This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: HY38LJMoMKxu5PNxk5eRb90eXN1lpyFKemU+q7Z+HQc= Subject key identifier: C5:10:40:47:1F:A4:37:49:6E:C9:2D:14:6F:23:BC:A7:A3:CB:9B:01 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 1888FE7863A51A15B9EAA8F7B1A29A2DB2056421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 049E Signing time: Thu 04 Dec 2025 21:22:26 +0000 Manifest this update: Thu 04 Dec 2025 21:17:26 +0000 Manifest next update: Mon 08 Dec 2025 07:10:26 +0000 Files and hashes: 1: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 2: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: pPSW4ofLiId1NTUlKfZWZSZwy307cGNt/2NNyBsjkSQ=) 3: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 4: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 07:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:88:fe:78:63:a5:1a:15:b9:ea:a8:f7:b1:a2:9a:2d:b2:05:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Dec 4 21:17:26 2025 GMT Not After : Dec 8 07:10:26 2025 GMT Subject: CN=C51040471FA437496EC92D146F23BCA7A3CB9B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:d1:bb:e8:ae:0c:e5:96:64:35:ed:d6:58: 69:37:7e:39:10:90:3b:20:b6:24:dd:9d:8e:ac:ac: dc:f0:3a:0b:b4:da:15:8e:52:ab:a7:84:c3:5b:e4: ac:89:63:4f:30:6c:0b:7d:20:7f:27:be:d7:db:f9: fa:49:74:c9:60:95:d3:c6:03:ae:03:33:fc:12:de: e1:6f:90:36:c8:10:8b:24:9b:8e:f8:7a:7a:1a:36: dc:77:b7:60:1c:c9:f4:5d:31:b6:18:f4:ee:8a:ce: 21:84:77:a1:9e:a9:8b:c4:28:a8:1b:52:b5:1f:18: 64:65:55:8d:e5:33:21:17:6a:40:44:fb:58:aa:7f: 06:62:3e:58:fc:5b:33:c3:1e:34:a2:f0:dc:ef:e7: 4f:0c:48:40:d6:c0:e4:26:90:84:4d:80:c0:4e:59: c5:ea:57:07:ec:6a:4a:f6:98:47:81:7f:3e:df:b5: 3d:d5:6c:17:2c:d8:f3:88:30:a4:1a:45:87:c6:6a: 85:83:e0:9e:2a:f5:e2:44:05:5c:41:d7:42:6a:ed: ba:03:2e:d0:dc:fb:e9:72:6f:8f:7e:a2:f9:b3:40: 73:d7:f2:9e:04:ba:d4:f5:62:4b:44:44:29:60:c7: 69:4c:1e:4d:7b:eb:a1:50:91:55:f7:20:61:9b:1b: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:10:40:47:1F:A4:37:49:6E:C9:2D:14:6F:23:BC:A7:A3:CB:9B:01 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f4:1d:43:b9:5a:f6:f7:21:d4:c9:0d:a0:c5:c5:d6:30:83: 2e:43:12:58:4e:18:d0:e9:db:c8:ce:3c:11:81:24:bd:e0:ef: 7b:13:c8:79:6e:eb:4d:5f:15:79:4d:04:d7:24:91:dc:47:be: 49:d9:45:be:86:7a:c8:a0:48:d8:30:c1:e2:f2:ea:f6:8c:35: e7:0d:34:d4:90:68:ab:59:16:7d:b1:7f:ce:14:77:22:96:fc: 49:f6:f1:49:a9:de:f2:24:d3:14:65:e7:9a:07:06:16:da:90: 01:17:54:3c:77:c5:ef:2d:a5:b6:b2:ff:eb:58:79:4c:fb:f7: e6:0c:45:5f:c7:27:74:27:ee:88:39:dd:fa:5c:d9:d2:28:d4: 88:e2:e3:cf:d9:07:43:ba:92:b1:48:9d:ea:bd:ed:3a:75:e1: 90:40:be:ff:7f:20:f5:83:d5:bb:75:1a:1e:ec:4e:b6:cd:22: 8b:f5:30:70:8e:97:2c:c4:2d:bc:b9:84:b8:8a:96:04:5c:39: 7a:94:a9:f3:57:be:de:45:3a:43:bf:ae:4e:15:fd:31:e9:d8: 94:5d:4d:83:dd:5d:c1:1c:e9:d6:63:5e:68:8c:0d:3c:8f:df: 74:13:49:ce:ca:d2:36:7d:aa:e6:ea:7e:1d:c9:5c:1c:c0:b6: df:41:cd:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIj+eGOlGhW56qj3saKaLbIFZCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTEyMDQyMTE3MjZaFw0yNTEyMDgwNzEwMjZaMDMxMTAvBgNV BAMTKEM1MTA0MDQ3MUZBNDM3NDk2RUM5MkQxNDZGMjNCQ0E3QTNDQjlCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnX9G76K4M5ZZkNe3WWGk3fjkQ kDsgtiTdnY6srNzwOgu02hWOUqunhMNb5KyJY08wbAt9IH8nvtfb+fpJdMlgldPG A64DM/wS3uFvkDbIEIskm474enoaNtx3t2AcyfRdMbYY9O6KziGEd6GeqYvEKKgb UrUfGGRlVY3lMyEXakBE+1iqfwZiPlj8WzPDHjSi8Nzv508MSEDWwOQmkIRNgMBO WcXqVwfsakr2mEeBfz7ftT3VbBcs2POIMKQaRYfGaoWD4J4q9eJEBVxB10Jq7boD LtDc++lyb49+ovmzQHPX8p4EutT1YktERClgx2lMHk1766FQkVX3IGGbG+Z7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxRBARx+kN0luyS0UbyO8p6PLmwEwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD0HUO5Wvb3IdTJDaDFxdYwgy5DElhOGNDp 28jOPBGBJL3g73sTyHlu601fFXlNBNckkdxHvknZRb6GesigSNgwweLy6vaMNecN NNSQaKtZFn2xf84UdyKW/En28Ump3vIk0xRl55oHBhbakAEXVDx3xe8tpbay/+tY eUz79+YMRV/HJ3Qn7og53fpc2dIo1Iji48/ZB0O6krFIneq97Tp14ZBAvv9/IPWD 1bt1Gh7sTrbNIov1MHCOlyzELby5hLiKlgRcOXqUqfNXvt5FOkO/rk4V/THp2JRd TYPdXcEc6dZjXmiMDTyP33QTSc7K0jZ9qubqfh3JXBzAtt9Bzcg= -----END CERTIFICATE-----Generated at Sun Dec 7 01:00:36 2025 by rpki-client