This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft File: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft (raw, json) Hash identifier: mA2rW7xsQjrqX/TQC815H/IXedJw7LcMXnjbAvDbZJA= Subject key identifier: C3:9D:D1:2D:99:F8:91:C0:5B:11:C0:1A:47:71:5C:C0:AB:D5:35:B9 Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE Certificate issuer: /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Certificate serial: 60823A806C393B4F6F8525FC579B538166FE5D43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft Manifest number: 052C Signing time: Fri 05 Dec 2025 12:32:19 +0000 Manifest this update: Fri 05 Dec 2025 12:27:19 +0000 Manifest next update: Mon 08 Dec 2025 14:38:19 +0000 Files and hashes: 1: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: sqlbIIr/3B92d510dnWRSBB/lQtkjQSBObhW88AnQqI=) 2: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl (hash: dnRQtSKHgnStioFvYiCo+7WDrjTdqisSa7rfc8EWJrQ=) 3: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: ivixgTI+bD3oZFKOSl+IC3pWvOMcPxvLBq04R8ayQa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 14:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:82:3a:80:6c:39:3b:4f:6f:85:25:fc:57:9b:53:81:66:fe:5d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Validity Not Before: Dec 5 12:27:19 2025 GMT Not After : Dec 8 14:38:19 2025 GMT Subject: CN=C39DD12D99F891C05B11C01A47715CC0ABD535B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:87:e4:77:9b:e8:9c:02:f7:7e:74:23:73: dd:ef:c3:a5:3f:99:5d:e4:3f:2e:52:c4:c1:90:41: cf:bc:3d:78:fb:3b:09:b9:7a:a7:0e:e8:31:60:66: 77:52:b5:65:98:90:c1:2e:68:be:0a:6e:59:c3:9b: 91:24:6e:de:1d:cc:02:96:af:87:62:15:1b:b9:4b: 3f:0c:8f:86:0f:a4:82:e5:ec:7f:22:ed:ec:c5:d8: b3:eb:ae:48:51:0b:3e:4e:5b:e1:09:d5:59:8e:a6: 4f:81:fd:f9:c3:69:03:a3:75:cb:62:95:63:02:b1: 72:b2:fe:25:b9:75:39:95:dd:10:96:87:3f:f6:0d: e2:d3:67:cf:6f:31:8b:1a:d8:c6:56:c0:f3:f5:9d: 4a:82:60:28:c1:2a:e0:e6:78:f4:ae:57:b2:83:97: 4d:95:46:d7:73:53:a1:27:43:a0:97:4b:00:a1:fb: 62:b4:41:a6:e0:33:73:b8:7a:8d:11:8d:08:44:a3: 8f:cd:0f:7a:d1:0d:bc:ad:9a:b6:e5:e2:35:24:9b: 6a:fe:98:70:bd:ae:57:26:34:0a:9f:52:5a:c5:fa: 5a:8c:d6:42:c9:14:41:87:bd:1a:cf:f9:3f:b0:0f: d6:bd:da:67:aa:48:27:54:8a:45:42:68:98:e8:aa: 92:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9D:D1:2D:99:F8:91:C0:5B:11:C0:1A:47:71:5C:C0:AB:D5:35:B9 X509v3 Authority Key Identifier: keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:9d:df:11:6b:79:ff:54:a1:d9:f1:b9:7e:13:10:46:84:f6: a1:bd:c8:55:29:2d:cd:9b:72:c5:10:ec:6d:67:75:39:55:2d: c4:0a:a5:f5:65:39:f8:2c:19:60:a2:5c:44:e4:e3:d0:b5:7a: 7f:1f:cb:11:ee:dd:ff:cf:ca:6e:8d:37:f3:51:ce:d5:75:3e: a2:08:8d:59:dc:04:d7:98:9e:79:6f:16:36:8b:eb:f3:cc:52: 16:c2:e0:c5:b5:12:5b:76:20:3f:76:be:39:3c:6b:86:b4:70: a0:26:65:7c:e2:b6:1c:2a:da:66:65:03:72:0c:50:a4:be:ae: cb:ea:17:a2:c3:dd:03:ac:59:6b:2b:6c:ef:d4:45:12:6d:c8: a1:3a:19:ac:99:60:54:90:78:31:35:8d:cf:07:c3:c9:ba:8b: c4:c5:86:02:5a:1d:5e:7f:5a:e7:9b:5d:24:33:15:7b:e3:af: 00:1b:1a:ee:67:ad:6b:9f:16:77:15:7d:03:8c:3c:4f:91:fb: cf:f4:39:2c:0e:8a:78:46:ff:7c:d0:a9:15:97:9a:70:bb:c5: a5:06:70:2d:b9:a2:58:71:96:b1:34:49:af:70:8e:8f:5d:65: 20:b4:af:0e:c5:6d:c1:96:10:56:f3:99:2f:9e:01:2c:ee:30: 16:a8:b2:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYII6gGw5O09vhSX8V5tTgWb+XUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG NDRDNzJBRTAeFw0yNTEyMDUxMjI3MTlaFw0yNTEyMDgxNDM4MTlaMDMxMTAvBgNV BAMTKEMzOUREMTJEOTlGODkxQzA1QjExQzAxQTQ3NzE1Q0MwQUJENTM1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kofkd5vonAL3fnQjc93vw6U/ mV3kPy5SxMGQQc+8PXj7Owm5eqcO6DFgZndStWWYkMEuaL4KblnDm5Ekbt4dzAKW r4diFRu5Sz8Mj4YPpILl7H8i7ezF2LPrrkhRCz5OW+EJ1VmOpk+B/fnDaQOjdcti lWMCsXKy/iW5dTmV3RCWhz/2DeLTZ89vMYsa2MZWwPP1nUqCYCjBKuDmePSuV7KD l02VRtdzU6EnQ6CXSwCh+2K0QabgM3O4eo0RjQhEo4/ND3rRDbytmrbl4jUkm2r+ mHC9rlcmNAqfUlrF+lqM1kLJFEGHvRrP+T+wD9a92meqSCdUikVCaJjoqpLPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw53RLZn4kcBbEcAaR3FcwKvVNbkwHwYDVR0j BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD NzJBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4 NGItZDdjMDZkZDBmODNhLzAvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVB NkRGNDRDNzJBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmd3xFref9UodnxuX4TEEaE9qG9yFUpLc2b csUQ7G1ndTlVLcQKpfVlOfgsGWCiXETk49C1en8fyxHu3f/Pym6NN/NRztV1PqII jVncBNeYnnlvFjaL6/PMUhbC4MW1Elt2ID92vjk8a4a0cKAmZXzithwq2mZlA3IM UKS+rsvqF6LD3QOsWWsrbO/URRJtyKE6GayZYFSQeDE1jc8Hw8m6i8TFhgJaHV5/ WuebXSQzFXvjrwAbGu5nrWufFncVfQOMPE+R+8/0OSwOinhG/3zQqRWXmnC7xaUG cC25olhxlrE0Sa9wjo9dZSC0rw7FbcGWEFbzmS+eASzuMBaostc= -----END CERTIFICATE-----Generated at Sun Dec 7 04:34:27 2025 by rpki-client