This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft File: 1DE04B1502D06C1C133ACE901223884FB36B2638.mft (raw, json) Hash identifier: ErszoZjbhFMmF/AbDIwQI/skSSm6VdXdYJmcjYjZUnQ= Subject key identifier: 34:D5:C1:FE:96:45:18:50:4E:AF:B3:C6:92:A5:BD:8B:04:60:E5:B4 Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 Certificate issuer: /CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Certificate serial: 2A68AA12741A8F437460F75009CA52AA442B2B04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft Manifest number: 022F Signing time: Sat 06 Dec 2025 03:41:14 +0000 Manifest this update: Sat 06 Dec 2025 03:36:14 +0000 Manifest next update: Tue 09 Dec 2025 10:58:14 +0000 Files and hashes: 1: 3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (hash: Dbua1W+dq/k6Z9uQfXqPhRIcFQdPJ4Cp3vbD2GRN4CU=) 2: 1DE04B1502D06C1C133ACE901223884FB36B2638.crl (hash: 5HIqnbQW15CZqH8YktI9GP0xjP+0XBa2KOWOegAhrz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 10:58:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:68:aa:12:74:1a:8f:43:74:60:f7:50:09:ca:52:aa:44:2b:2b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638 Validity Not Before: Dec 6 03:36:14 2025 GMT Not After : Dec 9 10:58:14 2025 GMT Subject: CN=34D5C1FE964518504EAFB3C692A5BD8B0460E5B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:cd:13:fb:87:9a:ac:18:a9:b2:cd:63:8b: ee:70:61:fe:a6:15:8e:19:c0:5b:06:18:d2:18:0a: 34:15:0a:3e:76:ec:d8:f2:71:f2:bc:1b:0b:ed:54: 41:d7:1c:b6:3d:2d:14:93:1c:8e:54:97:52:4b:1c: f5:6c:24:b4:a6:a7:ba:72:ef:57:20:9d:57:46:8c: 38:6d:f8:3e:ab:61:36:81:0c:35:d8:5b:23:e6:d2: 55:fc:e6:66:a3:a6:4f:2f:a2:dd:97:fa:cc:33:a8: 51:6b:ca:40:a4:6e:1f:a6:84:99:55:31:ec:7e:e3: ab:80:18:cd:73:7d:fc:3d:91:ea:0f:6e:98:f5:e6: 3d:39:08:39:21:71:ee:30:a5:35:75:38:9c:28:7c: 57:2c:a2:fe:68:43:d7:6b:82:96:65:43:7c:fe:e7: 97:59:53:7b:5b:d2:0c:f1:02:5c:03:27:cb:e1:f8: 46:ef:a0:b6:33:9d:c5:70:78:50:fc:85:4a:a4:91: a2:4f:08:24:c7:1e:78:5e:68:c8:dc:6b:67:ce:0b: ce:48:f6:12:a5:3b:c3:0c:a8:bf:4f:50:8c:41:26: 53:a5:61:91:78:a6:35:a2:3e:4a:25:0d:b6:f8:00: 2d:44:36:e4:2a:c8:82:fd:5f:95:08:44:1e:a9:85: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:C1:FE:96:45:18:50:4E:AF:B3:C6:92:A5:BD:8B:04:60:E5:B4 X509v3 Authority Key Identifier: keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:98:fa:f3:51:ae:df:49:b4:be:ae:98:2c:ed:52:e9:30:3c: 44:7e:c8:34:d8:09:08:1d:e2:9d:a1:c2:f7:0a:a7:b1:3b:7e: 85:48:7f:ee:fe:7a:b7:3c:3c:30:07:bf:6f:8a:4b:18:00:87: 89:d8:89:70:da:4f:df:79:b7:20:46:43:d9:0a:f9:d5:5f:f0: 50:02:58:a0:0f:f3:f1:ff:08:68:7c:43:df:b2:d9:eb:2a:7d: 1c:29:d4:2c:6f:d3:70:f0:b1:08:0b:af:02:4a:3e:38:49:cb: 76:a5:ba:b3:32:18:40:38:e5:27:06:6a:c1:dc:25:ec:4c:5e: e4:b8:40:84:b0:18:19:e6:ea:18:32:f8:a6:01:f8:cc:25:ff: 5a:a8:dc:0b:81:43:32:56:87:63:ec:e2:ef:73:d2:8b:18:f8: fa:7e:55:71:23:f0:bf:f4:78:74:37:c2:9e:9c:72:84:8d:05: b3:66:86:01:19:ee:d8:26:be:82:aa:a8:e7:93:0a:fc:91:c1: ac:f7:92:56:92:a6:ad:8b:87:f5:b0:72:3d:00:15:83:f6:6e: 4e:80:4f:8c:04:71:3e:32:d7:40:dd:9a:57:28:ed:a6:e1:49: 30:c9:fc:98:6e:26:ab:e4:6c:df:7b:a3:7a:62:4c:24:63:e0: c3:65:22:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmiqEnQaj0N0YPdQCcpSqkQrKwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZC MzZCMjYzODAeFw0yNTEyMDYwMzM2MTRaFw0yNTEyMDkxMDU4MTRaMDMxMTAvBgNV BAMTKDM0RDVDMUZFOTY0NTE4NTA0RUFGQjNDNjkyQTVCRDhCMDQ2MEU1QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIs0T+4earBipss1ji+5wYf6m FY4ZwFsGGNIYCjQVCj527NjycfK8GwvtVEHXHLY9LRSTHI5Ul1JLHPVsJLSmp7py 71cgnVdGjDht+D6rYTaBDDXYWyPm0lX85majpk8vot2X+swzqFFrykCkbh+mhJlV Mex+46uAGM1zffw9keoPbpj15j05CDkhce4wpTV1OJwofFcsov5oQ9drgpZlQ3z+ 55dZU3tb0gzxAlwDJ8vh+EbvoLYzncVweFD8hUqkkaJPCCTHHnheaMjca2fOC85I 9hKlO8MMqL9PUIxBJlOlYZF4pjWiPkolDbb4AC1ENuQqyIL9X5UIRB6pheoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNNXB/pZFGFBOr7PGkqW9iwRg5bQwHwYDVR0j BBgwFoAUHeBLFQLQbBwTOs6QEiOIT7NrJjgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmZhYjYxMS04YmUzLTRiNDQtOTU2MS03NTJhMWVkYTA2NWMvMC8xREUwNEIxNTAy RDA2QzFDMTMzQUNFOTAxMjIzODg0RkIzNkIyNjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4NEZCMzZC MjYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJmYWI2MTEtOGJlMy00YjQ0LTk1 NjEtNzUyYTFlZGEwNjVjLzAvMURFMDRCMTUwMkQwNkMxQzEzM0FDRTkwMTIyMzg4 NEZCMzZCMjYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyY+vNRrt9JtL6umCztUukwPER+yDTYCQgd 4p2hwvcKp7E7foVIf+7+erc8PDAHv2+KSxgAh4nYiXDaT995tyBGQ9kK+dVf8FAC WKAP8/H/CGh8Q9+y2esqfRwp1Cxv03DwsQgLrwJKPjhJy3alurMyGEA45ScGasHc JexMXuS4QISwGBnm6hgy+KYB+Mwl/1qo3AuBQzJWh2Ps4u9z0osY+Pp+VXEj8L/0 eHQ3wp6ccoSNBbNmhgEZ7tgmvoKqqOeTCvyRwaz3klaSpq2Lh/Wwcj0AFYP2bk6A T4wEcT4y10Ddmlco7abhSTDJ/JhuJqvkbN97o3piTCRj4MNlIrQ= -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:53 2025 by rpki-client