This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json)
Hash identifier: 39nQBsndOf5Pll6pkXqSc7cPJ45wuvh8x6Li1bWywbk=
Subject key identifier: 55:42:92:D5:72:57:75:B7:3B:38:40:21:00:2F:C4:68:87:8B:14:91
Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Certificate serial: 5226C38276D8791EC15A8522076888F6D4EFA99E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
Manifest number: 052C
Signing time: Sat 06 Dec 2025 04:42:29 +0000
Manifest this update: Sat 06 Dec 2025 04:37:29 +0000
Manifest next update: Tue 09 Dec 2025 16:09:29 +0000
Files and hashes: 1: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: mMke06vJQV/vwvPDKYlCsAwrCGhIfjRc0s9CMGF4Xo0=)
2: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl
rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 09 Dec 2025 15:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:26:c3:82:76:d8:79:1e:c1:5a:85:22:07:68:88:f6:d4:ef:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Validity
Not Before: Dec 6 04:37:29 2025 GMT
Not After : Dec 9 16:09:29 2025 GMT
Subject: CN=554292D5725775B73B384021002FC468878B1491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:cd:7a:08:24:17:ee:af:0d:c2:ea:72:98:
24:52:2a:de:a3:b5:10:db:a7:19:82:19:49:cf:8b:
84:fc:ee:68:eb:7c:44:42:d8:4a:5b:56:46:6e:7c:
54:3c:87:f7:d1:61:ba:d5:13:10:3e:8b:8c:4c:08:
f1:be:45:dd:2a:72:6f:aa:94:2a:bf:bc:48:49:1b:
9f:ac:5e:4f:47:fc:7d:b6:45:ef:90:78:26:9d:61:
66:39:5d:54:78:67:8a:ee:63:aa:f3:67:8f:80:ee:
ae:34:0e:d0:36:e8:5f:fd:a9:7d:d9:03:5a:c6:9c:
05:54:e2:c2:26:0f:7b:0c:74:fd:be:f2:7e:9b:0a:
fd:c9:97:bc:b7:dd:c3:06:61:f3:cf:a3:4e:32:88:
55:3d:c0:d7:04:3b:9f:51:96:e8:15:fc:00:37:30:
e6:a2:b7:4a:2d:86:6c:8f:4e:91:6a:e5:3f:f8:79:
69:b0:60:db:17:61:4f:d8:63:7a:21:88:da:16:33:
ee:17:fd:b1:8d:98:fa:17:57:c2:97:45:bd:86:7e:
60:50:be:c3:b6:7b:df:4d:f3:8b:35:92:b6:3a:be:
e2:d8:55:5b:c0:81:e5:9c:19:67:bd:b2:04:5b:37:
93:c7:b1:52:b1:79:69:ce:91:10:3b:64:4e:d0:75:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:42:92:D5:72:57:75:B7:3B:38:40:21:00:2F:C4:68:87:8B:14:91
X509v3 Authority Key Identifier:
keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:a8:78:78:4d:3c:fd:58:8c:bb:6b:a4:63:02:57:85:4c:a1:
84:93:19:28:ca:2a:f7:4b:d4:e3:f0:14:73:c5:ea:3c:3c:97:
70:32:94:80:86:a9:1d:dc:6e:9f:0d:65:3a:a1:55:88:03:23:
88:dc:02:c5:67:6e:38:b8:dc:51:4c:f1:1d:a4:15:32:4b:1d:
6e:df:ad:ea:4c:45:89:6e:54:5d:75:c0:13:b4:ae:84:74:b2:
21:a7:f9:62:2b:47:55:d1:c4:2a:56:02:e7:e2:f7:b5:ff:da:
22:c5:05:87:e0:59:27:aa:e1:f0:7e:94:4f:fb:be:f7:07:bf:
54:ce:d0:85:36:90:99:13:e9:1b:d7:3d:d2:ab:fe:07:c0:a2:
52:36:c7:b1:99:da:c3:e0:c8:aa:06:98:a4:45:03:17:d1:42:
87:64:5f:b7:c6:76:99:93:99:84:38:1a:56:ca:fc:b0:03:d3:
66:04:32:88:f8:9d:95:bc:45:43:2c:a8:42:16:11:0a:88:18:
8f:71:c8:2e:f2:e7:82:be:f7:27:6c:55:57:dd:ba:c6:ee:c2:
1a:2c:be:ec:c2:b4:0c:4b:00:6e:0d:4b:3b:7b:c2:0c:c2:0a:
bd:67:11:e8:aa:33:74:64:ec:41:b6:33:29:a8:15:94:48:dc:
30:49:fc:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUUibDgnbYeR7BWoUiB2iI9tTvqZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1
QkYwNDk0MzAeFw0yNTEyMDYwNDM3MjlaFw0yNTEyMDkxNjA5MjlaMDMxMTAvBgNV
BAMTKDU1NDI5MkQ1NzI1Nzc1QjczQjM4NDAyMTAwMkZDNDY4ODc4QjE0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/s16CCQX7q8NwupymCRSKt6j
tRDbpxmCGUnPi4T87mjrfERC2EpbVkZufFQ8h/fRYbrVExA+i4xMCPG+Rd0qcm+q
lCq/vEhJG5+sXk9H/H22Re+QeCadYWY5XVR4Z4ruY6rzZ4+A7q40DtA26F/9qX3Z
A1rGnAVU4sImD3sMdP2+8n6bCv3Jl7y33cMGYfPPo04yiFU9wNcEO59RlugV/AA3
MOait0othmyPTpFq5T/4eWmwYNsXYU/YY3ohiNoWM+4X/bGNmPoXV8KXRb2GfmBQ
vsO2e99N84s1krY6vuLYVVvAgeWcGWe9sgRbN5PHsVKxeWnOkRA7ZE7QddDjAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUVUKS1XJXdbc7OEAhAC/EaIeLFJEwHwYDVR0j
BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5
NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw
NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0
ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF
RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBANWoeHhNPP1YjLtrpGMCV4VMoYSTGSjKKvdL
1OPwFHPF6jw8l3AylICGqR3cbp8NZTqhVYgDI4jcAsVnbji43FFM8R2kFTJLHW7f
repMRYluVF11wBO0roR0siGn+WIrR1XRxCpWAufi97X/2iLFBYfgWSeq4fB+lE/7
vvcHv1TO0IU2kJkT6RvXPdKr/gfAolI2x7GZ2sPgyKoGmKRFAxfRQodkX7fGdpmT
mYQ4GlbK/LAD02YEMoj4nZW8RUMsqEIWEQqIGI9xyC7y54K+9ydsVVfdusbuwhos
vuzCtAxLAG4NSzt7wgzCCr1nEeiqM3Rk7EG2MymoFZRI3DBJ/Cc=
-----END CERTIFICATE-----
Generated at Sun Dec 7 03:05:50 2025 by rpki-client