This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft (raw, json) Hash identifier: HSYAjc1UgligzyCMdjxbzQKwngWbeAniDGhcPw2A47E= Subject key identifier: C5:BA:05:8F:2B:44:5D:66:93:C4:70:B6:83:3D:4E:FF:45:57:4E:AC Authority key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Certificate issuer: /CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Certificate serial: 38CDA66049A64410594D10777EF7B437A58821AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft Manifest number: 0251 Signing time: Fri 05 Dec 2025 13:11:47 +0000 Manifest this update: Fri 05 Dec 2025 13:06:47 +0000 Manifest next update: Mon 08 Dec 2025 17:12:47 +0000 Files and hashes: 1: 3130332e3130322e3134322e302f32342d3234203d3e20313336383534.roa (hash: E9hexxYc1bqmjJVzYlcJ1n0jxfd6pWxzNygPPPDyMeU=) 2: 3130332e3130322e3134332e302f32342d3234203d3e20313336383534.roa (hash: Ue24uXPwQGc54JNB/telr39Lz7e1QRjzsLYAEfr9eLA=) 3: 3130332e3130322e3134302e302f32322d3232203d3e20313336383534.roa (hash: 7vNFqyZ19GIU7uMKM54m1pt7f10H0K5mcAT54ul2qeA=) 4: 3130332e3130322e3134312e302f32342d3234203d3e20313336383534.roa (hash: B2qLIiehd/VzdAIdfO6T4LFNUB/9FZCQ+7yI4OPC/0Q=) 5: 3130332e3130322e3134302e302f32342d3234203d3e20313336383534.roa (hash: r4/2SO1KfMaPGbX/FsKDs7agHGywqOgLxZjLIrvX7OQ=) 6: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl (hash: N/7suvQvmHFx8CLxTC42FtWTbHQ4GSjP7iW/XNaNhHY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 17:12:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cd:a6:60:49:a6:44:10:59:4d:10:77:7e:f7:b4:37:a5:88:21:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Validity Not Before: Dec 5 13:06:47 2025 GMT Not After : Dec 8 17:12:47 2025 GMT Subject: CN=C5BA058F2B445D6693C470B6833D4EFF45574EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:49:66:ed:d7:e1:5c:d5:e8:66:6a:ac:25:99: b8:06:b0:1c:26:1c:f7:c0:e4:a6:60:73:7e:e1:38: 4d:c9:46:49:7a:3b:db:10:2e:60:02:24:d9:bf:49: 97:1f:e5:4a:60:c0:4a:1b:d6:33:91:d1:79:1d:ef: df:4a:94:26:63:8d:96:3d:0f:72:74:19:83:69:1e: 0e:91:bb:ff:c3:81:b2:7e:f0:aa:93:41:2f:e5:92: 9c:d6:ad:03:e2:12:ca:33:72:6d:ce:c5:88:dc:b8: 33:0a:82:40:7f:e2:3f:ae:3a:b8:8b:ae:b5:59:b5: 8d:05:00:45:6b:69:c8:a2:d4:4d:a4:36:82:73:53: a9:19:ff:4c:0f:37:43:26:17:f2:9a:06:8c:da:f4: 29:a1:eb:74:3c:2f:c4:78:f1:56:42:46:07:57:38: bd:f2:3a:3b:24:65:12:8f:a8:5a:21:ca:d7:45:bb: cc:a8:e4:cc:23:b9:9a:ea:2d:30:13:bf:c0:5d:9c: bd:03:41:2e:3d:d8:82:ee:b3:7b:40:a2:70:93:f7: 68:54:87:2b:a9:f2:7e:7b:11:b6:5b:77:d1:f6:9c: 0f:79:83:36:98:a5:32:f2:8c:a2:17:21:3d:68:0e: 88:12:0b:61:52:e1:70:08:db:1a:ae:f9:45:4d:0d: