This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft File: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft (raw, json) Hash identifier: tvy/LUTY/GW6yhUPnE6bwW8XiYmCW51gFl5BYIYgnNE= Subject key identifier: 46:3A:09:FD:37:62:42:4B:21:A1:49:27:BC:54:6D:FE:AE:07:03:88 Authority key identifier: 18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 Certificate issuer: /CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Certificate serial: 2986141B36FF8A5E9CEDED9FC6F15974AE45E7D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft Manifest number: 0534 Signing time: Sat 06 Dec 2025 20:12:04 +0000 Manifest this update: Sat 06 Dec 2025 20:07:04 +0000 Manifest next update: Wed 10 Dec 2025 05:02:04 +0000 Files and hashes: 1: 18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl (hash: Suv8ZZTcPvn3Mxuq76tImUgqMNHjMK/wIukc/hfH3FM=) 2: 3130332e3130322e3135312e302f32342d3234203d3e20313331373036.roa (hash: uOHSfLHhwtMNN67gMjbV4MGpzJVsSG8o/ohHKk2WQIg=) 3: 3130332e3130322e3134382e302f32342d3234203d3e20313336383533.roa (hash: u/OeRTsz4AcHqry3VxGlcn2u37fN+K6Q/bDUNs682qo=) 4: 3130332e3130322e3135302e302f32342d3234203d3e20313331373036.roa (hash: tZYQoJy4YnmvVxZJj+k/+JZKShXQlZB0IfTGOyNi9Mc=) 5: 3130332e3130322e3134392e302f32342d3234203d3e20313336383533.roa (hash: NL0vGhzpoUf7x+lHSMOuOWEoRUxSZyoCnU3hXUIKCxQ=) 6: 3130332e3130322e3135302e302f32332d3234203d3e20313331373036.roa (hash: nDnbOuaynmDOf79AlnD7cR3kAc1DCFukO1UkfayfyKg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:86:14:1b:36:ff:8a:5e:9c:ed:ed:9f:c6:f1:59:74:ae:45:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169 Validity Not Before: Dec 6 20:07:04 2025 GMT Not After : Dec 10 05:02:04 2025 GMT Subject: CN=463A09FD3762424B21A14927BC546DFEAE070388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1a:d3:7f:3e:43:80:41:4e:0f:e4:69:25:97: ad:5f:19:a9:68:04:9f:58:ef:ad:9b:3b:30:ba:99: a0:a4:a2:80:fd:1e:a6:6e:c4:d7:4c:88:27:67:c3: ac:57:fb:b9:5f:00:40:68:af:b4:89:a2:82:b0:3a: a3:75:3c:40:e2:1a:6c:96:5a:58:b1:f3:d6:c7:e0: a3:ed:6a:8d:1b:de:33:28:0b:55:e7:ac:76:44:32: ef:96:c7:17:f1:fb:f8:ef:ee:f0:40:e6:11:4c:ee: 2a:01:6d:46:cb:35:77:9e:fc:af:85:c3:54:1f:aa: 14:38:82:56:10:9b:9c:bd:4b:03:28:80:88:97:48: a2:17:8c:42:6e:5f:77:f4:69:cb:36:8f:54:d5:ef: b2:b7:9a:3a:03:bc:8e:6e:c3:6e:52:ab:49:1d:fd: 99:26:dc:b2:8e:3c:0f:64:a1:c7:c6:c4:ba:75:d8: 0b:53:2d:52:d0:2d:8f:94:e0:63:1b:0f:fd:50:1b: 5c:0f:4a:fe:5e:86:2e:2c:8b:44:dc:c2:e8:9b:51: ff:63:3f:04:68:0f:f8:87:6a:88:c1:ea:49:40:57: 15:9d:63:b1:13:4b:2e:1c:8e:86:2e:0f:e7:00:35: e3:65:30:d0:ca:3c:fa:6b:55:c2:da:08:15:f1:ee: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3A:09:FD:37:62:42:4B:21:A1:49:27:BC:54:6D:FE:AE:07:03:88 X509v3 Authority Key Identifier: keyid:18:E9:DC:5B:AC:AA:E6:8D:1C:9F:50:69:82:56:E0:ED:EF:9A:51:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba9f81cb-5a59-40f3-86a0-cde5b94cef86/0/18E9DC5BACAAE68D1C9F50698256E0EDEF9A5169.