This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: I/sZPh3lWRPzMJ4Sb/U5VB16oTZW3MJsC4iMf1LpfCo= Subject key identifier: 10:64:EF:DF:BA:DA:33:0B:C4:F2:EC:B9:50:50:92:AE:D9:B4:0D:2E Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 1598199F57AC013A98B765F746D7D6FC2EF77D63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: BC Signing time: Sat 06 Dec 2025 10:12:26 +0000 Manifest this update: Sat 06 Dec 2025 10:07:26 +0000 Manifest next update: Tue 09 Dec 2025 15:02:26 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: Dp4qAgwpvy3RsEm1+sDBm6LwfazMXecK3akT5ohVJ+c=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:98:19:9f:57:ac:01:3a:98:b7:65:f7:46:d7:d6:fc:2e:f7:7d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Dec 6 10:07:26 2025 GMT Not After : Dec 9 15:02:26 2025 GMT Subject: CN=1064EFDFBADA330BC4F2ECB9505092AED9B40D2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:a9:e6:45:89:40:e9:6f:24:4e:44:47:99: 93:5a:72:5a:f6:7c:6b:64:2d:29:16:f9:ec:1e:e0: 0f:a1:5e:44:9f:89:c0:8c:34:54:7f:cf:95:69:e9: 2b:4d:7f:ed:c7:d4:a2:d6:4e:d2:8b:ee:88:b4:63: 8d:7b:52:8c:b7:44:c6:52:51:d2:04:9f:d6:3e:78: 2c:a4:64:29:04:f2:28:a9:74:70:ab:f4:e4:91:3c: 9c:2d:27:04:f9:f4:11:bd:f9:69:9c:45:e0:d9:3f: 47:31:3c:19:22:3d:d4:e5:e3:32:2f:26:f8:c1:f7: 70:c9:f0:e9:87:e4:e9:e6:fd:d2:3f:67:a2:53:52: 4e:aa:62:21:77:4c:db:54:f3:0d:81:ac:78:37:74: 11:70:b5:73:fb:3d:36:a9:df:ec:c6:a6:7b:84:d8: 28:b2:9c:ee:50:42:57:50:78:30:4c:f7:3d:8e:b7: 50:4f:86:3e:d8:ae:87:2f:8f:0d:2a:95:bd:a0:d9: e6:96:ce:48:06:61:69:84:4f:ae:f6:ec:de:73:fb: e8:ab:2c:a5:b7:99:6c:ca:a1:c9:c4:e7:f1:d8:a5: a3:1c:ae:8e:97:ca:ac:71:1a:68:73:ad:fb:6f:13: 45:7c:f7:1a:4e:92:84:95:ef:15:86:09:ea:3b:84: 22:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:EF:DF:BA:DA:33:0B:C4:F2:EC:B9:50:50:92:AE:D9:B4:0D:2E X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:7c:ba:55:a2:f4:2f:f5:8c:ff:a1:1b:6e:3c:72:09:06:e4: f3:6d:34:31:e0:4b:a8:bd:25:b9:6e:61:4a:2f:4d:f6:53:03: 86:68:6d:81:f6:07:4f:d6:81:c4:90:ad:e8:69:bd:a8:27:95: 7c:40:80:ce:eb:09:9b:cb:5c:d0:f2:59:13:99:23:20:50:10: 25:ef:b5:38:cf:1f:3e:ba:62:ff:38:f5:e4:0c:12:c0:be:a9: e5:9b:05:fb:a8:70:20:62:18:0f:ab:ec:e0:74:7d:11:09:6e: 49:23:ea:d6:1e:ce:99:3a:4b:89:9b:dc:ed:72:96:9c:eb:1b: 55:aa:76:7a:0b:2e:01:39:7a:f5:d7:d3:c3:54:d2:eb:8f:6b: 97:98:f9:7d:4c:46:56:77:d7:a1:80:03:e6:89:05:e6:ac:df: 71:7d:b3:34:48:8d:71:e3:e4:ab:27:19:72:bb:b9:5b:51:65: 6d:09:29:8b:d8:11:8f:6f:8f:84:b2:e3:db:e0:18:49:09:57: 2d:3e:fb:18:1d:18:3f:06:4a:ed:e6:3b:f4:36:4d:65:17:f7: ec:03:33:31:89:86:a6:93:37:bb:e6:fc:fa:e8:ce:be:85:36: 59:fc:83:bb:0d:90:20:50:9d:ca:02:de:86:bc:63:83:70:f9: 9e:44:c1:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZgZn1esATqYt2X3RtfW/C73fWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNTEyMDYxMDA3MjZaFw0yNTEyMDkxNTAyMjZaMDMxMTAvBgNV BAMTKDEwNjRFRkRGQkFEQTMzMEJDNEYyRUNCOTUwNTA5MkFFRDlCNDBEMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMKnmRYlA6W8kTkRHmZNaclr2 fGtkLSkW+ewe4A+hXkSficCMNFR/z5Vp6StNf+3H1KLWTtKL7oi0Y417Uoy3RMZS UdIEn9Y+eCykZCkE8iipdHCr9OSRPJwtJwT59BG9+WmcReDZP0cxPBkiPdTl4zIv JvjB93DJ8OmH5Onm/dI/Z6JTUk6qYiF3TNtU8w2BrHg3dBFwtXP7PTap3+zGpnuE 2CiynO5QQldQeDBM9z2Ot1BPhj7Yrocvjw0qlb2g2eaWzkgGYWmET6727N5z++ir LKW3mWzKocnE5/HYpaMcro6XyqxxGmhzrftvE0V89xpOkoSV7xWGCeo7hCIvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGTv37raMwvE8uy5UFCSrtm0DS4wHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKl8ulWi9C/1jP+hG248cgkG5PNtNDHgS6i9 JbluYUovTfZTA4ZobYH2B0/WgcSQrehpvagnlXxAgM7rCZvLXNDyWROZIyBQECXv tTjPHz66Yv849eQMEsC+qeWbBfuocCBiGA+r7OB0fREJbkkj6tYezpk6S4mb3O1y lpzrG1WqdnoLLgE5evXX08NU0uuPa5eY+X1MRlZ316GAA+aJBeas33F9szRIjXHj 5KsnGXK7uVtRZW0JKYvYEY9vj4Sy49vgGEkJVy0++xgdGD8GSu3mO/Q2TWUX9+wD MzGJhqaTN7vm/Prozr6FNln8g7sNkCBQncoC3oa8Y4Nw+Z5EwZE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:41 2025 by rpki-client