e5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BA:05:8F:2B:44:5D:66:93:C4:70:B6:83:3D:4E:FF:45:57:4E:AC X509v3 Authority Key Identifier: keyid:1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:ed:87:bb:cc:81:9b:56:ea:58:dc:4b:63:07:77:76:d5:14: 47:23:5e:47:30:9c:4d:2b:0d:3b:f0:9f:2b:47:cb:7d:7b:ed: b1:2c:5e:0f:72:29:22:7b:c7:f1:ca:26:e8:59:b0:be:18:53: ac:67:0b:33:1c:43:28:04:9f:50:ee:90:a6:4b:25:7b:e8:15: 26:39:87:f5:c6:2c:69:c4:b2:46:72:76:30:7d:ef:04:9d:c1: d5:b1:f3:7a:e6:70:58:31:c6:eb:21:d4:c4:ad:9d:75:34:b4: 50:07:a9:0c:bd:a2:eb:09:1a:ce:49:a5:a0:16:52:a9:ba:cc: aa:d2:9c:84:8c:4d:db:ea:2b:9e:fc:e6:b4:b3:51:10:fd:22: 92:44:4d:fd:6f:50:1a:e7:84:24:94:16:a2:e8:4e:98:a8:d3: 3b:b6:f6:f5:d5:17:d1:30:84:54:27:3d:63:7c:68:f6:b4:2d: 78:07:c0:66:29:f8:c5:91:61:af:69:c3:44:d0:08:5f:6e:9b: 68:21:ce:4b:15:ea:f2:1d:de:66:9b:24:e1:7d:0a:c1:ba:54: 3a:5b:f5:b9:5b:ad:6d:0f:2a:3a:d7:07:c2:67:09:c4:f8:74: ef:2f:ff:29:ff:d3:d2:c3:79:aa:07:f8:f3:a6:6f:9d:27:11: f0:89:b7:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOM2mYEmmRBBZTRB3fve0N6WIIaswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdB RjUwRDc1NDAeFw0yNTEyMDUxMzA2NDdaFw0yNTEyMDgxNzEyNDdaMDMxMTAvBgNV BAMTKEM1QkEwNThGMkI0NDVENjY5M0M0NzBCNjgzM0Q0RUZGNDU1NzRFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSWbt1+Fc1ehmaqwlmbgGsBwm HPfA5KZgc37hOE3JRkl6O9sQLmACJNm/SZcf5UpgwEob1jOR0Xkd799KlCZjjZY9 D3J0GYNpHg6Ru//DgbJ+8KqTQS/lkpzWrQPiEsozcm3OxYjcuDMKgkB/4j+uOriL rrVZtY0FAEVracii1E2kNoJzU6kZ/0wPN0MmF/KaBoza9Cmh63Q8L8R48VZCRgdX OL3yOjskZRKPqFohytdFu8yo5MwjuZrqLTATv8BdnL0DQS492ILus3tAonCT92hU hyup8n57EbZbd9H2nA95gzaYpTLyjKIXIT1oDogSC2FS4XAI2xqu+UVNDeWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxboFjytEXWaTxHC2gz1O/0VXTqwwHwYDVR0j BBgwFoAUHWABpPRlSLN+2HHKXPCI969Q11QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMC8xRDYwMDFBNEY0 NjU0OEIzN0VEODcxQ0E1Q0YwODhGN0FGNTBENzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4RjdBRjUw RDc1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU2MzJkOTktMzJiMi00NjdiLWI3 ZmUtMGQyNWY4NTNiZmE2LzAvMUQ2MDAxQTRGNDY1NDhCMzdFRDg3MUNBNUNGMDg4 RjdBRjUwRDc1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANvth7vMgZtW6ljcS2MHd3bVFEcjXkcwnE0r DTvwnytHy3177bEsXg9yKSJ7x/HKJuhZsL4YU6xnCzMcQygEn1DukKZLJXvoFSY5 h/XGLGnEskZydjB97wSdwdWx83rmcFgxxush1MStnXU0tFAHqQy9ousJGs5JpaAW Uqm6zKrSnISMTdvqK5785rSzURD9IpJETf1vUBrnhCSUFqLoTpio0zu29vXVF9Ew hFQnPWN8aPa0LXgHwGYp+MWRYa9pw0TQCF9um2ghzksV6vId3mabJOF9CsG6VDpb 9blbrW0PKjrXB8JnCcT4dO8v/yn/09LDeaoH+POmb50nEfCJt48= -----END CERTIFICATE-----Generated at Sun Dec 7 00:49:27 2025 by rpki-client