This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: rPWKHrcrjrsEoF7WGdWnLJadjhfiLvb7KMaxFgG2Sxs= Subject key identifier: 7C:3B:FC:84:76:C3:C3:78:86:C9:ED:6B:B3:9F:9C:10:EA:59:01:83 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 4A711D0D3A8155459C0837CE7878F28DF10F2151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 01F6 Signing time: Fri 05 Dec 2025 11:02:23 +0000 Manifest this update: Fri 05 Dec 2025 10:57:23 +0000 Manifest next update: Mon 08 Dec 2025 19:02:23 +0000 Files and hashes: 1: 34332e3234302e3232362e302f32342d3234203d3e20313530323130.roa (hash: 1Tei5fGxwqBxz6xN5gHTRqivy8w2htgn+IA2ReOzZk8=) 2: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: J4S7Z5EqB5NuhFy3HPTWne+0wrx3ooJcbdM9GaTxC58=) 3: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Dec 2025 19:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:71:1d:0d:3a:81:55:45:9c:08:37:ce:78:78:f2:8d:f1:0f:21:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Dec 5 10:57:23 2025 GMT Not After : Dec 8 19:02:23 2025 GMT Subject: CN=7C3BFC8476C3C37886C9ED6BB39F9C10EA590183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:6f:3e:18:e7:aa:64:22:ad:14:d1:13:27: 12:53:68:ac:f3:b0:4e:2d:51:8e:c6:56:a9:70:df: 85:d5:4d:02:b2:1d:bd:9c:4d:6a:42:b8:ab:e8:d9: 52:35:22:e6:af:e7:45:07:de:08:af:90:70:4c:c4: 41:40:dc:7a:72:4e:e6:c6:91:b5:a2:e3:ff:65:38: e2:41:05:3f:18:4b:12:ff:79:d8:7b:65:64:f0:03: 98:17:c7:5b:e0:6e:61:00:e4:68:c7:b3:28:5f:b8: fc:48:fb:b3:aa:20:1c:ba:2b:0b:f3:7c:96:43:d1: 36:45:6c:90:9a:20:3f:9e:7f:22:62:ff:46:75:c6: 03:db:7a:38:d7:cb:b4:42:11:51:a3:a1:a2:4f:d9: fe:58:cf:09:04:1d:ee:4c:ad:44:2b:50:e5:75:90: 21:14:45:eb:9b:7b:54:5b:ea:76:10:3e:7c:8e:70: ee:48:de:b5:90:87:be:f0:1e:8e:ed:79:1f:0a:fe: a9:17:8b:47:bb:e5:00:ec:90:e8:dc:86:57:8e:d8: a3:fc:98:c4:a3:1f:4b:a8:e4:83:d8:73:f6:d8:1d: e2:8d:2a:40:8d:c4:94:c0:9c:f8:94:f1:f3:a0:85: 83:d1:9f:04:a9:64:7f:2d:9e:f4:8e:66:39:74:1c: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3B:FC:84:76:C3:C3:78:86:C9:ED:6B:B3:9F:9C:10:EA:59:01:83 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:62:88:80:dd:71:fb:8c:bb:c2:70:12:40:f1:1d:fc:72:cd: fb:94:3c:20:6c:d5:75:c7:7a:30:dd:2e:b9:89:7c:1f:63:95: e5:48:c6:21:84:9c:a5:a8:54:7c:e1:01:01:fb:47:e6:1d:55: 1e:86:ab:cb:70:53:23:b5:6d:92:53:89:83:a3:23:d3:55:68: de:19:67:6b:2c:e5:8f:84:86:c0:f5:18:98:3d:d7:16:c3:30: cd:4e:8f:33:f3:6a:bd:01:84:b7:a3:1d:5d:53:d1:25:84:0c: 6f:8b:c9:60:34:f4:a8:d5:45:92:b2:8c:50:72:52:01:46:e0: e0:e5:fa:9e:f1:8c:9a:89:2c:d5:8f:c0:a7:a7:e0:53:76:2c: 4a:38:dd:62:01:2a:15:97:27:d5:fc:37:86:e7:d5:14:a9:d3: 0e:f0:d5:3b:3e:d6:06:fa:5e:6c:d7:86:6e:7f:b2:18:67:d2: c4:4e:4f:8c:9b:12:db:07:f5:f5:bc:bd:ba:86:13:b7:04:8f: aa:e1:36:f4:69:99:31:a1:5a:3e:ad:11:07:7b:a9:4b:de:d3: 48:1f:29:75:70:0d:ac:c2:25:9a:96:9e:09:3c:ce:60:9e:c1: 66:8b:18:37:74:d7:6f:0b:f8:db:24:b9:41:43:43:09:d5:4e: 90:26:5e:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnEdDTqBVUWcCDfOeHjyjfEPIVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNTEyMDUxMDU3MjNaFw0yNTEyMDgxOTAyMjNaMDMxMTAvBgNV BAMTKDdDM0JGQzg0NzZDM0MzNzg4NkM5RUQ2QkIzOUY5QzEwRUE1OTAxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOz28+GOeqZCKtFNETJxJTaKzz sE4tUY7GVqlw34XVTQKyHb2cTWpCuKvo2VI1Iuav50UH3givkHBMxEFA3HpyTubG kbWi4/9lOOJBBT8YSxL/edh7ZWTwA5gXx1vgbmEA5GjHsyhfuPxI+7OqIBy6Kwvz fJZD0TZFbJCaID+efyJi/0Z1xgPbejjXy7RCEVGjoaJP2f5YzwkEHe5MrUQrUOV1 kCEUReube1Rb6nYQPnyOcO5I3rWQh77wHo7teR8K/qkXi0e75QDskOjchleO2KP8 mMSjH0uo5IPYc/bYHeKNKkCNxJTAnPiU8fOghYPRnwSpZH8tnvSOZjl0HOVFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfDv8hHbDw3iGye1rs5+cEOpZAYMwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpiiIDdcfuMu8JwEkDxHfxyzfuUPCBs1XXH ejDdLrmJfB9jleVIxiGEnKWoVHzhAQH7R+YdVR6Gq8twUyO1bZJTiYOjI9NVaN4Z Z2ss5Y+EhsD1GJg91xbDMM1OjzPzar0BhLejHV1T0SWEDG+LyWA09KjVRZKyjFBy UgFG4ODl+p7xjJqJLNWPwKen4FN2LEo43WIBKhWXJ9X8N4bn1RSp0w7w1Ts+1gb6 XmzXhm5/shhn0sROT4ybEtsH9fW8vbqGE7cEj6rhNvRpmTGhWj6tEQd7qUve00gf KXVwDazCJZqWngk8zmCewWaLGDd0128L+NskuUFDQwnVTpAmXg4= -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:35 2025 by rpki-client