This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft (raw, json) Hash identifier: 5GF9qv5XydMtoiEnODvITBDrHXoCc/mTv92PKORVjxo= Subject key identifier: 9C:52:BC:04:78:D7:C4:CB:52:68:06:0D:40:0E:8F:9C:0F:DE:BA:B7 Authority key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Certificate issuer: /CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Certificate serial: 1BDE06E0709B92002A2379DC86ACAB4413A13B87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft Manifest number: 01A8 Signing time: Sat 06 Dec 2025 09:11:35 +0000 Manifest this update: Sat 06 Dec 2025 09:06:35 +0000 Manifest next update: Tue 09 Dec 2025 20:45:35 +0000 Files and hashes: 1: 3130332e3130372e3137362e302f32342d3234203d3e20313530393434.roa (hash: t5cP9pI7pfpZ95tebj5VAs5xM+wyda4Uz0LABi641BU=) 2: 3130332e3130372e3137372e302f32342d3234203d3e20313530393434.roa (hash: Tu2pBk/URNroZW6zOqNNP1pzL3rQikcBMBsuhpkJzRA=) 3: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl (hash: mVNg34V1c9iyoVcv41SXxFTJE1WAx2DyeOQRl1KTd6o=) 4: 3130332e3130372e3137362e302f32332d3233203d3e20313530393434.roa (hash: +kGXvvTp0IkbxrGv/DEpgvQeRlEwoEyXoWledhe0tWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:de:06:e0:70:9b:92:00:2a:23:79:dc:86:ac:ab:44:13:a1:3b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Validity Not Before: Dec 6 09:06:35 2025 GMT Not After : Dec 9 20:45:35 2025 GMT Subject: CN=9C52BC0478D7C4CB5268060D400E8F9C0FDEBAB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:53:c2:9a:54:01:b2:98:c1:cf:ee:b8:a1:c7: 6b:a4:ad:36:76:f5:98:91:1f:8f:13:cf:10:91:9e: 11:dc:4e:01:b0:f9:3e:b2:c2:8f:ff:eb:cd:e5:5a: 4e:7e:82:7d:27:55:9a:14:04:4e:4d:21:f1:40:40: 7c:be:5f:18:c0:4d:dc:63:0f:0a:bc:ab:43:29:15: 84:d1:bd:5c:d9:4a:d4:74:ee:48:79:bf:c0:d6:da: d2:16:d8:b4:f9:7c:6b:48:7c:99:19:da:0a:e5:b1: 3f:d1:5d:df:8a:78:cf:5a:73:a8:2e:99:42:8b:c2: 2c:29:0b:b3:d5:8e:d5:bc:9a:3f:0d:19:7f:b2:dc: 0f:99:d6:8e:19:6c:d1:76:f8:af:d2:da:5f:c4:06: a2:98:89:c4:0b:14:4c:98:ff:3e:37:0c:98:fe:f3: 3c:35:ac:5e:58:98:27:d2:c3:18:e0:f5:55:b4:50: 1a:5d:3c:e4:17:c1:48:27:cd:68:bf:08:8d:1b:90: 5c:3c:3a:ac:f6:0d:17:a1:7a:a9:53:97:b7:be:f7: a3:56:35:11:c3:f3:9f:aa:fc:ab:b3:86:c0:77:c7: ff:7b:65:e6:a8:76:60:5f:24:ec:49:d5:fc:93:ab: e6:06:4f:d8:45:89:fe:89:1b:6e:b9:49:14:a2:b8: 13:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:52:BC:04:78:D7:C4:CB:52:68:06:0D:40:0E:8F:9C:0F:DE:BA:B7 X509v3 Authority Key Identifier: