This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: ggBI1Jk8FHwX3K6kYQw6F5GCfElZcXcxdqrUqEXDSSk= Subject key identifier: B8:51:DA:4B:EB:64:2F:AD:ED:93:5B:EF:E7:02:EA:50:19:F1:92:10 Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 6545680E2A15A3B9A84B66972AFE70CBD9CE4372 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 028C Signing time: Fri 05 Dec 2025 00:42:09 +0000 Manifest this update: Fri 05 Dec 2025 00:37:09 +0000 Manifest next update: Mon 08 Dec 2025 06:37:09 +0000 Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=) 2: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: NwGCpk/zXNZlx4oaGHNSaZ0ViDQkDvNJv8DWZz+9cBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 06:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:45:68:0e:2a:15:a3:b9:a8:4b:66:97:2a:fe:70:cb:d9:ce:43:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Dec 5 00:37:09 2025 GMT Not After : Dec 8 06:37:09 2025 GMT Subject: CN=B851DA4BEB642FADED935BEFE702EA5019F19210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:1f:4d:4a:fc:6c:68:8e:d4:93:04:51:a0: 98:aa:fe:0d:52:1b:84:bd:39:c0:08:d5:a9:cb:6b: 47:54:23:eb:3f:db:84:48:a1:b1:4b:7d:11:f6:f3: ba:06:e2:14:da:d3:fa:14:59:15:3c:76:d3:47:bc: f0:4c:43:04:41:f5:04:39:c6:a4:be:70:00:9d:7f: af:91:7c:a6:bf:c4:4e:e3:55:dd:c7:6e:be:33:b2: 8b:15:63:33:06:62:44:99:9f:93:39:78:4d:f6:11: bf:99:af:ea:e5:ae:ab:57:5e:63:9d:a0:13:ba:23: ba:76:7b:10:a5:d5:ee:c2:7b:a0:96:f6:78:d0:97: 5f:21:08:72:48:e4:5a:99:2a:8e:cf:0b:31:fd:44: 09:30:eb:52:f9:ff:cf:68:22:b8:82:e4:4b:e5:a6: ee:ac:51:18:21:81:ba:25:19:47:a7:b6:aa:fa:16: e7:0c:8c:9e:23:0b:b6:52:a4:e6:39:2d:f7:98:ac: 3a:c8:01:82:50:1b:00:b6:26:3a:3f:72:a1:25:e3: 49:5e:fc:ff:f7:88:3a:06:ec:cc:12:c2:e4:7f:6a: 64:1b:93:22:de:c8:06:53:ce:f9:27:b1:72:1a:3c: fc:b7:26:15:b7:66:31:de:e3:9b:27:87:9c:27:e1: a2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:51:DA:4B:EB:64:2F:AD:ED:93:5B:EF:E7:02:EA:50:19:F1:92:10 X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ce:4a:2c:7f:42:fe:22:00:02:b0:30:20:68:77:a8:32:2a: b0:b3:5b:a3:33:4b:1c:a3:35:a8:fe:2d:a5:c2:79:02:01:4b: d8:50:fc:55:cb:16:82:13:83:51:3e:a9:67:56:c4:7b:29:99: 9c:43:cc:29:cb:07:02:02:09:54:66:65:47:be:5a:cd:4a:57: aa:b5:8e:a2:09:f9:03:7a:68:4d:c0:2c:68:ee:d4:a9:b6:8d: ba:71:08:82:81:f6:d9:5b:7f:2c:53:fb:6c:ea:9f:3d:d3:65: 31:30:4c:27:63:af:27:bb:83:d4:9c:4a:23:82:4c:bd:c9:37: 60:a1:97:ee:60:67:1a:ef:e7:10:11:fb:c3:ed:c1:3b:f2:a1: c2:c4:1c:96:1f:7e:be:51:44:d9:5c:9d:2e:ba:51:4d:fd:c2: 72:3a:be:70:aa:57:28:cb:d1:e9:87:bc:f6:bc:b5:c6:88:9a: e1:61:fe:07:a4:a1:fa:d4:87:8c:cb:03:2c:ee:83:b2:db:ba: e7:93:ef:e3:18:c6:99:33:35:2d:8f:bb:fb:f4:03:c3:4a:9f: da:8d:b9:6d:42:e4:5d:dd:d8:cb:96:ff:14:00:14:30:1f:3b: 78:d6:67:36:e8:ad:98:f1:0b:9e:b4:50:23:16:25:c9:75:0d: 59:df:c3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZUVoDioVo7moS2aXKv5wy9nOQ3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNTEyMDUwMDM3MDlaFw0yNTEyMDgwNjM3MDlaMDMxMTAvBgNV BAMTKEI4NTFEQTRCRUI2NDJGQURFRDkzNUJFRkU3MDJFQTUwMTlGMTkyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSR9NSvxsaI7UkwRRoJiq/g1S G4S9OcAI1anLa0dUI+s/24RIobFLfRH287oG4hTa0/oUWRU8dtNHvPBMQwRB9QQ5 xqS+cACdf6+RfKa/xE7jVd3Hbr4zsosVYzMGYkSZn5M5eE32Eb+Zr+rlrqtXXmOd oBO6I7p2exCl1e7Ce6CW9njQl18hCHJI5FqZKo7PCzH9RAkw61L5/89oIriC5Evl pu6sURghgbolGUentqr6FucMjJ4jC7ZSpOY5LfeYrDrIAYJQGwC2Jjo/cqEl40le /P/3iDoG7MwSwuR/amQbkyLeyAZTzvknsXIaPPy3JhW3ZjHe45snh5wn4aJnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuFHaS+tkL63tk1vv5wLqUBnxkhAwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfOSix/Qv4iAAKwMCBod6gyKrCzW6MzSxyj Naj+LaXCeQIBS9hQ/FXLFoITg1E+qWdWxHspmZxDzCnLBwICCVRmZUe+Ws1KV6q1 jqIJ+QN6aE3ALGju1Km2jbpxCIKB9tlbfyxT+2zqnz3TZTEwTCdjrye7g9ScSiOC TL3JN2Chl+5gZxrv5xAR+8PtwTvyocLEHJYffr5RRNlcnS66UU39wnI6vnCqVyjL 0emHvPa8tcaImuFh/gekofrUh4zLAyzug7LbuueT7+MYxpkzNS2Pu/v0A8NKn9qN uW1C5F3d2MuW/xQAFDAfO3jWZzborZjxC560UCMWJcl1DVnfw0Q= -----END CERTIFICATE-----Generated at Sun Dec 7 03:12:22 2025 by rpki-client