This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json) Hash identifier: wu4+4qJ0kKlMZcyHQ7cGC+x/E7mz4S+oe0uWhqTPrIk= Subject key identifier: AB:9E:D7:15:FF:21:16:E3:73:F4:B4:DE:0A:31:CA:32:F2:C1:54:A3 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 01C5BACFDD50B25B68BCE18ED8E61070765F2653 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft Manifest number: 01F7 Signing time: Fri 05 Dec 2025 22:52:06 +0000 Manifest this update: Fri 05 Dec 2025 22:47:06 +0000 Manifest next update: Tue 09 Dec 2025 05:52:06 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=) 2: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: K/gb8v3jI/8xIIsC08+OcAimOrfKXVbEFK+mrfINLaA=) 3: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=) 4: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c5:ba:cf:dd:50:b2:5b:68:bc:e1:8e:d8:e6:10:70:76:5f:26:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Dec 5 22:47:06 2025 GMT Not After : Dec 9 05:52:06 2025 GMT Subject: CN=AB9ED715FF2116E373F4B4DE0A31CA32F2C154A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b6:69:b7:c4:00:6b:00:da:f0:a1:63:94:21: 55:27:a5:84:19:43:02:a7:86:fd:9d:c1:23:8d:f6: 2a:e4:28:e9:f9:93:57:e6:cd:83:2d:23:b8:bf:77: 4e:4c:7b:0a:cc:07:6d:af:83:4f:3d:c2:95:9a:c2: c8:3c:d5:2b:0c:d4:ef:5e:5a:d8:a7:52:b2:6a:41: 1b:7f:19:54:43:a4:6f:4e:8e:b8:86:81:a7:2a:46: 39:1f:d7:c5:8b:bf:61:ed:c5:44:84:a3:0c:99:d8: e1:42:a7:bd:b2:db:6e:ea:6c:20:25:e5:1d:63:96: 95:cb:53:0b:43:23:83:57:d1:02:6f:ab:2d:32:84: cf:c8:b5:1b:ba:f6:35:8f:52:85:e9:13:48:ac:f6: a4:a4:ea:7d:1b:83:b1:27:42:b0:bb:71:c4:49:5d: 96:63:94:49:15:92:16:19:19:2a:d5:00:0f:92:db: e8:83:14:c7:33:9c:8e:34:e1:a8:e5:67:da:a1:fa: 75:9d:53:30:2c:d7:15:fa:7c:bf:de:34:c0:0b:b0: c8:2d:69:cb:2a:eb:b1:fe:5a:e4:f6:49:c3:e6:71: 94:99:f6:88:d2:54:e1:24:9d:d7:46:a8:aa:ad:a4: 73:66:7f:e1:b6:8b:dd:08:1a:0e:49:26:49:43:d0: 72:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:9E:D7:15:FF:21:16:E3:73:F4:B4:DE:0A:31:CA:32:F2:C1:54:A3 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:06:11:b4:19:b1:06:72:86:3f:11:86:d6:5a:d1:0c:bd:09: 2e:74:dc:18:06:d4:10:bd:78:24:3a:7c:ec:13:75:9f:c7:54: 4c:4c:ae:9b:4e:a1:38:60:02:0c:c2:24:1f:b6:e2:71:47:c5: 54:18:3e:60:f3:bd:d5:bd:05:6c:ec:03:8a:89:dd:b6:72:0d: 0d:36:ac:2c:60:8a:e2:14:32:75:90:4a:d4:ec:97:4e:8e:30: c4:06:ff:1a:7c:1c:c2:13:6e:d1:ae:81:3c:dd:f9:21:5b:8d: 18:bc:52:13:c8:eb:2e:96:92:9e:d5:35:2b:10:f1:77:60:d6: 27:82:e2:03:49:36:57:df:d3:78:6d:62:4a:99:91:52:8e:9e: 1c:89:d8:60:85:e4:48:35:49:11:d2:80:42:73:d7:d1:f3:53: 45:21:c0:b1:66:c3:8a:af:39:ef:52:58:2a:71:a2:8a:c6:21: fa:ef:34:e6:7a:72:5e:28:4b:e9:f3:72:82:39:15:b4:93:e4: ba:20:51:fd:15:3e:03:cd:a0:90:7a:fd:7a:ad:c4:ce:4c:a1: 4f:79:98:31:30:fb:d5:ff:c5:fc:db:9d:df:8d:15:0b:67:85: bd:52:bf:eb:65:fb:b3:1e:9b:15:14:00:62:97:4b:e6:62:05: d6:87:03:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcW6z91QsltovOGO2OYQcHZfJlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNTEyMDUyMjQ3MDZaFw0yNTEyMDkwNTUyMDZaMDMxMTAvBgNV BAMTKEFCOUVENzE1RkYyMTE2RTM3M0Y0QjRERTBBMzFDQTMyRjJDMTU0QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tmm3xABrANrwoWOUIVUnpYQZ QwKnhv2dwSON9irkKOn5k1fmzYMtI7i/d05MewrMB22vg089wpWawsg81SsM1O9e WtinUrJqQRt/GVRDpG9OjriGgacqRjkf18WLv2HtxUSEowyZ2OFCp72y227qbCAl 5R1jlpXLUwtDI4NX0QJvqy0yhM/ItRu69jWPUoXpE0is9qSk6n0bg7EnQrC7ccRJ XZZjlEkVkhYZGSrVAA+S2+iDFMcznI404ajlZ9qh+nWdUzAs1xX6fL/eNMALsMgt acsq67H+WuT2ScPmcZSZ9ojSVOEknddGqKqtpHNmf+G2i90IGg5JJklD0HL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq57XFf8hFuNz9LTeCjHKMvLBVKMwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJAGEbQZsQZyhj8RhtZa0Qy9CS503BgG1BC9 eCQ6fOwTdZ/HVExMrptOoThgAgzCJB+24nFHxVQYPmDzvdW9BWzsA4qJ3bZyDQ02 rCxgiuIUMnWQStTsl06OMMQG/xp8HMITbtGugTzd+SFbjRi8UhPI6y6Wkp7VNSsQ 8Xdg1ieC4gNJNlff03htYkqZkVKOnhyJ2GCF5Eg1SRHSgEJz19HzU0UhwLFmw4qv Oe9SWCpxoorGIfrvNOZ6cl4oS+nzcoI5FbST5LogUf0VPgPNoJB6/XqtxM5MoU95 mDEw+9X/xfzbnd+NFQtnhb1Sv+tl+7MemxUUAGKXS+ZiBdaHA0o= -----END CERTIFICATE-----Generated at Sun Dec 7 05:16:58 2025 by rpki-client