3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNTEyMDQyMTM2NDdaFw0yNTEyMDgwODAxNDdaMDMxMTAvBgNV BAMTKDkyRkYwMUU4QTQ1RjgzQUMyRkJFMDUxQzBEQTg1RTNDQzYzNTQyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmijiomYZlB9zpaD9NwbFm+ehM ipZCDWBgwaXaEuxeZ1VLAU7kO1JrK0msw8PsVvVovIMECOYMvyUHrYdcB6SLTB57 ANAXQyFk93BSjwYbBcQ6HtaEW8YhCXPFz4GccFSiTbmhu3qCdi7kDNOcO7uL20EF aSPQamxGMFY9JzHIkA1A4eV6TLmxt0bBZpzR5WONuPoumNl+IqXrq5s6iNhQ3RzD fCo3QnLv0vGDi2UzHV4DYjX1xicirQwTFgXNkjJydxy2IbEry6WbIXdjoHKxwCSR V+NBP7Gd+Sy15YKnALCypCdm/rM3hf6YFiPGbSdFjcvjeiIgWyTPWpF7+xSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkv8B6KRfg6wvvgUcDahePMY1Qo0wHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmORVwq+VkJCZUHH9ewTbE6VrhJ6ItkS5ID zpbqrY4JsVrcU2vlSjTmNQd+Dx4mqDcBGde+w6bMmxi+4vnbQygJefk9BIJ56oiO Dy5Th7XvHgWJWK8qxJafmb+uw9+iOKaPSMQUhGXneYM0e4u1HXBQykh700whRjqG 56MHNxKU8UhNao1ryUVp/mxppg0brC9O/nP5RGsptHq+AFjMVKFtfWGlHxqXLKGp zsNmsPm6vv4rY0h9P0wic/mqM2Y5iAUxtMXiU/JD8o9JHoMNSatKZCSeseqTtfuM A9KGINr68EXYDM8D1uPLLOG9I0O1ka7GGuBcPw9r1y1DPkz4UQM= -----END CERTIFICATE-----Generated at Sun Dec 7 00:14:46 2025 by rpki-client