This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: CcxMeiVDEl2EpgCLzlMtZIub4aTg2I+ZR6w2wVbpQtM= Subject key identifier: 41:75:98:37:CD:9D:0D:26:95:4B:9C:BC:45:8B:EB:D1:BC:40:49:9C Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 76CE1EC3DF0859803D1622939E3642343FDB17A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 020F Signing time: Tue 16 Dec 2025 06:10:57 +0000 Manifest this update: Tue 16 Dec 2025 06:05:57 +0000 Manifest next update: Fri 19 Dec 2025 12:59:57 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: if/UtLeTLMJDZaH4MvgE3b0gIlM63ypvwoMj17wDLi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Dec 2025 12:59:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ce:1e:c3:df:08:59:80:3d:16:22:93:9e:36:42:34:3f:db:17:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Dec 16 06:05:57 2025 GMT Not After : Dec 19 12:59:57 2025 GMT Subject: CN=41759837CD9D0D26954B9CBC458BEBD1BC40499C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:85:cd:4e:1a:e9:b8:13:29:03:55:5b:68: 78:6f:55:dd:cc:c3:f4:84:84:cb:22:9b:42:02:a1: 69:58:a8:bd:64:18:e7:4b:89:f3:fc:85:25:0b:ac: ee:65:6d:33:95:2b:71:2c:fd:ad:f4:27:74:be:15: a7:73:04:e0:ed:2d:1c:a7:2d:9d:09:73:13:28:1f: c3:05:e7:5b:45:b9:ef:7a:00:61:52:b3:40:37:8f: 99:be:0e:80:52:94:1a:5c:19:2b:f5:02:fd:d8:40: 7a:29:ca:76:0d:45:ac:2c:11:15:86:0d:49:10:07: a2:e4:b2:a5:c6:9e:d5:76:99:20:8c:02:c9:28:bf: 98:e2:d2:24:91:48:1b:a5:51:64:0a:ab:f8:66:73: 72:14:61:a2:64:f6:70:1a:4d:c2:c4:8f:5a:fa:39: 1e:5f:33:8a:0f:e3:9c:c2:df:de:f7:d2:97:1d:1a: 91:7b:65:b2:1c:f5:68:87:d4:f0:a8:aa:4a:17:86: df:d0:e7:9f:58:08:f2:9d:64:54:76:17:20:b9:1d: 3b:a2:83:48:00:0e:0b:cb:ba:78:17:92:3f:53:8a: 38:07:95:f2:35:cc:33:a0:6d:7e:73:40:dd:e9:1b: bb:75:2a:a4:4c:7b:1c:67:2c:3d:a8:e7:62:c8:6d: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:75:98:37:CD:9D:0D:26:95:4B:9C:BC:45:8B:EB:D1:BC:40:49:9C X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:8e:38:96:75:16:15:dd:54:2a:5b:57:5f:90:14:d3:99:3e: ca:1d:1d:8d:e6:e6:09:8c:f0:02:b2:bc:72:94:62:18:01:59: 67:8a:5e:64:de:06:3e:33:2f:dd:fb:14:04:f8:1f:bc:aa:a6: 9c:13:c1:44:3e:cb:ed:32:20:5f:f0:55:46:89:d2:30:6d:00: 55:38:e9:4f:7d:34:ba:b9:cf:6c:db:fe:bb:45:61:52:bb:52: 6a:ba:bb:e0:dc:52:17:b2:7a:df:61:69:5e:c4:e6:1d:4a:6b: 83:a5:b4:c1:94:f6:c1:60:8e:ee:e5:d6:9b:47:75:16:39:a8: 8a:88:46:79:77:e1:37:a2:f8:ee:87:5c:12:b1:cd:eb:13:00: 13:cf:00:42:ea:5e:b4:7e:00:67:39:7c:91:ac:38:76:5a:bd: c8:a2:be:78:16:f8:ea:2b:2f:7b:04:fb:cd:47:7f:d9:ad:7a: 3f:17:cf:5f:fb:6f:33:0a:b2:ef:6a:79:9e:5c:32:1d:a5:4a: 8b:a8:e7:ab:f5:c5:78:0a:47:08:6a:7c:c6:f7:60:f0:3a:2d: fe:05:1c:ef:db:08:5e:5a:b5:5b:44:52:67:eb:3b:1d:3d:7b: ca:51:4a:49:a0:02:f9:4a:d6:cf:96:c4:39:59:52:59:13:d5: b8:46:aa:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUds4ew98IWYA9FiKTnjZCND/bF6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTEyMTYwNjA1NTdaFw0yNTEyMTkxMjU5NTdaMDMxMTAvBgNV BAMTKDQxNzU5ODM3Q0Q5RDBEMjY5NTRCOUNCQzQ1OEJFQkQxQkM0MDQ5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCny4XNThrpuBMpA1VbaHhvVd3M w/SEhMsim0ICoWlYqL1kGOdLifP8hSULrO5lbTOVK3Es/a30J3S+FadzBODtLRyn LZ0JcxMoH8MF51tFue96AGFSs0A3j5m+DoBSlBpcGSv1Av3YQHopynYNRawsERWG DUkQB6LksqXGntV2mSCMAskov5ji0iSRSBulUWQKq/hmc3IUYaJk9nAaTcLEj1r6 OR5fM4oP45zC39730pcdGpF7ZbIc9WiH1PCoqkoXht/Q559YCPKdZFR2FyC5HTui g0gADgvLungXkj9TijgHlfI1zDOgbX5zQN3pG7t1KqRMexxnLD2o52LIbSmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQXWYN82dDSaVS5y8RYvr0bxASZwwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmOOJZ1FhXdVCpbV1+QFNOZPsodHY3m5gmM 8AKyvHKUYhgBWWeKXmTeBj4zL937FAT4H7yqppwTwUQ+y+0yIF/wVUaJ0jBtAFU4 6U99NLq5z2zb/rtFYVK7Umq6u+DcUheyet9haV7E5h1Ka4OltMGU9sFgju7l1ptH dRY5qIqIRnl34Tei+O6HXBKxzesTABPPAELqXrR+AGc5fJGsOHZavciivngW+Oor L3sE+81Hf9mtej8Xz1/7bzMKsu9qeZ5cMh2lSouo56v1xXgKRwhqfMb3YPA6Lf4F HO/bCF5atVtEUmfrOx09e8pRSkmgAvlK1s+WxDlZUlkT1bhGqqw= -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:16 2025 by rpki-client