This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: 6KA7L9K3fomRDpI/rDShAlSb9ZG751nteyTXbaL5Oxo= Subject key identifier: 0D:8A:9D:61:B1:3E:7A:2F:80:D9:62:87:A9:09:0B:A4:73:36:56:3C Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 255736238443CB2C8107F8E0A4A6297EC84028A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: AE Signing time: Fri 05 Dec 2025 15:21:16 +0000 Manifest this update: Fri 05 Dec 2025 15:16:16 +0000 Manifest next update: Mon 08 Dec 2025 17:12:16 +0000 Files and hashes: 1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: Q7G/cO+mdHwEtFeO3AaAW+h1sCR4ojICSfcSL5zARmI=) 2: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: X+a4i/wYTKAfTk+aOCGHutKvpmV1CSybXeGCQ5m6UlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:12:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:57:36:23:84:43:cb:2c:81:07:f8:e0:a4:a6:29:7e:c8:40:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Dec 5 15:16:16 2025 GMT Not After : Dec 8 17:12:16 2025 GMT Subject: CN=0D8A9D61B13E7A2F80D96287A9090BA47336563C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:c4:3b:e4:89:d8:f9:5a:05:96:ac:e3:a5: 88:c0:24:67:56:27:0b:80:8b:99:85:e6:df:1e:1b: 74:f0:e6:b5:a8:c9:ab:9f:da:3a:38:cb:53:46:b8: 27:25:39:82:26:4f:b7:8b:ff:6f:df:35:26:83:a1: 28:e6:30:a1:3e:00:f6:e8:d1:63:11:41:e4:b9:f0: b1:5b:02:b0:02:64:ed:e1:d4:4b:94:5c:fe:bc:75: 59:ec:17:aa:0b:b4:14:4b:90:de:35:3f:a9:6d:f5: c6:70:b0:37:0d:bb:ec:b8:18:14:23:f1:5b:3b:4d: 4f:cf:0f:bd:0a:40:a2:a4:58:85:8e:c8:c3:66:3e: b6:ca:a4:b7:67:71:4f:cd:87:84:52:a2:23:cb:5a: 34:73:61:1e:ff:f6:f1:8e:b2:6e:17:af:4d:1f:0b: 30:6b:e6:7a:af:e3:cd:af:30:81:c1:41:7e:4d:53: a1:02:14:44:f1:6f:4c:68:4e:ac:fd:bd:a9:65:05: f1:dd:9e:c7:2f:07:9a:f1:cc:44:3d:87:fa:e0:d3: ea:c5:f0:f5:a3:15:cf:62:24:df:04:be:e3:a3:71: d3:19:d1:11:4d:d9:1b:b2:01:ef:be:d2:1e:35:cc: 01:71:58:fb:a1:a2:2c:56:53:30:ce:64:11:8f:52: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:8A:9D:61:B1:3E:7A:2F:80:D9:62:87:A9:09:0B:A4:73:36:56:3C X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:24:6a:1e:d0:aa:43:f6:e3:39:e1:ed:5e:6f:b0:2e:6f:41: 95:91:37:65:18:1c:a6:6e:09:3c:2e:9b:a9:0f:b9:91:c0:9f: 18:7c:25:88:16:3e:2c:af:86:02:bf:31:50:51:6e:7b:2f:6e: bb:78:42:06:72:d0:4c:17:f4:48:1e:3f:b4:8e:7e:45:f4:80: 49:f9:68:ff:74:8f:d9:33:d6:2c:96:da:14:f9:d8:b7:85:c5: bf:03:7d:35:2a:4e:2a:5b:e8:94:5c:16:3f:40:99:59:09:10: 92:4e:31:b3:21:26:61:40:3e:43:e1:96:70:f1:c6:a8:98:7b: cc:af:02:04:71:3c:d3:4f:c6:ca:0a:dc:bf:63:a8:4c:fa:a0: dd:20:a2:5f:14:0e:53:a7:e6:b2:92:9d:11:11:72:71:f9:79: 1a:bf:ad:3c:55:a1:33:c2:bb:bc:02:ca:da:99:19:22:54:61: dc:8a:0e:3d:ca:c6:b7:72:35:45:28:39:a7:19:e5:69:94:84: 84:67:fa:5d:56:7b:eb:9b:ad:13:e1:06:81:dc:61:ee:3c:97: 54:6b:2d:bc:aa:70:d2:18:81:9d:0b:2f:8c:7d:be:a2:d2:b1: 2e:15:92:a7:b7:4f:1d:7a:f1:6c:db:6c:e0:bb:09:4c:e0:96: 62:cb:78:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVc2I4RDyyyBB/jgpKYpfshAKKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNTEyMDUxNTE2MTZaFw0yNTEyMDgxNzEyMTZaMDMxMTAvBgNV BAMTKDBEOEE5RDYxQjEzRTdBMkY4MEQ5NjI4N0E5MDkwQkE0NzMzNjU2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRcQ75InY+VoFlqzjpYjAJGdW JwuAi5mF5t8eG3Tw5rWoyauf2jo4y1NGuCclOYImT7eL/2/fNSaDoSjmMKE+APbo 0WMRQeS58LFbArACZO3h1EuUXP68dVnsF6oLtBRLkN41P6lt9cZwsDcNu+y4GBQj 8Vs7TU/PD70KQKKkWIWOyMNmPrbKpLdncU/Nh4RSoiPLWjRzYR7/9vGOsm4Xr00f CzBr5nqv482vMIHBQX5NU6ECFETxb0xoTqz9vallBfHdnscvB5rxzEQ9h/rg0+rF 8PWjFc9iJN8EvuOjcdMZ0RFN2RuyAe++0h41zAFxWPuhoixWUzDOZBGPUlc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYqdYbE+ei+A2WKHqQkLpHM2VjwwHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMkah7QqkP24znh7V5vsC5vQZWRN2UYHKZu CTwum6kPuZHAnxh8JYgWPiyvhgK/MVBRbnsvbrt4QgZy0EwX9EgeP7SOfkX0gEn5 aP90j9kz1iyW2hT52LeFxb8DfTUqTipb6JRcFj9AmVkJEJJOMbMhJmFAPkPhlnDx xqiYe8yvAgRxPNNPxsoK3L9jqEz6oN0gol8UDlOn5rKSnRERcnH5eRq/rTxVoTPC u7wCytqZGSJUYdyKDj3KxrdyNUUoOacZ5WmUhIRn+l1We+ubrRPhBoHcYe48l1Rr LbyqcNIYgZ0LL4x9vqLSsS4Vkqe3Tx168WzbbOC7CUzglmLLeKA= -----END CERTIFICATE-----Generated at Sun Dec 7 02:14:14 2025 by rpki-client