This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: I5GPd8/mf60EdJN+k5XitbORFrf9HVflgv/FiuTcICk= Subject key identifier: AA:7B:90:59:A4:C5:B4:4F:78:57:5B:4E:D5:28:B1:65:55:7B:87:23 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 7CA5F60E8DD9F3855C5ABCB778FF23C0D3CFA119 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 53 Signing time: Sat 06 Dec 2025 18:21:52 +0000 Manifest this update: Sat 06 Dec 2025 18:16:52 +0000 Manifest next update: Wed 10 Dec 2025 02:09:52 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: 5cABxSYuhVBup6yJT0qOcgNFH2pd3K6fUo4sK01pxRw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a5:f6:0e:8d:d9:f3:85:5c:5a:bc:b7:78:ff:23:c0:d3:cf:a1:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Dec 6 18:16:52 2025 GMT Not After : Dec 10 02:09:52 2025 GMT Subject: CN=AA7B9059A4C5B44F78575B4ED528B165557B8723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:05:87:7b:99:29:57:2f:b4:50:c0:1c:2d:c7: 78:b3:db:d4:17:f2:c6:04:5b:ee:00:af:57:4f:9f: 1b:35:eb:05:52:4f:03:e4:69:20:fe:c3:07:da:32: ce:9a:da:68:2b:06:8c:69:25:10:18:1e:f1:5c:c4: bf:da:11:f9:6a:9a:c2:98:45:31:2d:f8:be:77:35: 1e:05:83:8d:b4:a8:2b:de:77:c5:38:37:33:67:64: ef:ea:90:bd:f9:d4:9b:2f:de:71:49:3a:0b:d2:97: 5b:c7:24:ce:8c:dd:f2:7c:95:7a:42:7f:19:70:00: 5e:2d:fd:16:fb:da:94:03:1c:2c:14:b2:ed:b1:0d: e3:ea:48:0a:fa:37:03:67:19:ec:d1:72:38:68:92: 10:d8:5c:4f:5d:93:fd:32:ea:60:64:38:98:e2:cd: 0f:46:1b:e7:d3:16:95:8f:24:4d:76:18:c3:f9:87: 77:c3:fd:ae:2b:ca:f6:f6:97:b3:b2:d6:3b:81:c8: 88:ad:52:d6:d4:a4:cd:8d:f2:60:06:ef:35:f6:b7: b9:03:dd:9d:9f:ea:9d:a3:0c:00:e6:9d:df:92:ec: 22:8a:e6:4b:50:64:f6:b3:7c:ef:5d:29:08:23:90: 96:01:b9:a5:12:02:88:88:93:85:ae:b0:c8:68:88: 11:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:7B:90:59:A4:C5:B4:4F:78:57:5B:4E:D5:28:B1:65:55:7B:87:23 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:38:b2:ad:64:25:54:ae:20:3d:fb:ae:50:c8:d4:0d:60:63: 4f:18:43:7c:8e:07:cb:3a:cf:35:38:0e:5d:51:b8:99:51:7f: 2b:33:6e:cd:5c:84:9a:1c:14:28:da:f0:22:79:82:01:78:cc: c0:b2:8c:52:43:20:c4:9d:40:68:00:7d:41:23:17:cd:cd:fe: c1:d3:bb:7b:f9:5e:80:b6:10:73:79:81:5f:d7:4f:0b:46:a4: f8:c5:1e:be:e3:24:ce:dc:a8:96:37:ed:10:cf:e7:56:69:5d: 04:ed:5d:fa:47:88:fe:38:c6:f0:81:dd:68:89:ea:31:2c:c2: 7a:ed:c2:9b:70:de:f5:c9:6c:fb:6b:77:34:14:ef:95:6a:73: 43:7d:32:ca:62:3a:ac:1f:5e:bd:4c:b4:0d:d0:c9:26:26:f4: 7d:99:67:cf:a7:ac:72:ee:80:12:af:5d:a3:07:39:f7:ba:d6: 2e:31:32:92:da:83:d3:20:3c:da:9a:17:8e:b6:7b:71:3e:57: 0f:dc:87:ae:5a:b2:e5:d6:83:21:15:be:a9:c3:09:fb:ce:b5: 71:14:7b:e6:ac:9c:b1:11:41:09:9a:57:8a:6d:68:f8:80:01: 68:3f:d2:2b:68:30:b1:21:a1:e7:64:48:43:3f:e3:98:0d:00: 21:df:5c:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfKX2Do3Z84VcWry3eP8jwNPPoRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNTEyMDYxODE2NTJaFw0yNTEyMTAwMjA5NTJaMDMxMTAvBgNV BAMTKEFBN0I5MDU5QTRDNUI0NEY3ODU3NUI0RUQ1MjhCMTY1NTU3Qjg3MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBYd7mSlXL7RQwBwtx3iz29QX 8sYEW+4Ar1dPnxs16wVSTwPkaSD+wwfaMs6a2mgrBoxpJRAYHvFcxL/aEflqmsKY RTEt+L53NR4Fg420qCved8U4NzNnZO/qkL351Jsv3nFJOgvSl1vHJM6M3fJ8lXpC fxlwAF4t/Rb72pQDHCwUsu2xDePqSAr6NwNnGezRcjhokhDYXE9dk/0y6mBkOJji zQ9GG+fTFpWPJE12GMP5h3fD/a4ryvb2l7Oy1juByIitUtbUpM2N8mAG7zX2t7kD 3Z2f6p2jDADmnd+S7CKK5ktQZPazfO9dKQgjkJYBuaUSAoiIk4WusMhoiBHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqnuQWaTFtE94V1tO1SixZVV7hyMwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEI4sq1kJVSuID37rlDI1A1gY08YQ3yOB8s6 zzU4Dl1RuJlRfyszbs1chJocFCja8CJ5ggF4zMCyjFJDIMSdQGgAfUEjF83N/sHT u3v5XoC2EHN5gV/XTwtGpPjFHr7jJM7cqJY37RDP51ZpXQTtXfpHiP44xvCB3WiJ 6jEswnrtwptw3vXJbPtrdzQU75Vqc0N9MspiOqwfXr1MtA3QySYm9H2ZZ8+nrHLu gBKvXaMHOfe61i4xMpLag9MgPNqaF462e3E+Vw/ch65asuXWgyEVvqnDCfvOtXEU e+asnLERQQmaV4ptaPiAAWg/0itoMLEhoedkSEM/45gNACHfXA8= -----END CERTIFICATE-----Generated at Sun Dec 7 08:15:05 2025 by rpki-client