keyid:1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c2:df:92:35:85:be:80:f6:c4:bd:db:39:8f:e7:69:40:72: 23:fa:87:cc:5b:fc:a1:35:46:6d:55:f2:77:7a:0f:38:8d:e4: be:79:5e:67:6c:b3:e7:ab:fa:04:b3:65:11:3b:54:fb:24:2c: 68:e0:1c:9b:14:ae:6b:20:fd:2c:82:0c:da:58:18:7c:95:26: 3f:69:d5:6a:c6:00:fc:28:3f:be:3b:d9:65:45:2c:4f:36:ee: 02:5b:9f:a8:ff:1b:43:7f:3f:fa:5f:c8:2c:f3:84:d7:43:38: 0b:4d:5b:b6:03:37:c8:04:20:03:5a:ba:93:a2:d0:29:2f:61: 78:0f:10:7e:30:13:02:a4:66:17:f2:57:29:3c:4f:12:49:ae: b8:aa:c4:81:cb:ab:90:40:18:4a:c0:51:9d:63:2b:0c:20:32: 8d:77:8f:b3:66:71:ca:ff:51:2c:f8:71:f4:7e:4c:25:2e:1e: 77:48:b2:31:64:09:98:e0:40:5c:1b:b9:78:85:09:0e:1d:c5: ce:1e:f3:1d:bf:0c:5c:65:c8:fb:78:77:a3:e9:b5:e3:21:14: a6:80:59:a6:11:74:0b:30:bd:a0:2d:1d:ae:ef:c3:bb:75:06: 20:71:b0:89:51:fa:a6:42:5a:f9:d2:a6:7a:b7:49:1a:5e:95: f2:2f:2b:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG94G4HCbkgAqI3nchqyrRBOhO4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVB RTA5RTdGMzAeFw0yNTEyMDYwOTA2MzVaFw0yNTEyMDkyMDQ1MzVaMDMxMTAvBgNV BAMTKDlDNTJCQzA0NzhEN0M0Q0I1MjY4MDYwRDQwMEU4RjlDMEZERUJBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzU8KaVAGymMHP7rihx2ukrTZ2 9ZiRH48TzxCRnhHcTgGw+T6ywo//683lWk5+gn0nVZoUBE5NIfFAQHy+XxjATdxj Dwq8q0MpFYTRvVzZStR07kh5v8DW2tIW2LT5fGtIfJkZ2grlsT/RXd+KeM9ac6gu mUKLwiwpC7PVjtW8mj8NGX+y3A+Z1o4ZbNF2+K/S2l/EBqKYicQLFEyY/z43DJj+ 8zw1rF5YmCfSwxjg9VW0UBpdPOQXwUgnzWi/CI0bkFw8Oqz2DReheqlTl7e+96NW NRHD85+q/KuzhsB3x/97ZeaodmBfJOxJ1fyTq+YGT9hFif6JG265SRSiuBPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnFK8BHjXxMtSaAYNQA6PnA/eurcwHwYDVR0j BBgwFoAUHUp1YvCW8/dT44jBRZS6da4J5/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMC8xRDRBNzU2MkYw OTZGM0Y3NTNFMzg4QzE0NTk0QkE3NUFFMDlFN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJBNzVBRTA5 RTdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM2YWIwNGQtNjhjNy00MjQ5LWIx MDktNDZiMjhjZjgwM2YzLzAvMUQ0QTc1NjJGMDk2RjNGNzUzRTM4OEMxNDU5NEJB NzVBRTA5RTdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/C35I1hb6A9sS92zmP52lAciP6h8xb/KE1 Rm1V8nd6DziN5L55Xmdss+er+gSzZRE7VPskLGjgHJsUrmsg/SyCDNpYGHyVJj9p 1WrGAPwoP7472WVFLE827gJbn6j/G0N/P/pfyCzzhNdDOAtNW7YDN8gEIANaupOi 0CkvYXgPEH4wEwKkZhfyVyk8TxJJrriqxIHLq5BAGErAUZ1jKwwgMo13j7Nmccr/ USz4cfR+TCUuHndIsjFkCZjgQFwbuXiFCQ4dxc4e8x2/DFxlyPt4d6PpteMhFKaA WaYRdAswvaAtHa7vw7t1BiBxsIlR+qZCWvnSpnq3SRpelfIvK+0= -----END CERTIFICATE-----Generated at Sun Dec 7 12:41:15 2025 by rpki-client