This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: LZltXyrna926tpjQE/6uMImpoiCQJXacLGXZML/mhWQ= Subject key identifier: CC:BE:B2:70:F2:E1:BA:15:9D:26:F9:EA:94:7E:B7:05:64:44:E0:1F Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 5F2E6F5992F226AD77D9797836708AF5BA5B0447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 024F Signing time: Sat 06 Dec 2025 14:21:32 +0000 Manifest this update: Sat 06 Dec 2025 14:16:32 +0000 Manifest next update: Wed 10 Dec 2025 01:47:32 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: 6Y9pa4kn+IeiNFEGx3xgKeSgYiv/V+ZMrjFIXp7WYo8=) 2: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: 1jAZDRG2bBRpFXXfdfwzy9SEYQeFjRv7T68Dlx8L+iE=) 3: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: dddpXAXd6NN4T55cPDxa5oEHzFYeojSlOpK24ou6O1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:2e:6f:59:92:f2:26:ad:77:d9:79:78:36:70:8a:f5:ba:5b:04:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Dec 6 14:16:32 2025 GMT Not After : Dec 10 01:47:32 2025 GMT Subject: CN=CCBEB270F2E1BA159D26F9EA947EB7056444E01F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3a:ae:49:df:6d:c6:b0:cc:2c:cf:c1:64:d4: 4d:e7:5c:30:4d:d2:aa:ff:f1:f4:e4:87:c7:2f:11: 98:8a:6f:d8:02:be:55:71:af:f3:87:3b:98:a1:65: b4:3a:cf:4f:6b:16:6c:e9:88:ad:7c:12:f1:8a:4d: 72:95:2b:69:91:d2:19:b9:c3:85:11:c7:9c:ba:3f: bc:a5:a3:35:44:75:81:4a:5b:f5:20:08:82:4e:b1: 8d:ca:58:e5:78:86:56:bd:fe:3d:ad:14:a2:c9:c3: fb:7f:00:b9:80:b6:a9:51:b8:24:86:93:be:ab:1b: 42:a5:3b:34:6b:3e:fb:5e:64:ac:13:ea:31:eb:9c: a7:ca:1b:79:4c:fd:57:02:4f:eb:ac:00:63:d8:59: 5d:db:da:68:3e:e8:74:b0:c2:48:10:62:dc:ab:7e: 19:b8:c8:35:70:7c:69:9e:f4:9b:fc:7c:ef:ae:43: bf:15:ef:09:42:c5:28:5b:4e:c4:6a:9b:10:01:64: 78:48:03:8e:20:fe:67:b9:98:dd:91:74:a9:96:e2: c2:33:a5:09:4e:5f:7b:a6:1e:d2:b8:97:e3:eb:78: fa:b0:f9:8f:30:d8:9a:4a:55:25:49:6f:57:b5:da: 05:43:76:63:cd:1f:0d:f9:2a:93:1d:0a:36:51:e1: fb:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BE:B2:70:F2:E1:BA:15:9D:26:F9:EA:94:7E:B7:05:64:44:E0:1F X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ac:04:49:52:2b:97:b3:ab:06:15:90:5e:0d:88:32:c3:c9: 23:cc:e8:ed:5e:38:c6:b4:ba:5b:f4:6f:a3:f3:8b:03:e5:b9: 8e:0c:9a:77:bf:c1:70:66:6a:89:2e:37:a6:b3:08:06:1f:67: db:5b:73:88:93:54:47:29:62:d7:c9:5c:e4:f1:d8:2d:d9:15: d6:a9:a8:63:f6:be:c0:8f:d4:04:81:0e:bc:11:c2:fd:fe:e7: 4b:14:ad:2f:43:07:60:2e:0d:23:91:0a:f9:09:86:e4:fc:05: 9b:36:ee:10:72:08:f9:68:41:25:e0:27:68:4d:bd:85:88:39: 8b:d4:08:6d:39:86:7e:47:c3:d0:1a:54:c5:76:1d:4f:40:cd: 9a:69:d3:05:de:f4:da:24:03:68:df:de:4d:7f:16:44:3e:7f: f5:0c:b2:f0:33:72:d7:27:e0:e5:21:87:94:49:cd:fb:15:48: b4:15:2c:bf:95:de:84:59:57:41:4d:35:ee:33:09:20:8c:22: 7b:1b:33:21:57:64:32:23:1f:31:01:9b:1f:06:c2:8c:d6:8e: 9b:d7:fd:d5:5a:69:1f:b3:00:aa:97:1f:6b:d4:29:7e:23:9a: 8e:15:6c:c8:b5:61:5d:b9:58:5d:09:3b:e1:93:49:2b:1f:a2: 01:46:87:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXy5vWZLyJq132Xl4NnCK9bpbBEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNTEyMDYxNDE2MzJaFw0yNTEyMTAwMTQ3MzJaMDMxMTAvBgNV BAMTKENDQkVCMjcwRjJFMUJBMTU5RDI2RjlFQTk0N0VCNzA1NjQ0NEUwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlOq5J323GsMwsz8Fk1E3nXDBN 0qr/8fTkh8cvEZiKb9gCvlVxr/OHO5ihZbQ6z09rFmzpiK18EvGKTXKVK2mR0hm5 w4URx5y6P7ylozVEdYFKW/UgCIJOsY3KWOV4hla9/j2tFKLJw/t/ALmAtqlRuCSG k76rG0KlOzRrPvteZKwT6jHrnKfKG3lM/VcCT+usAGPYWV3b2mg+6HSwwkgQYtyr fhm4yDVwfGme9Jv8fO+uQ78V7wlCxShbTsRqmxABZHhIA44g/me5mN2RdKmW4sIz pQlOX3umHtK4l+PrePqw+Y8w2JpKVSVJb1e12gVDdmPNHw35KpMdCjZR4fvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzL6ycPLhuhWdJvnqlH63BWRE4B8wHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKsBElSK5ezqwYVkF4NiDLDySPM6O1eOMa0 ulv0b6PziwPluY4Mmne/wXBmaokuN6azCAYfZ9tbc4iTVEcpYtfJXOTx2C3ZFdap qGP2vsCP1ASBDrwRwv3+50sUrS9DB2AuDSORCvkJhuT8BZs27hByCPloQSXgJ2hN vYWIOYvUCG05hn5Hw9AaVMV2HU9AzZpp0wXe9NokA2jf3k1/FkQ+f/UMsvAzctcn 4OUhh5RJzfsVSLQVLL+V3oRZV0FNNe4zCSCMInsbMyFXZDIjHzEBmx8GwozWjpvX /dVaaR+zAKqXH2vUKX4jmo4VbMi1YV25WF0JO+GTSSsfogFGh10= -----END CERTIFICATE-----Generated at Sun Dec 7 03:36:02 2025 by rpki-client