This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: 62aZPtrbMpR5vaWyUSIGHabU+cmBdOijyuoe0jwwtx4= Subject key identifier: 61:E7:7E:82:A2:FD:05:F6:F8:F8:DF:C9:37:F4:A9:15:EC:3F:2A:01 Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 7002313C0669EC2000CEF7532E94466B828BAC1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 023A Signing time: Thu 04 Dec 2025 18:02:33 +0000 Manifest this update: Thu 04 Dec 2025 17:57:33 +0000 Manifest next update: Mon 08 Dec 2025 05:22:33 +0000 Files and hashes: 1: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: Rc2DErsyjigrY0WguoKyWlWN27lUZbqBBcHG2nvqvJ4=) 2: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: mpQhVkN55D7Gl2B191fSgBhewaZwiK2reH68gdGBzaE=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 4: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 05:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:02:31:3c:06:69:ec:20:00:ce:f7:53:2e:94:46:6b:82:8b:ac:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Dec 4 17:57:33 2025 GMT Not After : Dec 8 05:22:33 2025 GMT Subject: CN=61E77E82A2FD05F6F8F8DFC937F4A915EC3F2A01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:b0:23:c5:fe:a1:dc:80:76:7a:62:f9:cb: 6a:d2:ff:c8:da:7d:fc:bc:e2:5d:e1:21:56:6d:96: 54:e6:17:cf:c0:be:a3:e1:02:e4:5e:db:bc:b4:80: fa:41:46:4b:67:d2:32:5a:f4:e4:77:54:e7:d0:00: a5:bd:67:97:e1:08:6f:c6:9b:22:44:1a:0a:28:2e: e4:5b:84:77:bb:f3:a9:dc:3b:74:42:72:a0:d6:12: f0:5d:8d:58:e8:f0:a6:a0:c5:56:3e:48:c2:17:db: 6f:af:4e:50:86:17:ec:25:c9:9a:e1:67:f5:2a:ca: 41:2e:0c:c7:cd:cb:40:21:fd:66:cf:2b:33:b9:9e: 6b:37:12:4c:3f:bc:18:bd:03:56:a6:8d:e7:ef:57: 66:f9:42:34:ca:70:03:54:16:7f:2a:86:14:10:2f: 18:ed:06:a3:7f:42:05:71:57:82:be:5b:e3:92:85: 8e:18:d8:f8:9d:42:7c:40:b2:15:bb:9c:b8:d2:bf: 5c:7f:74:47:be:58:4d:83:50:d8:d2:24:0d:1b:89: e5:2d:4e:58:03:22:02:f9:a9:1f:5c:88:07:a8:64: 6b:f8:d2:66:ea:8a:fe:fe:11:5a:52:6a:15:6f:60: b2:a5:97:9d:fb:ae:5b:11:ee:58:dd:03:78:a0:a4: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:E7:7E:82:A2:FD:05:F6:F8:F8:DF:C9:37:F4:A9:15:EC:3F:2A:01 X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e7:a3:33:36:fa:3f:e5:8f:fb:13:8a:7d:29:a8:24:ee:67: 51:2c:7e:1e:d5:7d:72:96:48:1e:f0:ce:64:2f:ed:26:62:93: e5:ca:e6:c2:7c:65:c4:a5:fe:7b:b7:07:b4:35:01:31:e3:7a: 78:8a:5f:e6:e1:44:fb:1a:c4:25:11:ea:63:3b:e5:40:b2:6b: af:d4:5e:d9:2b:d5:28:8f:fa:b7:ef:bb:66:b5:4c:ee:c5:29: c6:fa:0e:72:41:20:5a:0d:6f:a2:90:8c:42:ca:ed:c7:b2:59: 5a:d8:35:0f:5a:1e:a4:af:9b:65:30:46:93:40:97:fc:0f:cc: c8:73:f3:27:67:be:6e:93:2f:5d:d9:44:1e:d1:b0:97:c5:ee: bf:84:b3:83:4e:1b:32:bf:60:f7:f0:ca:fe:b7:24:b7:81:f5: 68:a6:6c:c5:6c:18:b5:4b:1f:f6:d3:b1:34:d9:9b:9c:88:e1: 8e:41:3d:92:61:e2:20:f1:aa:39:74:4a:b0:2e:91:64:3e:8b: 68:9d:a2:f9:fc:dc:ab:79:e6:2d:b9:ce:99:74:45:62:2a:21: d6:b6:3e:46:51:cc:a3:3f:6a:45:66:1b:b4:99:bc:b1:d6:8f: 7f:9b:ba:cc:30:40:ae:22:f1:ec:2a:eb:fc:f9:d3:ef:7d:43: b2:4d:c1:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAIxPAZp7CAAzvdTLpRGa4KLrBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNTEyMDQxNzU3MzNaFw0yNTEyMDgwNTIyMzNaMDMxMTAvBgNV BAMTKDYxRTc3RTgyQTJGRDA1RjZGOEY4REZDOTM3RjRBOTE1RUMzRjJBMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRQ7Ajxf6h3IB2emL5y2rS/8ja ffy84l3hIVZtllTmF8/AvqPhAuRe27y0gPpBRktn0jJa9OR3VOfQAKW9Z5fhCG/G myJEGgooLuRbhHe786ncO3RCcqDWEvBdjVjo8KagxVY+SMIX22+vTlCGF+wlyZrh Z/UqykEuDMfNy0Ah/WbPKzO5nms3Ekw/vBi9A1amjefvV2b5QjTKcANUFn8qhhQQ LxjtBqN/QgVxV4K+W+OShY4Y2PidQnxAshW7nLjSv1x/dEe+WE2DUNjSJA0bieUt TlgDIgL5qR9ciAeoZGv40mbqiv7+EVpSahVvYLKll537rlsR7ljdA3igpN0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYed+gqL9Bfb4+N/JN/SpFew/KgEwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjnozM2+j/lj/sTin0pqCTuZ1Esfh7VfXKW SB7wzmQv7SZik+XK5sJ8ZcSl/nu3B7Q1ATHjeniKX+bhRPsaxCUR6mM75UCya6/U Xtkr1SiP+rfvu2a1TO7FKcb6DnJBIFoNb6KQjELK7ceyWVrYNQ9aHqSvm2UwRpNA l/wPzMhz8ydnvm6TL13ZRB7RsJfF7r+Es4NOGzK/YPfwyv63JLeB9WimbMVsGLVL H/bTsTTZm5yI4Y5BPZJh4iDxqjl0SrAukWQ+i2idovn83Kt55i25zpl0RWIqIda2 PkZRzKM/akVmG7SZvLHWj3+buswwQK4i8ewq6/z50+99Q7JNwRg= -----END CERTIFICATE-----Generated at Sat Dec 6 20:57:34 2025 by rpki-client