This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft File: 19B904DED71657E1E79F9B50507DCCCB817E9635.mft (raw, json) Hash identifier: zRZyoc+/0UAaxdI8cInr5tKwNBUJFvacwrg5PkLKHi0= Subject key identifier: BC:65:CB:BB:3D:1A:13:73:D1:DD:89:62:BA:F8:C0:67:47:22:CD:F6 Authority key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Certificate issuer: /CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Certificate serial: 5EBBCDE7F730B2A8C0B7493EAF8976787F529CBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject info access: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft Manifest number: 01EA Signing time: Sat 06 Dec 2025 11:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:56:27 +0000 Manifest next update: Tue 09 Dec 2025 22:54:27 +0000 Files and hashes: 1: 19B904DED71657E1E79F9B50507DCCCB817E9635.crl (hash: Nvu7K/H6Za3nO8bQzqIl1dktiFAsXbxGk6k1ALsEgsM=) 2: 3130332e38332e38342e302f32342d3234203d3e20313530323533.roa (hash: rxQ2JaYw7ULxDCv5OE6MiX+tQg4bCcbyeQJKcyeV4Tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:bb:cd:e7:f7:30:b2:a8:c0:b7:49:3e:af:89:76:78:7f:52:9c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Validity Not Before: Dec 6 10:56:27 2025 GMT Not After : Dec 9 22:54:27 2025 GMT Subject: CN=BC65CBBB3D1A1373D1DD8962BAF8C0674722CDF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:0d:3e:fa:b0:ff:76:51:ed:b9:54:38:d1: 14:04:f3:92:80:e1:84:5d:77:e1:6a:20:28:84:f8: 86:87:b7:d1:6f:34:d8:aa:9e:38:5f:9f:e8:91:21: 73:dd:a4:28:ed:52:ed:47:c6:47:71:a2:7d:90:33: 7f:80:e6:cf:e5:f1:ae:52:89:8e:1f:25:73:38:d6: de:fd:55:43:b2:4a:2c:2a:74:8a:9e:6e:80:b3:33: fa:ce:de:9f:97:98:dc:d1:27:ac:61:6a:1e:3d:8b: 20:4d:f8:7c:72:87:4c:c6:df:84:3a:49:9f:28:f2: 8e:3d:02:fa:31:07:a6:12:3d:30:d6:07:8f:00:ae: d8:f5:75:fd:03:26:96:3d:9c:36:3a:19:49:f9:8c: 53:2e:26:14:e3:23:61:1b:78:e8:66:d9:6b:ce:2d: 74:a7:00:af:e0:ae:15:b1:4b:cd:69:2f:81:ca:d4: 07:40:54:08:da:54:08:0c:ce:d1:e1:09:76:e3:93: 29:b6:9d:e1:2e:dc:d0:1d:c3:88:9a:aa:da:f3:8d: 9b:87:a2:bc:1c:b7:10:61:00:9c:37:e4:f8:65:2b: 4b:b4:33:fb:14:bd:d5:10:36:0a:a2:95:8d:b3:75: 33:56:37:1d:6a:fd:07:41:f0:b0:21:ae:1c:35:39: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:65:CB:BB:3D:1A:13:73:D1:DD:89:62:BA:F8:C0:67:47:22:CD:F6 X509v3 Authority Key Identifier: keyid:19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b0:32:e3:52:d8:06:ff:01:e3:db:31:60:c9:85:59:4a:0e: f7:f2:dc:90:67:07:d2:fe:ef:c3:76:b8:4e:50:e5:1c:cf:a9: 22:d3:f9:ed:1e:57:ff:5b:1d:bb:a7:ef:35:26:5b:41:04:73: d8:52:68:2c:2c:ba:b0:54:e7:41:28:4e:24:d7:cc:11:4b:a6: b2:5a:a3:26:5b:07:6e:46:a5:e9:ed:a7:42:00:96:4a:7a:d4: 62:78:55:7b:f9:5a:81:c3:08:4b:99:88:f4:b8:32:88:5f:81: 15:d0:b0:5c:45:19:dc:16:4a:ef:bf:03:da:5e:1f:a0:5b:6f: 34:87:6d:dd:64:52:af:ab:fd:82:b6:93:bf:ac:07:eb:b8:a1: 73:a1:d0:33:0e:3d:b1:c2:5b:a6:82:b6:20:02:a3:ae:1c:1a: 81:85:cd:68:a3:b5:06:a5:ef:4e:77:17:d9:a8:64:f3:01:a2: d5:3e:7e:f9:60:3b:38:79:43:79:6c:40:10:fa:b4:3b:99:fb: da:94:22:16:51:7d:b2:c8:8f:98:45:f7:74:d8:00:9b:58:68: 87:76:32:9c:5e:08:c5:15:43:13:8a:2d:11:9e:37:ec:5a:71: 8c:a3:a1:40:f3:3f:19:4a:2e:e1:ce:bf:8f:75:c5:13:75:32: b2:ea:e5:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrvN5/cwsqjAt0k+r4l2eH9SnLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4 MTdFOTYzNTAeFw0yNTEyMDYxMDU2MjdaFw0yNTEyMDkyMjU0MjdaMDMxMTAvBgNV BAMTKEJDNjVDQkJCM0QxQTEzNzNEMUREODk2MkJBRjhDMDY3NDcyMkNERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KA0++rD/dlHtuVQ40RQE85KA 4YRdd+FqICiE+IaHt9FvNNiqnjhfn+iRIXPdpCjtUu1Hxkdxon2QM3+A5s/l8a5S iY4fJXM41t79VUOySiwqdIqeboCzM/rO3p+XmNzRJ6xhah49iyBN+Hxyh0zG34Q6 SZ8o8o49AvoxB6YSPTDWB48Artj1df0DJpY9nDY6GUn5jFMuJhTjI2EbeOhm2WvO LXSnAK/grhWxS81pL4HK1AdAVAjaVAgMztHhCXbjkym2neEu3NAdw4iaqtrzjZuH orwctxBhAJw35PhlK0u0M/sUvdUQNgqilY2zdTNWNx1q/QdB8LAhrhw1OeGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvGXLuz0aE3PR3YliuvjAZ0cizfYwHwYDVR0j BBgwFoAUGbkE3tcWV+Hnn5tQUH3My4F+ljUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMC8xOUI5MDRERUQ3 MTY1N0UxRTc5RjlCNTA1MDdEQ0NDQjgxN0U5NjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3RENDQ0I4MTdF OTYzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzZlNDBhOTgtOTNlZi00YWY4LWE0 MzYtNDY5NzQwMTU0NzgyLzAvMTlCOTA0REVENzE2NTdFMUU3OUY5QjUwNTA3REND Q0I4MTdFOTYzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHmwMuNS2Ab/AePbMWDJhVlKDvfy3JBnB9L+ 78N2uE5Q5RzPqSLT+e0eV/9bHbun7zUmW0EEc9hSaCwsurBU50EoTiTXzBFLprJa oyZbB25Gpentp0IAlkp61GJ4VXv5WoHDCEuZiPS4MohfgRXQsFxFGdwWSu+/A9pe H6BbbzSHbd1kUq+r/YK2k7+sB+u4oXOh0DMOPbHCW6aCtiACo64cGoGFzWijtQal 7053F9moZPMBotU+fvlgOzh5Q3lsQBD6tDuZ+9qUIhZRfbLIj5hF93TYAJtYaId2 MpxeCMUVQxOKLRGeN+xacYyjoUDzPxlKLuHOv491xRN1MrLq5eA= -----END CERTIFICATE-----Generated at Sun Dec 7 04:55:43 2025 by rpki-client