This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: FJYuB8f9LCWsIa2jTD7mGCCOAqNiy7wxOnAoGBXgMVo= Subject key identifier: 48:D3:44:41:56:32:24:B2:3D:1C:CC:35:6A:2F:00:9F:07:E9:06:35 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 62360BCE5CE8ADF3054C0A6C17FAEB23006CB7ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 04FF Signing time: Sat 06 Dec 2025 00:51:53 +0000 Manifest this update: Sat 06 Dec 2025 00:46:53 +0000 Manifest next update: Tue 09 Dec 2025 05:36:53 +0000 Files and hashes: 1: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: 7mMp57LmffMBL7NPKlgABc5keS/qcXjfHec8qCytYZs=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: lbqLm4gtIn2PpfyD5NIDm37sX2MwPhaC2Wn66mlRkRA=) 3: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 05:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:36:0b:ce:5c:e8:ad:f3:05:4c:0a:6c:17:fa:eb:23:00:6c:b7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Dec 6 00:46:53 2025 GMT Not After : Dec 9 05:36:53 2025 GMT Subject: CN=48D34441563224B23D1CCC356A2F009F07E90635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:36:1e:f4:52:14:85:55:78:17:1c:6d:82: c4:70:23:38:ce:2e:26:8e:b7:45:a9:15:8b:bf:80: c0:91:95:01:23:89:39:35:c3:cc:e6:76:cd:63:fa: 6b:9b:20:6a:64:06:5d:9e:23:9e:9d:d3:c7:4a:23: 7e:a2:ae:c9:28:74:98:b6:ea:96:ca:d1:e1:4a:cb: 1f:f5:cf:50:bf:fd:de:e8:81:77:4e:02:69:37:f2: 0e:d3:85:4f:4e:9d:2a:9e:ec:0a:b2:e7:19:f4:cd: b1:a5:b4:7a:24:e8:c4:bf:d5:7f:6b:3f:ab:6a:ad: 05:d8:32:39:ef:60:1d:da:69:06:e7:22:6c:ff:fc: 65:b9:20:a2:f6:03:b8:1a:e5:68:62:9c:98:1e:31: 9c:51:82:cc:d9:05:3e:dd:df:37:00:4b:cd:4d:54: d3:da:8a:27:30:10:48:6f:3b:5e:35:ae:3c:5a:3a: 5a:01:50:91:fe:c2:2e:5d:75:fe:62:d5:d3:5f:14: 8b:d5:5f:e6:77:ef:38:4f:b0:66:9b:62:84:d8:c1: c5:ae:91:ef:11:5a:25:e1:e6:2d:e4:bf:66:ac:d2: e2:98:9e:2b:ac:67:48:ff:53:6f:fc:05:37:50:f4: 15:96:f1:45:b8:ba:d2:2c:e5:ca:84:19:ee:da:a8: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:D3:44:41:56:32:24:B2:3D:1C:CC:35:6A:2F:00:9F:07:E9:06:35 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:26:8f:e2:d9:19:af:77:a6:4e:c2:98:08:9b:33:0c:80:c9: 0d:09:61:43:c6:70:02:a5:71:91:44:e6:88:68:9f:ad:95:dd: 6e:77:1e:12:9f:9f:de:0d:45:3f:fc:56:ae:de:87:47:d7:15: 92:24:72:84:fd:2c:44:ba:a4:f3:71:de:94:41:1a:49:09:a7: 07:7a:a2:a9:0e:72:16:f3:a0:80:b9:a1:ff:17:4f:fb:04:c2: c7:79:a0:6f:32:5b:24:9a:57:0c:0a:65:11:43:d0:e6:2f:83: 91:11:a1:7d:da:66:6a:84:04:46:ca:8d:58:b0:8c:c2:20:ab: 81:b4:fb:be:ee:b6:32:63:c6:82:c7:9e:24:3a:fa:c8:dc:27: fa:60:99:b4:92:1c:31:44:8f:d3:f3:7d:2e:00:ea:54:3b:82: 47:5e:6b:41:3f:73:36:64:ba:ee:53:49:e7:77:12:e5:8d:9d: 96:f8:a0:7c:24:7f:6a:95:c8:04:5c:e2:e3:82:b8:a7:aa:dc: 93:af:cc:de:68:d8:be:f9:22:08:b5:33:71:e2:30:65:7b:ba: 13:31:68:40:d8:65:28:10:b0:9f:e3:46:bc:40:b4:31:ff:cb: 9b:8b:6f:5f:e0:22:8b:9e:ee:38:8f:36:26:3e:f9:30:70:e3: b2:b1:13:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjYLzlzorfMFTApsF/rrIwBst+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNTEyMDYwMDQ2NTNaFw0yNTEyMDkwNTM2NTNaMDMxMTAvBgNV BAMTKDQ4RDM0NDQxNTYzMjI0QjIzRDFDQ0MzNTZBMkYwMDlGMDdFOTA2MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqbDYe9FIUhVV4FxxtgsRwIzjO LiaOt0WpFYu/gMCRlQEjiTk1w8zmds1j+mubIGpkBl2eI56d08dKI36irskodJi2 6pbK0eFKyx/1z1C//d7ogXdOAmk38g7ThU9OnSqe7Aqy5xn0zbGltHok6MS/1X9r P6tqrQXYMjnvYB3aaQbnImz//GW5IKL2A7ga5WhinJgeMZxRgszZBT7d3zcAS81N VNPaiicwEEhvO141rjxaOloBUJH+wi5ddf5i1dNfFIvVX+Z37zhPsGabYoTYwcWu ke8RWiXh5i3kv2as0uKYniusZ0j/U2/8BTdQ9BWW8UW4utIs5cqEGe7aqFIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSNNEQVYyJLI9HMw1ai8AnwfpBjUwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkmj+LZGa93pk7CmAibMwyAyQ0JYUPGcAKl cZFE5ohon62V3W53HhKfn94NRT/8Vq7eh0fXFZIkcoT9LES6pPNx3pRBGkkJpwd6 oqkOchbzoIC5of8XT/sEwsd5oG8yWySaVwwKZRFD0OYvg5ERoX3aZmqEBEbKjViw jMIgq4G0+77utjJjxoLHniQ6+sjcJ/pgmbSSHDFEj9PzfS4A6lQ7gkdea0E/czZk uu5TSed3EuWNnZb4oHwkf2qVyARc4uOCuKeq3JOvzN5o2L75Igi1M3HiMGV7uhMx aEDYZSgQsJ/jRrxAtDH/y5uLb1/gIoue7jiPNiY++TBw47KxE4Q= -----END CERTIFICATE-----Generated at Sat Dec 6 18:38:30 2025 by rpki-client