This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: wLPxaWL8rG/j9gwwqsp+WbKO8rABB1ZcBn+K5S9G6WI= Subject key identifier: 12:BF:FA:34:E9:EC:BB:55:2D:01:DC:16:F2:7C:DB:CE:59:55:08:29 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 45A41D57AABBEFEDA3A64FAC6035F98B90B9BEEE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 020A Signing time: Fri 05 Dec 2025 05:00:57 +0000 Manifest this update: Fri 05 Dec 2025 04:55:57 +0000 Manifest next update: Mon 08 Dec 2025 08:20:57 +0000 Files and hashes: 1: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: bHj6KznGpSwzGcLP67inXEcs/Bvpht30XzDAbWTgQ+4=) 2: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 08:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:a4:1d:57:aa:bb:ef:ed:a3:a6:4f:ac:60:35:f9:8b:90:b9:be:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Dec 5 04:55:57 2025 GMT Not After : Dec 8 08:20:57 2025 GMT Subject: CN=12BFFA34E9ECBB552D01DC16F27CDBCE59550829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5e:5e:11:20:1e:2a:dd:b3:3c:99:8c:45:96: 67:8c:64:e3:01:a3:36:4d:db:f5:8a:f4:49:a3:13: bb:79:50:d0:e4:9f:31:11:69:ca:44:8b:d7:30:d0: b5:ef:ac:6b:cb:1d:78:46:06:49:cc:0a:a2:49:e2: 5a:a4:55:b9:77:8b:1c:31:ee:3c:13:22:9a:36:06: 2d:47:f4:b0:c3:57:dc:27:de:f4:18:b7:49:09:1e: ed:1b:c5:4b:88:ed:5d:3e:91:4c:e5:85:92:e5:64: 78:f7:e7:73:1a:6d:d6:c5:36:34:2f:5a:d0:74:8c: 38:2a:7a:0a:5f:2d:6e:01:7a:72:37:90:1a:c0:4d: ce:a0:36:15:c8:a0:0f:9d:57:27:14:14:cc:46:c8: b0:fc:82:c3:5b:12:e5:0b:52:97:ec:aa:6f:96:a2: 6a:1c:bb:02:5e:51:bd:76:36:0e:60:93:71:86:89: d6:4b:da:b1:b6:11:71:ab:a0:da:05:af:4c:d7:e8: e1:42:e5:84:1a:4a:49:5d:44:6c:9e:a8:b9:a3:4e: 61:96:28:3d:48:e4:1b:7e:3c:24:0d:fd:42:0f:71: bd:b4:09:ca:54:6a:2c:e6:a7:59:1d:47:86:90:d2: 56:79:37:f9:62:e3:78:b7:1b:1a:38:bc:a7:25:e3: 70:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BF:FA:34:E9:EC:BB:55:2D:01:DC:16:F2:7C:DB:CE:59:55:08:29 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:cf:00:e7:60:64:36:06:e4:d8:ba:e8:eb:f5:0f:2c:fc:12: 4a:63:f4:ea:50:1a:57:8c:cc:dd:a5:4a:94:17:6a:72:c7:f2: b8:fb:3a:61:34:3f:04:ec:05:92:6d:44:81:91:d0:2a:ed:e5: 86:99:e8:00:33:c4:35:82:81:50:b5:49:a4:17:86:47:0d:e9: e7:23:91:aa:60:37:f6:ba:d2:92:1c:c1:12:c0:38:9f:9c:5a: 42:f7:9d:a7:fd:83:53:5d:a7:8f:8e:83:a5:ca:7b:25:71:da: 31:c1:e2:e1:dc:22:04:ba:7d:61:59:81:d0:50:2d:7e:bd:83: eb:e3:73:dc:08:95:d9:0c:2e:0b:d5:07:f5:44:82:19:e1:b5: 74:9b:c6:bf:7a:fb:9f:00:c4:d5:08:5b:ff:7b:71:57:0b:25: 78:22:62:10:0d:21:64:6b:8c:5e:b9:75:5f:26:f2:e4:9e:31: 0e:e7:dd:ac:8c:b0:75:65:42:1c:29:57:fd:c8:71:e3:9f:fb: 78:3f:f4:ab:f0:eb:da:75:1f:d8:5c:c9:7c:6d:7f:fb:42:67: e2:80:3c:42:4d:63:81:6a:83:24:01:af:a2:28:1b:41:d5:02: 95:c6:30:2b:69:d2:fd:21:27:05:73:14:91:80:9a:ac:ec:69: 8b:3b:b8:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURaQdV6q77+2jpk+sYDX5i5C5vu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNTEyMDUwNDU1NTdaFw0yNTEyMDgwODIwNTdaMDMxMTAvBgNV BAMTKDEyQkZGQTM0RTlFQ0JCNTUyRDAxREMxNkYyN0NEQkNFNTk1NTA4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXl4RIB4q3bM8mYxFlmeMZOMB ozZN2/WK9EmjE7t5UNDknzERacpEi9cw0LXvrGvLHXhGBknMCqJJ4lqkVbl3ixwx 7jwTIpo2Bi1H9LDDV9wn3vQYt0kJHu0bxUuI7V0+kUzlhZLlZHj353MabdbFNjQv WtB0jDgqegpfLW4BenI3kBrATc6gNhXIoA+dVycUFMxGyLD8gsNbEuULUpfsqm+W omocuwJeUb12Ng5gk3GGidZL2rG2EXGroNoFr0zX6OFC5YQaSkldRGyeqLmjTmGW KD1I5Bt+PCQN/UIPcb20CcpUaizmp1kdR4aQ0lZ5N/li43i3Gxo4vKcl43A3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEr/6NOnsu1UtAdwW8nzbzllVCCkwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbPAOdgZDYG5Ni66Ov1Dyz8Ekpj9OpQGleM zN2lSpQXanLH8rj7OmE0PwTsBZJtRIGR0Crt5YaZ6AAzxDWCgVC1SaQXhkcN6ecj kapgN/a60pIcwRLAOJ+cWkL3naf9g1Ndp4+Og6XKeyVx2jHB4uHcIgS6fWFZgdBQ LX69g+vjc9wIldkMLgvVB/VEghnhtXSbxr96+58AxNUIW/97cVcLJXgiYhANIWRr jF65dV8m8uSeMQ7n3ayMsHVlQhwpV/3IceOf+3g/9Kvw69p1H9hcyXxtf/tCZ+KA PEJNY4FqgyQBr6IoG0HVApXGMCtp0v0hJwVzFJGAmqzsaYs7uCA= -----END CERTIFICATE-----Generated at Sat Dec 6 19:00:35 2025 by rpki-client