This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: MUp7dLwkaDcuuZ8Cg6j9e7Qqv1UWClrcp0z3wQcSo1U= Subject key identifier: 4F:A1:07:02:CD:CB:4F:02:1D:05:2F:67:D7:FD:9F:94:82:CD:0E:2E Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 57AB85F81002DAEBE6126E2035D81AE0BF9A0DF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 0153 Signing time: Sat 06 Dec 2025 16:20:04 +0000 Manifest this update: Sat 06 Dec 2025 16:15:04 +0000 Manifest next update: Tue 09 Dec 2025 18:18:04 +0000 Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) 2: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: RC2S1TC7ghGxEyFY7jPiCftvCN+WfYNhs4El6PTLOZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ab:85:f8:10:02:da:eb:e6:12:6e:20:35:d8:1a:e0:bf:9a:0d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Dec 6 16:15:04 2025 GMT Not After : Dec 9 18:18:04 2025 GMT Subject: CN=4FA10702CDCB4F021D052F67D7FD9F9482CD0E2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:b6:bb:b4:16:5f:7f:b7:2a:a4:ab:56:67: 14:5d:e8:71:ed:e3:8d:68:92:54:e4:a2:cf:5c:23: ee:b5:ed:30:0a:10:f1:1d:d1:41:a3:af:9c:94:68: a4:99:ba:bf:9c:1b:16:ed:aa:f7:48:08:b8:9b:6f: 9b:6d:9c:b9:bb:06:84:45:9b:63:de:5b:db:a4:6a: 53:71:21:22:51:ca:b3:6c:71:b3:02:53:cf:a5:89: 7b:3b:53:c4:30:82:a3:5f:65:d3:c9:59:12:cf:35: 91:34:a4:a3:35:c8:ce:8d:72:54:fd:73:35:b6:2a: 48:fb:29:b0:73:25:6d:d7:fc:c2:2f:ba:96:00:72: 84:80:15:7c:41:85:6d:d2:79:e4:96:77:d7:15:ec: 18:e8:f1:f3:46:50:15:44:da:13:06:4c:a0:e9:ca: de:52:66:d9:cb:6d:06:9a:47:8d:01:70:63:74:a6: f8:c0:e3:75:2b:12:d0:6c:c7:90:2b:54:c8:2c:eb: 57:e0:2b:81:e9:0a:d9:ab:a0:07:79:b6:c9:97:a4: 9a:6d:63:5c:f2:3e:96:3f:30:e1:6f:df:4c:90:81: 3d:1c:76:33:05:0a:de:91:ac:f6:a2:89:7e:fb:29: 70:a2:fb:a9:42:f2:80:22:79:48:75:ac:30:8b:bf: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A1:07:02:CD:CB:4F:02:1D:05:2F:67:D7:FD:9F:94:82:CD:0E:2E X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:67:98:91:df:70:b4:34:42:f7:da:74:00:67:b5:a7:f1:bc: 05:72:bb:14:13:be:ad:8e:b2:c4:c8:33:8e:e5:78:da:af:40: d3:b2:17:53:e1:b2:b3:f6:97:d5:c0:d2:90:35:ff:50:5e:b5: 65:ff:29:d1:07:04:b2:3e:da:e0:52:20:82:7b:db:f5:40:04: 1c:67:a3:61:b0:ef:73:83:ef:30:c7:95:e4:5c:ca:90:cb:76: 04:7a:6e:76:0f:dd:2f:0c:d4:fd:e8:f7:cc:9a:b2:44:93:23: 5b:90:f5:92:19:03:da:d8:1e:e0:c4:de:bc:1b:d4:f2:22:5d: da:b5:0e:56:70:20:b9:4a:fd:be:e5:b8:48:28:06:0b:26:9b: ce:18:77:09:a1:27:25:96:80:c1:03:16:65:0a:50:de:09:18: ad:6a:d0:db:7f:77:bd:70:52:6f:55:dc:04:04:18:e9:fb:5e: 2b:b6:56:88:7d:e3:56:08:05:b1:c5:e3:18:c5:22:f4:3c:ee: e9:30:ed:01:8d:fa:9b:e4:b7:89:ce:e4:4c:47:91:4b:67:b9: 55:7f:ec:63:43:44:20:c9:08:2d:e9:f9:71:da:f0:3b:11:67: 3b:0a:d6:1c:64:fe:5d:c0:a0:3b:5d:a9:a5:6b:fa:0d:ac:3a: 43:5e:cf:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6uF+BAC2uvmEm4gNdga4L+aDfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNTEyMDYxNjE1MDRaFw0yNTEyMDkxODE4MDRaMDMxMTAvBgNV BAMTKDRGQTEwNzAyQ0RDQjRGMDIxRDA1MkY2N0Q3RkQ5Rjk0ODJDRDBFMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7ba7tBZff7cqpKtWZxRd6HHt 441oklTkos9cI+617TAKEPEd0UGjr5yUaKSZur+cGxbtqvdICLibb5ttnLm7BoRF m2PeW9ukalNxISJRyrNscbMCU8+liXs7U8QwgqNfZdPJWRLPNZE0pKM1yM6NclT9 czW2Kkj7KbBzJW3X/MIvupYAcoSAFXxBhW3SeeSWd9cV7Bjo8fNGUBVE2hMGTKDp yt5SZtnLbQaaR40BcGN0pvjA43UrEtBsx5ArVMgs61fgK4HpCtmroAd5tsmXpJpt Y1zyPpY/MOFv30yQgT0cdjMFCt6RrPaiiX77KXCi+6lC8oAieUh1rDCLvxHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6EHAs3LTwIdBS9n1/2flILNDi4wHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1nmJHfcLQ0QvfadABntafxvAVyuxQTvq2O ssTIM47leNqvQNOyF1PhsrP2l9XA0pA1/1BetWX/KdEHBLI+2uBSIIJ72/VABBxn o2Gw73OD7zDHleRcypDLdgR6bnYP3S8M1P3o98yaskSTI1uQ9ZIZA9rYHuDE3rwb 1PIiXdq1DlZwILlK/b7luEgoBgsmm84YdwmhJyWWgMEDFmUKUN4JGK1q0Nt/d71w Um9V3AQEGOn7Xiu2Voh941YIBbHF4xjFIvQ87ukw7QGN+pvkt4nO5ExHkUtnuVV/ 7GNDRCDJCC3p+XHa8DsRZzsK1hxk/l3AoDtdqaVr+g2sOkNez+g= -----END CERTIFICATE-----Generated at Sun Dec 7 04:13:46 2025 by rpki-client