This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: urVooa1p5QU3eQi5mVjPqpgoX0uwjgcHsRxIXfNWrJ4= Subject key identifier: 41:82:97:F1:1C:42:A0:99:90:EB:85:85:1A:A3:70:F1:4B:F3:EB:33 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 3E7B87106013475D54CAD5D9E32165C6785D5B40 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 0504 Signing time: Wed 17 Dec 2025 02:31:53 +0000 Manifest this update: Wed 17 Dec 2025 02:26:53 +0000 Manifest next update: Sat 20 Dec 2025 13:58:53 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: lbqLm4gtIn2PpfyD5NIDm37sX2MwPhaC2Wn66mlRkRA=) 3: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: Ku2WYj0hu3510Fw3hHZzODcign0XpKuGzc5/fNu3o8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 13:58:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7b:87:10:60:13:47:5d:54:ca:d5:d9:e3:21:65:c6:78:5d:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Dec 17 02:26:53 2025 GMT Not After : Dec 20 13:58:53 2025 GMT Subject: CN=418297F11C42A09990EB85851AA370F14BF3EB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:45:71:20:5b:51:ca:c4:28:bd:4e:cd:30:5e: 17:70:a0:ee:c9:48:37:7a:66:c6:b6:c6:ca:2c:75: 26:96:bc:63:21:1b:d9:da:99:75:d0:26:5f:d2:0a: 62:bc:68:69:88:9d:ba:e3:64:89:80:0c:1b:35:14: 14:fa:10:9a:45:79:a7:a6:64:6b:89:56:d7:25:2e: 31:b4:cc:61:a8:24:20:d1:1f:9e:45:49:78:2a:21: 86:96:fd:17:b7:70:c9:b1:b1:30:4f:ac:5f:8f:25: 98:38:c6:d9:a1:86:a7:cc:06:fc:78:f1:5b:35:b9: 67:86:9b:7d:df:f7:7b:a4:b8:82:37:a0:ed:51:b4: 25:db:c8:cd:76:bb:5d:0b:32:d9:79:e7:21:98:a0: 8b:09:62:bc:56:89:00:c4:b3:96:a4:f9:a5:f6:5e: 5b:5d:11:3b:cd:43:e4:47:df:98:3d:de:da:cb:91: 05:f0:94:6d:ce:be:62:5d:e6:8a:c0:82:35:a4:7a: 0f:da:75:ee:dc:1e:90:f7:04:28:73:16:bd:9a:f5: 69:39:6e:09:02:19:08:2c:c8:cc:d4:31:d5:98:c5: af:d9:10:e0:45:32:c7:4e:9d:d7:a0:45:c9:93:8e: 18:91:c6:e0:92:49:f5:eb:44:ba:fe:ef:c1:cc:88: 06:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:82:97:F1:1C:42:A0:99:90:EB:85:85:1A:A3:70:F1:4B:F3:EB:33 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6e:58:4d:e5:b5:9d:fc:92:37:57:4d:42:41:57:b2:0e:f8: 66:d2:51:eb:e0:24:79:75:ba:91:5e:01:b4:43:d1:19:eb:eb: ce:82:2a:68:35:f1:32:af:9d:85:f6:8f:7a:48:a0:68:df:c7: a9:85:be:df:11:49:07:38:41:36:b3:d1:ed:95:22:88:b8:06: a2:9f:9d:5a:b0:88:32:3e:32:f4:78:02:21:8e:bd:3f:dc:c9: d0:82:b7:a5:f7:7c:74:33:b1:3c:85:b6:cc:ba:0d:13:49:46: 83:c6:73:2f:a4:64:03:a5:ed:cd:ad:d3:01:e9:09:ca:bc:19: ff:2c:15:f1:ce:18:43:bd:ab:c7:16:f5:f0:45:11:5c:39:a6: 40:38:18:81:76:22:81:e7:87:3b:70:4e:c8:94:ee:eb:33:c0: 10:9c:23:b8:10:ec:13:89:05:43:fa:53:de:16:9c:92:f8:ed: f4:83:4a:c7:7e:0d:e3:8d:2a:0f:78:5c:ec:00:d2:56:c1:b4: 72:f1:62:5d:a8:15:c3:21:7d:1a:6a:2a:ea:9e:ca:18:f0:1c: a8:a0:11:5c:65:43:f5:f8:41:ee:f5:b8:a9:6e:82:d7:26:1b: a1:73:89:99:37:ac:b1:37:a7:37:26:66:b4:43:4d:61:ef:fb: 4b:fc:d8:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnuHEGATR11UytXZ4yFlxnhdW0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTEyMTcwMjI2NTNaFw0yNTEyMjAxMzU4NTNaMDMxMTAvBgNV BAMTKDQxODI5N0YxMUM0MkEwOTk5MEVCODU4NTFBQTM3MEYxNEJGM0VCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiRXEgW1HKxCi9Ts0wXhdwoO7J SDd6Zsa2xsosdSaWvGMhG9namXXQJl/SCmK8aGmInbrjZImADBs1FBT6EJpFeaem ZGuJVtclLjG0zGGoJCDRH55FSXgqIYaW/Re3cMmxsTBPrF+PJZg4xtmhhqfMBvx4 8Vs1uWeGm33f93ukuII3oO1RtCXbyM12u10LMtl55yGYoIsJYrxWiQDEs5ak+aX2 XltdETvNQ+RH35g93trLkQXwlG3OvmJd5orAgjWkeg/ade7cHpD3BChzFr2a9Wk5 bgkCGQgsyMzUMdWYxa/ZEOBFMsdOndegRcmTjhiRxuCSSfXrRLr+78HMiAahAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQYKX8RxCoJmQ64WFGqNw8Uvz6zMwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB5uWE3ltZ38kjdXTUJBV7IO+GbSUevgJHl1 upFeAbRD0Rnr686CKmg18TKvnYX2j3pIoGjfx6mFvt8RSQc4QTaz0e2VIoi4BqKf nVqwiDI+MvR4AiGOvT/cydCCt6X3fHQzsTyFtsy6DRNJRoPGcy+kZAOl7c2t0wHp Ccq8Gf8sFfHOGEO9q8cW9fBFEVw5pkA4GIF2IoHnhztwTsiU7uszwBCcI7gQ7BOJ BUP6U94WnJL47fSDSsd+DeONKg94XOwA0lbBtHLxYl2oFcMhfRpqKuqeyhjwHKig EVxlQ/X4Qe71uKlugtcmG6FziZk3rLE3pzcmZrRDTWHv+0v82JE= -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:01 2025 by rpki-client