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:33:a0:1a:a9:60:1e:46:6b:ac:fd:68:7a:b0:99:29:9f:f4: ef:96:60:57:b8:d5:0d:6a:c5:1b:98:fe:9a:3b:25:4d:29:93: 63:ec:c8:ca:05:94:20:21:28:41:a7:95:db:a9:4a:fd:d7:80: 89:83:87:e1:9f:d0:45:d1:59:f2:c5:ab:82:81:c3:ec:f3:75: 8d:0f:3e:9e:7b:f0:cf:c2:65:88:f4:71:47:65:fb:0b:9a:a3: 78:38:f0:b5:ba:9a:e0:96:49:09:18:3a:08:16:84:ef:54:9d: c8:12:0e:77:73:d1:98:b0:81:4f:ed:bc:58:4c:81:3a:93:d8: 90:b8:61:97:b3:99:42:55:8b:dd:6d:e5:ff:ac:ea:bb:fd:93: de:98:db:f7:64:e7:7f:bf:e8:a1:07:c0:d1:ca:5d:8c:bb:a6: bb:19:47:a1:15:50:cb:5e:96:e0:31:41:c9:a7:99:e2:18:b7: 08:5d:74:51:3b:08:0b:83:ff:76:da:ae:12:6e:c5:37:5c:8d: a5:b7:d5:60:e7:6c:03:57:cb:9c:65:87:9e:62:7e:eb:16:f8: 05:b1:a8:03:e4:45:d4:28:8b:eb:e1:d2:bf:85:5c:1d:fa:83: f6:87:3c:21:eb:53:fd:93:05:38:b4:cc:9d:97:9b:23:60:2f: 57:b6:76:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKYYUGzb/il6c7e2fxvFZdK5F59kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURF RjlBNTE2OTAeFw0yNTEyMDYyMDA3MDRaFw0yNTEyMTAwNTAyMDRaMDMxMTAvBgNV BAMTKDQ2M0EwOUZEMzc2MjQyNEIyMUExNDkyN0JDNTQ2REZFQUUwNzAzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6GtN/PkOAQU4P5Gkll61fGalo BJ9Y762bOzC6maCkooD9HqZuxNdMiCdnw6xX+7lfAEBor7SJooKwOqN1PEDiGmyW Wlix89bH4KPtao0b3jMoC1XnrHZEMu+Wxxfx+/jv7vBA5hFM7ioBbUbLNXee/K+F w1QfqhQ4glYQm5y9SwMogIiXSKIXjEJuX3f0acs2j1TV77K3mjoDvI5uw25Sq0kd /Zkm3LKOPA9kocfGxLp12AtTLVLQLY+U4GMbD/1QG1wPSv5ehi4si0TcwuibUf9j PwRoD/iHaojB6klAVxWdY7ETSy4cjoYuD+cANeNlMNDKPPprVcLaCBXx7hexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURjoJ/TdiQkshoUknvFRt/q4HA4gwHwYDVR0j BBgwFoAUGOncW6yq5o0cn1Bpglbg7e+aUWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTlmODFjYi01YTU5LTQwZjMtODZhMC1jZGU1Yjk0Y2VmODYvMC8xOEU5REM1QkFD QUFFNjhEMUM5RjUwNjk4MjU2RTBFREVGOUE1MTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUwRURFRjlB NTE2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE5ZjgxY2ItNWE1OS00MGYzLTg2 YTAtY2RlNWI5NGNlZjg2LzAvMThFOURDNUJBQ0FBRTY4RDFDOUY1MDY5ODI1NkUw RURFRjlBNTE2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUzoBqpYB5Ga6z9aHqwmSmf9O+WYFe41Q1q xRuY/po7JU0pk2PsyMoFlCAhKEGnldupSv3XgImDh+Gf0EXRWfLFq4KBw+zzdY0P Pp578M/CZYj0cUdl+wuao3g48LW6muCWSQkYOggWhO9UncgSDndz0ZiwgU/tvFhM gTqT2JC4YZezmUJVi91t5f+s6rv9k96Y2/dk53+/6KEHwNHKXYy7prsZR6EVUMte luAxQcmnmeIYtwhddFE7CAuD/3barhJuxTdcjaW31WDnbANXy5xlh55ifusW+AWx qAPkRdQoi+vh0r+FXB36g/aHPCHrU/2TBTi0zJ2XmyNgL1e2djI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:44:46 2025 by rpki-client